Regarding turning off the "server requires client certificate" feature, try the solution suggested by Matthias Melcher:
https://openacs.org/forums/message-view?message_id=153519
Torben