--- a/mod_auth_ccert/README.markdown	Fri Feb 05 15:45:55 2021 +0100
+++ b/mod_auth_ccert/README.markdown	Sat Feb 06 21:34:25 2021 +0100
@@ -22,6 +22,7 @@
     c2s_ssl = {
         cafile = "/path/to/your/ca.pem";
         capath = false; -- Disable capath inherited from built-in default
+        verify = {"peer"; "client_once"}; -- Ask for client certificate
     }