--help, -h --help, -h

显示帮助信息并退出。Display a help message and exit.

--component-dir=dir_name --component-dir=dir_name

keyring 组件所在的目录。通常这是本地 MySQL 服务器 plugin_dir 系统变量的值。The directory where keyring components are located. This is typically the value of the plugin_dir system variable for the local MySQL server.

--defaults-extra-file=file_name --defaults-extra-file=file_name

在全局选项文件之后读取此选项文件，但（在 Unix 系统上）在用户选项文件之前。如果该文件不存在或无法访问，将发生错误。如果 file_name 不是绝对路径名，则相对于当前目录解释。Read this option file after the global option file but (on Unix) before the user option file. If the file does not exist or is otherwise inaccessible, an error occurs. If file_name is not an absolute path name, it is interpreted relative to the current directory.

有关此选项文件选项及其他选项文件选项的更多信息，请参见 第 6.2.2.3 节，“影响选项文件处理的命令行选项”。For additional information about this and other option-file options, see Section 6.2.2.3, “Command-Line Options that Affect Option-File Handling”.

--defaults-file=file_name --defaults-file=file_name

仅使用指定的选项文件。如果文件不存在或无法访问，将会发生错误。如果file_name不是绝对路径名，则将其相对于当前目录解释。Use only the given option file. If the file does not exist or is otherwise inaccessible, an error occurs. If file_name is not an absolute path name, it is interpreted relative to the current directory.

例外：即使使用--defaults-file，客户端程序仍会读取.mylogin.cnf。Exception: Even with --defaults-file, client programs read .mylogin.cnf.

有关此选项文件选项及其他选项文件选项的更多信息，请参见 第 6.2.2.3 节，“影响选项文件处理的命令行选项”。For additional information about this and other option-file options, see Section 6.2.2.3, “Command-Line Options that Affect Option-File Handling”.

--defaults-group-suffix=str --defaults-group-suffix=str

不仅读取常规的选项组，还读取具有常规名称并带有str后缀的组。例如，mysql_migrate_keyring通常读取[mysql_migrate_keyring]组。如果此选项作为--defaults-group-suffix=_other给出，mysql_migrate_keyring还会读取[mysql_migrate_keyring_other]组。Read not only the usual option groups, but also groups with the usual names and a suffix of str. For example, mysql_migrate_keyring normally reads the [mysql_migrate_keyring] group. If this option is given as --defaults-group-suffix=_other, mysql_migrate_keyring also reads the [mysql_migrate_keyring_other] group.

有关此选项文件选项及其他选项文件选项的更多信息，请参见 第 6.2.2.3 节，“影响选项文件处理的命令行选项”。For additional information about this and other option-file options, see Section 6.2.2.3, “Command-Line Options that Affect Option-File Handling”.

--destination-keyring=name --destination-keyring=name

用于密钥迁移的目标密钥环组件。选项值的格式和解释与 --source-keyring 选项中描述的相同。The destination keyring component for key migration. The format and interpretation of the option value is the same as described for the --source-keyring option.

--destination-keyring-configuration-dir=dir_name

此选项仅在目标密钥环组件全局配置文件包含 "read_local_config": true 时适用，表示组件配置包含在本地配置文件中。该选项的值指定包含该本地文件的目录。This option applies only if the destination keyring component global configuration file contains "read_local_config": true, indicating that component configuration is contained in the local configuration file. The option value specifies the directory containing that local file.

--get-server-public-key

向服务器请求用于基于 RSA 密钥对的密码交换所需的公钥。此选项适用于使用 caching_sha2_password 身份验证插件进行身份验证的客户端。对于该插件，服务器不会发送公钥，除非被请求。对于未使用该插件进行身份验证的账户，此选项将被忽略。当未使用基于 RSA 的密码交换时（例如客户端使用安全连接连接服务器时），此选项也将被忽略。Request from the server the public key required for RSA key pair-based password exchange. This option applies to clients that authenticate with the caching_sha2_password authentication plugin. For that plugin, the server does not send the public key unless requested. This option is ignored for accounts that do not authenticate with that plugin. It is also ignored if RSA-based password exchange is not used, as is the case when the client connects to the server using a secure connection.

如果提供了 --server-public-key-path=file_name 并且指定了有效的公钥文件，它将优先于 --get-server-public-key。If --server-public-key-path=file_name is given and specifies a valid public key file, it takes precedence over --get-server-public-key.

有关 caching_sha2_password 插件的信息，请参见 第 8.4.1.2 节，“缓存 SHA-2 可插拔认证”。For information about the caching_sha2_password plugin, see Section 8.4.1.2, “Caching SHA-2 Pluggable Authentication”.

--host=host_name, -h host_name --host=host_name, -h host_name

正在运行的服务器的主机位置当前正在使用某个密钥迁移密钥库。迁移总是在本地主机上进行，因此该选项总是指定用于连接本地服务器的值，例如 localhost、127.0.0.1、::1，或者本地主机 IP 地址或主机名。The host location of the running server that is currently using one of the key migration keystores. Migration always occurs on the local host, so the option always specifies a value for connecting to a local server, such as localhost, 127.0.0.1, ::1, or the local host IP address or host name.

--login-path=name --login-path=name

从名为登录路径的 .mylogin.cnf 登录路径文件中读取选项。“登录路径” 是一个选项组，包含指定要连接哪个 MySQL 服务器以及以哪个帐户进行身份验证的选项。要创建或修改登录路径文件，请使用 mysql_config_editor 工具。参见 第 6.6.7 节，“mysql_config_editor — MySQL 配置工具”。Read options from the named login path in the .mylogin.cnf login path file. A “login path” is an option group containing options that specify which MySQL server to connect to and which account to authenticate as. To create or modify a login path file, use the mysql_config_editor utility. See Section 6.6.7, “mysql_config_editor — MySQL Configuration Utility”.

有关此选项文件选项及其他选项文件选项的更多信息，请参见 第 6.2.2.3 节，“影响选项文件处理的命令行选项”。For additional information about this and other option-file options, see Section 6.2.2.3, “Command-Line Options that Affect Option-File Handling”.

--no-login-paths

跳过从登录路径文件读取选项。Skips reading options from the login path file.

有关信息，请参见 --login-path。See --login-path for related information.

有关此选项文件选项及其他选项文件选项的更多信息，请参见 第 6.2.2.3 节，“影响选项文件处理的命令行选项”。For additional information about this and other option-file options, see Section 6.2.2.3, “Command-Line Options that Affect Option-File Handling”.

--no-defaults

不读取任何选项文件。如果程序启动因从选项文件中读取未知选项而失败，可以使用 --no-defaults 来阻止它们被读取。Do not read any option files. If program startup fails due to reading unknown options from an option file, --no-defaults can be used to prevent them from being read.

例外情况是，如果存在，.mylogin.cnf 文件在所有情况下都会被读取。这允许即使使用 --no-defaults 时，也能以比命令行更安全的方式指定密码。要创建 .mylogin.cnf，请使用 mysql_config_editor 工具。请参见 第 6.6.7 节，“mysql_config_editor — MySQL 配置工具”。The exception is that the .mylogin.cnf file is read in all cases, if it exists. This permits passwords to be specified in a safer way than on the command line even when --no-defaults is used. To create .mylogin.cnf, use the mysql_config_editor utility. See Section 6.6.7, “mysql_config_editor — MySQL Configuration Utility”.

有关此选项文件选项及其他选项文件选项的更多信息，请参见 第 6.2.2.3 节，“影响选项文件处理的命令行选项”。For additional information about this and other option-file options, see Section 6.2.2.3, “Command-Line Options that Affect Option-File Handling”.

--online-migration

当正在运行的服务器使用 keyring 时，此选项是必需的。它告诉 mysql_migrate_keyring 执行在线密钥迁移。该选项具有以下效果：This option is mandatory when a running server is using the keyring. It tells mysql_migrate_keyring to perform an online key migration. The option has these effects:

--password[=password], -p[password] --password[=password], -p[password]

用于连接当前运行服务器的 MySQL 账户的密码，该服务器目前正在使用其中一个密钥迁移密钥库。密码值是可选的。如果未提供，mysql_migrate_keyring 会提示输入密码。如果提供，--password= 或 -p 与后面的密码之间 不能有空格。如果未指定密码选项，默认是不发送密码。The password of the MySQL account used for connecting to the running server that is currently using one of the key migration keystores. The password value is optional. If not given, mysql_migrate_keyring prompts for one. If given, there must be no space between --password= or -p and the password following it. If no password option is specified, the default is to send no password.

在命令行中指定密码应被视为不安全。为了避免在命令行中输入密码，请使用选项文件。请参阅 第 8.1.2.1 节，“终端用户密码安全指南”。Specifying a password on the command line should be considered insecure. To avoid giving the password on the command line, use an option file. See Section 8.1.2.1, “End-User Guidelines for Password Security”.

为了明确指定没有密码，并且 mysql_migrate_keyring 不应提示输入密码，请使用 --skip-password 选项。To explicitly specify that there is no password and that mysql_migrate_keyring should not prompt for one, use the --skip-password option.

--port=port_num, -P port_num --port=port_num, -P port_num

对于 TCP/IP 连接，用于连接当前正在使用某一个密钥迁移密钥库的运行服务器的端口号。For TCP/IP connections, the port number for connecting to the running server that is currently using one of the key migration keystores.

--print-defaults

打印程序名称以及它从选项文件中获取的所有选项。Print the program name and all options that it gets from option files.

有关此选项文件选项及其他选项文件选项的更多信息，请参见 第 6.2.2.3 节，“影响选项文件处理的命令行选项”。For additional information about this and other option-file options, see Section 6.2.2.3, “Command-Line Options that Affect Option-File Handling”.

--server-public-key-path=file_name --server-public-key-path=file_name

包含服务器所需的 RSA 密钥对密码交换的客户端副本公钥的 PEM 格式文件的路径名。此选项适用于使用 sha256_password（已弃用）或 caching_sha2_password 身份验证插件进行身份验证的客户端。对于不使用这些插件之一进行身份验证的帐户，将忽略此选项。如果未使用基于 RSA 的密码交换（例如客户端使用安全连接连接到服务器的情况），此选项也将被忽略。The path name to a file in PEM format containing a client-side copy of the public key required by the server for RSA key pair-based password exchange. This option applies to clients that authenticate with the sha256_password (deprecated) or caching_sha2_password authentication plugin. This option is ignored for accounts that do not authenticate with one of those plugins. It is also ignored if RSA-based password exchange is not used, as is the case when the client connects to the server using a secure connection.

如果提供了 --server-public-key-path=file_name 并且指定了有效的公钥文件，它将优先于 --get-server-public-key。If --server-public-key-path=file_name is given and specifies a valid public key file, it takes precedence over --get-server-public-key.

对于 sha256_password（已弃用），此选项仅在 MySQL 使用 OpenSSL 构建时才适用。For sha256_password (deprecated), this option applies only if MySQL was built using OpenSSL.

有关 sha256_password 和 caching_sha2_password 插件的信息，请参见 第 8.4.1.3 节，“SHA-256 可插拔认证” 和 第 8.4.1.2 节，“缓存 SHA-2 可插拔认证”。For information about the sha256_password and caching_sha2_password plugins, see Section 8.4.1.3, “SHA-256 Pluggable Authentication”, and Section 8.4.1.2, “Caching SHA-2 Pluggable Authentication”.

--socket=path, -S path --socket=path, -S path

对于 Unix 套接字文件或 Windows 命名管道连接，用于连接到当前正在使用某个密钥迁移密钥库的正在运行的服务器的套接字文件或命名管道。For Unix socket file or Windows named pipe connections, the socket file or named pipe for connecting to the running server that is currently using one of the key migration keystores.

在 Windows 上，此选项仅在服务器启用支持命名管道连接的 named_pipe 系统变量启动时才适用。此外，进行连接的用户必须是由 named_pipe_full_access_group 系统变量指定的 Windows 组的成员。On Windows, this option applies only if the server was started with the named_pipe system variable enabled to support named-pipe connections. In addition, the user making the connection must be a member of the Windows group specified by the named_pipe_full_access_group system variable.

--source-keyring=name --source-keyring=name

用于密钥迁移的源密钥环组件。该组件库文件名应指定为不带任何平台特定扩展名，如 .so 或 .dll。例如，要使用库文件为 component_keyring_file.so 的组件，则将选项指定为 --source-keyring=component_keyring_file。The source keyring component for key migration. This is the component library file name specified without any platform-specific extension such as .so or .dll. For example, to use the component for which the library file is component_keyring_file.so, specify the option as --source-keyring=component_keyring_file.

--source-keyring-configuration-dir=dir_name --source-keyring-configuration-dir=dir_name

此选项仅在源 keyring 组件的全局配置文件包含 "read_local_config": true 时适用，这表明组件配置包含在本地配置文件中。选项值指定包含该本地文件的目录。This option applies only if the source keyring component global configuration file contains "read_local_config": true, indicating that component configuration is contained in the local configuration file. The option value specifies the directory containing that local file.

--ssl*

以--ssl开头的选项指定是否使用加密连接到服务器，并指示在哪里可以找到 SSL 密钥和证书。请参阅 加密连接的命令选项。Options that begin with --ssl specify whether to connect to the server using encryption and indicate where to find SSL keys and certificates. See Command Options for Encrypted Connections.

--ssl-fips-mode={OFF|ON|STRICT} --ssl-fips-mode={OFF|ON|STRICT}

控制是否在客户端启用 FIPS 模式。--ssl-fips-mode 选项不同于其他 --ssl-xxx 选项，因为它不是用于建立加密连接，而是用于影响允许执行哪些加密操作。参见 第 8.8 节，“FIPS 支持”。Controls whether to enable FIPS mode on the client side. The --ssl-fips-mode option differs from other --ssl-xxx options in that it is not used to establish encrypted connections, but rather to affect which cryptographic operations to permit. See Section 8.8, “FIPS Support”.

以下 --ssl-fips-mode 值是允许的：These --ssl-fips-mode values are permitted:

此选项已弃用。预计将在未来的 MySQL 版本中移除。This option is deprecated. Expect it to be removed in a future version of MySQL.

--tls-ciphersuites=ciphersuite_list

用于 TLSv1.3 加密连接的允许密码套件。该值是一个或多个用冒号分隔的密码套件名称的列表。此选项可指定的密码套件取决于用于编译 MySQL 的 SSL 库。有关详细信息，请参见 第 8.3.2 节，“加密连接的 TLS 协议和密码”。The permissible ciphersuites for encrypted connections that use TLSv1.3. The value is a list of one or more colon-separated ciphersuite names. The ciphersuites that can be named for this option depend on the SSL library used to compile MySQL. For details, see Section 8.3.2, “Encrypted Connection TLS Protocols and Ciphers”.

--tls-sni-servername=server_name --tls-sni-servername=server_name

如果指定了名称，该名称将通过 mysql_options() 的 MYSQL_OPT_TLS_SNI_SERVERNAME 选项传递给 libmysqlclient C API 库。服务器名称不区分大小写。要显示客户端为当前会话指定的服务器名称（如果有），请检查 Tls_sni_server_name 状态变量。When specified, the name is passed to the libmysqlclient C API library using the MYSQL_OPT_TLS_SNI_SERVERNAME option of mysql_options(). The server name is not case-sensitive. To show which server name the client specified for the current session, if any, check the Tls_sni_server_name status variable.

服务器名称指示（SNI）是 TLS 协议的一个扩展（必须使用支持 TLS 扩展的 OpenSSL 编译此选项才能生效）。MySQL 对 SNI 的实现仅代表客户端。Server Name Indication (SNI) is an extension to the TLS protocol (OpenSSL must be compiled using TLS extensions for this option to function). The MySQL implementation of SNI represents the client-side only.

--tls-version=protocol_list --tls-version=protocol_list

用于加密连接的允许 TLS 协议。值是一个或多个以逗号分隔的协议名称列表。此选项可指定的协议取决于用于编译 MySQL 的 SSL 库。详情请参见 第 8.3.2 节，“加密连接 TLS 协议和密码”。The permissible TLS protocols for encrypted connections. The value is a list of one or more comma-separated protocol names. The protocols that can be named for this option depend on the SSL library used to compile MySQL. For details, see Section 8.3.2, “Encrypted Connection TLS Protocols and Ciphers”.

--user=user_name, -u user_name --user=user_name, -u user_name

用于连接当前正在使用某个密钥迁移密钥库的运行服务器的 MySQL 帐户的用户名。The user name of the MySQL account used for connecting to the running server that is currently using one of the key migration keystores.

--verbose, -v

详细模式。生成更多关于程序运行情况的输出。Verbose mode. Produce more output about what the program does.

--version, -V

显示版本信息并退出。Display version information and exit.