--default-auth=plugin

A hint about which client-side authentication plugin to use. See Section 6.2.17, “Pluggable Authentication”.关于使用哪个客户端身份验证插件的提示。参阅第6.2.17节，“可插拔身份验证”。

--host=host_name, -h host_name

The host on which the MySQL server is running. The value can be a host name, IPv4 address, or IPv6 address. The default value is localhost.MySQL服务器运行的主机。该值可以是主机名、IPv4地址或IPv6地址。默认值为localhost。

--password[=pass_val], -p[pass_val]

The password of the MySQL account used for connecting to the server. 用于连接到服务器的MySQL帐户的密码。The password value is optional. If not given, the program prompts for one. 密码值是可选的。如果没有给出，程序会提示输入一个。If given, there must be no space between --password= or -p and the password following it. 如果给定，则--password=或-p与后面的密码之间不得有空格。If no password option is specified, the default is to send no password.如果未指定密码选项，则默认为不发送密码。

Specifying a password on the command line should be considered insecure. To avoid giving the password on the command line, use an option file. 在命令行上指定密码应被视为不安全。为了避免在命令行上输入密码，请使用选项文件。See Section 6.1.2.1, “End-User Guidelines for Password Security”.请参阅第6.1.2.1节，“密码安全最终用户指南”。

To explicitly specify that there is no password and that the client program should not prompt for one, use the --skip-password option.要明确指定没有密码并且客户端程序不应提示输入密码，请使用--skip-password选项。

--pipe, -W

On Windows, connect to the server using a named pipe. 在Windows上，使用命名管道连接到服务器。This option applies only if the server was started with the named_pipe system variable enabled to support named-pipe connections. 仅当服务器启动时启用了named_pipe系统变量以支持命名管道连接时，此选项才适用。In addition, the user making the connection must be a member of the Windows group specified by the named_pipe_full_access_group system variable.此外，进行连接的用户必须是named_pipe_full_access_group系统变量指定的Windows组的成员。

--plugin-dir=dir_name

The directory in which to look for plugins. Specify this option if the --default-auth option is used to specify an authentication plugin but the client program does not find it. 查找插件的目录。如果使用--default-auth选项指定身份验证插件，但客户端程序找不到它，请指定此选项。See Section 6.2.17, “Pluggable Authentication”.请参阅第6.2.17节，“可插拔身份验证”。

--port=port_num, -P port_num

For TCP/IP connections, the port number to use. The default port number is 3306.对于TCP/IP连接，要使用的端口号。默认端口号为3306。

--protocol={TCP|SOCKET|PIPE|MEMORY}

This option explicitly specifies which transport protocol to use for connecting to the server. 此选项明确指定用于连接到服务器的传输协议。It is useful when other connection parameters normally result in use of a protocol other than the one you want. 当其他连接参数通常导致使用与您想要的协议不同的协议时，它很有用。For example, connections on Unix to localhost are made using a Unix socket file by default:例如，默认情况下，Unix上到localhost的连接是使用Unix套接字文件进行的：

mysql --host=localhost

To force TCP/IP transport to be used instead, specify a --protocol option:要强制使用TCP/IP传输，请指定--protocol选项：

mysql --host=localhost --protocol=TCP

The following table shows the permissible --protocol option values and indicates the applicable platforms for each value. The values are not case-sensitive.下表显示了允许的--protocol选项值，并指出了每个值的适用平台。这些值不区分大小写。

See also Section 4.2.7, “Connection Transport Protocols”另见第4.2.7节，“连接传输协议”

--shared-memory-base-name=name

On Windows, the shared-memory name to use for connections made using shared memory to a local server. The default value is MYSQL. The shared-memory name is case-sensitive.在Windows上，用于使用共享内存连接到本地服务器的共享内存名称。默认值为MYSQL。共享内存名称区分大小写。

This option applies only if the server was started with the shared_memory system variable enabled to support shared-memory connections.此选项仅适用于服务器启动时启用了shared_memory系统变量以支持共享内存连接的情况。

--socket=path, -S path

On Unix, the name of the Unix socket file to use for connections made using a named pipe to a local server. The default Unix socket file name is /tmp/mysql.sock.在Unix上，用于使用命名管道连接到本地服务器的Unix套接字文件的名称。默认的Unix套接字文件名是/tmp/mysql.sock。

On Windows, the name of the named pipe to use for connections to a local server. 在Windows上，用于连接到本地服务器的命名管道的名称。The default Windows pipe name is MySQL. 默认的Windows管道名称是MySQL。The pipe name is not case-sensitive.管道名称不区分大小写。

On Windows, this option applies only if the server was started with the named_pipe system variable enabled to support named-pipe connections. 在Windows上，此选项仅在服务器启动时启用了named_pipe系统变量以支持命名管道连接时适用。In addition, the user making the connection must be a member of the Windows group specified by the named_pipe_full_access_group system variable.此外，进行连接的用户必须是named_pipe_full_access_group系统变量指定的Windows组的成员。

--user=user_name, -u user_name

The user name of the MySQL account to use for connecting to the server. The default user name is ODBC on Windows or your Unix login name on Unix.用于连接到服务器的MySQL帐户的用户名。默认用户名在Windows上为ODBC，在Unix上为Unix登录名。

--get-server-public-key

Request from the server the public key required for RSA key pair-based password exchange. 从服务器请求基于RSA密钥对的密码交换所需的公钥。This option applies to clients that authenticate with the caching_sha2_password authentication plugin. 此选项适用于使用caching_sha2_password身份验证插件进行身份验证的客户端。For that plugin, the server does not send the public key unless requested. This option is ignored for accounts that do not authenticate with that plugin. 对于该插件，除非请求，否则服务器不会发送公钥。对于不使用该插件进行身份验证的帐户，此选项将被忽略。It is also ignored if RSA-based password exchange is not used, as is the case when the client connects to the server using a secure connection.如果不使用基于RSA的密码交换，它也会被忽略，就像客户端使用安全连接连接到服务器的情况一样。

If --server-public-key-path=file_name is given and specifies a valid public key file, it takes precedence over --get-server-public-key.如果给定了--server-public-key-path=file_name并指定了一个有效的公钥文件，则它优先于--get-server-public-key。

For information about the caching_sha2_password plugin, see Section 6.4.1.2, “Caching SHA-2 Pluggable Authentication”.有关caching_sha2_password插件的信息，请参阅第6.4.1.2节，“缓存SHA-2可插拔身份验证”。

--server-public-key-path=file_name

The path name to a file in PEM format containing a client-side copy of the public key required by the server for RSA key pair-based password exchange. PEM格式文件的路径名，该文件包含服务器基于RSA密钥对进行密码交换所需的公钥客户端副本。This option applies to clients that authenticate with the sha256_password or caching_sha2_password authentication plugin. 此选项适用于使用sha256_password或caching_sha2_password身份验证插件进行身份验证的客户端。This option is ignored for accounts that do not authenticate with one of those plugins. 对于未使用这些插件之一进行身份验证的帐户，此选项将被忽略。It is also ignored if RSA-based password exchange is not used, as is the case when the client connects to the server using a secure connection.如果不使用基于RSA的密码交换，它也会被忽略，就像客户端使用安全连接连接到服务器的情况一样。

If --server-public-key-path=file_name is given and specifies a valid public key file, it takes precedence over --get-server-public-key.如果给定了--server-public-key-path=file_name并指定了一个有效的公钥文件，则它优先于--get-server-public-key。

This option is available only if MySQL was built using OpenSSL.仅当MySQL使用OpenSSL构建时，此选项才可用。

For information about the sha256_password and caching_sha2_password plugins, see Section 6.4.1.3, “SHA-256 Pluggable Authentication”, and Section 6.4.1.2, “Caching SHA-2 Pluggable Authentication”.有关sha256_password和caching_sha2_password插件的信息，请参阅第6.4.1.3节，“SHA-256可插拔身份验证”和第6.4.1.2节，“缓存SHA-2可插拔身份认证”。

--ssl-ca=file_name

The path name of the Certificate Authority (CA) certificate file in PEM format. The file contains a list of trusted SSL Certificate Authorities.PEM格式的证书颁发机构（CA）证书文件的路径名。该文件包含受信任的SSL证书颁发机构列表。

To tell the client not to authenticate the server certificate when establishing an encrypted connection to the server, specify neither --ssl-ca nor --ssl-capath. 要告诉客户端在建立到服务器的加密连接时不要对服务器证书进行身份验证，请既不指定--ssl-ca也不指定--ssl-capath。The server still verifies the client according to any applicable requirements established for the client account, and it still uses any ssl_ca or ssl_capath system variable values specified on the server side.服务器仍然根据为客户端帐户建立的任何适用要求验证客户端，并且它仍然使用服务器端指定的任何ssl_ca或ssl_capath系统变量值。

To specify the CA file for the server, set the ssl_ca system variable.要为服务器指定CA文件，请设置ssl_ca系统变量。

--ssl-capath=dir_name

The path name of the directory that contains trusted SSL certificate authority (CA) certificate files in PEM format.包含PEM格式的受信任SSL证书颁发机构（CA）证书文件的目录的路径名。

To tell the client not to authenticate the server certificate when establishing an encrypted connection to the server, specify neither --ssl-ca nor --ssl-capath. 要告诉客户端在建立到服务器的加密连接时不要对服务器证书进行身份验证，请既不指定--ssl-ca也不指定--ssl-capath。The server still verifies the client according to any applicable requirements established for the client account, and it still uses any ssl_ca or ssl_capath system variable values specified on the server side.服务器仍然根据为客户端帐户建立的任何适用要求验证客户端，并且它仍然使用服务器端指定的任何ssl_ca或ssl_capath系统变量值。

To specify the CA directory for the server, set the ssl_capath system variable.要指定服务器的CA目录，请设置ssl_capath系统变量。

--ssl-cert=file_name

The path name of the client SSL public key certificate file in PEM format.PEM格式的客户端SSL公钥证书文件的路径名。

To specify the server SSL public key certificate file, set the ssl_cert system variable.要指定服务器SSL公钥证书文件，请设置ssl_cert系统变量。

--ssl-cipher=cipher_list

The list of permissible encryption ciphers for connections that use TLS protocols up through TLSv1.2. If no cipher in the list is supported, encrypted connections that use these TLS protocols do not work.在TLSv1.2之前使用TLS协议的连接的允许加密密码列表。如果列表中不支持密码，则使用这些TLS协议的加密连接将无法工作。

For greatest portability, cipher_list should be a list of one or more cipher names, separated by colons. Examples:为了获得最大的可移植性，cipher_list应该是一个由冒号分隔的一个或多个密码名称的列表。示例：

--ssl-cipher=AES128-SHA
--ssl-cipher=DHE-RSA-AES128-GCM-SHA256:AES128-SHA

OpenSSL supports the syntax for specifying ciphers described in the OpenSSL documentation at https://www.openssl.org/docs/manmaster/man1/ciphers.html.OpenSSL支持OpenSSL文档https://www.openssl.org/docs/manmaster/man1/ciphers.html中描述的指定密码的语法。

For information about which encryption ciphers MySQL supports, see Section 6.3.2, “Encrypted Connection TLS Protocols and Ciphers”.有关MySQL支持哪些加密密码的信息，请参阅第6.3.2节，“加密连接TLS协议和密码”。

To specify the encryption ciphers for the server, set the ssl_cipher system variable.要为服务器指定加密密码，请设置ssl_cipher系统变量。

--ssl-crl=file_name

The path name of the file containing certificate revocation lists in PEM format.包含PEM格式证书吊销列表的文件的路径名。

If neither --ssl-crl nor --ssl-crlpath is given, no CRL checks are performed, even if the CA path contains certificate revocation lists.如果未给出--ssl-crl或--ssl-crlpath，则不会执行crl检查，即使CA路径包含证书吊销列表。

To specify the revocation-list file for the server, set the ssl_crl system variable.要指定服务器的吊销列表文件，请设置ssl_crl系统变量。

--ssl-crlpath=dir_name

The path name of the directory that contains certificate revocation-list files in PEM format.包含PEM格式的证书吊销列表文件的目录的路径名。

If neither --ssl-crl nor --ssl-crlpath is given, no CRL checks are performed, even if the CA path contains certificate revocation lists.如果未给出--ssl-crl或--ssl-crlpath，则不会执行crl检查，即使CA路径包含证书吊销列表。

To specify the revocation-list directory for the server, set the ssl_crlpath system variable.要指定服务器的吊销列表目录，请设置ssl_crlpath系统变量。

--ssl-fips-mode={OFF|ON|STRICT}

Controls whether to enable FIPS mode on the client side. 控制是否在客户端启用FIPS模式。The --ssl-fips-mode option differs from other --ssl-xxx options in that it is not used to establish encrypted connections, but rather to affect which cryptographic operations to permit. --ssl-fips-mode选项与其他--ssl-xxx选项的不同之处在于，它不用于建立加密连接，而是影响允许的加密操作。See Section 6.8, “FIPS Support”.请参阅第6.8节，“FIPS支持”。

These --ssl-fips-mode values are permissible:这些--ssl-fips-mode值是允许的：

To specify the FIPS mode for the server, set the ssl_fips_mode system variable.要为服务器指定FIPS模式，请设置ssl_fips_mode系统变量。

--ssl-key=file_name

The path name of the client SSL private key file in PEM format. For better security, use a certificate with an RSA key size of at least 2048 bits.PEM格式的客户端SSL私钥文件的路径名。为了提高安全性，请使用RSA密钥大小至少为2048位的证书。

If the key file is protected by a passphrase, the client program prompts the user for the passphrase. The password must be given interactively; it cannot be stored in a file. If the passphrase is incorrect, the program continues as if it could not read the key.如果密钥文件受密码保护，客户端程序会提示用户输入密码。密码必须以交互方式给出；它不能存储在文件中。如果密码不正确，程序将继续，就像无法读取密钥一样。

To specify the server SSL private key file, set the ssl_key system variable.要指定服务器SSL私钥文件，请设置ssl_key系统变量。

--ssl-mode=mode

This option specifies the desired security state of the connection to the server. These mode values are permissible, in order of increasing strictness:此选项指定与服务器连接的所需安全状态。按照严格程度的顺序，这些模式值是允许的：

The --ssl-mode option interacts with CA certificate options as follows:--ssl-mode选项与CA证书选项交互如下：

To require use of encrypted connections by a MySQL account, use CREATE USER to create the account with a REQUIRE SSL clause, or use ALTER USER for an existing account to add a REQUIRE SSL clause. 要要求MySQL帐户使用加密连接，请使用CREATE USER创建具有REQUIRE SSL子句的帐户，或对现有帐户使用ALTER USER添加REQUIRE SSL子句。This causes connection attempts by clients that use the account to be rejected unless MySQL supports encrypted connections and an encrypted connection can be established.这会导致使用该帐户的客户端的连接尝试被拒绝，除非MySQL支持加密连接并且可以建立加密连接。

The REQUIRE clause permits other encryption-related options, which can be used to enforce security requirements stricter than REQUIRE SSL. REQUIRE子句允许其他与加密相关的选项，这些选项可用于执行比REQUIRE SSL更严格的安全要求。For additional details about which command options may or must be specified by clients that connect using accounts configured using the various REQUIRE options, see CREATE USER SSL/TLS Options.有关使用使用各种REQUIRE选项配置的帐户进行连接的客户端可以或必须指定哪些命令选项的更多详细信息，请参阅CREATE USER SSL/TLS选项。

--tls-ciphersuites=ciphersuite_list

This option specifies which ciphersuites the client permits for encrypted connections that use TLSv1.3. The value is a list of zero or more colon-separated ciphersuite names. For example:此选项指定客户端允许哪些密码适用于使用TLSv1.3的加密连接。该值是零个或多个冒号分隔的密码套件名称的列表。例如：

mysql --tls-ciphersuites="suite1:suite2:suite3"

The ciphersuites that can be named for this option depend on the SSL library used to compile MySQL. If this option is not set, the client permits the default set of ciphersuites. I可以为此选项命名的密码套件取决于用于编译MySQL的SSL库。如果未设置此选项，则客户端允许使用默认的密码套件集。一、f the option is set to the empty string, no ciphersuites are enabled and encrypted connections cannot be established. 如果该选项设置为空字符串，则不会启用任何密码套件，也无法建立加密连接。For more information, see Section 6.3.2, “Encrypted Connection TLS Protocols and Ciphers”.有关更多信息，请参阅第6.3.2节，“加密连接TLS协议和密码”。

This option was added in MySQL 8.0.16.此选项是在MySQL 8.0.16中添加的。

To specify which ciphersuites the server permits, set the tls_ciphersuites system variable.要指定服务器允许哪些密码套件，请设置tls_cryptosuites系统变量。

--tls-version=protocol_list

This option specifies the TLS protocols the client permits for encrypted connections. The value is a list of one or more comma-separated protocol versions. For example:此选项指定客户端允许用于加密连接的TLS协议。该值是一个或多个逗号分隔的协议版本的列表。例如：

mysql --tls-version="TLSv1.1,TLSv1.2"

The protocols that can be named for this option depend on the SSL library used to compile MySQL. Permitted protocols should be chosen such as not to leave “holes” in the list. For example, these values do not have holes:可以为此选项命名的协议取决于用于编译MySQL的SSL库。应选择允许的协议，以免在列表中留下“漏洞”。例如，这些值没有孔：

--tls-version="TLSv1,TLSv1.1,TLSv1.2,TLSv1.3"
--tls-version="TLSv1.1,TLSv1.2,TLSv1.3"
--tls-version="TLSv1.2,TLSv1.3"
--tls-version="TLSv1.3"

These values do have holes and should not be used:这些值确实有孔，不应使用：

--tls-version="TLSv1,TLSv1.2"
--tls-version="TLSv1.1,TLSv1.3"

For details, see Section 6.3.2, “Encrypted Connection TLS Protocols and Ciphers”.有关详细信息，请参阅第6.3.2节，“加密连接TLS协议和密码”。

To specify which TLS protocols the server permits, set the tls_version system variable.要指定服务器允许哪些TLS协议，请设置tls_version系统变量。

--compress, -C

Compress all information sent between the client and the server if possible.如果可能的话，压缩客户端和服务器之间发送的所有信息。

As of MySQL 8.0.18, this option is deprecated. Expect it to be removed in a future version of MySQL. See Configuring Legacy Connection Compression.从MySQL 8.0.18开始，此选项已被弃用。预计它将在MySQL的未来版本中被删除。请参阅配置传统连接压缩。

--compression-algorithms=value

The permitted compression algorithms for connections to the server. 允许用于连接到服务器的压缩算法。The available algorithms are the same as for the protocol_compression_algorithms system variable. 可用的算法与protocol_compressionalgorithms系统变量的算法相同。The default value is uncompressed.默认值为uncompressed（未压缩）。

This option was added in MySQL 8.0.18.此选项是在MySQL 8.0.18中添加的。

--zstd-compression-level=level

The compression level to use for connections to the server that use the zstd compression algorithm. 用于连接到使用zstd压缩算法的服务器的压缩级别。The permitted levels are from 1 to 22, with larger values indicating increasing levels of compression. 允许的级别为1到22，较大的值表示压缩级别增加。The default zstd compression level is 3. 默认的zstd压缩级别为3。The compression level setting has no effect on connections that do not use zstd compression.压缩级别设置对不使用zstd压缩的连接没有影响。

This option was added in MySQL 8.0.18.此选项是在MySQL 8.0.18中添加的。