Results of 1 - 10 of about 10 for certificate (0.002 sec.)
- Securing Quack with a Reverse Proxy 11691
- By default, the Quack server binds to localhost and speaks plain HTTP. See Security for the rationale behind these configurations. For any deployment beyond local-only, the recommended pattern is the same as for any other HTTP-based databas
...k. Local Test Setup with Caddy You can exercise the full HTTPS path on your own machine using Caddy. Caddy issues itself a certificate for localhost from a local CA and installs the CA root into your system trust store, so DuckDB's HTTPS client trusts the c...as follows: # /etc/nginx/sites-enabled/quack.example.com server { listen 443 ssl http2; server_name quack.example.com; ssl_certificate /etc/letsencrypt/live/quack.example.com/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/quack.example.com/privkey...side, start the server bound to localhost (the default): {:.codebox-server} CALL quack_serve('quack:localhost'); Issue the certificate with certbot --nginx -d quack.example.com . Clients connect over HTTPS automatically. As the default Quack port remains 94... - https://man.mtool.work/duckdb/2.0/quack/setup/reverse_proxy.html
- MySQL Extension 11066
- The mysql extension allows DuckDB to directly read and write data from/to a running MySQL instance. The data can be queried directly from the underlying MySQL database. Data can be loaded from MySQL tables into DuckDB tables, or vice versa.
...the server: disabled, required, verify_ca, verify_identity or preferred (default: preferred ) ssl_ca The path name of the Certificate Authority (CA) certificate file ssl_capath The path name of the directory that contains trusted SSL CA certificate files s...sl_cert The path name of the client public key certificate file ssl_cipher The list of permissible ciphers for SSL encryption ssl_crl The path name of the file containing certificat...e revocation lists ssl_crlpath The path name of the directory that contains files containing certificate revocation lists ssl_key The path name of the client private key file Reading MySQL Tables The tables in the MySQL databas... - https://man.mtool.work/duckdb/2.0/core_extensions/mysql.html
- Reference 10905
- This page lists the functions, settings, and log types exposed by the quack extension . For a tour of the protocol, start with the Overview . Function Reference Server Management Function Description quack_serve(⟨listen_uri⟩, ...) Start a s
...state, hashed client id, cached rows, and query start time. quack_generate_keys(directory = ⟨path⟩) Generate a self-signed certificate ( server.pem ) and private key ( private_key.pem ) for serving over SSL. Defaults to ~/.duckdb/extension_data/quack ; exis...ting key files are not overwritten. Returns the file paths and the certificate fingerprint. quack_identify(name, provider, hostname, region, meta) Set this node's whoami identity fields. Any subset can...cal, else false Serve plain HTTP. Local URIs default to plain HTTP, other URIs to HTTPS. ssl_cert_file VARCHAR (generated) Certificate file used when serving over SSL. If omitted, a self-signed certificate is generated (see quack_generate_keys ). ssl_key_fi... - https://man.mtool.work/duckdb/2.0/quack/reference.html
- HTTP(S) Support 10136
- With the httpfs extension, it is possible to directly query files over the HTTP(S) protocol. This works for all files supported by DuckDB or its various extensions, and provides read-only access. SELECT * FROM 'https://domain.tld/file.exten
...ET http_proxy_password = '⟨password⟩'; Note: You cannot set a proxy scope using the configurations options. Using a Custom Certificate File To use the httpfs extension with a custom certificate file, set the following configuration options prior to loading...the extension: LOAD httpfs; SET ca_cert_file = '⟨certificate_file⟩'; SET enable_server_cert_verification = true; If you would like to disable SSL verification for all HTTP requests us... - https://man.mtool.work/duckdb/2.0/core_extensions/httpfs/https.html
- Azure Extension 9189
- The azure extension lets DuckDB read and write files in Azure Blob Storage and Azure Data Lake Storage (ADLS) Gen2. Installing and Loading The azure extension will be transparently autoloaded on first use from the official extension reposit
...8 MiB (previously 1 MiB). Tip Setting azure_transport_option_type to curl has the following effects: On Linux, it may fix certificate errors such as Problem with the SSL CA cert (path? access rights?) : the extension then looks for the CA bundle in the usu...oxies. On all operating systems, it honors these environment variables: CURL_CA_INFO : path to a PEM encoded file with the certificate authorities for libcurl. It is known to work only on Linux and may fail on other platforms. CURL_CA_PATH : path to a direc...tory of PEM encoded files with the certificate authorities for libcurl. Example: SET azure_http_stats = false; SET azure_read_transfer_concurrency = 5; SET azure_read_tr... - https://man.mtool.work/duckdb/2.0/core_extensions/azure.html
- Security 7633
- This page covers Quack's security posture end to end: what the server exposes, what stays local, the role of a TLS-terminating reverse proxy, and the authentication / authorization callbacks the server runs on every connection and every que
...for localhost communication only adds dependencies for no real benefit. Non-local URIs default to HTTPS with a self-signed certificate (see quack_serve parameters ). Bestpractice For any deployment beyond local-only, do not expose Quack directly to the inte...is the caller? Establishes identity, usually by having the caller supply a credential (e.g., a token, a password, a client certificate). Authorization : may they do this? Establishes whether an already authenticated caller is allowed to run a particular que... - https://man.mtool.work/duckdb/2.0/quack/security.html
- Configuration 7490
- DuckDB has a number of configuration options that can be used to change the behavior of the system. The configuration options can be set using either the SET statement or the PRAGMA statement . They can be reset to their original values usi
...d to use. This memory is allocated once, never freed, and cannot be reduced. VARCHAR 0 bytes ca_cert_file Path to a custom certificate file for self-signed certificates. VARCHAR cache_local_files Whether the external file cache also caches local files. Remo...e enable_optimizer Whether the query optimizer is enabled. BOOLEAN true enable_server_cert_verification Enable server side certificate verification. BOOLEAN false enable_view_dependencies Enable created VIEWs to create dependencies on the referenced objects...ved in a future release. Name Description Type Default value Scope enable_curl_server_cert_verification Enable server side certificate verification for CURL backend. BOOLEAN true GLOBAL enable_object_cache Deprecated legacy setting, does nothing. BOOLEAN fa... - https://man.mtool.work/duckdb/2.0/configuration/overview.html
- Quack on WebAssembly 7490
- CloudFormation Stack We provide an example template for initializing a CloudFormation stack, based on pre-baked public AMI, based on Ubuntu, which will: via DuckDB, install and load Quack, create a randomized token, and do quack_serve on th
...e 0.0.0.0:1294 port. setup via nginx a proxy between 0.0.0.0:1294 and the incoming :443 port obtain a valid TLS certificate via Let's Encrypt All together, this allows to expose the local 0.0.0.0:1294 port to the public EC2 instance IP via HTTPS.... - https://man.mtool.work/duckdb/2.0/quack/setup/quack_wasm.html
- S3 API Support 6864
- The httpfs extension supports reading/writing/ globbing files on object storage servers using the S3 API. S3 offers a standard API to read and write to remote files (while regular http servers, predating S3, do not offer a common write API)
..., path for R2 and GCS USE_SSL Whether to use HTTPS or HTTP S3 , GCS , R2 BOOLEAN true VERIFY_SSL Whether to verify the SSL certificate of the server S3 , GCS , R2 BOOLEAN true ACCOUNT_ID The R2 account ID to use for generating the endpoint URL R2 STRING - K... - https://man.mtool.work/duckdb/2.0/core_extensions/httpfs/s3api.html
- Quack Remote Protocol 6864
- The Quack extension turns a DuckDB instance into a server that other DuckDB instances (clients) can connect to over HTTP. This page covers the protocol at a glance and walks through basic usage on both sides of the wire. For the full list o
...ck_serve('quack:0.0.0.0:9494', allow_other_hostname = true); Non-local servers serve HTTPS by default, using a self-signed certificate unless you pass ssl_cert_file and ssl_key_file (see the Reference ). For production deployments, we recommend binding the... - https://man.mtool.work/duckdb/2.0/quack/overview.html
PREV
1
NEXT
DuckDB 2.0 Documentation / man.mtool.work