# Percona MySQL Operator for XtraDB clusters - Ability to use our own internal SSL certificates for MySQL S3 backups

**URL:** <https://forums.percona.com/t/percona-mysql-operator-for-xtradb-clusters-ability-to-use-our-own-internal-ssl-certificates-for-mysql-s3-backups/27006>\
**Category:** Percona Operator for MySQL\
**Created:** [December 7, 2023, 4:21pm UTC](https://forums.percona.com/t/percona-mysql-operator-for-xtradb-clusters-ability-to-use-our-own-internal-ssl-certificates-for-mysql-s3-backups/27006 "2023-12-07T16:21:44Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![azam](https://avatars.discourse-cdn.com/v4/letter/a/ea666f/32.png) [@azam](https://forums.percona.com/u/azam)\
**Post date:** [December 7, 2023, 4:21pm UTC](https://forums.percona.com/t/percona-mysql-operator-for-xtradb-clusters-ability-to-use-our-own-internal-ssl-certificates-for-mysql-s3-backups/27006/1 "2023-12-07T16:21:44Z")

</div>

Hi everyone,

We’re currently using the latest version of the Percona MySQL Operator for XtraDB clusters. Our MySQL clusters are being backed up to our own on-premises S3 storage environment, by using the S3 backup options in the operator. This is working well 🙂

Since our on-premises S3 storage environment is using our company-trusted internal SSL certificates, we have to use the option verifyTLS: **false** in order to connect to the backup storage (using HTTPS).

We would like to enhance the security of our database backup environment, by setting verifyTLS: **true** in our MySQL backup configuration. This reduces the risk of spoofing and man-in-the-middle attacks.

Is it possible to somehow add our company-trusted internal SSL certificates to the backup configuration, preferably by using the MySQL operator?

If this isn’t possible at the moment, should I create a JIRA ticket for the development team?

Thanks in advance!

Kind regards,

Azam

---

<div class="post-metadata">

**Author:** ![Slava\_Sarzhan](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/slava_sarzhan/32/3196_2.png) [@Slava\_Sarzhan](https://forums.percona.com/u/Slava_Sarzhan)\
**Post date:** [December 8, 2023, 5:19pm UTC](https://forums.percona.com/t/percona-mysql-operator-for-xtradb-clusters-ability-to-use-our-own-internal-ssl-certificates-for-mysql-s3-backups/27006/2 "2023-12-08T17:19:26Z")

</div>

Hi @azam please create the task. We do not have it for now.

---

<div class="post-metadata">

**Author:** ![azam](https://avatars.discourse-cdn.com/v4/letter/a/ea666f/32.png) [@azam](https://forums.percona.com/u/azam)\
**Post date:** [December 8, 2023, 5:21pm UTC](https://forums.percona.com/t/percona-mysql-operator-for-xtradb-clusters-ability-to-use-our-own-internal-ssl-certificates-for-mysql-s3-backups/27006/3 "2023-12-08T17:21:47Z")

</div>

Hi Slava,

Thanks for your reply!  
I have submitted the JIRA ticket just now: [[K8SPXC-1332] Ability to load custom SSL certificates for S3 backups - Percona JIRA](https://jira.percona.com/browse/K8SPXC-1332)

Kind regards,

Azam

---

<div class="post-metadata">

**Author:** ![Slava\_Sarzhan](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/slava_sarzhan/32/3196_2.png) [@Slava\_Sarzhan](https://forums.percona.com/u/Slava_Sarzhan)\
**Post date:** [December 8, 2023, 5:22pm UTC](https://forums.percona.com/t/percona-mysql-operator-for-xtradb-clusters-ability-to-use-our-own-internal-ssl-certificates-for-mysql-s3-backups/27006/4 "2023-12-08T17:22:33Z")

</div>

ok, cool. Thanks for the task.