Releases: grke/burp
3.2.0
New stable version, based on 3.1.4
3.2.0: Stable (recommended)
2.4.0: Old stable
It is recommended to use the current stable version.
Things to watch out for when upgrading through the following versions:
3.1.2
-----
Blowfish has been deprecated by openssl.
Burp will now encrypt new files with AES-CBC-256, but will still be able
to decrypt files encrypted with blowfish as long as your openssl library
supports it.
The Windows installer will continue to come with openssl-1.1 for a few months,
to allow time for people to switch from blowfish.
3.1.0
-----
Protocol 2 has been removed.
It hasn't been progressing for a long time, and is mostly just a distraction.
So, I have made the decision to remove it.
2.5.0
-----
The Windows installer sets Administrator and SYSTEM full access permissions
only on:
C:/Program Files/Burp/bin/burp.conf
C:/Program Files/Burp/bin/ssl_cert_ca.pem
C:/Program Files/Burp/bin/ssl_cert-client.key
C:/Program Files/Burp/bin/ssl_cert-client.pem
That is, it runs:
icacls.exe "<path>" /inheritance:r /grant:r Administrators:F SYSTEM:F
If you have these files on non-default locations, and you are concerned about
restricting permissions, you may want to run the command by hand on them.
The Windows client will automatically apply the same permissions to new ssl
cert files on certificate exchange.
3.1.4
- Experimental: Turn off windows api on remote drives
- record whether the windows api was used for a file in the manifest
- allows burp to backup from a remote drive as long as it is visible
- caution: if the drive is not always available, you will back up
the same files over and over again
- caution: if the drive is not always available, you will back up
- From tassilo:
- libressl>3.5 has X509_REVOKED_get0_serialNumber
3.1.4: Latest
2.4.0: Stable (recommended)
2.2.18: Old stable
It is recommended to use the current stable version.
The latest release contains new features, but may have unexpected issues.
3.1.2
- 904: openssl3 support
- And switch to aes-cbc instead of blowfish, which is deprecated, for
file encryption
- And switch to aes-cbc instead of blowfish, which is deprecated, for
- 908: Only glibc supports %z in strptime()
- Fix 2.x clients talking to 3.x servers.
- Delete heaps more unused code
3.1.2: Latest
2.4.0: Stable (recommended)
2.2.18: Old stable
It is recommended to use the current stable version.
The latest release contains new features, but may have unexpected issues.
3.1.0
- Remove protocol 2:
- It hasn't been progressing for a long time, and is mostly just a
distraction. So, I have made the decision to remove it.
- It hasn't been progressing for a long time, and is mostly just a
- Remove some unused Windows functions.
3.1.0: Latest
2.4.0: Stable (recommended)
2.2.18: Old stable
It is recommended to use the current stable version.
The latest release contains new features, but may have unexpected issues.