title: Make IIS require SSL client certificate during initial handshake
body: <p>I am trying to configure an IIS website to require SSL client certificates.  The website is set up in both IIS 6 and 7, though I am more interested in making it work for 7.  I set the require client certificates property in IIS and it works fine when accessing the site through a web browser, but a Java-based client is having trouble accessing it.</p>
  
  <p>I believe the problem is that IIS does not request a client certificate during the initial SSL handshake.  Instead it negotiates a normal SSL connection, checks to see if the resource requires client certificates, and if it does it then initiates a new SSL handshake that requests a client certificate.  IIS does this so support sites that only require the client certificates for certain resources.  Even when the requirement is specified for the entire website, IIS still initiates two SSL handshakes.  I want to force IIS to request the client certificate on the first SSL handshake, which will hopefully get things working for the client.  (The client is developed by an external partner and I have virtually no knowledge of how it is set up and no access to its source code)</p>
  
  <p>Has anyone dealt with this problem in IIS before?</p>