How to establish SSL connection to MySQL server

[whataboutpereira]

Trying to connect to MySQL server with SSL but it fails with:

table-passwd[67181]: debug: (re)connecting
table-passwd[67181]: warn: mysql_real_connect: Connections using insecure transport are prohibited while --require_secure_transport=ON.
table-passwd[67181]: fatal: could not connect
lookup: table-proc: getline: Connection reset by peer

Settings in /etc/my.cnf have no effect:

[client]
ssl-ca=/path/to/certs/ca.pem
ssl-cert=/path/to/certs/client-cert.pem
ssl-key=/path/to/certs/client-key.pem

This is happening on AlmaLinux 10:

OpenSMTPD 7.8.0p0
table-mysql 1.2.1
mariadb-connector-c

[whataboutpereira]

Trying to force it load the defaults using mysql_options(conf->db, MYSQL_READ_DEFAULT_FILE, "") didn't help either.

So I ended up with this patch that seems to work.

--- table_mysql.c.orig	2024-05-14 11:38:39.000000000 +0000
+++ table_mysql.c	2025-12-26 10:17:19.913187792 +0000
@@ -254,6 +254,7 @@
 #endif
 	size_t	 i;
 	char	*host, *username, *password, *database, *q;
+	char	*ssl_key, *ssl_cert, *ssl_ca, *ssl_capath, *ssl_cipher;
 
 	log_debug("debug: (re)connecting");
 
@@ -264,6 +265,12 @@
 	username = dict_get(&conf->conf, "username");
 	database = dict_get(&conf->conf, "database");
 	password = dict_get(&conf->conf, "password");
+	
+	ssl_key = dict_get(&conf->conf, "ssl_key");
+	ssl_cert = dict_get(&conf->conf, "ssl_cert");
+	ssl_ca = dict_get(&conf->conf, "ssl_ca");
+	ssl_capath = dict_get(&conf->conf, "ssl_capath");
+	ssl_cipher = dict_get(&conf->conf, "ssl_cipher");
 
 	conf->db = mysql_init(NULL);
 	if (conf->db == NULL) {
@@ -277,6 +284,8 @@
 		goto end;
 	}
 
+	mysql_ssl_set(conf->db, ssl_key, ssl_cert, ssl_ca, ssl_capath, ssl_cipher);
+
 	if (!mysql_real_connect(conf->db, host, username, password, database,
 	    0, NULL, 0)) {
 		log_warnx("warn: mysql_real_connect: %s", mysql_error(conf->db));

ssl.patch