Mutual authentication via SSL Oracle 11g I configure mutual authentication via SSL between client (Windows 7) and server (Windows Server 2008 R2). I create wallet via Oracle Wallet Manager (OWM) both on client and server, then  I create certificate requests for client and server in OWM, as it's shown in image below.
I create CA-certificate in OpenSSL according to:
openssl&gt; genrsa -out root.key 2048 
openssl&gt; req -x509 -new -key root.key -days 1000 -out root.crt

Then I create sertificate request:
openssl&gt; genrsa -out serv.key 2048
openssl&gt; req -new –key serv.key –out serv.csr

Further I copy contents of cerfiticate request from OWM to *.csr file, that was created via OpenSSL, create sertificate from this file and sign it with CA certificate.
openssl&gt; x509 -req –in serv.csr -CA root.crt -CAkey root.key -CAcreateserial -out serv.crt -days 500

Similary, I create a client certificate and sign it with CA certificate. Next, I import CA-certificate to OWM via &quot;Import Trusted Certificate&quot; both in client and server and a client or server sertificate via &quot;Import User Certificate&quot; on client or server-machine accordingly. Then save wallets and set &quot;Auto Login&quot; flag.
Next I create connection via Net Manager -&gt; Local -&gt; Profile -&gt; Oracle Advanced Security -&gt; SSL on both client and server. Listener.ora on server now contains this:

SSL_CLIENT_AUTHENTICATION = TRUE
WALLET_LOCATION = (SOURCE = (METHOD = FILE) (METHOD_DATA = (DIRECTORY
= C:\OraWallet) ) )
LISTENER = (DESCRIPTION_LIST = (DESCRIPTION = (ADDRESS = (PROTOCOL =
TCP)(HOST = WIN-QV6N8G35RD5.localdomain)(PORT = 1521)) ) (DESCRIPTION
= (ADDRESS = (PROTOCOL = TCPS)(HOST = WIN-QV6N8G35RD5.localdomain)(PORT = 2484)) ) )

Then I add new &quot;TCP/IP with SSL&quot; connection on client and test it, but error appears on client:

ORA-28864: SSL connection closed gracefully

I made trace on server and there is 2 errors:

TNS-12560:TNS: protocol adapter error
TNS-00540:SSL protocol adapter failure

Well, now I don't know, how to fix them.
Problem was solved via using orapki for creating wallets and sertificates for client and server. This manual helped me to solve the problem.