Control: forwarded -1 https://jira.mariadb.org/browse/MDEV-21835
Note that the upstream MariaDB uses OpenSSL both for building the server and the client. In Debian OpenSSL is forbidden in the current state (or so has e.g. Clint Byrum stated), so in Debian we build using alternatives, which for the server means GnuTLS and for the client WolfSSL (former YaSSL). The long term solution is to wait for OpenSSL 3.0 to be released and build against it (as it has no license issues). The short term solution is to hope for upstream to add support for building the client with the system WolfSSL library.