# uname -a
Linux 3.10.0-862.9.1.el7.x86_64 #1 SMP Mon Jul 16 16:29:36 UTC 2018 x86_64 x86_64 x86_64 GNU/Linux

# rpm -qa | grep Maria
MariaDB-common-10.3.8-1.el7.centos.x86_64
MariaDB-client-10.3.8-1.el7.centos.x86_64
MariaDB-compat-10.3.8-1.el7.centos.x86_64

# rpm -qa | grep pdns
pdns-4.1.3-1pdns.el7.x86_64
pdns-backend-mysql-4.1.3-1pdns.el7.x86_64

# cat /etc/my.cnf
# This group is read both both by the client and the server
# use it for options that affect everything
#
[client-server]
ssl-ca=/etc/pki/tls/certs/mysql/ca-cert.pem
ssl-cert=/etc/pki/tls/certs/mysql/client-cert.pem
ssl-key=/etc/pki/tls/certs/mysql/client-key.pem

#
# include all files from the config directory
#
!includedir /etc/my.cnf.d

# cat /etc/pdns/pdns/conf | grep gmysql
launch=gmysql
gmysql-host=X.X.X.X
gmysql-user=pdns
gmysql-password=<PASSWORD>
gmysql-dbname=pdns

# mysqladmin --print-defaults | more
mysqladmin would have been started with the following arguments:
--ssl-ca=/etc/pki/tls/certs/mysql/ca-cert.pem --ssl-cert=/etc/pki/tls/certs/mysql/client-cert.pem --ssl-key=/etc/pki/tls/certs/mysql/client-key.pem

# ldd `which mysql` | grep ssl
	libssl.so.10 => /lib64/libssl.so.10 (0x00007f309fdb9000)