I have a monstrous Java app (a client of little-known application server GNUEnterprise) and its source, which I can compile back after making some changes to it. The app use
A quick way to log all SSL traffic is to startup java with:
-Djavax.net.debug=all
Or set it as a system property:
System.setProperty("javax.net.debug","all");
Brace yourself. Standard out gets NOISY if you do this!
(*Note: only logs SSL traffic and SSL debug info (handshakes, etc). Regular sockets are not logged.)