CA Certificate for Clickhouse connection

[NickStepanov]

Hi,

I am using Docker image of Bytebase 1.0.5 and would like to use a CA certificate for connecting to Clickhouse instance. I can see that you're using clickhouse-go driver and as I know it supports CA Certificate connection.

What should I do to use it?

Thank you.
Nick.

[d-bytebase]

Hi @NickStepanov, where is your CA certificate stored? We have the driver to support SSL connection already while not exposed through UI.

[NickStepanov]

Hi @d-bytebase I can mount it to the Docker container. What do I need to do to make it work?

[d-bytebase]

Thanks for the feedback. This needs some development on Bytebase side. I will create a feature request first.

[NickStepanov]

Ah, ok, so it's not currently supported, I didn't realise that.

[NickStepanov]

@d-bytebase Can we have this looked at with a higher priority please?

I suggest to simply assume that the CA cert is added to the Docker container into the system cert store (that's what an administrator can do beforehand) and then simply have an SSL parameter secure of the clickhouse-go driver passed as true or false (default) as described in the doc for the DSN string here.
As I understand, then the clickhouse-go driver will look into the system cert store and use the certs from it to connect.
So maybe a UI switch to have connection as secure or not?

We are currently blocked by this and can't move forward with our implementation, so any quick help would be much appreciated.

[d-bytebase]

Hi @NickStepanov, we would like to understand your use cases to prioritize the development. Would you mind having a quick chat/meeting to get all of us on the same page? You can share your contact information with my email: d[at]bytebase.com. Thanks!