MySQL 5.7 Reference Manual Including MySQL NDB Cluster 7.5 and NDB Cluster 7.6
MySQL supports the following keyring-related command-line options:
--keyring-migration-destination=
plugin
Command-Line Format | --keyring-migration-destination=plugin_name |
---|---|
Introduced | 5.7.21 |
Type | String |
The destination keyring plugin for key migration. See
Section 6.4.4.7, “Migrating Keys Between Keyring Keystores”. The format and
interpretation of the option value is the same as described
for the
--keyring-migration-source
option.
--keyring-migration-source
and
--keyring-migration-destination
are mandatory for all keyring migration operations. The
source and destination plugins must differ, and the
migration server must support both plugins.
--keyring-migration-host=
host_name
Command-Line Format | --keyring-migration-host=host_name |
---|---|
Introduced | 5.7.21 |
Type | String |
Default Value | localhost |
The host location of the running server that is currently
using one of the key migration keystores. See
Section 6.4.4.7, “Migrating Keys Between Keyring Keystores”. Migration always
occurs on the local host, so the option always specifies a
value for connecting to a local server, such as
localhost
, 127.0.0.1
,
::1
, or the local host IP address or host
name.
--keyring-migration-password[=
password
]
Command-Line Format | --keyring-migration-password[=password] |
---|---|
Introduced | 5.7.21 |
Type | String |
The password for connecting to the running server that is
currently using one of the key migration keystores. See
Section 6.4.4.7, “Migrating Keys Between Keyring Keystores”. If you omit the
password
value following the
option name on the command line, the server prompts for one.
Specifying a password on the command line should be considered insecure. See Section 6.1.2.1, “End-User Guidelines for Password Security”. You can use an option file to avoid giving the password on the command line. In this case, the file should have a restrictive mode and be accessible only to the account used to run the migration server.
--keyring-migration-port=
port_num
Command-Line Format | --keyring-migration-port=port_num |
---|---|
Introduced | 5.7.21 |
Type | Numeric |
Default Value | 3306 |
For TCP/IP connections, the port number for connecting to the running server that is currently using one of the key migration keystores. See Section 6.4.4.7, “Migrating Keys Between Keyring Keystores”.
--keyring-migration-socket=
path
Command-Line Format | --keyring-migration-socket={file_name|pipe_name} |
---|---|
Introduced | 5.7.21 |
Type | String |
For Unix socket file or Windows named pipe connections, the socket file or named pipe for connecting to the running server that is currently using one of the key migration keystores. See Section 6.4.4.7, “Migrating Keys Between Keyring Keystores”.
--keyring-migration-source=
plugin
Command-Line Format | --keyring-migration-source=plugin_name |
---|---|
Introduced | 5.7.21 |
Type | String |
The source keyring plugin for key migration. See Section 6.4.4.7, “Migrating Keys Between Keyring Keystores”.
The option value is similar to that for
--plugin-load
, except that
only one plugin library can be specified. The value is given
as
name
=
plugin_library
or plugin_library
. The
name
is the name of a plugin to
load, and plugin_library
is the
name of the library file that contains the plugin code. If
the plugin library is named without any preceding plugin
name, the server loads all plugins in the library. The
server looks for plugin library files in the directory named
by the plugin_dir
system
variable.
--keyring-migration-source
and
--keyring-migration-destination
are mandatory for all keyring migration operations. The
source and destination plugins must differ, and the
migration server must support both plugins.
--keyring-migration-user=
user_name
Command-Line Format | --keyring-migration-user=user_name |
---|---|
Introduced | 5.7.21 |
Type | String |
The user name for connecting to the running server that is currently using one of the key migration keystores. See Section 6.4.4.7, “Migrating Keys Between Keyring Keystores”.