If you want to get a certificate from the client you must not disable validation but set SSL_verify_mode to SSL_VERIFY_PEER. Otherwise the underlying SSL stack will not request a certificate from the client and the client will not send anything if not requested.