it came from the CN of the certificate and the way i used my commande,

add

allow_anonymous true

to the config file,

Make sure the CN are different for the server and the client, use the server CN in the -h parameter and add the client certificate and the client key