You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
This repository has been archived by the owner on Nov 9, 2022. It is now read-only.
Configuring an ssl certificate in ml-config.xml inserts a template but does not create a usable certificate.
When a certificate template is created via the Admin UI, MarkLogic automatically generates a self-signed CA and certificate from the template. When a new certificate template is created via the Roxy deployer, no certificate is generated; app servers using this certificate template are not usable until the certificate is generated manually.
Steps to reproduce:
Include the sample ssl certificate and an HTTP server that uses it in ml-config.xml
Bootstrap
curl https://localhost:[app-port] > "(35) Server aborted the SSL handshake"
In the Admin UI, click 'ok' on the Configure page for the new template
curl now returns expected result (complaint about insecure certificate)
Our workaround is a post-bootstrap custom build step that creates the certificate using pki:generate-temporary-certificate().
The text was updated successfully, but these errors were encountered:
Configuring an ssl certificate in ml-config.xml inserts a template but does not create a usable certificate.
When a certificate template is created via the Admin UI, MarkLogic automatically generates a self-signed CA and certificate from the template. When a new certificate template is created via the Roxy deployer, no certificate is generated; app servers using this certificate template are not usable until the certificate is generated manually.
Steps to reproduce:
curl https://localhost:[app-port]
> "(35) Server aborted the SSL handshake"Our workaround is a post-bootstrap custom build step that creates the certificate using pki:generate-temporary-certificate().
The text was updated successfully, but these errors were encountered: