ClickHouse/tests/integration/test_keeper_internal_secure/configs/ssl_conf.xml

<clickhouse>
    <openSSL>
        <server>
            <certificateFile>/etc/clickhouse-server/config.d/server.crt</certificateFile>
            <privateKeyFile>/etc/clickhouse-server/config.d/server.key</privateKeyFile>
            <caConfig>/etc/clickhouse-server/config.d/rootCA.pem</caConfig>
            <loadDefaultCAFile>true</loadDefaultCAFile>
            <verificationMode>none</verificationMode>
            <cacheSessions>true</cacheSessions>
            <disableProtocols>sslv2,sslv3</disableProtocols>
            <preferServerCiphers>true</preferServerCiphers>
        </server>
    </openSSL>
</clickhouse>