If you use the System Truststore for tls connection, all certificates are accepted

[mariadb]

ssl_ca=/tls/ca-cert.pem

ssl_cert=/tls/server-cert.pem

ssl_key=/tls/server-key.pem

require_secure_transport=ON

        //System.setProperty("javax.net.ssl.trustStore", "./truststore.jks");

        //System.setProperty("javax.net.ssl.trustStorePassword", "jkspw");

        Properties connConfig = new Properties();

        connConfig.setProperty("user", "root");

        connConfig.setProperty("password", "rootpw");

        connConfig.setProperty("sslMode", "verify-full");

        try (Connection conn = DriverManager.getConnection("jdbc:mariadb://192.168.28.164:3306", connConfig)) {

            try (Statement stmt = conn.createStatement()) {

                try (ResultSet rs = stmt.executeQuery("SHOW VARIABLES LIKE 'have_ssl';")) {

                    rs.first();

                    System.out.println(rs.getString(2)); 

                }

            }

        }