v.24.7New Feature
Support for accept_invalid_certificate in client config for self-signed certificate connections
Support accept_invalid_certificate in client's config in order to allow for client to connect over secure TCP to a server running with self-signed certificate - can be used as a shorthand for correspondingopenSSLclient settingsverificationMode=none+invalidCertificateHandler.name=AcceptCertificateHandler. #65238 (peacewalker122).
Why it matters
This feature simplifies connecting clients to ClickHouse servers running with self-signed SSL certificates by providing a straightforward configuration flag that disables certificate verification, avoiding the need for complex OpenSSL client settings.How to use it
In the client's configuration, setaccept_invalid_certificate=true to allow connections to servers with self-signed certificates. This acts as a shorthand for setting openSSL.verificationMode=none and openSSL.invalidCertificateHandler.name=AcceptCertificateHandler.