# phpman > man > mysqladmin(1)
[MYSQLADMIN(1)](https://www.chedong.com/phpMan.php/man/MYSQLADMIN/1/markdown) MySQL Database System [MYSQLADMIN(1)](https://www.chedong.com/phpMan.php/man/MYSQLADMIN/1/markdown)
## NAME
mysqladmin - a MySQL server administration program
## SYNOPSIS
**mysqladmin** **[**_options_**]** _command_ **[**_command-options_**]** **[**_command_ **[**_command-options_**]]** **...**
## DESCRIPTION
**mysqladmin** is a client for performing administrative operations. You can use it to check the
server's configuration and current status, to create and drop databases, and more.
Invoke **mysqladmin** like this:
mysqladmin [_options_] _command_ [_command-arg_] [_command_ [_command-arg_]] ...
**mysqladmin** supports the following commands. Some of the commands take an argument following
the command name.
• create _db_name_
Create a new database named _db_name_.
• debug
Prior to MySQL 8.0.20, tell the server to write debug information to the error log. The
connected user must have the SUPER privilege. Format and content of this information is
subject to change.
This includes information about the Event Scheduler. See Section 27.4.5, “Event Scheduler
Status”.
• drop _db_name_
Delete the database named _db_name_ and all its tables.
• extended-status
Display the server status variables and their values.
• flush-hosts
Flush all information in the host cache. See Section 7.1.12.3, “DNS Lookups and the Host
Cache”.
• flush-logs [_log_type_ ...]
Flush all logs.
The **mysqladmin** **flush-logs** command permits optional log types to be given, to specify
which logs to flush. Following the flush-logs command, you can provide a space-separated
list of one or more of the following log types: binary, engine, error, general, relay,
slow. These correspond to the log types that can be specified for the FLUSH LOGS SQL
statement.
• flush-privileges
Reload the grant tables (same as reload).
• flush-status
Clear status variables.
• flush-tables
Flush all tables.
• flush-threads
Flush the thread cache.
• kill _id_,_id_,...
Kill server threads. If multiple thread ID values are given, there must be no spaces in
the list.
To kill threads belonging to other users, the connected user must have the
CONNECTION_ADMIN privilege (or the deprecated SUPER privilege).
• password _new_password_
Set a new password. This changes the password to _new_password_ for the account that you
use with **mysqladmin** for connecting to the server. Thus, the next time you invoke
**mysqladmin** (or any other client program) using the same account, you must specify the new
password.
**Warning**
Setting a password using **mysqladmin** should be considered _insecure_. On some systems,
your password becomes visible to system status programs such as **ps** that may be
invoked by other users to display command lines. MySQL clients typically overwrite
the command-line password argument with zeros during their initialization sequence.
However, there is still a brief interval during which the value is visible. Also, on
some systems this overwriting strategy is ineffective and the password remains
visible to **ps**. (SystemV Unix systems and perhaps others are subject to this problem.)
If the _new_password_ value contains spaces or other characters that are special to your
command interpreter, you need to enclose it within quotation marks. On Windows, be sure
to use double quotation marks rather than single quotation marks; single quotation marks
are not stripped from the password, but rather are interpreted as part of the password.
For example:
mysqladmin password "my new password"
The new password can be omitted following the password command. In this case, **mysqladmin**
prompts for the password value, which enables you to avoid specifying the password on the
command line. Omitting the password value should be done only if password is the final
command on the **mysqladmin** command line. Otherwise, the next argument is taken as the
password.
**Caution**
Do not use this command used if the server was started with the **--skip-grant-tables**
option. No password change is applied. This is true even if you precede the password
command with flush-privileges on the same command line to re-enable the grant tables
because the flush operation occurs after you connect. However, you can use **mysqladmin**
**flush-privileges** to re-enable the grant table and then use a separate **mysqladmin**
**password** command to change the password.
• ping
Check whether the server is available. The return status from **mysqladmin** is 0 if the
server is running, 1 if it is not. This is 0 even in case of an error such as Access
denied, because this means that the server is running but refused the connection, which
is different from the server not running.
• processlist
Show a list of active server threads. This is like the output of the SHOW PROCESSLIST
statement. If the **--verbose** option is given, the output is like that of SHOW FULL
PROCESSLIST. (See Section 15.7.7.29, “SHOW PROCESSLIST Statement”.)
• reload
Reload the grant tables.
• refresh
Flush all tables and close and open log files.
• shutdown
Stop the server.
• start-replica
Start replication on a replica server. Use this command from MySQL 8.0.26.
• start-slave
Start replication on a replica server. Use this command before MySQL 8.0.26.
• status
Display a short server status message.
• stop-replica
Stop replication on a replica server. Use this command from MySQL 8.0.26.
• stop-slave
Stop replication on a replica server. Use this command before MySQL 8.0.26.
• variables
Display the server system variables and their values.
• version
Display version information from the server.
All commands can be shortened to any unique prefix. For example:
$> **mysqladmin** **proc** **stat**
+----+-------+-----------+----+---------+------+-------+------------------+
| Id | User | Host | db | Command | Time | State | Info |
+----+-------+-----------+----+---------+------+-------+------------------+
| 51 | jones | localhost | | Query | 0 | | show processlist |
+----+-------+-----------+----+---------+------+-------+------------------+
Uptime: 1473624 Threads: 1 Questions: 39487
Slow queries: 0 Opens: 541 Flush tables: 1
Open tables: 19 Queries per second avg: 0.0268
The **mysqladmin** **status** command result displays the following values:
• Uptime
The number of seconds the MySQL server has been running.
• Threads
The number of active threads (clients).
• Questions
The number of questions (queries) from clients since the server was started.
• Slow queries
The number of queries that have taken more than long_query_time seconds. See
Section 7.4.5, “The Slow Query Log”.
• Opens
The number of tables the server has opened.
• Flush tables
The number of flush-*, refresh, and reload commands the server has executed.
• Open tables
The number of tables that currently are open.
If you execute **mysqladmin** **shutdown** when connecting to a local server using a Unix socket
file, **mysqladmin** waits until the server's process ID file has been removed, to ensure that
the server has stopped properly.
**mysqladmin** supports the following options, which can be specified on the command line or in
the [mysqladmin] and [client] groups of an option file. For information about option files
used by MySQL programs, see Section 6.2.2.2, “Using Option Files”.
• **--help**, **-?**
┌────────────────────┬────────┐
│**Command-Line** **Format** │ --help │
└────────────────────┴────────┘
Display a help message and exit.
• **--bind-address=**_ip_address_
┌────────────────────┬───────────────────────────┐
│**Command-Line** **Format** │ --bind-address=ip_address │
└────────────────────┴───────────────────────────┘
On a computer having multiple network interfaces, use this option to select which
interface to use for connecting to the MySQL server.
• **--character-sets-dir=**_dir_name_
┌────────────────────┬───────────────────────────┐
│**Command-Line** **Format** │ --character-sets-dir=path │
├────────────────────┼───────────────────────────┤
│**Type** │ String │
├────────────────────┼───────────────────────────┤
│**Default** **Value** │ [none] │
└────────────────────┴───────────────────────────┘
The directory where character sets are installed. See Section 12.15, “Character Set
Configuration”.
• **--compress**, **-C**
┌────────────────────┬───────────────────────┐
│**Command-Line** **Format** │ --compress[={OFF|ON}] │
├────────────────────┼───────────────────────┤
│**Deprecated** │ 8.0.18 │
├────────────────────┼───────────────────────┤
│**Type** │ Boolean │
├────────────────────┼───────────────────────┤
│**Default** **Value** │ OFF │
└────────────────────┴───────────────────────┘
Compress all information sent between the client and the server if possible. See
Section 6.2.8, “Connection Compression Control”.
As of MySQL 8.0.18, this option is deprecated. Expect it to be removed in a future
version of MySQL. See the section called “Configuring Legacy Connection Compression”.
• **--compression-algorithms=**_value_
┌────────────────────┬────────────────────────────────┐
│**Command-Line** **Format** │ --compression-algorithms=value │
├────────────────────┼────────────────────────────────┤
│**Introduced** │ 8.0.18 │
├────────────────────┼────────────────────────────────┤
│**Type** │ Set │
├────────────────────┼────────────────────────────────┤
│**Default** **Value** │ uncompressed │
├────────────────────┼────────────────────────────────┤
│**Valid** **Values** │ │
│ │ zlib │
│ │ │
│ │ zstd │
│ │ │
│ │ uncompressed │
└────────────────────┴────────────────────────────────┘
The permitted compression algorithms for connections to the server. The available
algorithms are the same as for the protocol_compression_algorithms system variable. The
default value is uncompressed.
For more information, see Section 6.2.8, “Connection Compression Control”.
This option was added in MySQL 8.0.18.
• **--connect-timeout=**_value_
┌────────────────────┬─────────────────────────┐
│**Command-Line** **Format** │ --connect-timeout=value │
├────────────────────┼─────────────────────────┤
│**Type** │ Numeric │
├────────────────────┼─────────────────────────┤
│**Default** **Value** │ 43200 │
└────────────────────┴─────────────────────────┘
The maximum number of seconds before connection timeout. The default value is 43200 (12
hours).
• **--count=**_N_, **-c** _N_
┌────────────────────┬───────────┐
│**Command-Line** **Format** │ --count=# │
└────────────────────┴───────────┘
The number of iterations to make for repeated command execution if the **--sleep** option is
given.
• **--debug[=**_debug_options_**]**, **-#** **[**_debug_options_**]**
┌────────────────────┬─────────────────────────────┐
│**Command-Line** **Format** │ --debug[=debug_options] │
├────────────────────┼─────────────────────────────┤
│**Type** │ String │
├────────────────────┼─────────────────────────────┤
│**Default** **Value** │ d:t:o,/tmp/mysqladmin.trace │
└────────────────────┴─────────────────────────────┘
Write a debugging log. A typical _debug_options_ string is d:t:o,_file_name_. The default is
d:t:o,/tmp/mysqladmin.trace.
This option is available only if MySQL was built using **WITH**___**DEBUG**. MySQL release binaries
provided by Oracle are _not_ built using this option.
• **--debug-check**
┌────────────────────┬───────────────┐
│**Command-Line** **Format** │ --debug-check │
├────────────────────┼───────────────┤
│**Type** │ Boolean │
├────────────────────┼───────────────┤
│**Default** **Value** │ FALSE │
└────────────────────┴───────────────┘
Print some debugging information when the program exits.
This option is available only if MySQL was built using **WITH**___**DEBUG**. MySQL release binaries
provided by Oracle are _not_ built using this option.
• **--debug-info**
┌────────────────────┬──────────────┐
│**Command-Line** **Format** │ --debug-info │
├────────────────────┼──────────────┤
│**Type** │ Boolean │
├────────────────────┼──────────────┤
│**Default** **Value** │ FALSE │
└────────────────────┴──────────────┘
Print debugging information and memory and CPU usage statistics when the program exits.
This option is available only if MySQL was built using **WITH**___**DEBUG**. MySQL release binaries
provided by Oracle are _not_ built using this option.
• **--default-auth=**_plugin_
┌────────────────────┬───────────────────────┐
│**Command-Line** **Format** │ --default-auth=plugin │
├────────────────────┼───────────────────────┤
│**Type** │ String │
└────────────────────┴───────────────────────┘
A hint about which client-side authentication plugin to use. See Section 8.2.17,
“Pluggable Authentication”.
• **--default-character-set=**_charset_name_
┌────────────────────┬──────────────────────┐
│**Command-Line** **Format** │ --default-character- │
│ │ set=charset_name │
├────────────────────┼──────────────────────┤
│**Type** │ String │
└────────────────────┴──────────────────────┘
Use _charset_name_ as the default character set. See Section 12.15, “Character Set
Configuration”.
• **--defaults-extra-file=**_file_name_
┌────────────────────┬─────────────────────────────────┐
│**Command-Line** **Format** │ --defaults-extra-file=file_name │
├────────────────────┼─────────────────────────────────┤
│**Type** │ File name │
└────────────────────┴─────────────────────────────────┘
Read this option file after the global option file but (on Unix) before the user option
file. If the file does not exist or is otherwise inaccessible, an error occurs. If
_file_name_ is not an absolute path name, it is interpreted relative to the current
directory.
For additional information about this and other option-file options, see Section 6.2.2.3,
“Command-Line Options that Affect Option-File Handling”.
• **--defaults-file=**_file_name_
┌────────────────────┬───────────────────────────┐
│**Command-Line** **Format** │ --defaults-file=file_name │
├────────────────────┼───────────────────────────┤
│**Type** │ File name │
└────────────────────┴───────────────────────────┘
Use only the given option file. If the file does not exist or is otherwise inaccessible,
an error occurs. If _file_name_ is not an absolute path name, it is interpreted relative to
the current directory.
Exception: Even with **--defaults-file**, client programs read .mylogin.cnf.
For additional information about this and other option-file options, see Section 6.2.2.3,
“Command-Line Options that Affect Option-File Handling”.
• **--defaults-group-suffix=**_str_
┌────────────────────┬─────────────────────────────┐
│**Command-Line** **Format** │ --defaults-group-suffix=str │
├────────────────────┼─────────────────────────────┤
│**Type** │ String │
└────────────────────┴─────────────────────────────┘
Read not only the usual option groups, but also groups with the usual names and a suffix
of _str_. For example, **mysqladmin** normally reads the [client] and [mysqladmin] groups. If
this option is given as **--defaults-group-suffix=**___**other**, **mysqladmin** also reads the
[client_other] and [mysqladmin_other] groups.
For additional information about this and other option-file options, see Section 6.2.2.3,
“Command-Line Options that Affect Option-File Handling”.
• **--enable-cleartext-plugin**
┌────────────────────┬───────────────────────────┐
│**Command-Line** **Format** │ --enable-cleartext-plugin │
├────────────────────┼───────────────────────────┤
│**Type** │ Boolean │
├────────────────────┼───────────────────────────┤
│**Default** **Value** │ FALSE │
└────────────────────┴───────────────────────────┘
Enable the mysql_clear_password cleartext authentication plugin. (See Section 8.4.1.4,
“Client-Side Cleartext Pluggable Authentication”.)
• **--force**, **-f**
┌────────────────────┬─────────┐
│**Command-Line** **Format** │ --force │
└────────────────────┴─────────┘
Do not ask for confirmation for the drop _db_name_ command. With multiple commands,
continue even if an error occurs.
• **--get-server-public-key**
┌────────────────────┬─────────────────────────┐
│**Command-Line** **Format** │ --get-server-public-key │
├────────────────────┼─────────────────────────┤
│**Type** │ Boolean │
└────────────────────┴─────────────────────────┘
Request from the server the public key required for RSA key pair-based password exchange.
This option applies to clients that authenticate with the caching_sha2_password
authentication plugin. For that plugin, the server does not send the public key unless
requested. This option is ignored for accounts that do not authenticate with that plugin.
It is also ignored if RSA-based password exchange is not used, as is the case when the
client connects to the server using a secure connection.
If **--server-public-key-path=**_file_name_ is given and specifies a valid public key file, it
takes precedence over **--get-server-public-key**.
For information about the caching_sha2_password plugin, see Section 8.4.1.2, “Caching
SHA-2 Pluggable Authentication”.
• **--host=**_host_name_, **-h** _host_name_
┌────────────────────┬──────────────────┐
│**Command-Line** **Format** │ --host=host_name │
├────────────────────┼──────────────────┤
│**Type** │ String │
├────────────────────┼──────────────────┤
│**Default** **Value** │ localhost │
└────────────────────┴──────────────────┘
Connect to the MySQL server on the given host.
• **--login-path=**_name_
┌────────────────────┬───────────────────┐
│**Command-Line** **Format** │ --login-path=name │
├────────────────────┼───────────────────┤
│**Type** │ String │
└────────────────────┴───────────────────┘
Read options from the named login path in the .mylogin.cnf login path file. A “login
path” is an option group containing options that specify which MySQL server to connect to
and which account to authenticate as. To create or modify a login path file, use the
**mysql**___**config**___**editor** utility. See [mysql_config_editor(1)](https://www.chedong.com/phpMan.php/man/mysqlconfigeditor/1/markdown).
For additional information about this and other option-file options, see Section 6.2.2.3,
“Command-Line Options that Affect Option-File Handling”.
• **--no-beep**, **-b**
┌────────────────────┬───────────┐
│**Command-Line** **Format** │ --no-beep │
└────────────────────┴───────────┘
Suppress the warning beep that is emitted by default for errors such as a failure to
connect to the server.
• **--no-defaults**
┌────────────────────┬───────────────┐
│**Command-Line** **Format** │ --no-defaults │
└────────────────────┴───────────────┘
Do not read any option files. If program startup fails due to reading unknown options
from an option file, **--no-defaults** can be used to prevent them from being read.
The exception is that the .mylogin.cnf file is read in all cases, if it exists. This
permits passwords to be specified in a safer way than on the command line even when
**--no-defaults** is used. To create .mylogin.cnf, use the **mysql**___**config**___**editor** utility. See
[mysql_config_editor(1)](https://www.chedong.com/phpMan.php/man/mysqlconfigeditor/1/markdown).
For additional information about this and other option-file options, see Section 6.2.2.3,
“Command-Line Options that Affect Option-File Handling”.
• **--password[=**_password_**]**, **-p[**_password_**]**
┌────────────────────┬───────────────────────┐
│**Command-Line** **Format** │ --password[=password] │
├────────────────────┼───────────────────────┤
│**Type** │ String │
└────────────────────┴───────────────────────┘
The password of the MySQL account used for connecting to the server. The password value
is optional. If not given, **mysqladmin** prompts for one. If given, there must be _no_ _space_
between **--password=** or **-p** and the password following it. If no password option is
specified, the default is to send no password.
Specifying a password on the command line should be considered insecure. To avoid giving
the password on the command line, use an option file. See Section 8.1.2.1, “End-User
Guidelines for Password Security”.
To explicitly specify that there is no password and that **mysqladmin** should not prompt for
one, use the **--skip-password** option.
• **--password1[=**_pass_val_**]** The password for multifactor authentication factor 1 of the MySQL
account used for connecting to the server. The password value is optional. If not given,
**mysql** prompts for one. If given, there must be _no_ _space_ between **--password1=** and the
password following it. If no password option is specified, the default is to send no
password.
Specifying a password on the command line should be considered insecure. To avoid giving
the password on the command line, use an option file. See Section 8.1.2.1, “End-User
Guidelines for Password Security”.
To explicitly specify that there is no password and that **mysqladmin** should not prompt for
one, use the **--skip-password1** option.
**--password1** and **--password** are synonymous, as are **--skip-password1** and **--skip-password**.
• **--password2[=**_pass_val_**]** The password for multifactor authentication factor 2 of the MySQL
account used for connecting to the server. The semantics of this option are similar to
the semantics for **--password1**; see the description of that option for details.
• **--password3[=**_pass_val_**]** The password for multifactor authentication factor 3 of the MySQL
account used for connecting to the server. The semantics of this option are similar to
the semantics for **--password1**; see the description of that option for details.
• **--pipe**, **-W**
┌────────────────────┬────────┐
│**Command-Line** **Format** │ --pipe │
├────────────────────┼────────┤
│**Type** │ String │
└────────────────────┴────────┘
On Windows, connect to the server using a named pipe. This option applies only if the
server was started with the named_pipe system variable enabled to support named-pipe
connections. In addition, the user making the connection must be a member of the Windows
group specified by the named_pipe_full_access_group system variable.
• **--plugin-dir=**_dir_name_
┌────────────────────┬───────────────────────┐
│**Command-Line** **Format** │ --plugin-dir=dir_name │
├────────────────────┼───────────────────────┤
│**Type** │ Directory name │
└────────────────────┴───────────────────────┘
The directory in which to look for plugins. Specify this option if the **--default-auth**
option is used to specify an authentication plugin but **mysqladmin** does not find it. See
Section 8.2.17, “Pluggable Authentication”.
• **--port=**_port_num_, **-P** _port_num_
┌────────────────────┬─────────────────┐
│**Command-Line** **Format** │ --port=port_num │
├────────────────────┼─────────────────┤
│**Type** │ Numeric │
├────────────────────┼─────────────────┤
│**Default** **Value** │ 3306 │
└────────────────────┴─────────────────┘
For TCP/IP connections, the port number to use.
• **--print-defaults**
┌────────────────────┬──────────────────┐
│**Command-Line** **Format** │ --print-defaults │
└────────────────────┴──────────────────┘
Print the program name and all options that it gets from option files.
For additional information about this and other option-file options, see Section 6.2.2.3,
“Command-Line Options that Affect Option-File Handling”.
• **--protocol={TCP|SOCKET|PIPE|MEMORY}**
┌────────────────────┬───────────────────┐
│**Command-Line** **Format** │ --protocol=type │
├────────────────────┼───────────────────┤
│**Type** │ String │
├────────────────────┼───────────────────┤
│**Default** **Value** │ [see text] │
├────────────────────┼───────────────────┤
│**Valid** **Values** │ │
│ │ TCP │
│ │ │
│ │ SOCKET │
│ │ │
│ │ PIPE │
│ │ │
│ │ MEMORY │
└────────────────────┴───────────────────┘
The transport protocol to use for connecting to the server. It is useful when the other
connection parameters normally result in use of a protocol other than the one you want.
For details on the permissible values, see Section 6.2.7, “Connection Transport
Protocols”.
• **--relative**, **-r**
┌────────────────────┬────────────┐
│**Command-Line** **Format** │ --relative │
└────────────────────┴────────────┘
Show the difference between the current and previous values when used with the **--sleep**
option. This option works only with the extended-status command.
• **--server-public-key-path=**_file_name_
┌────────────────────┬──────────────────────┐
│**Command-Line** **Format** │ --server-public-key- │
│ │ path=file_name │
├────────────────────┼──────────────────────┤
│**Type** │ File name │
└────────────────────┴──────────────────────┘
The path name to a file in PEM format containing a client-side copy of the public key
required by the server for RSA key pair-based password exchange. This option applies to
clients that authenticate with the sha256_password or caching_sha2_password
authentication plugin. This option is ignored for accounts that do not authenticate with
one of those plugins. It is also ignored if RSA-based password exchange is not used, as
is the case when the client connects to the server using a secure connection.
If **--server-public-key-path=**_file_name_ is given and specifies a valid public key file, it
takes precedence over **--get-server-public-key**.
For sha256_password, this option applies only if MySQL was built using OpenSSL.
For information about the sha256_password and caching_sha2_password plugins, see
Section 8.4.1.3, “SHA-256 Pluggable Authentication”, and Section 8.4.1.2, “Caching SHA-2
Pluggable Authentication”.
• **--shared-memory-base-name=**_name_
┌────────────────────┬────────────────────────────────┐
│**Command-Line** **Format** │ --shared-memory-base-name=name │
├────────────────────┼────────────────────────────────┤
│**Platform** **Specific** │ Windows │
└────────────────────┴────────────────────────────────┘
On Windows, the shared-memory name to use for connections made using shared memory to a
local server. The default value is MYSQL. The shared-memory name is case-sensitive.
This option applies only if the server was started with the shared_memory system variable
enabled to support shared-memory connections.
• **--show-warnings**
┌────────────────────┬─────────────────┐
│**Command-Line** **Format** │ --show-warnings │
└────────────────────┴─────────────────┘
Show warnings resulting from execution of statements sent to the server.
• **--shutdown-timeout=**_value_
┌────────────────────┬────────────────────────────┐
│**Command-Line** **Format** │ --shutdown-timeout=seconds │
├────────────────────┼────────────────────────────┤
│**Type** │ Numeric │
├────────────────────┼────────────────────────────┤
│**Default** **Value** │ 3600 │
└────────────────────┴────────────────────────────┘
The maximum number of seconds to wait for server shutdown. The default value is 3600 (1
hour).
• **--silent**, **-s**
┌────────────────────┬──────────┐
│**Command-Line** **Format** │ --silent │
└────────────────────┴──────────┘
Exit silently if a connection to the server cannot be established.
• **--sleep=**_delay_, **-i** _delay_
┌────────────────────┬───────────────┐
│**Command-Line** **Format** │ --sleep=delay │
└────────────────────┴───────────────┘
Execute commands repeatedly, sleeping for _delay_ seconds in between. The **--count** option
determines the number of iterations. If **--count** is not given, **mysqladmin** executes
commands indefinitely until interrupted.
• **--socket=**_path_, **-S** _path_
┌────────────────────┬────────────────────────────────┐
│**Command-Line** **Format** │ --socket={file_name|pipe_name} │
├────────────────────┼────────────────────────────────┤
│**Type** │ String │
└────────────────────┴────────────────────────────────┘
For connections to localhost, the Unix socket file to use, or, on Windows, the name of
the named pipe to use.
On Windows, this option applies only if the server was started with the named_pipe system
variable enabled to support named-pipe connections. In addition, the user making the
connection must be a member of the Windows group specified by the
named_pipe_full_access_group system variable.
• **--ssl*** Options that begin with **--ssl** specify whether to connect to the server using
encryption and indicate where to find SSL keys and certificates. See the section called
“Command Options for Encrypted Connections”.
• **--ssl-fips-mode={OFF|ON|STRICT}**
┌────────────────────┬─────────────────────────────────┐
│**Command-Line** **Format** │ --ssl-fips-mode={OFF|ON|STRICT} │
├────────────────────┼─────────────────────────────────┤
│**Deprecated** │ 8.0.34 │
├────────────────────┼─────────────────────────────────┤
│**Type** │ Enumeration │
├────────────────────┼─────────────────────────────────┤
│**Default** **Value** │ OFF │
├────────────────────┼─────────────────────────────────┤
│**Valid** **Values** │ │
│ │ OFF │
│ │ │
│ │ ON │
│ │ │
│ │ STRICT │
└────────────────────┴─────────────────────────────────┘
Controls whether to enable FIPS mode on the client side. The **--ssl-fips-mode** option
differs from other **--ssl-**_xxx_ options in that it is not used to establish encrypted
connections, but rather to affect which cryptographic operations to permit. See
Section 8.8, “FIPS Support”.
These **--ssl-fips-mode** values are permitted:
• OFF: Disable FIPS mode.
• ON: Enable FIPS mode.
• STRICT: Enable “strict” FIPS mode.
**Note**
If the OpenSSL FIPS Object Module is not available, the only permitted value for
**--ssl-fips-mode** is OFF. In this case, setting **--ssl-fips-mode** to ON or STRICT causes
the client to produce a warning at startup and to operate in non-FIPS mode.
As of MySQL 8.0.34, this option is deprecated. Expect it to be removed in a future
version of MySQL.
• **--tls-ciphersuites=**_ciphersuite_list_
┌────────────────────┬───────────────────────────────┐
│**Command-Line** **Format** │ --tls- │
│ │ ciphersuites=ciphersuite_list │
├────────────────────┼───────────────────────────────┤
│**Introduced** │ 8.0.16 │
├────────────────────┼───────────────────────────────┤
│**Type** │ String │
└────────────────────┴───────────────────────────────┘
The permissible ciphersuites for encrypted connections that use TLSv1.3. The value is a
list of one or more colon-separated ciphersuite names. The ciphersuites that can be named
for this option depend on the SSL library used to compile MySQL. For details, see
Section 8.3.2, “Encrypted Connection TLS Protocols and Ciphers”.
This option was added in MySQL 8.0.16.
• **--tls-version=**_protocol_list_
┌─────────────────────────┬──────────────────────────────────────────┐
│**Command-Line** **Format** │ --tls-version=protocol_list │
├─────────────────────────┼──────────────────────────────────────────┤
│**Type** │ String │
├─────────────────────────┼──────────────────────────────────────────┤
│**Default** **Value** **(**≥≥ **8.0.16)** │ │
│ │ TLSv1,TLSv1.1,TLSv1.2,TLSv1.3 │
│ │ (OpenSSL 1.1.1 or │
│ │ higher) │
│ │ │
│ │ TLSv1,TLSv1.1,TLSv1.2 │
│ │ (otherwise) │
├─────────────────────────┼──────────────────────────────────────────┤
│**Default** **Value** **(**≤≤ **8.0.15)** │ TLSv1,TLSv1.1,TLSv1.2 │
└─────────────────────────┴──────────────────────────────────────────┘
The permissible TLS protocols for encrypted connections. The value is a list of one or
more comma-separated protocol names. The protocols that can be named for this option
depend on the SSL library used to compile MySQL. For details, see Section 8.3.2,
“Encrypted Connection TLS Protocols and Ciphers”.
• **--user=**_user_name_, **-u** _user_name_
┌────────────────────┬───────────────────┐
│**Command-Line** **Format** │ --user=user_name, │
├────────────────────┼───────────────────┤
│**Type** │ String │
└────────────────────┴───────────────────┘
The user name of the MySQL account to use for connecting to the server.
If you are using the Rewriter plugin with MySQL 8.0.31 or later, you should grant this
user the SKIP_QUERY_REWRITE privilege.
• **--verbose**, **-v**
┌────────────────────┬───────────┐
│**Command-Line** **Format** │ --verbose │
└────────────────────┴───────────┘
Verbose mode. Print more information about what the program does.
• **--version**, **-V**
┌────────────────────┬───────────┐
│**Command-Line** **Format** │ --version │
└────────────────────┴───────────┘
Display version information and exit.
• **--vertical**, **-E**
┌────────────────────┬────────────┐
│**Command-Line** **Format** │ --vertical │
└────────────────────┴────────────┘
Print output vertically. This is similar to **--relative**, but prints output vertically.
• **--wait[=**_count_**]**, **-w[**_count_**]**
┌────────────────────┬────────┐
│**Command-Line** **Format** │ --wait │
└────────────────────┴────────┘
If the connection cannot be established, wait and retry instead of aborting. If a _count_
value is given, it indicates the number of times to retry. The default is one time.
• **--zstd-compression-level=**_level_
┌────────────────────┬────────────────────────────┐
│**Command-Line** **Format** │ --zstd-compression-level=# │
├────────────────────┼────────────────────────────┤
│**Introduced** │ 8.0.18 │
├────────────────────┼────────────────────────────┤
│**Type** │ Integer │
└────────────────────┴────────────────────────────┘
The compression level to use for connections to the server that use the zstd compression
algorithm. The permitted levels are from 1 to 22, with larger values indicating
increasing levels of compression. The default zstd compression level is 3. The
compression level setting has no effect on connections that do not use zstd compression.
For more information, see Section 6.2.8, “Connection Compression Control”.
This option was added in MySQL 8.0.18.
## COPYRIGHT
Copyright © 1997, 2024, Oracle and/or its affiliates.
This documentation is free software; you can redistribute it and/or modify it only under the
terms of the GNU General Public License as published by the Free Software Foundation; version
2 of the License.
This documentation is distributed in the hope that it will be useful, but WITHOUT ANY
WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR
PURPOSE. See the GNU General Public License for more details.
You should have received a copy of the GNU General Public License along with the program; if
not, write to the Free Software Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA
02110-1301 USA or see .
## SEE ALSO
For more information, please refer to the MySQL Reference Manual, which may already be
installed locally and which is also available online at .
## AUTHOR
Oracle Corporation ().
MySQL 8.0 12/13/2024 [MYSQLADMIN(1)](https://www.chedong.com/phpMan.php/man/MYSQLADMIN/1/markdown)