Cannot connect to Postgres via SSL on Metabase Cloud

[pkowalczyk]

I'm trying to connect to a Postgres instance running on GCP using Metabase Cloud.
Unfortunately I cannot specify neither SSL client key, SSL client cert, nor SSL server cert.

All other sensible solutions have such an option:

Redash:

Google Data Studio:

My goal was to use your service, as I think it is the best on market, but I cannot even connect our database.

Previous discussions that I've checked (unfortunately all related to self-hosted Metabase versions):

SSL connection to Postgres with self-signed certificate

I’m trying to evaluate Metabase and to do so I need to connect to a PostgreSQL 9.6 database over SSL using a self-signed certificate. I first tried with the macOS client, but the error message was too vague, so I then downloaded the .jar file so that I could watch the terminal while attempting to connect. The cert and key that I use function with other clients and I’ve chmod 0600'd them. Into the “Additional JDBC connection string options” field, I have tried the following: sslmode=require&ss…

Metabase persistent data Postgres SSL require

Hello, I’ve installed the docker version of metabase and I am using docker-compsoe, I am setting up postgres for production however, I need to connect to the remote database using SSL required parameter. what environment variable should I set? Thanks!

Connecting to postgresql using client certificate and key

Hi, my database connection of type postgresql requires client certificate and key ssl connection. I tried many solutions I found, including adding the certificate to the java keystore, adding the certificate to specific folder, adding the certificate to connection string (using environment variables or JDBC connection options through metabase UI) but no luck. According to this post: SSL connection to Postgres with self-signed certificate And I still get a “PSQException: FATAL: connection requi…

Customizable connection string for application database setup (sslmode)

Hi, I’m trying to set up the metabase application database using our postgres instance. Unfortunately this postgres instance runs in ssl mode which in turn means I have to set the query parameter sslmode=require to get a valid connection string. Is there any mechanism, hack or env var to be set to set additional jdbc options? Setting up a database via the web frontend is no problem it only effects the initialization of the applications meta database in the setup process… BTW: I’m running …

... and others

[flamber]

Hi @pkowalczyk
It's currently not possible connect to Postgres with custom certificates. It is something we have been working on implementing, so certificate handling was available for all the database types we support, but it turned out to be a lot more complicated than we initially thought. I currently don't have a timeline for this.

[pkowalczyk]

Ok, thanks for quick answer.

Any suggestion for a workaround?

[flamber]

@pkowalczyk There are none, otherwise I would have written that. Only workaround is to self-host until we have implemented certificate management in the app.

[pkowalczyk]

Ok, thank you. I will look for different solution.

[yasaichi]

After 3 months, any updates?

[flamber]

@yasaichi We are working on implementing more connection handling in the app. Still unsure if it will be finished in time for v41 or if it will be v42. It's a lot more complicated, when it has to support 15+ different database types across multiple versions.

[yasaichi]

I understood what is hard to deal with. I expect you to finish it as soon as possible.

[kutysam]

Any updates on this?

Otherwise, wouldn't it be advisable to put a note that custom certs are not supported? I believe many devs spent alot of time on workarounds for this.

[flamber]

@kutysam Certificates are support on Postgres, and a couple of other databases coming in v44.

If something doesn't work, then contact support if testing on Cloud or create a new issue with enough steps to reproduce https://github.com/metabase/metabase/issues/new/choose

[kutysam]

Hi, just checking, is this supported on v44 already? I don't see it on the changelog

[flamber]

@kutysam It is supported since v43

[kutysam]

Just want to update, it works perfectly well! Thank you!