content_image/717771.jpg content_image/717775.jpg content_image/717776.jpg
<img src='content_image/717771.jpg'>

The absolute path name of a local file accessible to the MySQL server that contains a properly formatted TLS certificate authority for use by the keyring_hashicorp  plugin. This variable is unavailable unless that plugin is installed. 

If this variable is not set, the keyring_hashicorp  plugin opens an HTTPS connection without using server certificate verification, and trusts any certificate delivered by the HashiCorp Vault server. For this to be safe, it must be assumed that the Vault server is not malicious and that no man-in-the-middle attack is possible. If those assumptions are invalid, set keyring_hashicorp_ca_path  to the path of a trusted CA certificate. (For example, for the instructions in Certificate and Key Preparation, this is the company.crt  file.) 

• keyring_hashicorp_caching 

<img src='content_image/717775.jpg'>

Whether to enable the optional in-memory key cache used by the keyring_hashicorp  plugin to cache keys from the HashiCorp Vault server. This variable is unavailable unless that plugin is installed. If the cache is enabled, the plugin populates it during initialization. Otherwise, the plugin populates only the key list during initialization. 

Enabling the cache is a compromise: It improves performance, but maintains a copy of sensitive key information in memory, which may be undesirable for security purposes. 

• keyring_hashicorp_commit_auth_path 

<img src='content_image/717776.jpg'>

