title: How to verify the correctness of configuring mutual authentication (client certificate, server certificate) Java EE?
body: <p>I am trying to write a simple application to understand the basics of configuring authentication based on client and server certificates. </p>
  
  <p>I have done everything as it is explained in jave ee 5, java ee 6 tutorials
  <a href="http://docs.oracle.com/javaee/6/tutorial/doc/glien.html" rel="nofollow">http://docs.oracle.com/javaee/6/tutorial/doc/glien.html</a></p>
  
  <ol>
  <li>Opened example from javaee tutorials hello basicauthorization (just simple servlet which can be accessed only after authentication) and then reconfigured it for client certificates instead of basic authorizations</li>
  <li>Configured web.xml</li>
  <li>Configured glassfish-web.xml</li>
  <li>Generated client certificate </li>
  <li>Imported client certificate so that the server would trust it.</li>
  </ol>
  
  <p>The problem:</p>
  
  <p>When I deploy my application, and follow the link, corresponding to the application, I get a message from glassfish server HTTP Status 400 - No client certificate chain in this request".</p>
  
  <p>So, it seems, that the client (browser) doesn't send the certificate with the request</p>
  
  <p>I tried adding the .cer certificate to Chrome, firefox, internet explorer and they are added (no error is displayed), but as you see that doesn't help.</p>
  
  <p>So, the question is:</p>
  
  <p>How to get the access to my application through the web browser having client .cer certificate?</p>