private boolean hasClientX509Certificate(Request request) {
        return Optional.ofNullable(request.getAttribute(EndPoint.SslSessionData.ATTRIBUTE))
                .map(EndPoint.SslSessionData.class::cast)
                .map(d -> d.peerCertificates() != null)
                .orElse(false);
    }
A Jetty handler that enforces TLS client authentication with configurable white list.

@author bjorncs
container-core/src/main/java/com/yahoo/jdisc/http/server/jetty/TlsClientAuthenticationEnforcer.java