In a large scale network, Consumers with self-signed certificate must not be able to connect to secured servers. A simulated "self-signed client" will attempt to connect to your system. It must be rejected. The reception of a close_notify or a fatal/warning alert is expected (see RFC 2246 section 7.2.1 and 7.2.2).