Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Use a wildcard certificate with the Burp Collaborator server (polling issue)

ya | Last updated: Sep 15, 2016 02:31PM UTC

Hello, I have the exact same issue as here: https://support.portswigger.net/customer/en/portal/questions/16684743-collaborator-polling-ssl-root-cert I tried what you said: "Configuration of SSL certificates should be the same for the interactions and polling interfaces, so you’ll need to specify the key file and the intermediate / final certificates.". But when I launch the collaborator server, the following issue appear: # ./launch-burp-collaborator.sh 2016-09-15 10:33:43.270 : Only one of the https keystore, hostname or certificates parameters can be specified. Exception in thread "main" burp.jic: Only one of the https keystore, hostname or certificates parameters can be specified. at burp.qrf.c(Unknown Source) at burp.qrf.b(Unknown Source) at burp.tzd.<init>(Unknown Source) at burp.StartBurp.main(Unknown Source) Here is a snippet of my configuration: { "eventCapture": { "https": { "port" : 443, "certificateFiles" : [ "/…/ssl/burpc.key.pkcs8", "/…/ssl/burpc.crt", "/…/ssl/COMODORSADomainValidationSecureServerCA.crt" ] } }, "polling" : { "https": { "port" : 9443, "hostname" : "polling.9w4.fr", "certificateFiles" : [ "/…/ssl/burpc.key.pkcs8", "/…/ssl/burpc.crt", "/…/ssl/COMODORSADomainValidationSecureServerCA.crt" ] } }, […] } If I remove the "certificateFiles" from the "polling" node, the server use an auto-signed certificate and Burp Suite is not able to fetch the polling server via HTTPS. Do I miss something? Thanks in advance!

PortSwigger Agent | Last updated: Sep 19, 2016 08:20AM UTC

You need to remove the "hostname" line from your "polling" section. The hostname configuration tells Burp to self-generate a cert with that hostname, and isn't compatible with the "certificateFiles" option.

Burp User | Last updated: Sep 30, 2016 09:27AM UTC