--help, -h

Display a help message and exit.显示帮助消息并退出。

--component-dir=dir_name

The directory where keyring components are located. This is typically the value of the plugin_dir system variable for the local MySQL server.键环组件所在的目录。这通常是本地MySQL服务器的plugin_dir系统变量的值。

--defaults-extra-file=file_name

Read this option file after the global option file but (on Unix) before the user option file. If the file does not exist or is otherwise inaccessible, an error occurs. If file_name is not an absolute path name, it is interpreted relative to the current directory.在全局选项文件之后读取此选项文件，但（在Unix上）在用户选项文件之前读取。如果文件不存在或无法访问，则会发生错误。如果file_name不是绝对路径名，则会相对于当前目录进行解释。

For additional information about this and other option-file options, see Section 4.2.2.3, “Command-Line Options that Affect Option-File Handling”.有关此选项和其他选项文件选项的更多信息，请参阅第4.2.2.3节，“影响选项文件处理的命令行选项”。

--defaults-file=file_name

Use only the given option file. If the file does not exist or is otherwise inaccessible, an error occurs. 仅使用给定的选项文件。如果文件不存在或无法访问，则会发生错误。If file_name is not an absolute path name, it is interpreted relative to the current directory.如果file_name不是绝对路径名，则会相对于当前目录进行解释。

Exception: Even with --defaults-file, client programs read .mylogin.cnf.异常：即使使用--defaults-file，客户端程序也会读取.mylogin.cnf。

For additional information about this and other option-file options, see Section 4.2.2.3, “Command-Line Options that Affect Option-File Handling”.有关此选项和其他选项文件选项的更多信息，请参阅第4.2.2.3节，“影响选项文件处理的命令行选项”。

--defaults-group-suffix=str

Read not only the usual option groups, but also groups with the usual names and a suffix of str. 不仅要读取常用的选项组，还要读取具有常用名称和后缀str的组。For example, mysql_migrate_keyring normally reads the [mysql_migrate_keyring] group. If this option is given as --defaults-group-suffix=_other, mysql_migrate_keyring also reads the [mysql_migrate_keyring_other] group.例如，mysql_migrate_keyring通常读取[mysql_migrate_keyring]组。如果将此选项设置为--defaults-group-suffix=_other，mysql_migrate_keyring也会读取[mysql_migrate_keyring_other]组。

For additional information about this and other option-file options, see Section 4.2.2.3, “Command-Line Options that Affect Option-File Handling”.有关此选项和其他选项文件选项的更多信息，请参阅第4.2.2.3节，“影响选项文件处理的命令行选项”。

--destination-keyring=name

The destination keyring component for key migration. The format and interpretation of the option value is the same as described for the --source-keyring option.密钥迁移的目标密钥环组件。选项值的格式和解释与--source-keyring选项的描述相同。

--destination-keyring-configuration-dir=dir_name

This option applies only if the destination keyring component global configuration file contains "read_local_config": true, indicating that component configuration is contained in the local configuration file. The option value specifies the directory containing that local file.仅当目标密钥环组件全局配置文件包含"read_local_config": true时，此选项才适用，表示组件配置包含在本地配置文件中。选项值指定包含该本地文件的目录。

--get-server-public-key

Request from the server the public key required for RSA key pair-based password exchange. 从服务器请求基于RSA密钥对的密码交换所需的公钥。This option applies to clients that authenticate with the caching_sha2_password authentication plugin. For that plugin, the server does not send the public key unless requested. 此选项适用于使用caching_sha2_password身份验证插件进行身份验证的客户端。对于该插件，除非请求，否则服务器不会发送公钥。This option is ignored for accounts that do not authenticate with that plugin. It is also ignored if RSA-based password exchange is not used, as is the case when the client connects to the server using a secure connection.对于不使用该插件进行身份验证的帐户，此选项将被忽略。如果不使用基于RSA的密码交换，它也会被忽略，就像客户端使用安全连接连接到服务器的情况一样。

If --server-public-key-path=file_name is given and specifies a valid public key file, it takes precedence over --get-server-public-key.如果给定了--server-public-key-path=file_name并指定了一个有效的公钥文件，则它优先于--get-server-public-key。

For information about the caching_sha2_password plugin, see Section 6.4.1.2, “Caching SHA-2 Pluggable Authentication”.有关caching_sha2_password插件的信息，请参阅第6.4.1.2节，“缓存SHA-2可插拔身份验证”。

--host=host_name, -h host_name

The host location of the running server that is currently using one of the key migration keystores. 当前正在使用其中一个密钥迁移密钥存储库的运行服务器的主机位置。Migration always occurs on the local host, so the option always specifies a value for connecting to a local server, such as localhost, 127.0.0.1, ::1, or the local host IP address or host name.迁移始终发生在本地主机上，因此该选项始终指定连接到本地服务器的值，例如localhost、127.0.0.1、::1或本地主机IP地址或主机名。

--login-path=name

Read options from the named login path in the .mylogin.cnf login path file. 从.mylogin.cnf登录路径文件中的指定登录路径读取选项。A “login path” is an option group containing options that specify which MySQL server to connect to and which account to authenticate as. “登录路径”是一个选项组，其中包含指定要连接到哪个MySQL服务器以及要作为哪个帐户进行身份验证的选项。To create or modify a login path file, use the mysql_config_editor utility. 要创建或修改登录路径文件，请使用mysql_config_editor实用程序。See Section 4.6.7, “mysql_config_editor — MySQL Configuration Utility”.请参阅第4.6.7节，“mysql_config编辑器--mysql配置实用程序”。

For additional information about this and other option-file options, see Section 4.2.2.3, “Command-Line Options that Affect Option-File Handling”.有关此选项和其他选项文件选项的更多信息，请参阅第4.2.2.3节，“影响选项文件处理的命令行选项”。

--no-defaults

Do not read any option files. If program startup fails due to reading unknown options from an option file, --no-defaults can be used to prevent them from being read.不要读取任何选项文件。如果程序启动因从选项文件中读取未知选项而失败，则使用--no-defaults来阻止读取它们。

The exception is that the .mylogin.cnf file is read in all cases, if it exists. 例外的是，.mylogin.cnf文件在所有情况下都会被读取（如果存在的话）。This permits passwords to be specified in a safer way than on the command line even when --no-defaults is used. 这允许以比命令行更安全的方式指定密码，即使使用--no-defaults。To create .mylogin.cnf, use the mysql_config_editor utility. 要创建.mylogin.cnf，请使用mysql_config_editor实用程序。See Section 4.6.7, “mysql_config_editor — MySQL Configuration Utility”.请参阅第4.6.7节，“mysql_config编辑器--mysql配置实用程序”。

For additional information about this and other option-file options, see Section 4.2.2.3, “Command-Line Options that Affect Option-File Handling”.有关此选项和其他选项文件选项的更多信息，请参阅第4.2.2.3节，“影响选项文件处理的命令行选项”。

--online-migration

This option is mandatory when a running server is using the keyring. It tells mysql_migrate_keyring to perform an online key migration. The option has these effects:当正在运行的服务器正在使用密钥环时，此选项是必需的。它会告诉mysql_migrate_keyring执行在线密钥迁移。该选项具有以下效果：

--password[=password], -p[password]

The password of the MySQL account used for connecting to the running server that is currently using one of the key migration keystores. MySQL帐户的密码，用于连接到当前正在使用其中一个密钥迁移密钥库的运行服务器。The password value is optional. 密码值是可选的。If not given, mysql_migrate_keyring prompts for one. 如果没有给出，mysql_migrate_keyring会提示输入一个。If given, there must be no space between --password= or -p and the password following it. If no password option is specified, the default is to send no password.如果给定，则--password=或-p与其后面的密码之间不得有空格。如果未指定密码选项，则默认情况下不发送密码。

Specifying a password on the command line should be considered insecure. To avoid giving the password on the command line, use an option file. 在命令行上指定密码应被视为不安全。为了避免在命令行上输入密码，请使用选项文件。See Section 6.1.2.1, “End-User Guidelines for Password Security”.请参阅第6.1.2.1节，“密码安全最终用户指南”。

To explicitly specify that there is no password and that mysql_migrate_keyring should not prompt for one, use the --skip-password option.要明确指定没有密码并且mysql_migrate_keyring不应提示输入密码，请使用--skip-password选项。

--port=port_num, -P port_num

For TCP/IP connections, the port number for connecting to the running server that is currently using one of the key migration keystores.对于TCP/IP连接，用于连接到当前正在使用密钥迁移密钥存储库之一的正在运行的服务器的端口号。

--print-defaults

Print the program name and all options that it gets from option files.打印程序名称及其从选项文件中获取的所有选项。

For additional information about this and other option-file options, see Section 4.2.2.3, “Command-Line Options that Affect Option-File Handling”.有关此选项和其他选项文件选项的更多信息，请参阅第4.2.2.3节，“影响选项文件处理的命令行选项”。

--server-public-key-path=file_name

The path name to a file in PEM format containing a client-side copy of the public key required by the server for RSA key pair-based password exchange. PEM格式文件的路径名，该文件包含服务器基于RSA密钥对进行密码交换所需的公钥客户端副本。This option applies to clients that authenticate with the sha256_password or caching_sha2_password authentication plugin. 此选项适用于使用sha256_password或caching_sha2_password身份验证插件进行身份验证的客户端。This option is ignored for accounts that do not authenticate with one of those plugins. It is also ignored if RSA-based password exchange is not used, as is the case when the client connects to the server using a secure connection.对于未使用这些插件之一进行身份验证的帐户，此选项将被忽略。如果不使用基于RSA的密码交换，它也会被忽略，就像客户端使用安全连接连接到服务器的情况一样。

If --server-public-key-path=file_name is given and specifies a valid public key file, it takes precedence over --get-server-public-key.如果给定了--server-public-key-path=file_name并指定了一个有效的公钥文件，则它优先于--get-server-public-key。

For sha256_password, this option applies only if MySQL was built using OpenSSL.对于sha256_password，此选项仅适用于使用OpenSSL构建MySQL的情况。

For information about the sha256_password and caching_sha2_password plugins, see Section 6.4.1.3, “SHA-256 Pluggable Authentication”, and Section 6.4.1.2, “Caching SHA-2 Pluggable Authentication”.有关sha256_password和caching_sha2_password插件的信息，请参阅第6.4.1.3节，“SHA-256可插拔身份验证”和第6.4.1.2节，“缓存SHA-2可插拔身份认证”。

--socket=path, -S path

For Unix socket file or Windows named pipe connections, the socket file or named pipe for connecting to the running server that is currently using one of the key migration keystores.对于Unix套接字文件或Windows命名管道连接，用于连接到当前正在使用密钥迁移密钥库之一的运行服务器的套接字文件或命名管道。

On Windows, this option applies only if the server was started with the named_pipe system variable enabled to support named-pipe connections. 在Windows上，此选项仅在服务器启动时启用了named_pipe系统变量以支持命名管道连接时适用。In addition, the user making the connection must be a member of the Windows group specified by the named_pipe_full_access_group system variable.此外，进行连接的用户必须是named_pipe_full_access_group系统变量指定的Windows组的成员。

--source-keyring=name

The source keyring component for key migration. 用于密钥迁移的源密钥环组件。This is the component library file name specified without any platform-specific extension such as .so or .dll. 这是指定的组件库文件名，没有任何特定于平台的扩展名，如.so或.dll。For example, to use the component for which the library file is component_keyring_file.so, specify the option as --source-keyring=component_keyring_file.例如，要使用库文件为component_keyring_file.so的组件，请将选项指定为--source-keyring=component_keyring_file。

--source-keyring-configuration-dir=dir_name

This option applies only if the source keyring component global configuration file contains "read_local_config": true, indicating that component configuration is contained in the local configuration file. The option value specifies the directory containing that local file.仅当源密钥环组件全局配置文件包含"read_local_config": true时，此选项才适用，表示组件配置包含在本地配置文件中。选项值指定包含该本地文件的目录。

--ssl*

Options that begin with --ssl specify whether to connect to the server using encryption and indicate where to find SSL keys and certificates. See Command Options for Encrypted Connections.以--ssl开头的选项指定是否使用加密连接到服务器，并指示在哪里查找ssl密钥和证书。请参见加密连接的命令选项。

--ssl-fips-mode={OFF|ON|STRICT}

Controls whether to enable FIPS mode on the client side. The --ssl-fips-mode option differs from other --ssl-xxx options in that it is not used to establish encrypted connections, but rather to affect which cryptographic operations to permit. 控制是否在客户端启用FIPS模式。--ssl-fips-mode选项与其他--ssl-xxx选项的不同之处在于，它不用于建立加密连接，而是影响允许的加密操作。See Section 6.8, “FIPS Support”.请参阅第6.8节，“FIPS支持”。

These --ssl-fips-mode values are permitted:允许使用以下--ssl-fips-mode值：

--tls-ciphersuites=ciphersuite_list

The permissible ciphersuites for encrypted connections that use TLSv1.3. The value is a list of one or more colon-separated ciphersuite names. 允许的密码适用于使用TLSv1.3的加密连接。该值是一个或多个冒号分隔的密码套件名称的列表。The ciphersuites that can be named for this option depend on the SSL library used to compile MySQL. 可以为此选项命名的密码套件取决于用于编译MySQL的SSL库。For details, see Section 6.3.2, “Encrypted Connection TLS Protocols and Ciphers”.有关详细信息，请参阅第6.3.2节，“加密连接TLS协议和密码”。

--tls-version=protocol_list

The permissible TLS protocols for encrypted connections. The value is a list of one or more comma-separated protocol names. 加密连接的允许TLS协议。该值是一个或多个逗号分隔的协议名称的列表。The protocols that can be named for this option depend on the SSL library used to compile MySQL. 可以为此选项命名的协议取决于用于编译MySQL的SSL库。For details, see Section 6.3.2, “Encrypted Connection TLS Protocols and Ciphers”.有关详细信息，请参阅第6.3.2节，“加密连接TLS协议和密码”。

--user=user_name, -u user_name

The user name of the MySQL account used for connecting to the running server that is currently using one of the key migration keystores.MySQL帐户的用户名，用于连接到当前正在使用其中一个密钥迁移密钥库的运行服务器。

--verbose, -v

Verbose mode. Produce more output about what the program does.详细模式。生成更多关于程序功能的输出。

--version, -V

Display version information and exit.显示版本信息并退出。