Article Content
Article Number | 000030977 |
Applies To | RSA Product Set: RSA Identity Governance and LIfecycle RSA Version/Condition: All versions Platform: WebSphere |
Issue | There are many different scenarios that can lead to an SSL handshake failing between the application server and another server or even local application. This debug could be used to troubleshoot connectivity from:
|
Resolution | SSL Debug Trace for IBM WebSphereCAUTION: These traces should be removed as soon as you have reproduced the problem and collected the trace. This debug trace generates a significant amount of events in the WebSphere SystemOut.log file.
-Djavax.net.debug=ssl,handshake,data,trustmanager
NOTE: To get useful/verbose messages, the IBM Trust manager may need to be changed from IbmPKIX to IbmX509. This setting is in the WebSphere Admin GUI under Security > SSL Certificate and Key Management > SSL configurations > Select Resource > Trust and Key Managers. The default trust manager for that resource can be changed using the pull-down menu. |