Bug 36026 implemented TLS connections without mutual authentication by patching Database.pm. While we assumed that Koha always that to create a connection, it's not quite true. Installer.pm also needs to be patched: https://git.koha-community.org/Koha-community/Koha/src/branch/main/C4/Installer.pm#L74 I wonder if it could also be an option to always use Database.pm to centralize this code?