ClickHouse/dbms/src/Server/clickhouse-client.xml

<!-- Config set into /etc/clickhouse-client/. It's used if no other configs are found. -->
<config>
    <openSSL>
        <client> <!-- Used for connection to server's secure tcp port -->
            <loadDefaultCAFile>true</loadDefaultCAFile>
            <cacheSessions>true</cacheSessions>
            <disableProtocols>sslv2,sslv3</disableProtocols>
            <preferServerCiphers>true</preferServerCiphers>
            <!-- Use for self-signed: <verificationMode>none</verificationMode> -->
            <invalidCertificateHandler>
                <!-- Use for self-signed: <name>AcceptCertificateHandler</name> -->
                <name>RejectCertificateHandler</name>
            </invalidCertificateHandler>
        </client>
    </openSSL>
    <prompt_by_server_display_name>
        <default>%display_name% :)</default>
        <test>%display_name% [green]:)[/green]</test>
        <production>%display_name% [red]:)[/red]</production> 
    </prompt_by_server_display_name>
</config>