> If you use MariaDB the TLS certificates will be created automatically, > see https://optimizedbyotto.com/post/zero-configuration-tls-mariadb-11.8/
To be more precise, the latest MariaDB not only creates the certs, but also handles checking their authenticity, eliminating the need to run tinyca or any other Certificate Authority or other key external certificate trust system. MySQL does not have this, and with MySQL you still need to do the CA management.

