Well, we configured our MySQL server to only accept an SSL encrypted mysql connection for the database/user combination on which the mattermost server depends.
As i said, by using tls=skip-verify the connection is established, but mattermost doesn´t verify the certificate.
So we search for a way to tell mattermost which root certificate to use, so the mysql server certificate can be verified.