Server System Variables Default Value NULL The list of permissible encryption ciphers for connections that use TLS protocols up through TLSv1.2. If no cipher in the list is supported, encrypted connections that use these TLS protocols do not work. For greatest portability, the cipher list should be a list of one or more cipher names, separated by colons. Examples: OpenSSL supports the syntax for specifying ciphers described in the OpenSSL documentation at https:// www.openssl.org/docs/manmaster/man1/ciphers.html. For information about which encryption ciphers MySQL supports, see Section 6.3.2, “Encrypted Connection TLS Protocols and Ciphers” . As of MySQL 8.0.16, this variable is dynamic and can be modified at runtime to affect the TSL context the server uses for new connections. See Server-Side Runtime Configuration and Monitoring for Encrypted Connections. Prior to MySQL 8.0.16, this variable can be set only at server startup. The path name of the file containing certificate revocation lists in PEM format. As of MySQL 8.0.16, this variable is dynamic and can be modified at runtime to affect the TSL context the server uses for new connections. See Server-Side Runtime Configuration and Monitoring for Encrypted Connections. Prior to MySQL 8.0.16, this variable can be set only at server startup. 892 • ssl_crlpath Command-Line Format --ssl-crlpath=dir_name System Variable ssl_crlpath Scope Global Dynamic ( ≥  8.0.16) Yes Dynamic ( ≤  8.0.15) No SET_VAR  Hint Applies No Type Directory name Command-Line Format --ssl-crl=file_name System Variable ssl_crl Scope Global Dynamic ( ≥  8.0.16) Yes Dynamic ( ≤  8.0.15) No SET_VAR  Hint Applies No Type File name Default Value NULL • ssl_crl [mysqld] ssl_cipher="AES128-SHA" ssl_cipher="DHE-RSA-AES128-GCM-SHA256:AES128-SHA"