Other Types of Tracing

If you are having trouble with an SSL negotiation, we may ask you to turn on SSH tracing. SSL tracing is enabled by adding a Java Option to the setenv.sh, setenv.bat, or Windows Service Java options.

Since most SSL issues occur during the handshake, here is how to turn on SSL handshake tracing:

-Djavax.net.debug=handshake

If you want to debug all SSL data, use this to turn on all SSL tracing:

-Djavax.net.debug=ssl

The output for both traces goes to the catalina.out file.

Note: There is no way to dynamically turn SSL tracing on/off. If you enable SSL tracing, it is on for the entire time the MFT process is enabled. If you configure the system to debug all SSL tracing, a lot of output is displayed. Whenever possible, we recommend enabling SSL tracing on a test system.