how to log unauthorized https access attempts (secure=true clientAuth=true)

[Ja kub]

Hallo

I use https with client cert authentication

<Connector protocol="...Http11NioProtocol"  SSLEnabled="true"
    scheme="https" secure="true" clientAuth="true" sslProtocol="TLS"
    keystoreFile="...jks" key..Pass="..." keystoreType="JKS"
    truststoreFile="...jks" trust..Pass=".."
 />

AccessLogValve cannot be placed inservice, only in engine (host, context),
but if client has bad/untrusted cert or no cert at all, possibly connector
doesn't pass him to engine and to AccessLogValve.

How can I log such access attempts with tomcat ?


Regards
Jakub