How to debug an SSL handshake issue

Document ID : KB000095027
Last Modified Date : 08/05/2018
Show Technical Document Details
Introduction:
How to debug an SSL handshake issue.
Instructions:
In the workstation there is an HTTP and SSL Debug Viewer:
https://docops.ca.com/devtest-solutions/10-3/en/using/using-ca-application-test/using-devtest-workstation-with-ca-application-test/running-test-cases-and-suites/http-and-ssl-debug-viewer/

An example of the SSL handshake is shown here:
https://docops.ca.com/devtest-solutions/10-3/en/using/using-ca-application-test/using-devtest-workstation-with-ca-application-test/running-test-cases-and-suites/ssl-handshake-summary

Another option is to add the following line to Workstation.vmoptions:
-Djavax.net.debug=ssl

If the problem needs to be captured from a running VS then add the ssl debug option to VirtualServiceEnvironment.options and VirtualServiceEnvironmentService.vmoptions.

Depending on the problem, the following variations can be used:
-Djavax.net.debug=ssl
-Djavax.net.debug=all
-Djavax.net.debug=ssl:handshake:verbose 

For an introduction of SSL, Java and DevTest see:
https://comm.support.ca.com/kb/of-ssl-java-and-devtest/kb000009925