emqx开启双向认证时,每分钟报错误信息

emqx 5.1.4,安装在docker中,证书的创建是官方推荐的教程,而且通过客户端连接是确认可以使用的。
但是,一旦开启双向认证
fail_if_no_peer_cert = true或者在dashboard这里打开它

总是提示这样的错误信息,(当然这个信息似乎不影响正常使用,但每分钟2条也太频繁了)

2023-08-28T13:46:11.530827+00:00 [error] supervisor: 'esockd_connection_sup - <0.2966.0>', errorContext: connection_shutdown, reason: {ssl_error,{tls_alert,{certificate_required,"TLS server: In state wait_cert at tls_handshake_1_3.erl:1497 generated SERVER ALERT: Fatal - Certificate required\n certificate_required"}}}, offender: [{pid,<0.3820.0>},{name,connection},{mfargs,{emqx_connection,start_link,[#{enable_authn => true,limiter => undefined,listener => {ssl,default},zone => default}]}}]
2023-08-28T13:46:13.261835+00:00 [error] supervisor: 'esockd_connection_sup - <0.2966.0>', errorContext: connection_shutdown, reason: {ssl_error,{tls_alert,{certificate_required,"TLS server: In state wait_cert at tls_handshake_1_3.erl:1497 generated SERVER ALERT: Fatal - Certificate required\n certificate_required"}}}, offender: [{pid,<0.3826.0>},{name,connection},{mfargs,{emqx_connection,start_link,[#{enable_authn => true,limiter => undefined,listener => {ssl,default},zone => default}]}}]
2023-08-28T13:46:41.561985+00:00 [error] supervisor: 'esockd_connection_sup - <0.2966.0>', errorContext: connection_shutdown, reason: {ssl_error,{tls_alert,{certificate_required,"TLS server: In state wait_cert at tls_handshake_1_3.erl:1497 generated SERVER ALERT: Fatal - Certificate required\n certificate_required"}}}, offender: [{pid,<0.3838.0>},{name,connection},{mfargs,{emqx_connection,start_link,[#{enable_authn => true,limiter => undefined,listener => {ssl,default},zone => default}]}}]
2023-08-28T13:46:43.274882+00:00 [error] supervisor: 'esockd_connection_sup - <0.2966.0>', errorContext: connection_shutdown, reason: {ssl_error,{tls_alert,{certificate_required,"TLS server: In state wait_cert at tls_handshake_1_3.erl:1497 generated SERVER ALERT: Fatal - Certificate required\n certificate_required"}}}, offender: [{pid,<0.3843.0>},{name,connection},{mfargs,{emqx_connection,start_link,[#{enable_authn => true,limiter => undefined,listener => {ssl,default},zone => default}]}}]

请问是什么原因呀?困扰了好几天了

这部分日志看起来是客户端无法提供证书,所以 TLS 连接被拒绝了
参考文档:强制开启双向认证

让我不理解的也是这一点,没有任何客户端连接呀,一旦打开这个监听,并设置 fail_if_no_peer_cert = true,就出现故障。

如果fail_if_no_peer_cert = false,就不会有故障信息,但就只是能是单向认证。

烦请指导,您提到的客户端是什么?内部的客户端吗,我确认没有外部客户端在连接它。