|
You need to bind the listener to only one process due the SSL session cache.
You need to set either 'CA Certificate Path' or 'CA Certificate File' to make the CA used to signed the client certificate available.
"Client Verification" should be set to "required"
"Verify Depth" to 1 or higher.
|