diff --git a/conn.go b/conn.go
index 8064a8be..ee8d9c81 100644
--- a/conn.go
+++ b/conn.go
@@ -929,7 +929,7 @@ func configTLS(args configTLSArgs, cc *ConnConfig) error {
 		return errors.New("sslmode is invalid")
 	}
 
-	{
+	if args.sslRootCert != "" {
 		caCertPool := x509.NewCertPool()
 
 		caPath := args.sslRootCert