title: Tomcat/JBoss Remove SSL and force new handshake
body: <p>Does anyone know how to remove an SSL certificate from the user's session and force the SSL handshake to be completed again? </p>
  
  <p>I've tried removing the cert by calling</p>
  
  <pre><code>request.removeAttribute("javax.servlet.request.X509Certificate");
  </code></pre>
  
  <p>But this doesn't seem to be doing the trick. In fact the code seems to ignore that property.</p>