If you are self-hosting MariaDB, upgrading to latest LTS version will make TLS much esier.