100688 -

Instead of relying on auto-generated system certificates, use a manually configured Public Key Infrastructure (PKI) to ensure certificates do not change unexpectedly on service restarts.

MySQL Bug #100688 identifies a problem where clients are unable to connect to a remote MySQL server when using certain public or CA-signed certificates. This typically occurs because the system fails to correctly validate the certificate chain when the server and client reside on different remote hosts. 100688

Because the system automatically manages these files upon restart, manual fixes like static file replacement are often overwritten or rendered ineffective. Recommended Resolutions 100688

If the service is regenerating files, use a systemd override to specify exact execution environments that don't interfere with your SSL setup. 100688