diff --git a/ChangeLog.md b/ChangeLog.md
--- a/ChangeLog.md
+++ b/ChangeLog.md
@@ -1,3 +1,13 @@
+## 3.2.10
+
+* Passing client certificate, if any, to Warp
+  [#783](https://github.com/yesodweb/wai/pull/783)
+
+## 3.2.9
+
+* Cooperating setGracefulCloseTimeout1 and setGracefulCloseTimeout2 of Warp.
+  [#782](https://github.com/yesodweb/wai/pull/782)
+
 ## 3.2.8
 
 * Using gracefullClose of network 3.1.1 or later if available.
diff --git a/Network/Wai/Handler/WarpTLS.hs b/Network/Wai/Handler/WarpTLS.hs
--- a/Network/Wai/Handler/WarpTLS.hs
+++ b/Network/Wai/Handler/WarpTLS.hs
@@ -468,11 +468,13 @@
 #if MIN_VERSION_tls(1,5,0)
                     TLS.TLS13 -> (3,4)
 #endif
+            clientCert <- TLS.getClientCertificateChain ctx
             return TLS {
                 tlsMajorVersion = major
               , tlsMinorVersion = minor
               , tlsNegotiatedProtocol = proto
               , tlsChiperID = TLS.cipherID infoCipher
+              , tlsClientCertificate = clientCert
               }
 
 tryIO :: IO a -> IO (Either IOException a)
diff --git a/warp-tls.cabal b/warp-tls.cabal
--- a/warp-tls.cabal
+++ b/warp-tls.cabal
@@ -1,5 +1,5 @@
 Name:                warp-tls
-Version:             3.2.9
+Version:             3.2.10
 Synopsis:            HTTP over TLS support for Warp via the TLS package
 License:             MIT
 License-file:        LICENSE
@@ -18,16 +18,16 @@
 extra-source-files:  ChangeLog.md README.md
 
 Library
-  Build-Depends:     base                          >= 4.8      && < 5
+  Build-Depends:     base                          >= 4.10     && < 5
                    , bytestring                    >= 0.9
                    , wai                           >= 3.2      && < 3.3
-                   , warp                          >= 3.3.5    && < 3.4
+                   , warp                          >= 3.3.6    && < 3.4
                    , data-default-class            >= 0.0.1
-                   , tls                           >= 1.3.10
+                   , tls                           >= 1.5.3
                    , cryptonite                    >= 0.12
                    , network                       >= 2.2.1
                    , streaming-commons
-                   , tls-session-manager           >= 0.0.0.1
+                   , tls-session-manager           >= 0.0.4
   Exposed-modules:   Network.Wai.Handler.WarpTLS
   ghc-options:       -Wall
   if os(windows)