content_image/673875.jpg content_image/673873.jpg
• MYSQL_OPENSSL_UDF_DH_BITS_THRESHOLD : Maximum key length in bits for create_dh_parameters() . The minimum and maximum values for this variable are 1,024 and 10,000. 

To use any of these environment variables, set them in the environment of the process that starts the server. If set, their values take precedence over the maximum key lengths imposed by OpenSSL. For example, to set a maximum key length of 4,096 bits for DSA and RSA keys for create_asymmetric_priv_key() , set these variables: 

export MYSQL_OPENSSL_UDF_DSA_BITS_THRESHOLD=4096 export MYSQL_OPENSSL_UDF_RSA_BITS_THRESHOLD=4096 

The example uses Bourne shell syntax. The syntax for other shells may differ. 

## 6.6.3 MySQL Enterprise Encryption Function Reference 

<img src='content_image/673875.jpg'>

## 6.6.4 MySQL Enterprise Encryption Function Descriptions 

MySQL Enterprise Encryption functions have these general characteristics: 

•For arguments of the wrong type or an incorrect number of arguments, each function returns an error. 

•If the arguments are not suitable to permit a function to perform the requested operation, it returns NULL or 0 as appropriate. This occurs, for example, if a function does not support a specified algorithm, a key length is too short or long, or a string expected to be a key string in PEM format is not a valid key. (OpenSSL imposes its own key-length limits, and server administrators can impose additional limits on maximum key length by setting environment variables. See Section 6.6.2, “MySQL Enterprise Encryption Usage and Examples” .) 

•The underlying SSL library takes care of randomness initialization. 

Several of the functions take an encryption algorithm argument. The following table summarizes the supported algorithms by function. 

<img src='content_image/673873.jpg'>

