Troubleshooting
Problem
The QMGTOOLS/HTTPSCLT command allows the user to easily test an https enabled website with a Java call to perform an SSL Handshake. With debug option ALL, it enables a javax.net.debug=all trace with events being logged to the output file.
Resolving The Problem
1. If the QMGTOOLS toolkit has not yet been installed, you should refer to the following document for information on how to download and install the QMGTOOLS toolkit on your IBM i server. The following URL contains additional information: http://www-01.ibm.com/support/docview.wss?uid=nas8N1011297
Note: If you just downloaded the tool, this can be ignored. GO QMGTOOLS/MG and take option 12. Please make sure the build date is 12/14/2018 or later. If older than 12/14/2018, download the current version of QMGTOOLS by following the steps in : http://www.ibm.com/support/docview.wss?uid=nas8N1020468
Note: If you just downloaded the tool, this can be ignored. GO QMGTOOLS/MG and take option 12. Please make sure the build date is 12/14/2018 or later. If older than 12/14/2018, download the current version of QMGTOOLS by following the steps in : http://www.ibm.com/support/docview.wss?uid=nas8N1020468
2. The QMGTOOLS/HTTPSCLT command is as follows:
| HTTPS URL (URL) | The URL (requires https://) of the connection being attempted. There is a 100 character limit for URL parameter value. Recommend using the root URL and remove any URIs. (i.e. https://www.ibm.com) |
| Debug Option (DEBUG_OPT) | Specify ALL to enable javax.net.debug=all for security trace |
| TLS Version (TLS) | Specify TLS Version for SSL Connection (SSLV3, TLSV1, TLSV1.1, TLSV1.2) |
| Generic JVM Args (JVM_ARGS) | Allows for additional JVM arguments to enable properties when connection is made |
| Output File (OUT_FILE) | The location of the text file that contains the trace and output for the connection attempt |
| Java Home (JAVA_HOME) | Specifies the JDK you are testing the connection with. |
Example Command:
HTTPSCLT URL('https://www.ibm.com') DEBUG_OPT(ALL) TLS(TLSV1.2) +
OUT_FILE('/tmp/HttpsClientOut.txt') JAVA_HOME(JDK80_32)
View the /tmp/HttpsClientOut.txt file to view the -Djavax.net.debug=all trace:
This section shows the ClientHello using TLSv1:
This section shows the ServerHello result with the cipher suite used.
Document Location
Worldwide
[{"Type":"MASTER","Line of Business":{"code":"LOB57","label":"Power"},"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Product":{"code":"SWG60","label":"IBM i"},"ARM Category":[{"code":"a8m0z0000001gHbAAI","label":"Java Development Kit->Java Secure Socket Extension"}],"ARM Case Number":"","Platform":[{"code":"PF012","label":"IBM i"}],"Version":"7.2.0;7.3.0;7.4.0;and future releases"}]
Was this topic helpful?
Document Information
Modified date:
22 September 2021
UID
ibm10872648