>= 0.8.x JDBC Driver cannot connect Clickhouse which has a external proxy port(chproxy--> https chproxy port)

[alin50lulin-gif]

We have one clickhouse which have a proxy https port above. Yes ,TLS abililty actually is provided by chproxy. Following the clickhouse-server's version, we upgraded the version of JDBC Driver. And then,we found the issue:

First,we used DBeaver 23.1.5 and JDBC Driver(0.9.4) to connect (jdbc:clickhouse://ip:443/databse?ssl=true&sslmode=none)
We got the error: unable to find valid certification path to requested target

I think the reason of this error is the stricter ssl-connect via JDBC Driver?

Secondly, we used DBeaver 23.1.5 and JDBC Driver(0.9.8) to connect (jdbc:clickhouse://ip:443/databse?ssl=true&sslmode=none)
We got the error: Unknown and unmapped config properties: [sslmode]
So i remove the sslmode.(jdbc:clickhouse://ip:443/databse?ssl=true)
Still error "unable to find valid certification path to requested target"
Maybe some parameter can control?

Thirdly, we used DBeaver 23.1.5 and JDBC Driver(0.8.3) to connect (jdbc:clickhouse://ip:443/databse?ssl=true&sslmode=none)
We got the error: Cannot invoke "java.net.Socket.setSoTimeout(int)" because "sock" is null

Finally,we used DBeaver 23.1.5 and JDBC Driver(0.7.2) to connect (jdbc:clickhouse://ip:443/databse?ssl=true&sslmode=none)
it's ok.

the parameter "sslmode" seems no longer exists in 0.9.8

[chernser]

Good day, @alin50lulin-gif !

Thank you for reporting the issue! sslmode was not properly implemented in V1 and we will return it in V2
Here is tracking issue #2309
Implementation should be ready in next or next next release.

Would you please describe the network path for the application and what kind of certificates do you have?
We plan to support different scenarios but I see may be we missing something with proxy.

Thanks!