If you've got the container to request and accept a client cert, the connector configuration is likely correct and it's an SSL trust problem. Please post the output of the following command:
keytool -list -keystore D:/users/apache-tomcat-7.0.11/keystore/trust.keystore -storePass changeit Also, please post some evidence that the client is sending the cert you think it is. OpenSSL s_client is a good choice if you don't already have a good tool for SSL troubleshooting. M --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org