To troubleshoot TLS issues with OpenEdge Replication, use the following resources:.

  • Make sure that your TLS certificates have not expired.

    See Manage certificate stores for OpenEdge clients and servers.

  • To view cipher text buffer dumps on the source database, set the environment variable SSLSYS_DEBUG_LOGGING to level 5 and check the cert.client.log.
    Note: The TLS in OpenEdge Replication is completely independent of the TLS used by the database broker and any client connections made to it. However, if TLS is enabled for both the database broker and the client connections, the broker and the replication agent and replication transition processes share the cert.log file when SSLSYS_DEBUG_LOGGING is enabled.
  • Validate changes sent over the network to the target database, as follows:

    On the target database, check the cert.server.log for the following message:

    SSL Server handshake suceeded

    On the source database, check the cert.client.log for the following message: 

    SSL Client handshake succeeded