Name is required.
Email address is required.
Invalid email address
Answer is required.
Exceeding max length of 5KB

Problems updating Burp Enterprise

Nikolay Elenkov May 21, 2019 06:22AM UTC

It seems that the online update has some sort of built-in timeout and we are consistently hitting it and unable to update. With previous versions, the update would finish after many retries, but since v1.0.14beta we have not been able to update.

I've talked to our infrastructure guys and it seems that there is no throttling or blocking of Burp update downloads.

The following error is output in the enterpriseServer.log file.
----
ERROR n.p.enterprise.server.update.l - Exception caught downloading update: [qtp860567853-228815]
java.util.concurrent.TimeoutException: null
at java.base/java.util.concurrent.CompletableFuture.timedGet(CompletableFuture.java:1886)
at java.base/java.util.concurrent.CompletableFuture.get(CompletableFuture.java:2021)
at net.portswigger.enterprise.server.update.l.a(Unknown Source)
at net.portswigger.enterprise.server.update.m.b(Unknown Source)
at java.base/java.util.concurrent.CompletableFuture.uniComposeStage(CompletableFuture.java:1106)
at java.base/java.util.concurrent.CompletableFuture.thenCompose(CompletableFuture.java:2235)
at net.portswigger.enterprise.server.update.p.lambda$installPendingUpdate$1(Unknown Source)
at java.base/java.util.Optional.map(Optional.java:257)
at net.portswigger.enterprise.server.update.p.a(Unknown Source)
at net.portswigger.enterprise.server.d.a.f.a(Unknown Source)
at jdk.internal.reflect.GeneratedMethodAccessor350.invoke(Unknown Source)
at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.base/java.lang.reflect.Method.invoke(Method.java:564)
at org.glassfish.jersey.server.model.internal.ResourceMethodInvocationHandlerFactory.lambda$static$0(ResourceMethodInvocationHandlerFactory.java:76)
at org.glassfish.jersey.server.model.internal.AbstractJavaResourceMethodDispatcher$1.run(AbstractJavaResourceMethodDispatcher.java:148)
----

Any ideas for a workaround (besides manual reinstall, that has it's problems)? A permanent fix would be much appreciated.


Rose Krawczuk May 21, 2019 08:16AM UTC Support Center agent

Thanks for your message.

Could you send an email to support@portswigger.net with your log files? Particularly the supervisor.log.

There is a separate log file for each day, and the current day’s log file doesn’t contain a date. If you can, please replicate the issue then send us the latest log files.


Nikolay Elenkov May 22, 2019 07:37AM UTC
Hi,

Looking in /var/log/BurpSuiteEnterpriseEdition, it seems that the supervisor_*.log files haven't been touched for a while, am I looking in the right place?

Cf.
----
Mar 13 10:54 /var/log/BurpSuiteEnterpriseEdition/supervisor_enterpriseAgent.log
Mar 7 13:07 /var/log/BurpSuiteEnterpriseEdition/supervisor_enterpriseServer.log
Mar 8 18:18 /var/log/BurpSuiteEnterpriseEdition/supervisor_webServer.log
----

Rose Krawczuk May 22, 2019 10:34AM UTC Support Center agent

We’re aware that there is an issue with updates for some users, which we are looking into.

You’re right, there is a built-in timeout of 10 minutes for downloading the Enterprise update.

Could you try manually downloading the zip file from our website? You’ll need to log into your account.

- https://portswigger.net/users

Then you can upload the zip file via the Settings > Updates in Burp Enterprise.

Could you let us know if that solves the problem for you?

If not, could you send an email to support@portswigger.net with all your zip files?

Thanks.


Nikolay Elenkov May 22, 2019 11:06AM UTC
Uploading via the Web UI, results in this message, and no update is performed:

----
The update is already available to install.
----

> If not, could you send an email to support@portswigger.net with all your zip files?

Do you mean log files? Which ones in particular do you need?

Rose Krawczuk May 22, 2019 12:03PM UTC Support Center agent

I do apologise, Nikolay, you’re right I meant the log files.


Post Your public answer

Your name
Your email address
Answer