DISCLAIMER: Enabling this logging may reveal sensitive information in the log. This configuration should not be used in production systems.
This article provides instructions on how to enable SSL debug logging in the application server log in order to troubleshoot SSL handshake issues.
Open the setenv.(sh|bat) file located in <APPIAN_HOME>/tomcat/apache-tomcat/bin.
<APPIAN_HOME>/tomcat/apache-tomcat/bin
Near the top of the file there is a list of export/set CATALINA_OPTS statements where each line starts with the following:
CATALINA_OPTS
export CATALINA_OPTS="$CATALINA_OPTS
set CATALINA_OPTS=%CATALINA_OPTS%
Add the following text on a new line at the bottom of the list:
20.1 and earlier
export CATALINA_OPTS="$CATALINA_OPTS -Djavax.net.debug=ssl"
set CATALINA_OPTS=%CATALINA_OPTS% -Djavax.net.debug=ssl
20.2 and later
export CATALINA_OPTS="$CATALINA_OPTS -Djavax.net.debug=ssl:handshake"
set CATALINA_OPTS=%CATALINA_OPTS% -Djavax.net.debug=ssl:handshake
Then save the file and restart the Tomcat process.
Add the following to the CUSTOM_JAVA_OPTS variable in standalone.custom.(sh|bat) <JBOSS_HOME>/bin:
CUSTOM_JAVA_OPTS
<JBOSS_HOME>/bin
-Djavax.net.debug=ssl:handshake
Then restart the JBoss process.
This article applies to all versions of Appian.
Last Reviewed: October 2021