Is client private key required for mutual/two way ssl?

[KrishnaST]

My application is consuming a service which requires two way SSL. I have received public certificate(Most probably client certificate) from the vendor whose service i am going to consume. Is client private key required for mutual/two way ssl?

[Hakky54]

If the counter party, the service which you are going to call, requires you to authenticate with ssl based on mutual-ssl than you need two files:

• The certificate of the counter party, which you are going to use to mark the server as trusted server.
• Your keypair also known as private key and public key.

So indeed the private key is required. I have also here an example: Integration test - mutual authentication with badssl.com

If the private key is removed from the file which is being used by client within the test, it will fail. You can give it a try 😄