Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

The client failed to negotiate a TLS connection to portswigger.net:443: Remote host terminated the handshake

Derek | Last updated: Jul 22, 2020 08:43PM UTC

Working with some mobile app validation and running into the subject's issue. Followed some additional forum post help posts and seeing the same issue when trying to access https://portswigger.net. Mac OS 10.15.6 Burp Suite CE 2020.7 The particular device I'm currently working on is and iPhone 7 (13.5.1) and I've installed the Burpe Suite certificates so I'm seeing the PortSwigger CA listed under General --> Profile. Any idea what I'm doing wrong here?

Ben, PortSwigger Agent | Last updated: Jul 23, 2020 10:39AM UTC

Hi Derek, We have noticed that Safari and Java 14 do not work very well with TLSv1.3 so this could, potentially, be the cause of your issue. Are you able to do the following in order to stop the proxy using the TLSv1.3 protocol: Navigate to Proxy -> Options -> Proxy Listeners within Burp, select the listener you are using and then click the Edit button. In the resulting Edit proxy listener dialog, navigate to the TLS Protocols tab, choose the Use custom protocols option, remove the TLSv1.3 protocol and then OK the various open dialogs. Can you make the above changes and see if this resolves the proxying error that you are observing?

Derek | Last updated: Jul 23, 2020 01:52PM UTC

Ben, Thank you for responding. I made the changes mentioned above (removed TLSv1.3) and I'm still seeing the same error.

Ben, PortSwigger Agent | Last updated: Jul 23, 2020 05:29PM UTC

Hi Derek, On some version of iOS you need to fully trust the certificate - if you navigate to General -> About -> Certificate Trust Settings within the Settings of your iOS can you ensure that this is switched on for the PortSwigger CA certificate and try this again?

Derek | Last updated: Jul 23, 2020 06:32PM UTC