Thanks for your response.
I did not know, that it is possible use pem files to import certificates! Thanks for the tip.
The reason I used pfx was that this was, I was able to package all three of my keys into one file and import it to the certificate storage directly. If I do this, my client certificate will contain my private key a well:
As far as I know, it is not possible to import the client-key.pem file individually to the certificate store.
I have updated my whole mysql installation (connectors and everything else) to the latest version: 8.0.32
I tested the scenario where I imported only pem files into the store (server-ca.pem and client-cert.pem only) but I got the same error message as before.
I also tested the scenario where I imported the server-ca.pem as itself and the client keys packaged as a pfx.T
This also resulted in the same error.
Then got an idea and checked if tracing is available in Power BI. Found it, turned it on and used it to get info. I am attaching the log file to this message. But here is the most important line IMHO:
Microsoft.Mashup.Container.NetFX45.exe Error: 0 : Authentication to host '220.127.116.11' for user 'tvandorffy' using method 'mysql_native_password' failed with message: Access denied for user 'tvandorffy'@'<ip address>' (using password: YES)
Please note that I removed any ip address related info and replaced it with <ip address>
This error is interesting! My ip, username and password is 100% ok. So this must be a certificate related problem.
One more thing to note: when testing the connection with the MySQL Workbench (uses directly the pem files), I played with the "use SSL" dropdown in the SSL settings of the connection, I have found that options "Require" and "Require and Verify CA" works well. But when I choose "Require and Verify Identity" the connection test fails with the following error message:
Maybe Power BI also tries to verify the identity and this is why the connection fails.
I am basicly at the end of the line, no idea to try out. (Short of opening a ticket to Microsoft)
I wonder if you (or anybody) have any more idea or trick to try.
Thanks a lot,