Group Replication System Variables Default Value NULL The value of this system variable can be changed while Group Replication is running, but the change only takes effect after you stop and restart Group Replication on the group member. group_replication_recovery_tls_ciphersuites  specifies a colon-separated list of one or more permitted ciphersuites when TLSv1.3 is used for connection encryption for the distributed recovery connection, and this server instance is the client in the distributed recovery connection, that is, the joining member. If this system variable is set to  NULL  when TLSv1.3 is used (which is the default if you do not set the system variable), the ciphersuites that are enabled by default are allowed, as listed in Section 6.3.2, “Encrypted Connection TLS Protocols and Ciphers” . If this system variable is set to the empty string, no cipher suites are allowed, and TLSv1.3 is therefore not used. This system variable is available beginning with MySQL 8.0.19. See Section 18.6.2, “Securing Group Communication Connections with Secure Socket Layer (SSL)” , for information on configuring SSL for distributed recovery. The value of this system variable can be changed while Group Replication is running, but the change only takes effect after you stop and restart Group Replication on the group member. group_replication_recovery_tls_version  specifies a comma-separated list of one or more permitted TLS protocols for connection encryption when this server instance is the client in the distributed recovery connection, that is, the joining member. Ensure the specified versions are contiguous (for example, “ TLSv1,TLSv1.1,TLSv1.2 ” ). If this system variable is not set, the default “ TLSv1,TLSv1.1,TLSv1.2,TLSv1.3 ”  is used. The group members involved in each distributed recovery connection as the client (joining member) and server (donor) negotiate the highest protocol version that they are both set up to support. This system variable is available from MySQL 8.0.19. See Section 18.6.2, “Securing Group Communication Connections with Secure Socket Layer (SSL)”  for information on configuring SSL for distributed recovery. 3828 • group_replication_recovery_use_ssl • group_replication_recovery_tls_version Command-Line Format --group-replication-recovery-tls- version=value Introduced 8.0.19 System Variable group_replication_recovery_tls_version Scope Global Dynamic Yes SET_VAR  Hint Applies No Type String Default Value TLSv1,TLSv1.1,TLSv1.2,TLSv1.3  (OpenSSL 1.1.1 or higher) TLSv1,TLSv1.1,TLSv1.2  (otherwise) Command-Line Format --group-replication-recovery-use- ssl[={OFF|ON}] System Variable group_replication_recovery_use_ssl Scope Global