Hi, I'd say that the problem is with mysqld using a different CA certificate from the one specified by the ssl-ca option. I doubt it's the letsencrypt certificate the one being used, correct me if I'm wrong (y can check with e.g. `openssl c_client`).
Could you please: 1. share the ssl config snippet from mysql.cnf? 2. confirm that you don't need the client part to reproduce the problem, as the "CA is self-signed" message is a mysqld log message that is printed before any connection attempt? This is mostly to verify that I correctly understood the problem. 3. Set ssl-capath to /etc/ssl/lets_encrypt/ and see if it behaves differently? Please change the report status back to New after commenting back. Thanks! ** Changed in: mysql-8.0 (Ubuntu) Status: New => Incomplete -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to the bug report. https://bugs.launchpad.net/bugs/1890611 Title: Client cannot connect to remote mysql-server when the latter is configured with ssl parameters using a public CA To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/mysql-8.0/+bug/1890611/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs