> ## Documentation Index
> Fetch the complete documentation index at: https://private-7c7dfe99-mintlify-fbfa8bee.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# Resolving SSL Certificate Verify Error in ClickHouse

> Learn how to resolve the SSL Exception CERTIFICATE_VERIFY_FAILED error.

## Resolving code 210 SSL certificate verify error in ClickHouse

The error is typically reported as:

`Code: 210. DB::NetException: SSL Exception: error:1000007d:SSL routines:OPENSSL_internal:CERTIFICATE_VERIFY_FAILED`

## Cause of the Error

This error occurs while trying to connect to a ClickHouse server using `clickhouse-client`. The cause of the error is either:

* the client configuration file `config.xml` is missing the root certificate in the machine CA default store, or
* there is a self-signed or internal CA certificate that is not configured

## Solution

If using an internal or self-signed CA, configure the CA root certificate in `config.xml` in the client directory (e.g. `/etc/clickhouse-client`) and disable the loading of the default root CA certificates from the default location.

Here is an example configuration:

```xml theme={null}
<openSSL>
    <client>
        <loadDefaultCAFile>false</loadDefaultCAFile>
        <caConfig>/etc/clickhouse-server/certs/marsnet_ca.crt</caConfig>
        <cacheSessions>true</cacheSessions>
        <disableProtocols>sslv2,sslv3</disableProtocols>
        <preferServerCiphers>true</preferServerCiphers>
        <invalidCertificateHandler>
            <name>RejectCertificateHandler</name>
        </invalidCertificateHandler>
    </client>
</openSSL>
```

## Additional resources

View [https://clickhouse.com/docs/interfaces/cli/#configuration\_files](/concepts/features/interfaces/cli#configuration_files)