When configuring Cacti to connect to a mysql database using TLS $database_ssl = true; you are unable to specify only a ca certificate ($database_ssl_ca), a client certificate and key are both required for this setting to take hold. This leaves you unable to connect to databases that enforces TLS for client connections but does not enforce client certificates.
The problem seems to stem from here:
https://github.com/Cacti/cacti/blob/develop/lib/database.php#L69
When configuring Cacti to connect to a mysql database using TLS
$database_ssl = true;you are unable to specify only a ca certificate ($database_ssl_ca), a client certificate and key are both required for this setting to take hold. This leaves you unable to connect to databases that enforces TLS for client connections but does not enforce client certificates.The problem seems to stem from here:
https://github.com/Cacti/cacti/blob/develop/lib/database.php#L69