debugging java's miserable handshakes can be done with -Djavax.net.debug=ssl:handsake edit /etc/java/java-1.8.0-openjdk/java-1.8.0-openjdk-1.8.0.222.b10-0.fc30.x86_64/lib/security/java.security