http-listener-mtls.bal

import ballerina/http;

listener http:Listener listenerEP = new(9091,
    secureSocket = {
        key: {
            certFile: "/path/to/server-public.crt",
            keyFile: "/path/to/server-private.key"
        },
        mutualSsl: {
            verifyClient: http:REQUIRE,
            cert: "/path/to/client-public.crt"
        }
    }
);

service /foo on listenerEP {
    resource function get bar() returns json {
        // business logic
    }
}