You may need to explicitly set the capath and protocol version parameters.
Assuming that you are using Mosquitto with MQTT bridging:
In mosquitto.conf
to the bridge settings add:
bridge_capath /etc/ssl/certs
bridge_protocol_version mqttv311
(Above capath
works for Home Assistant (OS) but may require a different value for your OS/distribution.)