Thanks Mark. In the admin UI also there is an import option on page Security --> "Certificate Authorities".
You can have the certificate in a .pem file and import using this. This worked for me. -----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of Mark Plotnick Sent: Friday, May 01, 2015 3:37 PM To: [email protected] Subject: Re: [MarkLogic Dev General] LDAP integration with MarkLogic Get a certificate and then insert, using Query Console, into Content Source: "Security" like this: import module namespace pki = "http://marklogic.com/xdmp/pki"; at "/MarkLogic/pki.xqy"; pki:insert-trusted-certificates( "-----BEGIN CERTIFICATE----- MIIGJjCCBA6gAwIBAgIQJdCqgb4f0bJN7CRKOgRFszANBgkqhkiG9w0BAQUFADAg MR4wHAYDVQQDExVVbml0ZWRIZWFsdGggR3JvdXAgQ0EwHhcNMDUxMjA3MTcwMDU4 blah blah blah blah blah blah 2lDYJIyT0mLJspjjenfAatkkCJMW+9IFg0d8LS/vAdgZJXNlN8SE2Bqw -----END CERTIFICATE-----") ------------------------------- I have integrated MarkLogic with LDAP based on MarkLogic documentation. I am able to login to http server that uses ldap for authentication and authorization. I want to use LDAPS connection instead of LDPA. For LDAPS, where can I place the certificate authoritie's(CA) certificate so that MarkLogic can validate the digital certificate sent by the ldaps server? I don't see anything in MarkLogic documentation related to this. Any information will be helpful. Thanks. _______________________________________________ General mailing list [email protected] Manage your subscription at: http://developer.marklogic.com/mailman/listinfo/general --- This communication may contain confidential and/or privileged information. If you are not the intended recipient (or have received this communication in error) please notify the sender immediately and destroy this communication. Any unauthorized copying, disclosure or distribution of the material in this communication is strictly forbidden. Deutsche Bank does not render legal or tax advice, and the information contained in this communication should not be regarded as such. _______________________________________________ General mailing list [email protected] Manage your subscription at: http://developer.marklogic.com/mailman/listinfo/general
