{"action":"closed","issue":{"url":"https://api.github.com/repos/yandex/ClickHouse/issues/3033","repository_url":"https://api.github.com/repos/yandex/ClickHouse","labels_url":"https://api.github.com/repos/yandex/ClickHouse/issues/3033/labels{/name}","comments_url":"https://api.github.com/repos/yandex/ClickHouse/issues/3033/comments","events_url":"https://api.github.com/repos/yandex/ClickHouse/issues/3033/events","html_url":"https://github.com/yandex/ClickHouse/issues/3033","id":356831657,"node_id":"MDU6SXNzdWUzNTY4MzE2NTc=","number":3033,"title":"issue with tcp_ssl_port","user":{"login":"Farfaday","id":1902645,"node_id":"MDQ6VXNlcjE5MDI2NDU=","avatar_url":"https://avatars0.githubusercontent.com/u/1902645?v=4","gravatar_id":"","url":"https://api.github.com/users/Farfaday","html_url":"https://github.com/Farfaday","followers_url":"https://api.github.com/users/Farfaday/followers","following_url":"https://api.github.com/users/Farfaday/following{/other_user}","gists_url":"https://api.github.com/users/Farfaday/gists{/gist_id}","starred_url":"https://api.github.com/users/Farfaday/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Farfaday/subscriptions","organizations_url":"https://api.github.com/users/Farfaday/orgs","repos_url":"https://api.github.com/users/Farfaday/repos","events_url":"https://api.github.com/users/Farfaday/events{/privacy}","received_events_url":"https://api.github.com/users/Farfaday/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":2,"created_at":"2018-09-04T14:18:13Z","updated_at":"2018-09-04T15:39:39Z","closed_at":"2018-09-04T15:39:39Z","author_association":"NONE","body":"Hi,\r\nI am trying to use\r\n`<tcp_ssl_port>9440</tcp_ssl_port> `\r\nwith version 1.1.54388 but I could not find much documentation about that feature.\r\n\r\nI am also using \r\n```\r\n    <https_port>8443</https_port>\r\n    <!-- Used with https_port and tcp_ssl_port. Full ssl options list: https://github.com/ClickHouse-Extras/poco/blob/master/NetSSL_OpenSSL/include/Poco/Net/SSLManager.h#L71 -->\r\n    <openSSL>\r\n        <server> <!-- Used for https server AND secure tcp port -->\r\n            <!-- openssl req -subj \"/CN=localhost\" -new -newkey rsa:2048 -days 365 -nodes -x509 -keyout /etc/clickhouse-server/server.key -out /etc/clickhouse-server/server.crt -->\r\n            <certificateFile>/etc/clickhouse-server/server.crt</certificateFile>\r\n            <privateKeyFile>/etc/clickhouse-server/server.key</privateKeyFile>\r\n            <!-- openssl dhparam -out /etc/clickhouse-server/dhparam.pem 4096 -->\r\n            <dhParamsFile>/etc/clickhouse-server/dhparam.pem</dhParamsFile>\r\n            <verificationMode>none</verificationMode>\r\n            <loadDefaultCAFile>true</loadDefaultCAFile>\r\n            <cacheSessions>true</cacheSessions>\r\n            <disableProtocols>sslv2,sslv3</disableProtocols>\r\n            <preferServerCiphers>true</preferServerCiphers>\r\n        </server>\r\n\r\n        <client> <!-- Used for connecting to https dictionary source -->\r\n            <loadDefaultCAFile>true</loadDefaultCAFile>\r\n            <cacheSessions>true</cacheSessions>\r\n            <disableProtocols>sslv2,sslv3</disableProtocols>\r\n            <preferServerCiphers>true</preferServerCiphers>\r\n            <!-- Use for self-signed: <verificationMode>none</verificationMode> -->\r\n            <invalidCertificateHandler>\r\n                <!-- Use for self-signed: <name>AcceptCertificateHandler</name> -->\r\n                <name>RejectCertificateHandler</name>\r\n            </invalidCertificateHandler>\r\n        </client>\r\n    </openSSL>\r\n\r\n```\r\nwhich is working, I can connect to https/myhost:8443 with HTTPS.\r\n\r\nI tried removing\r\n` <tcp_port>9000</tcp_port>` but then I get \r\n\r\n```\r\n2018.09.04 12:44:48.560618 [ 37 ] <Error> raw_events.Event_Tracking (ReplicatedMergeTreeRestartingThread): void DB::ReplicatedMergeTreeRestartingThread::run(): Poco::Exceptio\r\nn. Code: 1000, e.code() = 0, e.displayText() = Not found: tcp_port, e.what() = Not found\r\n```\r\nHaving both entries \r\n```\r\n<tcp_port>9000</tcp_port>\r\n<tcp_ssl_port>9440</tcp_ssl_port>\r\n```\r\nseems to do nothing, port 9440 does not appear in netstat or in clickhouse's log files.\r\n\r\nDo you have any hints ?\r\nMany Thanks !\r\n"}}
{"actor":{"display_login":"VadimPE"}}