Authentication based on SSL certificate fails for secure WebSockets transport wss://

Issue

We connect to ActiveMQ securely over Web Sockets transport wss://
The broker is configured for secure Web Sockets

 <transportConnector name="wss" uri="wss://0.0.0.0:61618?transport.needClientAuth=true"/>

and also authenticates the client by either of the two JAAS plugins

<plugins>
  <jaasCertificateAuthenticationPlugin configuration="..." />
  <jaasDualAuthenticationPlugin configuration="..." sslConfiguration="..."/>
</plugins>

But authentication always fails based on the clients SSL certificate!!
Depending on the JAAS plugin used, authentication either fails with

java.lang.SecurityException: Unable to authenticate transport without SSL certificate.

in case of using <jaasCertificateAuthenticationPlugin> or

User name [null] or password is invalid.

in case of using <jaasDualAuthenticationPlugin>