Add OpenSSL verification modes and certificate handlers reference (DOC-134)#5816
Open
Add OpenSSL verification modes and certificate handlers reference (DOC-134)#5816
Conversation
…C-134) Document all verificationMode options, invalidCertificateHandler names, and complete examples for disabling certificate verification across clickhouse-client, clickhouse-server, and Keeper. Verified against ClickHouse's Poco fork source code. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
|
The latest updates on your projects. Learn more about Vercel for GitHub.
3 Skipped Deployments
|
Remove em dashes and bold formatting from markdown table cells that caused rendering issues in GitHub diff views. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Member
|
@dhtclk I find asking the LLM for verification is often unreliable. Did you cross check using a different LLM to verify? |
Collaborator
Author
|
@Blargian - I did not do that in this case, I'll follow up with manual validation and validating with a different LLM. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
EXPERIMENTAL
verificationModeoptions andinvalidCertificateHandlernames--accept-invalid-certificateCLI shortcutVerification
Only Verified with CLAUDE:
All technical claims verified against ClickHouse source code:
none,relaxed,once,strict)base/poco/NetSSL_OpenSSL/src/Utility.cpponcebehaves asrelaxedon client sideAcceptandRejecthandlers exist<server>and<client>base/poco/NetSSL_OpenSSL/src/SSLManager.cpp--accept-invalid-certificateflagprograms/client/Client.cppsrc/for additional validation — none foundCloses DOC-134
🤖 Generated with Claude Code