Server System Variables The path of the directory that contains certificate revocation-list files in PEM format. As of MySQL 8.0.16, this variable is dynamic and can be modified at runtime to affect the TSL context the server uses for new connections. See Server-Side Runtime Configuration and Monitoring for Encrypted Connections. Prior to MySQL 8.0.16, this variable can be set only at server startup. Controls whether to enable FIPS mode on the server side. The  ssl_fips_mode  system variable differs from other  ssl_ xxx  system variables in that it is not used to control whether the server permits encrypted connections, but rather to affect which cryptographic operations are permitted. See Section 6.8, “FIPS Support” . If the OpenSSL FIPS Object Module is not available, the only permitted value for ssl_fips_mode  is  OFF . In this case, setting  ssl_fips_mode  to  ON  or  STRICT at startup causes the server to produce an error message and exit. Default Value NULL Command-Line Format --ssl-fips-mode={OFF|ON|STRICT} System Variable ssl_fips_mode Scope Global Dynamic Yes SET_VAR  Hint Applies No Type Enumeration Default Value OFF Valid Values OFF  (or 0) ON  (or 1) STRICT  (or 2) Command-Line Format --ssl-key=file_name System Variable ssl_key Scope Global Dynamic ( ≥  8.0.16) Yes Dynamic ( ≤  8.0.15) No SET_VAR  Hint Applies No • OFF  (or 0): Disable FIPS mode. • ON  (or 1): Enable FIPS mode. • STRICT  (or 2): Enable “strict”  FIPS mode. These  ssl_fips_mode  values are permitted: • ssl_key Note 893 • ssl_fips_mode