diff --git a/defaults/main.yml b/defaults/main.yml
index 829835e..5c44920 100644
--- a/defaults/main.yml
+++ b/defaults/main.yml
@@ -119,6 +119,8 @@ mistral_db_setup_python_interpreter: "{{ openstack_db_setup_python_interpreter |
 mistral_galera_address: "{{ galera_address | default('127.0.0.1') }}"
 mistral_galera_database: mistral
 mistral_galera_user: mistral
+mistral_galera_use_ssl: "{{ galera_use_ssl | default(False) }}"
+mistral_galera_ssl_ca_cert: "{{ galera_ssl_ca_cert | default('') }}"
 mistral_galera_port: "{{ galera_port | default('3306') }}"
 
 # Configuration options
diff --git a/templates/mistral.conf.j2 b/templates/mistral.conf.j2
index 539c63c..bbf6435 100644
--- a/templates/mistral.conf.j2
+++ b/templates/mistral.conf.j2
@@ -9,7 +9,7 @@ transport_url = {{ mistral_oslomsg_rpc_transport }}://{% for host in mistral_osl
 allow_action_execution_deletion = True
 
 [database]
-connection = mysql+pymysql://{{ mistral_galera_user }}:{{ mistral_galera_password }}@{{ mistral_galera_address }}/{{ mistral_galera_database }}?charset=utf8
+connection = mysql+pymysql://{{ mistral_galera_user }}:{{ mistral_galera_password }}@{{ mistral_galera_address }}/{{ mistral_galera_database }}?charset=utf8{% if mistral_galera_use_ssl | bool %}&ssl_verify_cert=true{% if mistral_galera_ssl_ca_cert | length > 0 %}&ssl_ca={{ mistral_galera_ssl_ca_cert }}{% endif %}{% endif %}
 
 [keystone_authtoken]
 auth_type = password