code:     protected void handShake() throws IOException {
          ssl.setNeedClientAuth(true);
          ssl.startHandshake();
      }
      /**
       * Copied from <code>org.apache.catalina.valves.CertificateValve</code>
       */
  