https://blogs.oracle.com/java-platform-group/entry/diagnosing_tls_ssl_and_https When making an HTTPS connection, let’s assume that the client threw the following exception due to a failed handshake with the server: javax.net.ssl.SSLHandshakeException: Received fatal alert: handshake_failure Applying the -Djavax.net.debug=all property from above, the failure associated with this SSLHandshakeException would appear immediately after algorithm negotiation in the logs. Avoid exception: VM arguments {{{ -Djavax.net.ssl.trustStore=/home/terryk/.esg/esg-truststore.ts -Djavax.net.ssl.trustStorePassword=changeit -Djavax.net.debug=all -Dhttps.protocols="TLSv1,SSLv3" }}} Program arguments it {{{ --oid userOpenIDURL -P password --output outputfil }}}