Did you place the certificate authority that signed the certificate into
your security database as a trusted authority? If not, you can do that
through the Admin UI.
Wayne.
On 10/28/2015 09:40 AM, Short, Brendan wrote:
> Hello all,
>
> I’m attempting to make an API call using xdml:http-get and having a
> problem with the SSL certificate verification. Here’s the code I’m using:
>
> *let* *$accountInfo* := /xdmp:http-get/(*$baseURI*,
> <options *xmlns*=*"xdmp:http"*>
> <authentication *method*=*"basic"*>
> <username>username</username>
> <password>password</password>
> </authentication>
> <verify-cert>true</verify-cert>
> </options>)
>
> And here’s the error message I get:
>
> System ID: /Users/bshort/Documents/Digital objects/api
> testing/get_account_test.xquery
> Severity: error
> Description: SVC-SOCCONN:
> xdmp:http-get("https://api-publisher.mirror-image.com:443/v5/
> <https://api-publisher.mirror-image.com/v5/>", <options
> xmlns="xdmp:http"><authentication
> method="basic"><username>nejm</username><passwor...</options>) --
> Socket connect error: SSL_connect
> 172.16.12.139:52345-104.131.189.21:443: certificate verify failed
> (0x14090086)
> Start location: 13:0
>
> We’ve verified that the certificates are valid and that the call isn’t
> being blocked by our firewall (the trace showed the connection
> reaching from the firewall to the IP address). In addition, when I
> tried to replicate the call through other tools (including Postman and
> Python’s Requests module), I am able to make the call without errors.
> Finally, if I set verify-cert to false, the call goes through. We’re
> at the point where we think this might be a MarkLogic bug of some
> kind. Has anyone out there run into a problem like this before?
>
> Thanks very much,
> -Brendan Short
>
> *Brendan Short **| /Team Leader, Content Systems /| ** NEJM** **Group*
> *860 Winter Street, Waltham, MA 02451 | 781-434-7166
> | *[email protected] <mailto:[email protected]>
>
>
>
> This email message is a private communication. The information
> transmitted, including attachments, is intended only for the person or
> entity to which it is addressed and may contain confidential,
> privileged, and/or proprietary material. Any review, duplication,
> retransmission, distribution, or other use of, or taking of any action
> in reliance upon, this information by persons or entities other than
> the intended recipient is unauthorized by the sender and is
> prohibited. If you have received this message in error, please contact
> the sender immediately by return email and delete the original message
> from all computer systems. Thank you.
>
>
> _______________________________________________
> General mailing list
> [email protected]
> Manage your subscription at:
> http://developer.marklogic.com/mailman/listinfo/general
--
Wayne Feick
Principal Engineer
MarkLogic Corporation
[email protected]
Phone: +1 650 655 2378
www.marklogic.com
This e-mail and any accompanying attachments are confidential. The information
is intended solely for the use of the individual to whom it is addressed. Any
review, disclosure, copying, distribution, or use of this e-mail communication
by others is strictly prohibited. If you are not the intended recipient, please
notify us immediately by returning this message to the sender and delete all
copies. Thank you for your cooperation.
_______________________________________________
General mailing list
[email protected]
Manage your subscription at:
http://developer.marklogic.com/mailman/listinfo/general
