SSL and clickhouse cloud

[oatsandsugar]

More of a question than an issue.

I had no problem connecting to my local clickhouse, but when I tried to connect to clickhouse cloud I got this error

> Error executing tool list_databases: Error HTTPSConnectionPool(host='<hostname>', port=443): Max retries exceeded with url: /? (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1028)'))) executing HTTP request attempt 1 (https://bkat6jn1qy.clickhouse.boreal.cloud:443)

My gut is telling me that this is like when I was trying to connect to it with datagrip, and I had to toggle the USE SSL toggle, but not sure how I would do this in such a connection. Also, apologies if this isn't the best place to post this issue, I didn't see a community slack or anything like that

[iskakaushik]

@oatsandsugar this is not expected. I made a PR that allows for expanded set of options via env vars here: #11, along with some example configurations: https://github.com/ClickHouse/mcp-clickhouse/pull/11/files#diff-b335630551682c19a781afebcf4d07bf978fb1f8ac04c6bf87428ed5106870f5R143, would you mind seeing if that helps with this issue? If so, I'll land it.

[oatsandsugar]

Thank you, I’ll review this evening Johanan

…

On Mon, Feb 17, 2025 at 4:51 PM Kaushik Iska ***@***.***> wrote: @oatsandsugar <https://github.com/oatsandsugar> this is not expected. I made a PR that allows for expanded set of options via env vars here: #11 <#11>, along with some example configurations: https://github.com/ClickHouse/mcp-clickhouse/pull/11/files#diff-b335630551682c19a781afebcf4d07bf978fb1f8ac04c6bf87428ed5106870f5R143, would you mind seeing if that helps with this issue? If so, I'll land it. — Reply to this email directly, view it on GitHub <#10 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AEGLDLYPN3P3RWC3FHENEWL2QJ7YHAVCNFSM6AAAAABXKLQN6OVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDMNRUGMYDEMBZGQ> . You are receiving this because you were mentioned.Message ID: ***@***.***> [image: iskakaushik]*iskakaushik* left a comment (ClickHouse/mcp-clickhouse#10) <#10 (comment)> @oatsandsugar <https://github.com/oatsandsugar> this is not expected. I made a PR that allows for expanded set of options via env vars here: #11 <#11>, along with some example configurations: https://github.com/ClickHouse/mcp-clickhouse/pull/11/files#diff-b335630551682c19a781afebcf4d07bf978fb1f8ac04c6bf87428ed5106870f5R143, would you mind seeing if that helps with this issue? If so, I'll land it. — Reply to this email directly, view it on GitHub <#10 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AEGLDLYPN3P3RWC3FHENEWL2QJ7YHAVCNFSM6AAAAABXKLQN6OVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDMNRUGMYDEMBZGQ> . You are receiving this because you were mentioned.Message ID: ***@***.***>

[oatsandsugar]

Sorry, I commented on the PR, we got it working with verification set to false, but I reckon we should be able to get it working with verification set to true?

Having got this working though, we are getting some incredible results. Happy to share our experiments.

[iskakaushik]

It would be amazing to see your experiments! It will be useful for me to pair with you to debug the SSL issue as well, could you send an email to kaushik [at] clickhouse.com so we can find a time to pair on this?

[serprex]

Fixed by #15?

[Tushar1729-k]

Hi I am getting this error

[Tushar1729-k]

@oatsandsugar did you manage to fix this error?

[oatsandsugar]

@Tushar1729-k Yes—I don't see the error any more on my side. Are you still seeing this with the latest MCP?