MariaDB instance has been running well for ages, and suddenly, starting about 30 minutes ago, my apps get this error trying to connect:

# mysql
ERROR 2026 (HY000): Unknown SSL error

My certs have been always under "/etc/my.cnf.d/certs/", generated by LetsEncrypt.
They expire on 2021-11-04, last modified date 2021-08-06.


ssl_cert                        = "/etc/my.cnf.d/certs/fullchain.pem"
ssl_key                         = "/etc/my.cnf.d/certs/privkey.pem"

Looking at the logs, there's nothing that hints anything.
The latest log there is about "InnoDB: Online DDL", long ago.

No recent yum system updates.

How can I investigate the cause of this problem?
From the research I made, the questions are due to setup issues, while in my case it's been working since always, but "suddenly" failed, and I can't see what changed.


UPDATE: I wonder if this related,



On September 30 2021, there will be a small change in how older browsers and devices trust Let’s Encrypt certificates.
DST Root CA X3 will expire on September 30, 2021.

I wonder how can I make MariaDB trust ISRG Root X1!


1 Answer 1


Alright... for those who have the same problem,

Run this if you haven't yet:

# yum update ca-certificates

If you get No packages marked for update, it may have been already run automatically - in my case, it was on Sep 24:
Sep 24 05:00:16 Updated: ca-certificates-2021.2.50-72.el7_9.noarch

And then run in your MySQL instance:


This resolved my problem!

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.