GlassFish v3 and EJBCA 3.x a fair couple for mutual SSL authentication.