OVH hosted PostgreSQL (Error: self-signed certificate in certificate chain)

[spirillen]

When trying to use OVH hosted postgreSQL (17) and have moved the database I get the following error in the logs ans matrix fails to start, SSL in mandatory by OWH

Systemd logs

Jun 15 15:28:11 ns3109441 systemd[1]: Started Misskey daemon.
Jun 15 15:28:11 ns3109441 "matrix.rocks"[1125174]: npm warn Unknown project config "shell-emulator". This will stop working in the next major version of npm.
Jun 15 15:28:11 ns3109441 "matrix.rocks"[1125174]: > misskey@2025.6.0 start
Jun 15 15:28:11 ns3109441 "matrix.rocks"[1125174]: > pnpm check:connect && cd packages/backend && node ./built/boot/entry.js
Jun 15 15:28:12 ns3109441 "matrix.rocks"[1125186]: > misskey@2025.6.0 check:connect /home/misskey/misskey
Jun 15 15:28:12 ns3109441 "matrix.rocks"[1125186]: > cd packages/backend && pnpm check:connect
Jun 15 15:28:12 ns3109441 "matrix.rocks"[1125202]: > backend@ check:connect /home/misskey/misskey/packages/backend
Jun 15 15:28:12 ns3109441 "matrix.rocks"[1125202]: > node ./scripts/check_connect.js
Jun 15 15:28:13 ns3109441 "matrix.rocks"[1125218]: node:internal/modules/run_main:123
Jun 15 15:28:13 ns3109441 "matrix.rocks"[1125218]:     triggerUncaughtException(
Jun 15 15:28:13 ns3109441 "matrix.rocks"[1125218]:     ^
Jun 15 15:28:13 ns3109441 "matrix.rocks"[1125218]: Error: self-signed certificate in certificate chain
Jun 15 15:28:13 ns3109441 "matrix.rocks"[1125218]:     at TLSSocket.onConnectSecure (node:_tls_wrap:1679:34)
Jun 15 15:28:13 ns3109441 "matrix.rocks"[1125218]:     at TLSSocket.emit (node:events:518:28)
Jun 15 15:28:13 ns3109441 "matrix.rocks"[1125218]:     at TLSSocket._finishInit (node:_tls_wrap:1078:8)
Jun 15 15:28:13 ns3109441 "matrix.rocks"[1125218]:     at ssl.onhandshakedone (node:_tls_wrap:864:12) {
Jun 15 15:28:13 ns3109441 "matrix.rocks"[1125218]:   code: 'SELF_SIGNED_CERT_IN_CHAIN'
Jun 15 15:28:13 ns3109441 "matrix.rocks"[1125218]: }
Jun 15 15:28:13 ns3109441 "matrix.rocks"[1125218]: Node.js v22.16.0
Jun 15 15:28:13 ns3109441 "matrix.rocks"[1125202]:  ELIFECYCLE  Command failed with exit code 1.
Jun 15 15:28:13 ns3109441 "matrix.rocks"[1125186]:  ELIFECYCLE  Command failed with exit code 1.
Jun 15 15:28:13 ns3109441 systemd[1]: matrix.rocks.service: Main process exited, code=exited, status=1/FAILURE
Jun 15 15:28:13 ns3109441 systemd[1]: matrix.rocks.service: Failed with result 'exit-code'.
Jun 15 15:28:13 ns3109441 systemd[1]: matrix.rocks.service: Consumed 1.962s CPU time.
Jun 15 15:28:13 ns3109441 systemd[1]: matrix.rocks.service: Scheduled restart job, restart counter is at 3.
Jun 15 15:28:13 ns3109441 systemd[1]: Stopped Misskey daemon.
Jun 15 15:28:13 ns3109441 systemd[1]: matrix.rocks.service: Consumed 1.962s CPU time.
Jun 15 15:28:13 ns3109441 systemd[1]: Started Misskey daemon.
Jun 15 15:28:13 ns3109441 "matrix.rocks"[1125231]: npm warn Unknown project config "shell-emulator". This will stop working in the next major version of npm.
Jun 15 15:28:13 ns3109441 "matrix.rocks"[1125231]: > misskey@2025.6.0 start
Jun 15 15:28:13 ns3109441 "matrix.rocks"[1125231]: > pnpm check:connect && cd packages/backend && node ./built/boot/entry.js
Jun 15 15:28:13 ns3109441 "matrix.rocks"[1125243]: > misskey@2025.6.0 check:connect /home/misskey/misskey
Jun 15 15:28:13 ns3109441 "matrix.rocks"[1125243]: > cd packages/backend && pnpm check:connect
Jun 15 15:28:14 ns3109441 "matrix.rocks"[1125259]: > backend@ check:connect /home/misskey/misskey/packages/backend
Jun 15 15:28:14 ns3109441 "matrix.rocks"[1125259]: > node ./scripts/check_connect.js
Jun 15 15:28:15 ns3109441 "matrix.rocks"[1125275]: node:internal/modules/run_main:123
Jun 15 15:28:15 ns3109441 "matrix.rocks"[1125275]:     triggerUncaughtException(
Jun 15 15:28:15 ns3109441 "matrix.rocks"[1125275]:     ^
Jun 15 15:28:15 ns3109441 "matrix.rocks"[1125275]: Error: self-signed certificate in certificate chain
Jun 15 15:28:15 ns3109441 "matrix.rocks"[1125275]:     at TLSSocket.onConnectSecure (node:_tls_wrap:1679:34)
Jun 15 15:28:15 ns3109441 "matrix.rocks"[1125275]:     at TLSSocket.emit (node:events:518:28)
Jun 15 15:28:15 ns3109441 "matrix.rocks"[1125275]:     at TLSSocket._finishInit (node:_tls_wrap:1078:8)
Jun 15 15:28:15 ns3109441 "matrix.rocks"[1125275]:     at ssl.onhandshakedone (node:_tls_wrap:864:12) {
Jun 15 15:28:15 ns3109441 "matrix.rocks"[1125275]:   code: 'SELF_SIGNED_CERT_IN_CHAIN'
Jun 15 15:28:15 ns3109441 "matrix.rocks"[1125275]: }
Jun 15 15:28:15 ns3109441 "matrix.rocks"[1125275]: Node.js v22.16.0
Jun 15 15:28:15 ns3109441 "matrix.rocks"[1125259]:  ELIFECYCLE  Command failed with exit code 1.
Jun 15 15:28:15 ns3109441 "matrix.rocks"[1125243]:  ELIFECYCLE  Command failed with exit code 1.
Jun 15 15:28:15 ns3109441 systemd[1]: matrix.rocks.service: Main process exited, code=exited, status=1/FAILURE
Jun 15 15:28:15 ns3109441 systemd[1]: matrix.rocks.service: Failed with result 'exit-code'.
Jun 15 15:28:15 ns3109441 systemd[1]: matrix.rocks.service: Consumed 1.990s CPU time.
Jun 15 15:28:15 ns3109441 systemd[1]: matrix.rocks.service: Scheduled restart job, restart counter is at 4.
Jun 15 15:28:15 ns3109441 systemd[1]: Stopped Misskey daemon.
Jun 15 15:28:15 ns3109441 systemd[1]: matrix.rocks.service: Consumed 1.990s CPU time.
Jun 15 15:28:15 ns3109441 systemd[1]: Started Misskey daemon.
Jun 15 15:28:15 ns3109441 "matrix.rocks"[1125289]: npm warn Unknown project config "shell-emulator". This will stop working in the next major version of npm.
Jun 15 15:28:15 ns3109441 "matrix.rocks"[1125289]: > misskey@2025.6.0 start
Jun 15 15:28:15 ns3109441 "matrix.rocks"[1125289]: > pnpm check:connect && cd packages/backend && node ./built/boot/entry.js
Jun 15 15:28:15 ns3109441 "matrix.rocks"[1125302]: > misskey@2025.6.0 check:connect /home/misskey/misskey
Jun 15 15:28:15 ns3109441 "matrix.rocks"[1125302]: > cd packages/backend && pnpm check:connect
Jun 15 15:28:15 ns3109441 "matrix.rocks"[1125318]: > backend@ check:connect /home/misskey/misskey/packages/backend
Jun 15 15:28:15 ns3109441 "matrix.rocks"[1125318]: > node ./scripts/check_connect.js
Jun 15 15:28:16 ns3109441 "matrix.rocks"[1125334]: node:internal/modules/run_main:123
Jun 15 15:28:16 ns3109441 "matrix.rocks"[1125334]:     triggerUncaughtException(
Jun 15 15:28:16 ns3109441 "matrix.rocks"[1125334]:     ^
Jun 15 15:28:16 ns3109441 "matrix.rocks"[1125334]: Error: self-signed certificate in certificate chain
Jun 15 15:28:16 ns3109441 "matrix.rocks"[1125334]:     at TLSSocket.onConnectSecure (node:_tls_wrap:1679:34)
Jun 15 15:28:16 ns3109441 "matrix.rocks"[1125334]:     at TLSSocket.emit (node:events:518:28)
Jun 15 15:28:16 ns3109441 "matrix.rocks"[1125334]:     at TLSSocket._finishInit (node:_tls_wrap:1078:8)
Jun 15 15:28:16 ns3109441 "matrix.rocks"[1125334]:     at ssl.onhandshakedone (node:_tls_wrap:864:12) {
Jun 15 15:28:16 ns3109441 "matrix.rocks"[1125334]:   code: 'SELF_SIGNED_CERT_IN_CHAIN'
Jun 15 15:28:16 ns3109441 "matrix.rocks"[1125334]: }
Jun 15 15:28:16 ns3109441 "matrix.rocks"[1125334]: Node.js v22.16.0
Jun 15 15:28:16 ns3109441 "matrix.rocks"[1125318]:  ELIFECYCLE  Command failed with exit code 1.
Jun 15 15:28:16 ns3109441 "matrix.rocks"[1125302]:  ELIFECYCLE  Command failed with exit code 1.
Jun 15 15:28:16 ns3109441 systemd[1]: matrix.rocks.service: Main process exited, code=exited, status=1/FAILURE
Jun 15 15:28:16 ns3109441 systemd[1]: matrix.rocks.service: Failed with result 'exit-code'.
Jun 15 15:28:16 ns3109441 systemd[1]: matrix.rocks.service: Consumed 1.985s CPU time.
Jun 15 15:28:17 ns3109441 systemd[1]: matrix.rocks.service: Scheduled restart job, restart counter is at 5.
Jun 15 15:28:17 ns3109441 systemd[1]: Stopped Misskey daemon.
Jun 15 15:28:17 ns3109441 systemd[1]: matrix.rocks.service: Consumed 1.985s CPU time.
Jun 15 15:28:17 ns3109441 systemd[1]: matrix.rocks.service: Start request repeated too quickly.
Jun 15 15:28:17 ns3109441 systemd[1]: matrix.rocks.service: Failed with result 'exit-code'.
Jun 15 15:28:17 ns3109441 systemd[1]: Failed to start Misskey daemon.

Anyone who can help me to make MissKey allow self signed certificats, how to add it to the trust, or skip validating the cert?

# PostgreSQL
db:
  host: postgresql-uniq-hostname.database.cloud.ovh.net
  port: 20184
  db  : DB_name
  user: USERNAME
  pass: PASSWORD
  disableCache: true
  extra:
    ssl: true

dbReplications: true
dbSlaves:
  -
    host: hostname
    port: 5432
    db: DB_name
    user: USERNAME
    pass: PASSWORD

[AmaseCocoa]

I checked the TypeORM documentation. I have not been able to verify this because I do not have the environment, but to allow self-signed certificates, it would be possible to add the SSL option to this file and refer to the node-postgres documentation to reference the certificate.