HTTP & SSL

HTTP & Jetty

Orchestra utilizes the Jetty library for providing HTTP services, including web services and HTTP receivers.

To enable Jetty logging, set the following parameters:

-Dorg.mortbay.log.class=org.mortbay.log.StdErrLog
-DDEBUG

SSL

If you encounter issues with the Secure Sockets Layer (SSL), you can enable logging by configuring the following parameters:

-Djavax.net.debug=all
-Djavax.net.debug=ssl
-Djavax.net.ssl.trustStore=trustStore...

The first parameter activates comprehensive debugging: -Djavax.net.debug=all.

You will then need to analyze the generated log.

Additional Debugging Options

Example: -Djavax.net.debug=ssl:handshake:verbose

• ALL: Turns on all debugging.
• SSL: Enables SSL debugging.

The following parameters can be utilized in conjunction with SSL:

• RECORD: Enables per-record tracing.
• HANDSHAKE: Prints each handshake message.
• KEYGEN: Displays key generation data.
• SESSION: Outputs session activity.
• DEFAULTCTX: Prints default SSL initialization.
• SSLCTX: Shows SSLContext tracing.
• SESSIONCACHE: Displays session cache tracing.
• KEYMANAGER: Outputs key manager tracing.
• TRUSTMANAGER: Displays trust manager tracing.
• PLUGGABILITY: Shows pluggability tracing.

Handshaking debugging can be enhanced with the following options:

• DATA: Provides a hex dump of each handshake message.
• VERBOSE: Enables verbose printing of handshake messages.

Record debugging can be extended with:

• PLAINTEXT: Provides a hex dump of record plaintext.
• PACKET: Prints raw SSL/TLS packets.