diff --git a/src/lib/mysql/mysql_connection.cc b/src/lib/mysql/mysql_connection.cc
index cc3476e83b..8d4667183e 100644
--- a/src/lib/mysql/mysql_connection.cc
+++ b/src/lib/mysql/mysql_connection.cc
@@ -131,7 +131,7 @@ MySqlConnection::openDatabase() {
         isc_throw(DbInvalidTimeout, ex.what());
     }
 
-    int ssl_mode(SSL_MODE_DISABLED);
+    int ssl_mode(SSL_MODE_PREFERRED);
     string ssslmode;
     try {
         ssslmode = getParameter("ssl-mode");