Enabling SSL/Network Debugging to Aid Troubleshooting CIC Agent Issues

When a CIC Agent is unable to establish a secure, outbound network connection to the CIC Cockpit due to a certificate-related error, enabling SSL/Network debug is beneficial to troubleshooting efforts.

To enable Network/SSL debugging on the machine the agent is installed on:

Linux

1. Edit the agent startup script located at /opt/cleo/agent/bin/start_agent.sh
2. Add the following line to the start parameters: -Djavax.net.debug=all

   START_AGENT="$JAVA_HOME/bin/java -cp $CLASSPATH -Dagent.home=${AGENT_HOME} \ 
     -Dvertx.logger-delegate-factory-class-name=io.vertx.core.logging.SLF4JLogDelegateFactory \
     -Dagent.log.location=/var/log/cleo \
     -Dlogback.configurationFile=${AGENT_HOME}/conf/logback.xml \
     -Djava.util.logging.config.file=${AGENT_HOME}/conf/logging.properties \
     -Dvertx.disableFileCPResolving=true \
     -Dvertx.disableDnsResolver=true \
     -Djavax.net.debug=all \
     -XX:+HeapDumpOnOutOfMemoryError \
     -Xms512m -Xmx${JAVA_MAX_MEMORY}m ${DEBUG_OPTS} ${JMX_OPTS} \
     com.cleo.boomvang.agent.core.Loader \
     run com.cleo.boomvang.agent.core.verticle.Main"
   

3. Restart the CIC Agent service.
4. The debug output is saved to /var/log/cleo/cleo-agent-stdout.YYYY-MM-DD.log

Windows

1. Open the registry editor.
2. Navigate to the following key:
   Computer\HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Apache Software Foundation\Procrun 2.0\CleoAgent\Parameters\Java
3. Double-click the “Options” REG_MULTI_SZ value to open the parameters in edit mode.
4. Add the following line to the parameters:
   -Djavax.net.debug=all
   
5. Click OK to save your work and close the editor.
6. Restart the CIC Agent service.
7. The debug output is saved to C:\Program Files\Cleo\Agent\logs\cleo-agent-stdout.YYYY-MM-DD.log