|Applies To||RSA Product Set: RSA Identity Governance and LIfecycle|
RSA Version/Condition: All versions
|Issue||There are many different scenarios that can lead to an SSL handshake failing between the application server and another server or even local application.|
This debug could be used to troubleshoot connectivity from:
SSL Debug Trace for IBM WebSphere
CAUTION: These traces should be removed as soon as you have reproduced the problem and collected the trace. This debug trace generates a significant amount of events in the WebSphere SystemOut.log file.
NOTE: To get useful/verbose messages, the IBM Trust manager may need to be changed from IbmPKIX to IbmX509. This setting is in the WebSphere Admin GUI under Security > SSL Certificate and Key Management > SSL configurations > Select Resource > Trust and Key Managers. The default trust manager for that resource can be changed using the pull-down menu.