mysql_ssl_rsa_setup — Create SSL/RSA Files Controls whether to enable FIPS mode on the client side. The  --ssl-fips-mode  option differs from other  --ssl- xxx  options in that it is not used to establish encrypted connections, but rather to affect which cryptographic operations to permit. See Section 6.8, “FIPS Support” . If the OpenSSL FIPS Object Module is not available, the only permitted value for --ssl-fips-mode  is  OFF . In this case, setting  --ssl-fips-mode  to  ON  or STRICT  causes the client to produce a warning at startup and to operate in non- FIPS mode. The permissible ciphersuites for encrypted connections that use TLSv1.3. The value is a list of one or more colon-separated ciphersuite names. The ciphersuites that can be named for this option depend on the SSL library used to compile MySQL. For details, see Section 6.3.2, “Encrypted Connection TLS Protocols and Ciphers” . This option was added in MySQL 8.0.16. The permissible TLS protocols for encrypted connections. The value is a list of one or more comma- separated protocol names. The protocols that can be named for this option depend on the SSL library used to compile MySQL. For details, see Section 6.3.2, “Encrypted Connection TLS Protocols and Ciphers” . Execute noninteractively. This option can be used for unattended installation operations. The user name of the MySQL account to use for connecting to the server. This program creates the SSL certificate and key files and RSA key-pair files required to support secure connections using SSL and secure password exchange using RSA over unencrypted connections, if those files are missing.  mysql_ssl_rsa_setup  can also be used to create new SSL files if the existing ones have expired. mysql_ssl_rsa_setup  uses the  openssl  command, so its use is contingent on having OpenSSL installed on your machine. 400 Note 4.4.3 mysql_ssl_rsa_setup — Create SSL/RSA Files These  --ssl-fips-mode  values are permitted: • OFF : Disable FIPS mode. • ON : Enable FIPS mode. • STRICT : Enable “strict”  FIPS mode. Note • --ssl-fips-mode={OFF|ON|STRICT} • --tls-ciphersuites= ciphersuite_list • --tls-version= protocol_list • --use-default • --user= user_name ,  -u  user_name