diff --git a/backend/lib/config.js b/backend/lib/config.js
index 9c9deffd..a545bac1 100644
--- a/backend/lib/config.js
+++ b/backend/lib/config.js
@@ -29,7 +29,9 @@ const configure = () => {
 	const envMysqlHost = process.env.DB_MYSQL_HOST || null;
 	const envMysqlUser = process.env.DB_MYSQL_USER || null;
 	const envMysqlName = process.env.DB_MYSQL_NAME || null;
-	const envMysqlSsl  = process.env.DB_MYSQL_SSL  || false;
+	const envMysqlSsl  = process.env.DB_MYSQL_SSL  || null;
+	const envMysqlSslCa  = process.env.DB_MYSQL_SSL_CA  || '';
+
 	if (envMysqlHost && envMysqlUser && envMysqlName) {
 		// we have enough mysql creds to go with mysql
 		logger.info('Using MySQL configuration');
@@ -41,7 +43,9 @@ const configure = () => {
 				user:     envMysqlUser,
 				password: process.env.DB_MYSQL_PASSWORD,
 				name:     envMysqlName,
-				ssl:      envMysqlSsl
+				ssl:      envMysqlSsl ? {
+					ca: envMysqlSslCa
+				} : null
 			},
 			keys: getKeys(),
 		};