Associate an installed certificate with a MarkLogic Application Server

configure-ssl-client-certificate.xqy

xquery version "1.0-ml";

import module namespace pki = "http://marklogic.com/xdmp/pki" at "/MarkLogic/pki.xqy";
import module namespace admin = "http://marklogic.com/xdmp/admin" at "/MarkLogic/admin.xqy";

declare namespace x509 = "http://marklogic.com/xdmp/x509";

let $config := admin:get-configuration()
let $groupid := admin:group-get-id($config, "Default")
let $appservid := admin:appserver-get-id($config, $groupid, "DemoAppServer")

let $cert-id := for $cert in pki:get-certificates(pki:get-trusted-certificate-ids())
               where $cert/x509:cert/x509:subject/x509:commonName eq "DemoLab CA"
               return fn:data($cert/pki:certificate-id)

let $spec := admin:appserver-set-ssl-client-certificate-authorities($config, $appservid, $cert-id)
return admin:save-configuration($spec)