I am new to setting up Hidden Services. I have my service up and running, listening on port 80, and redirecting to localhost:8080. I have my web-server anonymized and listening on port 8080 for traffic, and everything seems to work fine.

What I am wanting is client side ssl certificates to identify and secure access to my service. I understand how to do this process for a normal clear-net server, but am unsure how to proceed to accomplish this on a tor service.

So how would I implement client side ssl in a tor hidden server? How would this differ from a regular clear-net setup?

I am new to setting up Hidden Services. 

I have my service up and running, listening on port 80, and redirecting to localhost:8080. I have my web-server anonymized and listening on port 8080 for traffic, and everything there seems to work fine.

What I want is client side ssl certificates to identify and secure all access to my service. I understand how to do this process for a normal clear-net server, but am unsure how to proceed to accomplish this on a tor service.

I know that I can have two Virtual Servers in Apache, each listening on localhost to different ports (8080 and 4433), and under the same HiddenServiceDir in torrc have a 2nd HiddenServicePort listening on 443 and directing https traffic to 4433, no problem, but that still allows access via a non-https version of the site. I also know that I could just kill off the standard and only publish my https version fo the service.

Are these assumptions all correct? How would I force all traffic to https without breaking traffic coming from tor2web service?