Command Options for Connecting to the Server For information about using encrypted connections from the MySQL C API, see Support for Encrypted Connections. Request from the server the public key required for RSA key pair-based password exchange. This option applies to clients that authenticate with the  caching_sha2_password  authentication plugin. For that plugin, the server does not send the public key unless requested. This option is ignored for accounts that do not authenticate with that plugin. It is also ignored if RSA-based password exchange is not used, as is the case when the client connects to the server using a secure connection. If  --server-public-key-path= file_name  is given and specifies a valid public key file, it takes precedence over  --get-server-public-key . For information about the  caching_sha2_password  plugin, see Section 6.4.1.2, “Caching SHA-2 Pluggable Authentication” . The path name to a file in PEM format containing a client-side copy of the public key required by the server for RSA key pair-based password exchange. This option applies to clients that authenticate with the  sha256_password  or  caching_sha2_password  authentication plugin. This option is ignored for • --server-public-key-path= file_name • --get-server-public-key Table 4.4 Connection-Encryption Option Summary Option Name Description Introduced --get-server-public-key Request RSA public key from server --server-public-key-path Path name to file containing RSA public key --ssl-ca File that contains list of trusted SSL Certificate Authorities --ssl-capath Directory that contains trusted SSL Certificate Authority certificate files --ssl-cert File that contains X.509 certificate --ssl-cipher Permissible ciphers for connection encryption --ssl-crl File that contains certificate revocation lists --ssl-crlpath Directory that contains certificate revocation-list files --ssl-fips-mode Whether to enable FIPS mode on client side --ssl-key File that contains X.509 key --ssl-mode Desired security state of connection to server --tls-ciphersuites Permissible TLSv1.3 ciphersuites for encrypted connections 8.0.16 --tls-version Permissible TLS protocols for encrypted connections 359