burp fails cert validation w/ OpenSSL 3.0 about burp HOT 4 CLOSED

Hello,

Code 68 looks to be this, from openssl's x509_vfy.h:

# define         X509_V_ERR_CA_MD_TOO_WEAK                       68

Yes, I think you are right, it is about openssl 3 not liking the old CA and certs.
This is the openssl maintainer's way of strengthening algorithms that were once good enough, but are now seen as too weak.
I don't think you have much choice other than to regenerate the CA and the certs.

from burp.

Edit: completely replacing my original reply.

I still had a problem after replacing the CA and generating a new client cert, but then found that I neglected to delete the original ssl_cert_ca.pem from the server. After properly deleting everything, I'm good to go now with my new certs. Please feel free to close this.

Thanks.

from burp.

just realized I could close the issue myself

from burp.

Thanks for the update!

from burp.