Enable java SSL(all) debugging - (RA/tomcat)

Document created by nelje05 Employee on Mar 17, 2015Last modified by nelje05 Employee on Mar 17, 2015
Version 3Show Document
  • View in full screen mode


(Just to clarify for Release Automation):



Linux:


1.Open/Edit the tomcat startup script %RAHOME%/bin/catalina.sh


2. Locate the line where 'JAVA_OPTS' environment variable is set, eg(example from 5.5.0.831):


--snip--


JRE_HOME=./jre

CATALINA_PID=./catalina.pid

JAVA_OPTS="$JAVA_OPTS -Duser.country=US -Duser.language=en"

 

--snip--

 

 

3. Simply append '-Djavax.net.debug=ssl' to the 'JAVA_OPTS' variable as so:

 

 

--snip--


JRE_HOME=./jre

CATALINA_PID=./catalina.pid

JAVA_OPTS="$JAVA_OPTS -Duser.country=US -Duser.language=en -Djavax.net.debug=ssl"


--snip--



4. Restart NolioServer, remember to disable when done




Windows:


1.Open/Edit the tomcat startup batch file/script %RAHOME%\bin\catalina.bat


2. Locate the last line where 'JAVA_OPTS' environment variable is set, eg:


--snip--


set JAVA_OPTS=%JAVA_OPTS% -XX:+HeapDumpOnOutOfMemoryError

set JAVA_OPTS=%JAVA_OPTS% -XX:MaxPermSize=256M -Xmx2G

 

--snip--


3. Simply append a new line as, eg:


--snip--


set JAVA_OPTS=%JAVA_OPTS% -XX:+HeapDumpOnOutOfMemoryError

set JAVA_OPTS=%JAVA_OPTS% -XX:MaxPermSize=256M -Xmx2G

set JAVA_OPTS=%JAVA_OPTS% -Djava.net.debug=ssl


--snip--


4. Restart NolioServer, remember to disable when done





**Note: this change will enable all SSL debugging for webapps(datamanagement, execution), if you want to get picky, specify a comma separated combination of any of the following:


 

record

Print a trace of each SSL record (at the SSL protocol level).

handshake

Print each handshake message as it is received

keygen

Print key generation data for the secret key exchange.

session

Print SSL session activity.

defaultctx

Print the default SSL initialization information.

sslctx

Print information about the SSL context.

sessioncache

Print information about the SSL session cache.

keymanager

Print information about calls to the key manager.

trustmanager

Print information about calls to the trust manager.dataFor handshake tracing, print out a hex dump of each message.verboseFor handshake tracing, print out verbose information.plaintextFor record tracing, print out a hex dump of the record.

 


example: "-Djava.net.debug=record,keygen,handshake"



--nelje05 3/17/15

2 people found this helpful

Attachments

    Outcomes