content_image/672930.jpg content_image/672931.jpg content_image/672940.jpg content_image/672932.jpg
<img src='content_image/672930.jpg'>

The path of the directory that contains certificate revocation-list files in PEM format. 

As of MySQL 8.0.16, this variable is dynamic and can be modified at runtime to affect the TSL context the server uses for new connections. See Server-Side Runtime Configuration and Monitoring for Encrypted Connections. Prior to MySQL 8.0.16, this variable can be set only at server startup. 

• ssl_fips_mode 

<img src='content_image/672931.jpg'>

Controls whether to enable FIPS mode on the server side. The ssl_fips_mode  system variable differs from other ssl_ xxx  system variables in that it is not used to control whether the server permits encrypted connections, but rather to affect which cryptographic operations are permitted. See Section 6.8, “FIPS Support” . 

These ssl_fips_mode  values are permitted: 

• OFF  (or 0): Disable FIPS mode. 

• ON  (or 1): Enable FIPS mode. 

• STRICT  (or 2): Enable “strict”  FIPS mode. 

<img src='content_image/672940.jpg'>

• ssl_key 

## Note 

If the OpenSSL FIPS Object Module is not available, the only permitted value for ssl_fips_mode  is OFF . In this case, setting ssl_fips_mode  to ON  or STRICT at startup causes the server to produce an error message and exit. 

<img src='content_image/672932.jpg'>

