Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Use BouncyCastle library to eliminate javax.net.ssl.SSLException errors in Burp

Docherty, | Last updated: Jun 11, 2019 03:07PM UTC

As our sites have had to limit SSL and support robust ciphers we have been receieveing "javax.net.ssl.SSLException' errors . To get around this issue we have Proxy chained ZAP proxy. ZAP proxy works because SSLv2 implementations on the one side vs modern implementations with ciphers and prime sizes that the native Java SSL implementation does not support. Chaining the ZAP Proxy work beacuse uses BouncyCastle, a library that provides greater support for SSL/TLS implementations than Java’s native javax.net.ssl. I request that the BouncyCastle Library also be included in Burp keeping the dependcies low and configuration to a minimum of one tool. https://medium.com/@iraklis/how-to-fix-burp-suite-ssl-tls-connection-problems-e635772951dc

Liam, PortSwigger Agent | Last updated: Jun 11, 2019 03:10PM UTC