Installing Burp's CA certificate in Chrome - Linux (2024)

ProfessionalCommunity Edition

• Last updated: August 30, 2024

• Read time: 2 Minutes

To test applications in your own browser over HTTPS, you need to install Burp Suite's CA certificate.

Before attempting to install Burp's CA certificate, make sure that you have successfully confirmed that the proxy listener is active and have configured your browser to work with Burp

To export a CA certificate from Burp Suite:

1. Make sure that Burp Suite is running.
2. Visit http://burpsuite in Chrome.
3. On the "Welcome to Burp Suite Professional" page, click CA Certificate to download your unique Burp CA certificate.
4. Make a note of where you save the CA certificate.

To install the CA certificate in Chrome:

1. In Chrome, open the menu in the top right corner and click Settings.
2. In the Chrome settings, select Privacy and security > Manage certificates.

3. In the Manage certificates dialog, go to the Authorities tab and click the Import button.

   

4. Click Browse and select the cacert.der file that you downloaded earlier. Then click Select.

   

5. Select the option Trust this certificate for identifying websites.

   

6. Click OK. org-PortSwigger should now appear on the list of certificate authorities.

   

7. Restart Chrome.
8. With Burp still running, try and browse to any HTTPS URL. If everything has worked, you should now be able to browse to the page without any security warnings.

Removing the Burp Suite CA certificate

To remove the Burp Suite CA certificate from Linux:

1. Open Chrome and go to the Manage certificates menu.
2. Go to the Authorities tab and find the entry for org-PortSwigger.
3. Expand the entry and click the hamburger menu for PortSwigger CA.
4. Click Delete and then click OK at the prompt.