diff --git a/kesconf/file.go b/kesconf/file.go
index 4e44c829..9dea2fdd 100644
--- a/kesconf/file.go
+++ b/kesconf/file.go
@@ -150,6 +150,7 @@ func (f *File) TLSConfig() (*tls.Config, error) {
 		Certificates: []tls.Certificate{certificate},
 		NextProtos:   []string{"h2", "http/1.1"},
 		RootCAs:      rootCAs,
+		ClientCAs:    rootCAs,
 	}, nil
 }