The communication was not wiresharked instead we used Java TLS debug logging. We believe the 1023 bit DH key is a bug / misconfiguration on the server side, even it we disable the client side ...