Research Academy
My account Customers About Blog Careers Legal Contact Resellers

Burp Suite User Forum

Create new post

Attempting to auto-select SSL parameters for..

Marco | Last updated: May 06, 2016 08:42AM UTC

Hi , i have an issue with the burp configuration. I have this error Attempting to auto-select SSL parameters for.. and i cannot intercept. Someone can help me? Thanks in advance

PortSwigger Agent | Last updated: May 06, 2016 09:00AM UTC

This message appears when Burp fails to negotiate an SSL connection to a target, based on your configured SSL settings. The auto-selection process works through combinations of SSL protocol and cipher looking for something that works. This process can take some time (several minutes), and an additional alert will be shown if the process fails. If the auto-selection doesn't work, then suggested workarounds are to change other SSL-related options in project/user options, or to try a different version of Java (6/7/8) as some SSL quirks are dependent on the Java version.

Burp User | Last updated: Oct 12, 2017 04:35AM UTC

I am also facing the same... SSL configs, local java related debugging, etc did not help. But what I noticed is that the older versions of Burp works well even with default settings and configs, but not the latest. I am using 1.7.27 as the latest.

PortSwigger Agent | Last updated: Oct 12, 2017 08:35AM UTC

Hi Asadas, Thanks for your message. Are you using the standalone Jar or the platform installer? Sometimes SSL behavior changes between Java versions, resulting in issues like this. Fortunately, these are becoming rarer, but can still be an issue working with legacy systems. You may be able to use the latest version of Burp, but with the standalone jar, and an older version of Java. Please let us know if you need any further assistance.

Burp User | Last updated: Oct 30, 2017 07:14PM UTC

I am also facing the similar issue when I am trying to intercept the traffic.Below is the error Attackers might be trying to steal your information from axxxxxxcdd.com (for example, passwords, messages, or credit cards). Learn more NET::ERR_CERT_AUTHORITY_INVALID Some help is really appreciated .... Thank you ..

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.