From 854f394caeb1a0760a959ee27a258adf0c0aaf27 Mon Sep 17 00:00:00 2001
From: Francis Dupont <fdupont@isc.org>
Date: Wed, 9 Jul 2025 15:35:13 +0200
Subject: [PATCH] [#3927] Updated the default to library one

---
 src/lib/mysql/mysql_connection.cc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/lib/mysql/mysql_connection.cc b/src/lib/mysql/mysql_connection.cc
index cc3476e83b..8d4667183e 100644
--- a/src/lib/mysql/mysql_connection.cc
+++ b/src/lib/mysql/mysql_connection.cc
@@ -131,7 +131,7 @@ MySqlConnection::openDatabase() {
         isc_throw(DbInvalidTimeout, ex.what());
     }
 
-    int ssl_mode(SSL_MODE_DISABLED);
+    int ssl_mode(SSL_MODE_PREFERRED);
     string ssslmode;
     try {
         ssslmode = getParameter("ssl-mode");
-- 
2.47.2