sha256_password ,  MASTER_PUBLIC_KEY_PATH  can be used only if MySQL was built using OpenSSL.) If you are using a replication user account that authenticates with the  caching_sha2_password plugin (which is the default from MySQL 8.0), and you are not using a secure connection, you must specify either this option or the GET_MASTER_PUBLIC_KEY=1  option to provide the RSA public key to the replica. MASTER_RETRY_COUNT Sets the maximum number of reconnection attempts that the replica makes after the connection to the source times out, as determined by the  slave_net_timeout  system variable. If the replica does need to reconnect, the first retry occurs immediately after the timeout. The interval between the attempts is specified by the MASTER_CONNECT_RETRY  option. If both the default settings are used, the replica waits 60 seconds between reconnection attempts ( MASTER_CONNECT_RETRY=60 ), and keeps attempting to reconnect at this rate for 60 days ( MASTER_RETRY_COUNT=86400 ). A setting of 0 for MASTER_RETRY_COUNT  means that there is no limit on the number of reconnection attempts, so the replica keeps trying to reconnect indefinitely. The values for  MASTER_CONNECT_RETRY  and  MASTER_RETRY_COUNT are recorded in the source metadata repository and shown in the replication_connection_configuration  Performance Schema table.  MASTER_RETRY_COUNT  supersedes the  --master-retry- count  server startup option. MASTER_SSL_ xxx , MASTER_TLS_ xxx Specify how the replica uses encryption and ciphers to secure the replication connection. These options can be changed even on replicas that are compiled without SSL support. They are saved to the source metadata repository, but are ignored if the replica does not have SSL support enabled. The  MASTER_SSL_ xxx  and  MASTER_TLS_ xxx options perform the same functions as the  --ssl- xxx  and  -- tls- xxx  client options described in Command Options for Encrypted Connections. The correspondence between the two sets of options, and the use of the  MASTER_SSL_ xxx  and  MASTER_TLS_ xxx  options to set up a secure connection, is explained in Section 17.3.1, “Setting Up Replication to Use Encrypted Connections” . MASTER_USER The user name for the replication user account to use for connecting to the replication source server. Important To connect to the source using a replication user account that authenticates with the caching_sha2_password  plugin, you must either set up a secure connection as described in Section 17.3.1, “Setting Up Replication to Use Encrypted Connections” , or enable the unencrypted connection to support password exchange using an RSA key pair. The  caching_sha2_password  authentication 2752 SQL Statements for Controlling Replica Servers