Skip to content

OVH hosted PostgreSQL (Error: self-signed certificate in certificate chain) #16193

Closed
Closed
OVH hosted PostgreSQL (Error: self-signed certificate in certificate chain)#16193
Labels
converted to discussionWorkaround label for excluding discussion-converted issue

Description

@spirillen
spirillen
opened on Jun 15, 2025

When trying to use OVH hosted postgreSQL (17) and have moved the database I get the following error in the logs ans matrix fails to start, SSL in mandatory by OWH

Systemd logs 

Jun 15 15:28:11 ns3109441 systemd[1]: Started Misskey daemon.
Jun 15 15:28:11 ns3109441 "matrix.rocks"[1125174]: npm warn Unknown project config "shell-emulator". This will stop working in the next major version of npm.
Jun 15 15:28:11 ns3109441 "matrix.rocks"[1125174]: > misskey@2025.6.0 start
Jun 15 15:28:11 ns3109441 "matrix.rocks"[1125174]: > pnpm check:connect && cd packages/backend && node ./built/boot/entry.js
Jun 15 15:28:12 ns3109441 "matrix.rocks"[1125186]: > misskey@2025.6.0 check:connect /home/misskey/misskey
Jun 15 15:28:12 ns3109441 "matrix.rocks"[1125186]: > cd packages/backend && pnpm check:connect
Jun 15 15:28:12 ns3109441 "matrix.rocks"[1125202]: > backend@ check:connect /home/misskey/misskey/packages/backend
Jun 15 15:28:12 ns3109441 "matrix.rocks"[1125202]: > node ./scripts/check_connect.js
Jun 15 15:28:13 ns3109441 "matrix.rocks"[1125218]: node:internal/modules/run_main:123
Jun 15 15:28:13 ns3109441 "matrix.rocks"[1125218]:     triggerUncaughtException(
Jun 15 15:28:13 ns3109441 "matrix.rocks"[1125218]:     ^
Jun 15 15:28:13 ns3109441 "matrix.rocks"[1125218]: Error: self-signed certificate in certificate chain
Jun 15 15:28:13 ns3109441 "matrix.rocks"[1125218]:     at TLSSocket.onConnectSecure (node:_tls_wrap:1679:34)
Jun 15 15:28:13 ns3109441 "matrix.rocks"[1125218]:     at TLSSocket.emit (node:events:518:28)
Jun 15 15:28:13 ns3109441 "matrix.rocks"[1125218]:     at TLSSocket._finishInit (node:_tls_wrap:1078:8)
Jun 15 15:28:13 ns3109441 "matrix.rocks"[1125218]:     at ssl.onhandshakedone (node:_tls_wrap:864:12) {
Jun 15 15:28:13 ns3109441 "matrix.rocks"[1125218]:   code: 'SELF_SIGNED_CERT_IN_CHAIN'
Jun 15 15:28:13 ns3109441 "matrix.rocks"[1125218]: }
Jun 15 15:28:13 ns3109441 "matrix.rocks"[1125218]: Node.js v22.16.0
Jun 15 15:28:13 ns3109441 "matrix.rocks"[1125202]:  ELIFECYCLE  Command failed with exit code 1.
Jun 15 15:28:13 ns3109441 "matrix.rocks"[1125186]:  ELIFECYCLE  Command failed with exit code 1.
Jun 15 15:28:13 ns3109441 systemd[1]: matrix.rocks.service: Main process exited, code=exited, status=1/FAILURE
Jun 15 15:28:13 ns3109441 systemd[1]: matrix.rocks.service: Failed with result 'exit-code'.
Jun 15 15:28:13 ns3109441 systemd[1]: matrix.rocks.service: Consumed 1.962s CPU time.
Jun 15 15:28:13 ns3109441 systemd[1]: matrix.rocks.service: Scheduled restart job, restart counter is at 3.
Jun 15 15:28:13 ns3109441 systemd[1]: Stopped Misskey daemon.
Jun 15 15:28:13 ns3109441 systemd[1]: matrix.rocks.service: Consumed 1.962s CPU time.
Jun 15 15:28:13 ns3109441 systemd[1]: Started Misskey daemon.
Jun 15 15:28:13 ns3109441 "matrix.rocks"[1125231]: npm warn Unknown project config "shell-emulator". This will stop working in the next major version of npm.
Jun 15 15:28:13 ns3109441 "matrix.rocks"[1125231]: > misskey@2025.6.0 start
Jun 15 15:28:13 ns3109441 "matrix.rocks"[1125231]: > pnpm check:connect && cd packages/backend && node ./built/boot/entry.js
Jun 15 15:28:13 ns3109441 "matrix.rocks"[1125243]: > misskey@2025.6.0 check:connect /home/misskey/misskey
Jun 15 15:28:13 ns3109441 "matrix.rocks"[1125243]: > cd packages/backend && pnpm check:connect
Jun 15 15:28:14 ns3109441 "matrix.rocks"[1125259]: > backend@ check:connect /home/misskey/misskey/packages/backend
Jun 15 15:28:14 ns3109441 "matrix.rocks"[1125259]: > node ./scripts/check_connect.js
Jun 15 15:28:15 ns3109441 "matrix.rocks"[1125275]: node:internal/modules/run_main:123
Jun 15 15:28:15 ns3109441 "matrix.rocks"[1125275]:     triggerUncaughtException(
Jun 15 15:28:15 ns3109441 "matrix.rocks"[1125275]:     ^
Jun 15 15:28:15 ns3109441 "matrix.rocks"[1125275]: Error: self-signed certificate in certificate chain
Jun 15 15:28:15 ns3109441 "matrix.rocks"[1125275]:     at TLSSocket.onConnectSecure (node:_tls_wrap:1679:34)
Jun 15 15:28:15 ns3109441 "matrix.rocks"[1125275]:     at TLSSocket.emit (node:events:518:28)
Jun 15 15:28:15 ns3109441 "matrix.rocks"[1125275]:     at TLSSocket._finishInit (node:_tls_wrap:1078:8)
Jun 15 15:28:15 ns3109441 "matrix.rocks"[1125275]:     at ssl.onhandshakedone (node:_tls_wrap:864:12) {
Jun 15 15:28:15 ns3109441 "matrix.rocks"[1125275]:   code: 'SELF_SIGNED_CERT_IN_CHAIN'
Jun 15 15:28:15 ns3109441 "matrix.rocks"[1125275]: }
Jun 15 15:28:15 ns3109441 "matrix.rocks"[1125275]: Node.js v22.16.0
Jun 15 15:28:15 ns3109441 "matrix.rocks"[1125259]:  ELIFECYCLE  Command failed with exit code 1.
Jun 15 15:28:15 ns3109441 "matrix.rocks"[1125243]:  ELIFECYCLE  Command failed with exit code 1.
Jun 15 15:28:15 ns3109441 systemd[1]: matrix.rocks.service: Main process exited, code=exited, status=1/FAILURE
Jun 15 15:28:15 ns3109441 systemd[1]: matrix.rocks.service: Failed with result 'exit-code'.
Jun 15 15:28:15 ns3109441 systemd[1]: matrix.rocks.service: Consumed 1.990s CPU time.
Jun 15 15:28:15 ns3109441 systemd[1]: matrix.rocks.service: Scheduled restart job, restart counter is at 4.
Jun 15 15:28:15 ns3109441 systemd[1]: Stopped Misskey daemon.
Jun 15 15:28:15 ns3109441 systemd[1]: matrix.rocks.service: Consumed 1.990s CPU time.
Jun 15 15:28:15 ns3109441 systemd[1]: Started Misskey daemon.
Jun 15 15:28:15 ns3109441 "matrix.rocks"[1125289]: npm warn Unknown project config "shell-emulator". This will stop working in the next major version of npm.
Jun 15 15:28:15 ns3109441 "matrix.rocks"[1125289]: > misskey@2025.6.0 start
Jun 15 15:28:15 ns3109441 "matrix.rocks"[1125289]: > pnpm check:connect && cd packages/backend && node ./built/boot/entry.js
Jun 15 15:28:15 ns3109441 "matrix.rocks"[1125302]: > misskey@2025.6.0 check:connect /home/misskey/misskey
Jun 15 15:28:15 ns3109441 "matrix.rocks"[1125302]: > cd packages/backend && pnpm check:connect
Jun 15 15:28:15 ns3109441 "matrix.rocks"[1125318]: > backend@ check:connect /home/misskey/misskey/packages/backend
Jun 15 15:28:15 ns3109441 "matrix.rocks"[1125318]: > node ./scripts/check_connect.js
Jun 15 15:28:16 ns3109441 "matrix.rocks"[1125334]: node:internal/modules/run_main:123
Jun 15 15:28:16 ns3109441 "matrix.rocks"[1125334]:     triggerUncaughtException(
Jun 15 15:28:16 ns3109441 "matrix.rocks"[1125334]:     ^
Jun 15 15:28:16 ns3109441 "matrix.rocks"[1125334]: Error: self-signed certificate in certificate chain
Jun 15 15:28:16 ns3109441 "matrix.rocks"[1125334]:     at TLSSocket.onConnectSecure (node:_tls_wrap:1679:34)
Jun 15 15:28:16 ns3109441 "matrix.rocks"[1125334]:     at TLSSocket.emit (node:events:518:28)
Jun 15 15:28:16 ns3109441 "matrix.rocks"[1125334]:     at TLSSocket._finishInit (node:_tls_wrap:1078:8)
Jun 15 15:28:16 ns3109441 "matrix.rocks"[1125334]:     at ssl.onhandshakedone (node:_tls_wrap:864:12) {
Jun 15 15:28:16 ns3109441 "matrix.rocks"[1125334]:   code: 'SELF_SIGNED_CERT_IN_CHAIN'
Jun 15 15:28:16 ns3109441 "matrix.rocks"[1125334]: }
Jun 15 15:28:16 ns3109441 "matrix.rocks"[1125334]: Node.js v22.16.0
Jun 15 15:28:16 ns3109441 "matrix.rocks"[1125318]:  ELIFECYCLE  Command failed with exit code 1.
Jun 15 15:28:16 ns3109441 "matrix.rocks"[1125302]:  ELIFECYCLE  Command failed with exit code 1.
Jun 15 15:28:16 ns3109441 systemd[1]: matrix.rocks.service: Main process exited, code=exited, status=1/FAILURE
Jun 15 15:28:16 ns3109441 systemd[1]: matrix.rocks.service: Failed with result 'exit-code'.
Jun 15 15:28:16 ns3109441 systemd[1]: matrix.rocks.service: Consumed 1.985s CPU time.
Jun 15 15:28:17 ns3109441 systemd[1]: matrix.rocks.service: Scheduled restart job, restart counter is at 5.
Jun 15 15:28:17 ns3109441 systemd[1]: Stopped Misskey daemon.
Jun 15 15:28:17 ns3109441 systemd[1]: matrix.rocks.service: Consumed 1.985s CPU time.
Jun 15 15:28:17 ns3109441 systemd[1]: matrix.rocks.service: Start request repeated too quickly.
Jun 15 15:28:17 ns3109441 systemd[1]: matrix.rocks.service: Failed with result 'exit-code'.
Jun 15 15:28:17 ns3109441 systemd[1]: Failed to start Misskey daemon.

Anyone who can help me to make MissKey allow self signed certificats, how to add it to the trust, or skip validating the cert?

``yml

PostgreSQL

db:
host: postgresql-uniq-hostname.database.cloud.ovh.net
port: 20184
db : DB_name
user: USERNAME
pass: PASSWORD
disableCache: true
extra:
ssl: true

dbReplications: true
dbSlaves:

host: hostname
port: 5432
db: DB_name
user: USERNAME
pass: PASSWORD
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    converted to discussionWorkaround label for excluding discussion-converted issue

    Type

    No type

    Projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions