unable to see why an SSL handshake is failing. how to tell which cert is being presented? is there a debug?

If you want to see what's happening during SSL handshaking for AS2 HTTPS, here's the parameter that will give it to you:

-Djavax.net.debug=all

Add this to the TE startup options in startServer

Example from Interchange's startServer.cmd:

set TE_NODE_OPTIONS="-XX:MaxNewSize=48m -XX:NewSize=48m -Xms256m -Xmx256m -Djavax.net.debug=all"

Example from Interchange's GatewayInterchangeService.ini:

TE_NODE_OPTIONS="-XX:MaxNewSize=48m -XX:NewSize=48m -Xms256m -Xmx256m -Djavax.net.debug=all"

If it's an Activator, then the TE_NODE_OPTIONS line does not apply at all. So put it into the EX line like so:

Example from Activator's startServer.cmd:

set EX_NODE_OPTIONS=-Xms256m -Xmx256m -Djavax.net.debug=all

Example from Activator's GatewayInterchangeService.ini:

EX_NODE_OPTIONS="-Xms256m -Xmx256m -Xrs -Djavax.net.debug=all"

A restart of the Interchange/Activator application is required for this debug parameter to go into effect.