So I made a couple of changes as follows:
1. added <realm-name>certificate</realm-name> to the <login-config> section of the web.xml. Netbeans didn't put this there, but i've seen it in a few examples.
2. changed my web resource from all HTTP methods to just POST
the result of these changes is an endless spamming of the error message below in the glassfish console. I have to then stop and restart the server.
"IOP00410218: (COMM_FAILURE) IOException in accept: javax.net.ssl.SSLException: No available certificate or key corresponds to the SSL cipher suites which are enabled."
org.omg.CORBA.COMM_FAILURE: vmcid: SUN minor code: 218 completed: No
at com.sun.corba.ee.impl.logging.ORBUtilSystemException.ioexceptionInAccept(ORBUtilSystemException.java:3153)
at com.sun.corba.ee.impl.logging.ORBUtilSystemException.ioexceptionInAccept(ORBUtilSystemException.java:3176)
at com.sun.corba.ee.impl.transport.SocketOrChannelAcceptorImpl.accept(SocketOrChannelAcceptorImpl.java:259)
at com.sun.corba.ee.impl.transport.ListenerThreadImpl.doWork(ListenerThreadImpl.java:72)
at com.sun.corba.ee.impl.orbutil.threadpool.ThreadPoolImpl$WorkerThread.run(ThreadPoolImpl.java:524)
[Message sent by forum member 'atappert' (atappert)]
http://forums.java.net/jive/thread.jspa?messageID=220682