Problem with ido-mysql/mariadb: SSL unable to get issuer certificate


I’ve a problem with ido-mysql and mariadb. Without SSL it is working ok (user/pass). If I turn on ssl then I get:
“SSL connection error: unable to get issuer certificate” in icinga2 log
“Aborted connection to db: ‘unconnected’ user: ‘unathenticated’ host ‘myip’ (This connection closed manully without authentification)”

The certs are ok on both sides (same CA etc)
MariaDB shows enabled and configured SSL

What can be the problem?

  • Version used icinga2 2.13.1
  • MariaDB ver 10.5.9
  • Operating System and version - RHEL 8.4 (both hosts)


Can you try connecting to MariaDB using openssl s_client or I think even curl -v could work.