Can't configure self signed SSL certificate for Digital Ocean Postgres

[flobaader]

Hi,

is it possible to configure NocoDB with a self signed SSL database (like the postgres provided by DigitalOcean)?

This is my current config

{
  "client": "pg",
  "connection": {
    "host": "HOST",
    "port": "PORT",
    "user": "USER",
    "password": "PASSWORD",
    "database": "DB",
    "ssl": "true",
  }

The knex docs suggest the following approach

{
   "ssl" : {
    "rejectUnauthorized": "false" // this does not work
  }

}

This is also not working

{
    "rejectUnauthorized": "false" // this does not work
}

NocoDB used as docker : true
NocoDB version :
Database used in NC_DB URL : pg
Project was created by clicking : New Project by connecting to external database
Database on which spreadsheet is created : pg

[o1lab]

Using knexjs could you make a successful connection to this dB and let us know what helped. There is an issue open for ssl it might be duplicate of this

There was another user faced issue with digital ocean. See latest discussions in github. I guess it's not the same in your case though.

[flobaader]

Okay I solved my problem by adding the following env var to the nocodb container
NODE_TLS_REJECT_UNAUTHORIZED: "0"

One strange behavior is that I cannot use "non-ssl" databases now, as nocodb always tries to use SSL for each database.

[o1lab]

NODE_TLS_REJECT_UNAUTHORIZED: "0"

Ah, remember encountering this for another customer.

Found this : https://stackoverflow.com/questions/45088006/nodejs-error-self-signed-certificate-in-certificate-chain

[pranavxc]

In your example you are providing a non-empty string value that will be always truthy instead, you have to use a boolean value. So it will treat it as true maybe that caused the problem in your case.

Change

"ssl" : {
  "rejectUnauthorized": "false"
}

to

"ssl" : {
  "rejectUnauthorized": false
}

[sudermanjr]

Can verify, that works for me in the connection JSON

[dstala]

@flobaader if you still have some issues, do reopen this thread. I hope the solution provided by @pranavxc helps here