MySQL 8 Administrator???s Guide

Client-side configuration for encrypted connections

At the client side, MySQL uses the same –ssl options used at the server side to specify the certificate and key file, but apart from that, it has –ssl-mode options. By default, the client is allowed to set up an encrypted connection with the server if the server permits it. For further control, the client program uses the following –ssl-mode options:

• --ssl-mode=REQUIRED: This option indicates that an encrypted connection must be established, and fails if it is not established
• --ssl-mode=PREFFERED: This option indicates the client program can establish an encrypted connection if the server permits it, or else establish an unencrypted connection without a fail
• --ssl-mode=DISABLED: This option ...