OSWASP ZAP and java.security.cert.CertificateException: Certificates does not conform

[lmedavid]

When using ZAP as a proxy and with HTTPs protocol, the web browser is displaying a java.security.cert.CertificateException: Certificates does not conform to algorithm constraints.

I am not yet sure why but there is a workaround as explained here: http://www.richardnichols.net/2012/0...m-constraints/

Basically edit your /usr/lib/jvm/java-7-openjdk-<arch>/jre/lib/security/java.security and comment out the line jdk.certpath.disabledAlgorithms=MD2

[lmedavid]

Logged on the http://bugs.kali.org/, bug 0000522

[Amidamaru]

When using ZAP as a proxy and with HTTPs protocol, the web browser is displaying a java.security.cert.CertificateException: Certificates does not conform to algorithm constraints.

I am not yet sure why but there is a workaround as explained here: http://www.richardnichols.net/2012/0...m-constraints/

Basically edit your /usr/lib/jvm/java-7-openjdk-<arch>/jre/lib/security/java.security and comment out the line jdk.certpath.disabledAlgorithms=MD2

Thanks much!!!