Skip to content

docs(databases): DuckDB Quack SSL Mode, certificate pins and tunnels - #174

Draft
datlechin wants to merge 3 commits into
mainfrom
docs/duckdb-quack-tls-tunnels
Draft

datlechin wants to merge 3 commits into
mainfrom
docs/duckdb-quack-tls-tunnels

Conversation

@datlechin

Copy link
Copy Markdown
Member

Pairs with TableProApp/TablePro#4021; merge after it.

  • DuckDB: the Remote (Quack) SSL Mode, CA Certificate and Certificate Fingerprint fields, a private CA such as mkcert's, the keychain note, tunnels in Remote mode, the required Token, persistent secrets not read, and the new connect messages in Troubleshooting.
  • SSL/TLS, SSH tunneling, connection form and URL pages: DuckDB's row, quack:// sslmode and ssl_fingerprint, and quack+ssh://.

Remote (Quack) connections gain an SSL Mode on General (Automatic, Disabled,
Required (skip verify), Verify Identity, Verify Fingerprint) with CA Certificate
and Certificate Fingerprint, and SSH Tunnel, Cloudflare Tunnel, SOCKS Proxy and
Tunnel Command on the Network tab. The DuckDB page covers the modes, trusting a
private CA, pinning a quack_serve certificate, the mode to pair with a tunnel and
the new connect errors. ssl.mdx, ssh-tunneling.mdx, the transport table and the
URL reference no longer say DuckDB has no SSL Mode or tunnel, and the URL
reference maps sslmode on quack:// and quack+ssh://.

Documents TableProApp/TablePro fix/duckdb-quack-tls.
A quack:// URL carries a pinned certificate as ssl_fingerprint and opens as
Verify Fingerprint with that pin, in quack+ssh:// too. ssl=true or tls=true with
no sslmode now reads as Verify Identity on a quack:// URL. The DuckDB page lists
the refusal a connection gets when it sets SSL Mode and the loaded DuckDB
driver predates the field.
A Remote (Quack) connection takes its token and trust from its own fields: the
session reads no secret saved with CREATE PERSISTENT SECRET, so a persistent S3
secret is not available in its editor either, and CREATE SECRET is the way in.
Token is required, and an empty one is refused with "Token is required".
@mintlify

mintlify Bot commented Nov 3, 2026

Copy link
Copy Markdown

Preview deployment for your docs. Learn more about Mintlify Previews.

Project Status Preview Updated
TablePro 🟢 Ready View Preview Nov 3, 2026, 5:14 PM

💡 Tip: Enable Automations to automatically generate PRs for you.

@mintlify

mintlify Bot commented Nov 3, 2026

Copy link
Copy Markdown

Preview deployment for your docs. Learn more about Mintlify Previews.

Project Status Preview Updated
TablePro 🟡 Building – Nov 3, 2026, 5:13 PM

💡 Tip: Enable Automations to automatically generate PRs for you.

This branch was successfully deployed

1 active deployment
staging — 9f22175f Deployed Nov 3, 2026 by mintlify[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant