This is assuming that the certs are within the common folder of an Yii2 advanced template project. It’s probably also a good idea to chmod the pem files to 600 and the ssl directory to 700 so that only the user Where are the pem files? /var/lib/mysql/*.pem