Client certificate authentication (SASL-EXTERNAL) over BOSH or websocket

Hi there

Openfire supports client certificate authentication in conjunction with SASL-EXTERNAL. However, I haven't been able to find any evidence (by scouring the web) that it supports it also over HTTPS BOSH or WSS websocket.

My understanding is that for client certificates to be supported with HTTPS/BOSH, the Openfire BOSH connection manager must explicitly request from the client a signed certificate, otherwise the browser will not send one.

Does openfire support this usecase (client certificate auth over BOSH)?

Thanks

JC Brand