How to Enable SSL Debug on the Security Server?

Owned by Petteri Kivimäki

Last updated: Jan 17, 2020

Enabling SSL debug temporarily on the Security Server can help to solve SSL related issues.

Step-by-step guide

SSL debug is enabled completing the steps below.

Add the line below to /etc/xroad/services/local.conf
/etc/xroad/services/local.conf
```
PROXY_PARAMS="$PROXY_PARAMS -Djavax.net.debug=ssl:handshake "
```
Restart xroad-proxy (sudo systemctl restart xroad-proxy).
View the log in systemd journal (journalctl -f -u xroad-proxy).

Remember to disable SSL debug once it is not needed anymore.

Related articles