[Teleport Database Proxy service to self-hosted MySQL] ERROR 1105 (HY000): Database cannot validate client certificate generated by database service: io.ReadFull(header) failed. err remote error: tls: unknown certificate authority: connection was bad.

[kuanrcl]

Hi,
I am getting error trying to connect to a database using this command "tsh connect mysql-server --db-user=admin --db-name=dbname". Both the teleport and MySQL server are created with the same self-signed CA certificate. In theory, the MySQL server should be able to authenticate the client certificate presented by the Database proxy service because the identical self-signed CA certificate is used.
What am I missing? Please help?

Thanks
Ryan

[kuanrcl]

I was using the Teleport CA certificate generated by tctl auth --type=db command, and I used this CA certification to generate the server certificate for MySQL.