<div id="docs-body">
 <div class="section">
  <div class="titlepage">
   <div>
    <div>
     <h3 class="title">
      <a name="mysql-cluster-programs-ndb-sign-keys">
      </a>
      25.5.28 ndb_sign_keys — Create, Sign, and Manage TLS Keys and Certificates for NDB
Cluster
     </h3>
    </div>
   </div>
  </div>
  <a class="indexterm" name="idm46045096742736">
  </a>
  <p>
   Management of TLS keys and certificates in implemented in NDB
        Cluster as the executable utility program
   <a class="link" href="mysql-cluster-programs-ndb-sign-keys.html" title="25.5.28 ndb_sign_keys — Create, Sign, and Manage TLS Keys and Certificates for NDB Cluster">
    <span class="command">
     <strong>
      ndb_sign_keys
     </strong>
    </span>
   </a>
   , which can normally be found in
        the MySQL
   <code class="filename">
    bin
   </code>
   directory. The program
        performs such functions as creating, signing, and retiring keys
        and certificates, and normally works as follows:
  </p>
  <div class="orderedlist">
   <ol class="orderedlist" type="1">
    <li class="listitem">
     <p>
      <a class="link" href="mysql-cluster-programs-ndb-sign-keys.html" title="25.5.28 ndb_sign_keys — Create, Sign, and Manage TLS Keys and Certificates for NDB Cluster">
       <span class="command">
        <strong>
         ndb_sign_keys
        </strong>
       </span>
      </a>
      connects to
      <a class="link" href="mysql-cluster-programs-ndb-mgmd.html" title="25.5.4 ndb_mgmd — The NDB Cluster Management Server Daemon">
       <span class="command">
        <strong>
         ndb_mgmd
        </strong>
       </span>
      </a>
      and fetches the cluster'
            configuration.
     </p>
    </li>
    <li class="listitem">
     <p>
      For each cluster node that is configured to run on the local
            machine,
      <a class="link" href="mysql-cluster-programs-ndb-sign-keys.html" title="25.5.28 ndb_sign_keys — Create, Sign, and Manage TLS Keys and Certificates for NDB Cluster">
       <span class="command">
        <strong>
         ndb_sign_keys
        </strong>
       </span>
      </a>
      finds the
            node' private key and sign it, creating an active node
            certificate.
     </p>
    </li>
   </ol>
  </div>
  <p>
   Some additional tasks that can be performed by
   <a class="link" href="mysql-cluster-programs-ndb-sign-keys.html" title="25.5.28 ndb_sign_keys — Create, Sign, and Manage TLS Keys and Certificates for NDB Cluster">
    <span class="command">
     <strong>
      ndb_sign_keys
     </strong>
    </span>
   </a>
   are listed here:
  </p>
  <div class="itemizedlist">
   <ul class="itemizedlist" style="list-style-type: disc; ">
    <li class="listitem">
     <p>
      Obtaining configuration information from a config.ini file
            rather than a running
      <a class="link" href="mysql-cluster-programs-ndb-mgmd.html" title="25.5.4 ndb_mgmd — The NDB Cluster Management Server Daemon">
       <span class="command">
        <strong>
         ndb_mgmd
        </strong>
       </span>
      </a>
     </p>
    </li>
    <li class="listitem">
     <p>
      Creating the cluster' certificate authority (CA) if it
            does not yet exist
     </p>
    </li>
    <li class="listitem">
     <p>
      Creating private keys
     </p>
    </li>
    <li class="listitem">
     <p>
      Saving keys and certificates as pending rather than active
     </p>
    </li>
    <li class="listitem">
     <p>
      Signing the key for a single node as specified using
            command-line options described later in this section
     </p>
    </li>
    <li class="listitem">
     <p>
      Requesting a CA located on a remote host to sign a local key
     </p>
    </li>
   </ul>
  </div>
  <p>
   Options that can be used with
   <a class="link" href="mysql-cluster-programs-ndb-sign-keys.html" title="25.5.28 ndb_sign_keys — Create, Sign, and Manage TLS Keys and Certificates for NDB Cluster">
    <span class="command">
     <strong>
      ndb_sign_keys
     </strong>
    </span>
   </a>
   are shown in the following table. Additional descriptions follow
        the table.
  </p>
  <p>
  </p>
  <div class="itemizedlist">
   <ul class="itemizedlist" style="list-style-type: disc; ">
    <li class="listitem">
     <p>
      <a name="option_ndb_sign_keys_bind-host">
      </a>
      <a class="link" href="mysql-cluster-programs-ndb-sign-keys.html#option_ndb_sign_keys_bind-host">
       <code class="option">
        --bind-host
       </code>
      </a>
     </p>
     <a class="indexterm" name="idm46045096719008">
     </a>
     <a class="indexterm" name="idm46045096717520">
     </a>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for bind-host">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --bind-host=host
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Type
         </th>
         <td>
          String
         </td>
        </tr>
        <tr>
         <th>
          Default Value
         </th>
         <td>
          <code class="literal">
           mgmd, api
          </code>
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <p>
      Create a certificate bound to a hostname list of node types
            that should have certificate hostname bindings, from the set
      <code class="literal">
       (mgmd,db,api)
      </code>
      .
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="option_ndb_sign_keys_bound-hostname">
      </a>
      <a class="link" href="mysql-cluster-programs-ndb-sign-keys.html#option_ndb_sign_keys_bound-hostname">
       <code class="option">
        --bound-hostname
       </code>
      </a>
     </p>
     <a class="indexterm" name="idm46045096702496">
     </a>
     <a class="indexterm" name="idm46045096701008">
     </a>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for bound-hostname">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --bound-hostname=hostname
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Type
         </th>
         <td>
          String
         </td>
        </tr>
        <tr>
         <th>
          Default Value
         </th>
         <td>
          <code class="literal">
           [none]
          </code>
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <p>
      Create a certificate bound to the hostname passed to this
            option.
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="option_ndb_sign_keys_CA-cert">
      </a>
      <a class="link" href="mysql-cluster-programs-ndb-sign-keys.html#option_ndb_sign_keys_CA-cert">
       <code class="option">
        --CA-cert
       </code>
      </a>
     </p>
     <a class="indexterm" name="idm46045096686688">
     </a>
     <a class="indexterm" name="idm46045096685200">
     </a>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for CA-cert">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --CA-cert=name
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Type
         </th>
         <td>
          File name
         </td>
        </tr>
        <tr>
         <th>
          Default Value
         </th>
         <td>
          <code class="literal">
           NDB-Cluster-cert
          </code>
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <p>
      Use the name passed to this option for the CA Certificate
            file.
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="option_ndb_sign_keys_CA-days">
      </a>
      <a class="link" href="mysql-cluster-programs-ndb-sign-keys.html#option_ndb_sign_keys_CA-days">
       <code class="option">
        --CA-days
       </code>
      </a>
     </p>
     <a class="indexterm" name="idm46045096670912">
     </a>
     <a class="indexterm" name="idm46045096669424">
     </a>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for CA-days">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --CA-days=#
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Introduced
         </th>
         <td>
          8.4.1
         </td>
        </tr>
        <tr>
         <th>
          Type
         </th>
         <td>
          Integer
         </td>
        </tr>
        <tr>
         <th>
          Default Value
         </th>
         <td>
          <code class="literal">
           1461
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Minimum Value
         </th>
         <td>
          <code class="literal">
           -1
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Maximum Value
         </th>
         <td>
          <code class="literal">
           2147483647
          </code>
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <p>
      Set the lifetime of the certificate to this many days. The
            default is equivalent to 4 years plus 1 day.
      <code class="literal">
       -1
      </code>
      means the certificate never expires.
     </p>
     <p>
      This option was added in NDB 8.4.1.
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="option_ndb_sign_keys_CA-key">
      </a>
      <a class="link" href="mysql-cluster-programs-ndb-sign-keys.html#option_ndb_sign_keys_CA-key">
       <code class="option">
        --CA-key
       </code>
      </a>
     </p>
     <a class="indexterm" name="idm46045096646928">
     </a>
     <a class="indexterm" name="idm46045096645440">
     </a>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for CA-key">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --CA-key=name
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Type
         </th>
         <td>
          File name
         </td>
        </tr>
        <tr>
         <th>
          Default Value
         </th>
         <td>
          <code class="literal">
           NDB-Cluster-private-key
          </code>
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <p>
      Use the name passed to this option for the CA private key
            file.
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="option_ndb_sign_keys_CA-ordinal">
      </a>
      <a class="link" href="mysql-cluster-programs-ndb-sign-keys.html#option_ndb_sign_keys_CA-ordinal">
       <code class="option">
        --CA-ordinal
       </code>
      </a>
     </p>
     <a class="indexterm" name="idm46045096631152">
     </a>
     <a class="indexterm" name="idm46045096629664">
     </a>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for CA-ordinal">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --CA-ordinal=name
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Type
         </th>
         <td>
          String
         </td>
        </tr>
        <tr>
         <th>
          Default Value
         </th>
         <td>
          <code class="literal">
           [none]
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Valid Values
         </th>
         <td>
          <p class="valid-value">
           <code class="literal">
            First
           </code>
          </p>
          <p class="valid-value">
           <code class="literal">
            Second
           </code>
          </p>
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <p>
      Set the ordinal CA name; defaults to
      <code class="literal">
       First
      </code>
      for
      <a class="link" href="mysql-cluster-programs-ndb-sign-keys.html#option_ndb_sign_keys_create-CA">
       <code class="option">
        --create-CA
       </code>
      </a>
      and
      <code class="literal">
       Second
      </code>
      for
      <a class="link" href="mysql-cluster-programs-ndb-sign-keys.html#option_ndb_sign_keys_rotate-CA">
       <code class="option">
        --rotate-CA
       </code>
      </a>
      . The
            Common Name in the CA certificate is
      <span class="quote">
       “
       <span class="quote">
        MySQL NDB
            Cluster
        <em class="replaceable">
         <code>
          ordinal
         </code>
        </em>
        Certificate
       </span>
       ”
      </span>
      , where
      <em class="replaceable">
       <code>
        ordinal
       </code>
      </em>
      is the ordinal name
            passed to this option.
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="option_ndb_sign_keys_CA-search-path">
      </a>
      <a class="link" href="mysql-cluster-programs-ndb-sign-keys.html#option_ndb_sign_keys_CA-search-path">
       <code class="option">
        --CA-search-path
       </code>
      </a>
     </p>
     <a class="indexterm" name="idm46045096606416">
     </a>
     <a class="indexterm" name="idm46045096604928">
     </a>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for CA-search-path">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --CA-search-path=name
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Type
         </th>
         <td>
          File name
         </td>
        </tr>
        <tr>
         <th>
          Default Value
         </th>
         <td>
          <code class="literal">
           [none]
          </code>
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <p>
      Specify a list of directories to search for a CA file. On
            Unix platforms, the directory names are separated by colons
            (
      <code class="literal">
       :
      </code>
      ); on Windows systems, the semicolon
            character (
      <code class="literal">
       ;
      </code>
      ) is used as the separator. A
            directory reference may be relative or absolute; it may
            contain one or more environment variables, each denoted by a
            prefixed dollar sign (
      <code class="literal">
       $
      </code>
      ), and expanded
            prior to use.
     </p>
     <p>
      Searching begins with the leftmost named directory and
            proceeds from left to right until a file is found. An empty
            string denotes an empty search path, which causes all
            searches to fail. A string consisting of a single dot
            (
      <code class="literal">
       .
      </code>
      ) indicates that the search path is
            limited to the current working directory.
     </p>
     <p>
      If no search path is supplied, the compiled-in default value
            is used. This value depends on the platform used: On
            Windows, this is
      <code class="literal">
       $HOMEPATH\ndb-tls
      </code>
      ; on
            other platforms (including Linux), it is
      <code class="literal">
       $HOME/ndb-tls
      </code>
      . This default can be
            overridden by compiling NDB Cluster using
      <a class="link" href="source-configuration-options.html#option_cmake_with_ndb_tls_search_path">
       <code class="option">
        -DWITH_NDB_TLS_SEARCH_PATH
       </code>
      </a>
      .
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="option_ndb_sign_keys_CA-tool">
      </a>
      <a class="link" href="mysql-cluster-programs-ndb-sign-keys.html#option_ndb_sign_keys_CA-tool">
       <code class="option">
        --CA-tool
       </code>
      </a>
     </p>
     <a class="indexterm" name="idm46045096583552">
     </a>
     <a class="indexterm" name="idm46045096582064">
     </a>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for CA-tool">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --CA-tool=name
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Type
         </th>
         <td>
          File name
         </td>
        </tr>
        <tr>
         <th>
          Default Value
         </th>
         <td>
          <code class="literal">
           [none]
          </code>
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <p>
      Designate an executable helper tool, including the path.
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="option_ndb_sign_keys_check">
      </a>
      <a class="link" href="mysql-cluster-programs-ndb-sign-keys.html#option_ndb_sign_keys_check">
       <code class="option">
        --check
       </code>
      </a>
     </p>
     <a class="indexterm" name="idm46045096567840">
     </a>
     <a class="indexterm" name="idm46045096566352">
     </a>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for check">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --check
          </code>
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <p>
      Check certificate expiry dates.
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="option_ndb_sign_keys_config-file">
      </a>
      <a class="link" href="mysql-cluster-programs-ndb-sign-keys.html#option_ndb_sign_keys_config-file">
       <code class="option">
        --config-file
       </code>
      </a>
     </p>
     <a class="indexterm" name="idm46045096556544">
     </a>
     <a class="indexterm" name="idm46045096555056">
     </a>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for config-file">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --config-file=file
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Disabled by
         </th>
         <td>
          <code class="literal">
           no-config
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Type
         </th>
         <td>
          File name
         </td>
        </tr>
        <tr>
         <th>
          Default Value
         </th>
         <td>
          <code class="literal">
           [none]
          </code>
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <p>
      Supply the path to the cluster configuration file (usually
      <code class="filename">
       config.ini
      </code>
      ).
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="option_ndb_sign_keys_connect-retries">
      </a>
      <a class="link" href="mysql-cluster-programs-ndb-sign-keys.html#option_ndb_sign_keys_connect-retries">
       <code class="option">
        --connect-retries
       </code>
      </a>
     </p>
     <a class="indexterm" name="idm46045096537536">
     </a>
     <a class="indexterm" name="idm46045096536048">
     </a>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for connect-retries">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --connect-retries=#
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Type
         </th>
         <td>
          Integer
         </td>
        </tr>
        <tr>
         <th>
          Default Value
         </th>
         <td>
          <code class="literal">
           12
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Minimum Value
         </th>
         <td>
          <code class="literal">
           -1
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Maximum Value
         </th>
         <td>
          <code class="literal">
           12
          </code>
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <p>
      Set the number of times that
      <a class="link" href="mysql-cluster-programs-ndb-sign-keys.html" title="25.5.28 ndb_sign_keys — Create, Sign, and Manage TLS Keys and Certificates for NDB Cluster">
       <span class="command">
        <strong>
         ndb_sign_keys
        </strong>
       </span>
      </a>
      attempts to connect to the
            cluster. If you use
      <code class="literal">
       -1
      </code>
      , the program keeps
            trying to connect until it succeeds or is forced to stop.
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="option_ndb_sign_keys_connect-retry-delay">
      </a>
      <a class="link" href="mysql-cluster-programs-ndb-sign-keys.html#option_ndb_sign_keys_connect-retry-delay">
       <code class="option">
        --connect-retry-delay
       </code>
      </a>
     </p>
     <a class="indexterm" name="idm46045096514896">
     </a>
     <a class="indexterm" name="idm46045096513392">
     </a>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for connect-retry-delay">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --connect-retry-delay=#
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Type
         </th>
         <td>
          Integer
         </td>
        </tr>
        <tr>
         <th>
          Default Value
         </th>
         <td>
          <code class="literal">
           5
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Minimum Value
         </th>
         <td>
          <code class="literal">
           0
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Maximum Value
         </th>
         <td>
          <code class="literal">
           5
          </code>
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <p>
      Set the number of seconds after a failed connection attempt
            which
      <a class="link" href="mysql-cluster-programs-ndb-sign-keys.html" title="25.5.28 ndb_sign_keys — Create, Sign, and Manage TLS Keys and Certificates for NDB Cluster">
       <span class="command">
        <strong>
         ndb_sign_keys
        </strong>
       </span>
      </a>
      waits before trying
            again, up to the number of times determined by
      <a class="link" href="mysql-cluster-programs-ndb-sign-keys.html#option_ndb_sign_keys_connect-retries">
       <code class="option">
        --connect-retries
       </code>
      </a>
      .
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="option_ndb_sign_keys_create-CA">
      </a>
      <a class="link" href="mysql-cluster-programs-ndb-sign-keys.html#option_ndb_sign_keys_create-CA">
       <code class="option">
        --create-CA
       </code>
      </a>
     </p>
     <a class="indexterm" name="idm46045096492128">
     </a>
     <a class="indexterm" name="idm46045096490640">
     </a>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for create-CA">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --create-CA
          </code>
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <p>
      Create the CA key and certificate.
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="option_ndb_sign_keys_create-key">
      </a>
      <a class="link" href="mysql-cluster-programs-ndb-sign-keys.html#option_ndb_sign_keys_create-key">
       <code class="option">
        --create-key
       </code>
      </a>
     </p>
     <a class="indexterm" name="idm46045096480976">
     </a>
     <a class="indexterm" name="idm46045096479488">
     </a>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for create-key">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --create-key
          </code>
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <p>
      Create or replace private keys.
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="option_ndb_sign_keys_curve">
      </a>
      <a class="link" href="mysql-cluster-programs-ndb-sign-keys.html#option_ndb_sign_keys_curve">
       <code class="option">
        --curve
       </code>
      </a>
     </p>
     <a class="indexterm" name="idm46045096469664">
     </a>
     <a class="indexterm" name="idm46045096468176">
     </a>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for curve">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --curve=name
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Type
         </th>
         <td>
          String
         </td>
        </tr>
        <tr>
         <th>
          Default Value
         </th>
         <td>
          <code class="literal">
           P-256
          </code>
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <p>
      Use the named curve for encrypting node keys.
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="option_ndb_sign_keys_defaults-extra-file">
      </a>
      <a class="link" href="mysql-cluster-programs-ndb-sign-keys.html#option_ndb_sign_keys_defaults-extra-file">
       <code class="option">
        --defaults-extra-file
       </code>
      </a>
     </p>
     <a class="indexterm" name="idm46045096453840">
     </a>
     <a class="indexterm" name="idm46045096452336">
     </a>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for defaults-extra-file">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --defaults-extra-file=path
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Type
         </th>
         <td>
          String
         </td>
        </tr>
        <tr>
         <th>
          Default Value
         </th>
         <td>
          <code class="literal">
           [none]
          </code>
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <p>
      Read this option file after the global files are read.
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="option_ndb_sign_keys_defaults-file">
      </a>
      <a class="link" href="mysql-cluster-programs-ndb-sign-keys.html#option_ndb_sign_keys_defaults-file">
       <code class="option">
        --defaults-file
       </code>
      </a>
     </p>
     <a class="indexterm" name="idm46045096438096">
     </a>
     <a class="indexterm" name="idm46045096436608">
     </a>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for defaults-file">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --defaults-file=path
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Type
         </th>
         <td>
          String
         </td>
        </tr>
        <tr>
         <th>
          Default Value
         </th>
         <td>
          <code class="literal">
           [none]
          </code>
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <p>
      Read this option file only.
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="option_ndb_sign_keys_defaults-group-suffix">
      </a>
      <a class="link" href="mysql-cluster-programs-ndb-sign-keys.html#option_ndb_sign_keys_defaults-group-suffix">
       <code class="option">
        --defaults-group-suffix
       </code>
      </a>
     </p>
     <a class="indexterm" name="idm46045096422272">
     </a>
     <a class="indexterm" name="idm46045096420768">
     </a>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for defaults-group-suffix">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --defaults-group-suffix=string
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Type
         </th>
         <td>
          String
         </td>
        </tr>
        <tr>
         <th>
          Default Value
         </th>
         <td>
          <code class="literal">
           [none]
          </code>
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <p>
      Read not only the usual option groups, but also groups with
            the usual names and a suffix of
      <em class="replaceable">
       <code>
        string
       </code>
      </em>
      .
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="option_ndb_sign_keys_duration">
      </a>
      <a class="link" href="mysql-cluster-programs-ndb-sign-keys.html#option_ndb_sign_keys_duration">
       <code class="option">
        --duration
       </code>
      </a>
     </p>
     <a class="indexterm" name="idm46045096406032">
     </a>
     <a class="indexterm" name="idm46045096404544">
     </a>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for duration">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --duration=#
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Type
         </th>
         <td>
          Integer
         </td>
        </tr>
        <tr>
         <th>
          Default Value
         </th>
         <td>
          <code class="literal">
           0
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Minimum Value
         </th>
         <td>
          <code class="literal">
           -500000
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Maximum Value
         </th>
         <td>
          <code class="literal">
           0
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Unit
         </th>
         <td>
          seconds
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <p>
      Set the lifetime of certificates or signing requests, in
            seconds.
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="option_ndb_sign_keys_help">
      </a>
      <a class="link" href="mysql-cluster-programs-ndb-sign-keys.html#option_ndb_sign_keys_help">
       <code class="option">
        --help
       </code>
      </a>
     </p>
     <a class="indexterm" name="idm46045096383376">
     </a>
     <a class="indexterm" name="idm46045096381888">
     </a>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for help">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --help
          </code>
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <p>
      Print help text and exit.
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="option_ndb_sign_keys_keys-to-dir">
      </a>
      <a class="link" href="mysql-cluster-programs-ndb-sign-keys.html#option_ndb_sign_keys_keys-to-dir">
       <code class="option">
        --keys-to-dir
       </code>
      </a>
     </p>
     <a class="indexterm" name="idm46045096372144">
     </a>
     <a class="indexterm" name="idm46045096370656">
     </a>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for keys-to-dir">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --keys-to-dir=dirname
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Type
         </th>
         <td>
          Directory name
         </td>
        </tr>
        <tr>
         <th>
          Default Value
         </th>
         <td>
          <code class="literal">
           [none]
          </code>
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <p>
      Specify output directory for private keys (only); for this
            purpose, it overrides any value set for
      <a class="link" href="mysql-cluster-programs-ndb-sign-keys.html#option_ndb_sign_keys_to-dir">
       <code class="option">
        --to-dir
       </code>
      </a>
      .
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="option_ndb_sign_keys_login-path">
      </a>
      <a class="link" href="mysql-cluster-programs-ndb-sign-keys.html#option_ndb_sign_keys_login-path">
       <code class="option">
        --login-path
       </code>
      </a>
     </p>
     <a class="indexterm" name="idm46045096355200">
     </a>
     <a class="indexterm" name="idm46045096353712">
     </a>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for login-path">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --login-path=path
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Type
         </th>
         <td>
          String
         </td>
        </tr>
        <tr>
         <th>
          Default Value
         </th>
         <td>
          <code class="literal">
           [none]
          </code>
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <p>
      Read this path from the login file.
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="option_ndb_sign_keys_ndb-connectstring">
      </a>
      <a class="link" href="mysql-cluster-programs-ndb-sign-keys.html#option_ndb_sign_keys_ndb-connectstring">
       <code class="option">
        --ndb-connectstring
       </code>
      </a>
     </p>
     <a class="indexterm" name="idm46045096339440">
     </a>
     <a class="indexterm" name="idm46045096337984">
     </a>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for ndb-connectstring">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --ndb-connectstring=connection_string
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Type
         </th>
         <td>
          String
         </td>
        </tr>
        <tr>
         <th>
          Default Value
         </th>
         <td>
          <code class="literal">
           [none]
          </code>
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <p>
      Set the connection string to use for connecting to
      <a class="link" href="mysql-cluster-programs-ndb-mgmd.html" title="25.5.4 ndb_mgmd — The NDB Cluster Management Server Daemon">
       <span class="command">
        <strong>
         ndb_mgmd
        </strong>
       </span>
      </a>
      , using the syntax
      <code class="literal">
       [nodeid=
       <em class="replaceable">
        <code>
         id
        </code>
       </em>
       ;][host=]
       <em class="replaceable">
        <code>
         hostname
        </code>
       </em>
       [:
       <em class="replaceable">
        <code>
         port
        </code>
       </em>
       ]
      </code>
      .
            If this option is set, it overrides the value set for
      <code class="literal">
       NDB_CONNECTSTRING
      </code>
      (if any), as well as
            any value set in a
      <code class="filename">
       my.cnf
      </code>
      . file.
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="option_ndb_sign_keys_ndb-mgm-tls">
      </a>
      <a class="link" href="mysql-cluster-programs-ndb-sign-keys.html#option_ndb_sign_keys_ndb-mgm-tls">
       <code class="option">
        --ndb-mgm-tls
       </code>
      </a>
     </p>
     <a class="indexterm" name="idm46045096318832">
     </a>
     <a class="indexterm" name="idm46045096317344">
     </a>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for ndb-mgm-tls">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --ndb-mgm-tls=level
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Type
         </th>
         <td>
          Enumeration
         </td>
        </tr>
        <tr>
         <th>
          Default Value
         </th>
         <td>
          <code class="literal">
           relaxed
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Valid Values
         </th>
         <td>
          <p class="valid-value">
           <code class="literal">
            relaxed
           </code>
          </p>
          <p class="valid-value">
           <code class="literal">
            strict
           </code>
          </p>
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <p>
      Sets the level of TLS support required for the
      <a class="link" href="mysql-cluster-programs-ndb-mgm.html" title="25.5.5 ndb_mgm — The NDB Cluster Management Client">
       <span class="command">
        <strong>
         ndb_mgm
        </strong>
       </span>
      </a>
      client; one of
      <code class="literal">
       relaxed
      </code>
      or
      <code class="literal">
       strict
      </code>
      .
      <code class="literal">
       relaxed
      </code>
      (the default) means that a TLS
            connection is attempted, but success is not required;
      <code class="literal">
       strict
      </code>
      means that TLS is required to
            connect.
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="option_ndb_sign_keys_ndb-tls-search-path">
      </a>
      <a class="link" href="mysql-cluster-programs-ndb-sign-keys.html#option_ndb_sign_keys_ndb-tls-search-path">
       <code class="option">
        --ndb-tls-search-path
       </code>
      </a>
     </p>
     <a class="indexterm" name="idm46045096294928">
     </a>
     <a class="indexterm" name="idm46045096293424">
     </a>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for ndb-tls-search-path">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --ndb-tls-search-path=list
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Type
         </th>
         <td>
          Path name
         </td>
        </tr>
        <tr>
         <th>
          Default Value (Unix)
         </th>
         <td>
          <code class="literal">
           $HOME/ndb-tls
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Default Value (Windows)
         </th>
         <td>
          <code class="literal">
           $HOMEDIR/ndb-tls
          </code>
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <p>
      Specify a list of directories containing TLS keys and
            certificates.
     </p>
     <p>
      For syntax, see the description of the
      <a class="link" href="mysql-cluster-programs-ndb-sign-keys.html#option_ndb_sign_keys_CA-search-path">
       <code class="option">
        --CA-search-path
       </code>
      </a>
      option.
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="option_ndb_sign_keys_no-config">
      </a>
      <a class="link" href="mysql-cluster-programs-ndb-sign-keys.html#option_ndb_sign_keys_no-config">
       <code class="option">
        --no-config
       </code>
      </a>
     </p>
     <a class="indexterm" name="idm46045096275248">
     </a>
     <a class="indexterm" name="idm46045096273760">
     </a>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for no-config">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --no-config
          </code>
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <p>
      Do not obtain the cluster configuration; create a single
            certificate based on the options supplied (including
            defaults for those not specified).
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="option_ndb_sign_keys_no-defaults">
      </a>
      <a class="link" href="mysql-cluster-programs-ndb-sign-keys.html#option_ndb_sign_keys_no-defaults">
       <code class="option">
        --no-defaults
       </code>
      </a>
     </p>
     <a class="indexterm" name="idm46045096263920">
     </a>
     <a class="indexterm" name="idm46045096262432">
     </a>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for no-defaults">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --no-defaults
          </code>
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <p>
      Do not read default options from any option file other than
            the login file.
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="option_ndb_sign_keys_no-login-paths">
      </a>
      <a class="link" href="mysql-cluster-programs-ndb-sign-keys.html#option_ndb_sign_keys_no-login-paths">
       <code class="option">
        --no-login-paths
       </code>
      </a>
     </p>
     <a class="indexterm" name="idm46045096252672">
     </a>
     <a class="indexterm" name="idm46045096251184">
     </a>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for no-login-paths">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --no-login-paths
          </code>
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <p>
      Do not read login paths from the login path file.
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="option_ndb_sign_keys_passphrase">
      </a>
      <a class="link" href="mysql-cluster-programs-ndb-sign-keys.html#option_ndb_sign_keys_passphrase">
       <code class="option">
        --passphrase
       </code>
      </a>
     </p>
     <a class="indexterm" name="idm46045096241456">
     </a>
     <a class="indexterm" name="idm46045096239968">
     </a>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for passphrase">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --passphrase=phrase
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Type
         </th>
         <td>
          String
         </td>
        </tr>
        <tr>
         <th>
          Default Value
         </th>
         <td>
          <code class="literal">
           [none]
          </code>
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <p>
      Specify a CA key pass phrase.
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="option_ndb_sign_keys_node-id">
      </a>
      <a class="link" href="mysql-cluster-programs-ndb-sign-keys.html#option_ndb_sign_keys_node-id">
       <code class="option">
        --node-id
       </code>
      </a>
     </p>
     <a class="indexterm" name="idm46045096225776">
     </a>
     <a class="indexterm" name="idm46045096224288">
     </a>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for node-id">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --node-id=#
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Type
         </th>
         <td>
          Integer
         </td>
        </tr>
        <tr>
         <th>
          Default Value
         </th>
         <td>
          <code class="literal">
           0
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Minimum Value
         </th>
         <td>
          <code class="literal">
           0
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Maximum Value
         </th>
         <td>
          <code class="literal">
           255
          </code>
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <p>
      Create or sign a key for the node having the specified node
            ID.
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="option_ndb_sign_keys_node-type">
      </a>
      <a class="link" href="mysql-cluster-programs-ndb-sign-keys.html#option_ndb_sign_keys_node-type">
       <code class="option">
        --node-type
       </code>
      </a>
     </p>
     <a class="indexterm" name="idm46045096205200">
     </a>
     <a class="indexterm" name="idm46045096203712">
     </a>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for node-type">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --node-type=set
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Type
         </th>
         <td>
          Set
         </td>
        </tr>
        <tr>
         <th>
          Default Value
         </th>
         <td>
          <code class="literal">
           mgmd,db,api
          </code>
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <p>
      Create or sign keys for the specified type or types from the
            set
      <code class="literal">
       (mgmd,db,api)
      </code>
      .
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="option_ndb_sign_keys_pending">
      </a>
      <a class="link" href="mysql-cluster-programs-ndb-sign-keys.html#option_ndb_sign_keys_pending">
       <code class="option">
        --pending
       </code>
      </a>
     </p>
     <a class="indexterm" name="idm46045096188656">
     </a>
     <a class="indexterm" name="idm46045096187168">
     </a>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for pending">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --pending
          </code>
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <p>
      Save keys and certificates as pending, rather than active.
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="option_ndb_sign_keys_print-defaults">
      </a>
      <a class="link" href="mysql-cluster-programs-ndb-sign-keys.html#option_ndb_sign_keys_print-defaults">
       <code class="option">
        --print-defaults
       </code>
      </a>
     </p>
     <a class="indexterm" name="idm46045096177456">
     </a>
     <a class="indexterm" name="idm46045096175968">
     </a>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for print-defaults">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --print-defaults
          </code>
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <p>
      Print the program argument list, then exit.
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="option_ndb_sign_keys_promote">
      </a>
      <a class="link" href="mysql-cluster-programs-ndb-sign-keys.html#option_ndb_sign_keys_promote">
       <code class="option">
        --promote
       </code>
      </a>
     </p>
     <a class="indexterm" name="idm46045096166192">
     </a>
     <a class="indexterm" name="idm46045096164704">
     </a>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for promote">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --promote
          </code>
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <p>
      Promote pending files to active, then exit.
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="option_ndb_sign_keys_remote-CA-host">
      </a>
      <a class="link" href="mysql-cluster-programs-ndb-sign-keys.html#option_ndb_sign_keys_remote-CA-host">
       <code class="option">
        --remote-CA-host
       </code>
      </a>
     </p>
     <a class="indexterm" name="idm46045096154992">
     </a>
     <a class="indexterm" name="idm46045096153504">
     </a>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for remote-CA-host">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --remote-CA-host=hostname
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Type
         </th>
         <td>
          String
         </td>
        </tr>
        <tr>
         <th>
          Default Value
         </th>
         <td>
          <code class="literal">
           [none]
          </code>
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <p>
      Specify the address or hostname of a remote CA host.
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="option_ndb_sign_keys_remote-exec-path">
      </a>
      <a class="link" href="mysql-cluster-programs-ndb-sign-keys.html#option_ndb_sign_keys_remote-exec-path">
       <code class="option">
        --remote-exec-path
       </code>
      </a>
     </p>
     <a class="indexterm" name="idm46045096139200">
     </a>
     <a class="indexterm" name="idm46045096137712">
     </a>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for remote-exec-path">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --remote-exec-path
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Type
         </th>
         <td>
          Path name
         </td>
        </tr>
        <tr>
         <th>
          Default Value
         </th>
         <td>
          <code class="literal">
           [none]
          </code>
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <p>
      Provide the full path to an executable on the remote CA host
            specified with
      <a class="link" href="mysql-cluster-programs-ndb-sign-keys.html#option_ndb_sign_keys_remote-CA-host">
       <code class="option">
        --remote-CA-host
       </code>
      </a>
      .
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="option_ndb_sign_keys_remote-openssl">
      </a>
      <a class="link" href="mysql-cluster-programs-ndb-sign-keys.html#option_ndb_sign_keys_remote-openssl">
       <code class="option">
        --remote-openssl
       </code>
      </a>
     </p>
     <a class="indexterm" name="idm46045096122400">
     </a>
     <a class="indexterm" name="idm46045096120912">
     </a>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for remote-openssl">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --remote-openssl
          </code>
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <p>
      Use OpenSSL for signing of keys on the remote CA host
            specified with
      <a class="link" href="mysql-cluster-programs-ndb-sign-keys.html#option_ndb_sign_keys_remote-CA-host">
       <code class="option">
        --remote-CA-host
       </code>
      </a>
      .
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="option_ndb_sign_keys_replace-by">
      </a>
      <a class="link" href="mysql-cluster-programs-ndb-sign-keys.html#option_ndb_sign_keys_replace-by">
       <code class="option">
        --replace-by
       </code>
      </a>
     </p>
     <a class="indexterm" name="idm46045096110160">
     </a>
     <a class="indexterm" name="idm46045096108672">
     </a>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for replace-by">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --replace-by=#
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Type
         </th>
         <td>
          Integer
         </td>
        </tr>
        <tr>
         <th>
          Default Value
         </th>
         <td>
          <code class="literal">
           -10
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Minimum Value
         </th>
         <td>
          <code class="literal">
           -128
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Maximum Value
         </th>
         <td>
          <code class="literal">
           127
          </code>
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <p>
      Suggest a certificate replacement date for periodic checks,
            as a number of days after the CA expiration date. Use a
            negative number to indicate days before expiration.
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="option_ndb_sign_keys_rotate-CA">
      </a>
      <a class="link" href="mysql-cluster-programs-ndb-sign-keys.html#option_ndb_sign_keys_rotate-CA">
       <code class="option">
        --rotate-CA
       </code>
      </a>
     </p>
     <a class="indexterm" name="idm46045096089552">
     </a>
     <a class="indexterm" name="idm46045096088064">
     </a>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for rotate-CA">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --rotate-CA
          </code>
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <p>
      Replace an older CA with a newer one. The new CA can be
            created using OpenSSL, or you can allow
      <a class="link" href="mysql-cluster-programs-ndb-sign-keys.html" title="25.5.28 ndb_sign_keys — Create, Sign, and Manage TLS Keys and Certificates for NDB Cluster">
       <span class="command">
        <strong>
         ndb_sign_keys
        </strong>
       </span>
      </a>
      to create the new one, in
            which case the new CA is created with an intermediate CA
            certificate, signed by the old CA.
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="option_ndb_sign_keys_schedule">
      </a>
      <a class="link" href="mysql-cluster-programs-ndb-sign-keys.html#option_ndb_sign_keys_schedule">
       <code class="option">
        --schedule
       </code>
      </a>
     </p>
     <a class="indexterm" name="idm46045096076816">
     </a>
     <a class="indexterm" name="idm46045096075328">
     </a>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for schedule">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --schedule=list
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Type
         </th>
         <td>
          String
         </td>
        </tr>
        <tr>
         <th>
          Default Value
         </th>
         <td>
          <code class="literal">
           120,10,130,10,150,0
          </code>
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <p>
      Assign a schedule of expiration dates to certificates. The
            schedule is defined as a comma-delimited list of six
            integers, in the format shown here:
     </p>
     <div class="copytoclipboard-wrapper">
      <pre class="programlisting one-line language-simple"><div class="docs-select-all right" id="sa94776564"><div class="copy-help left">Press ⌘+C to copy</div> <div class="right"><button class="clipboard-btn" title="Copy to Clipboard"><span class="icon-clipboard"></span></button></div></div><code class="language-simple">api_valid<span class="token punctuation">,</span>api_extra<span class="token punctuation">,</span>dn_valid<span class="token punctuation">,</span>dn_extra<span class="token punctuation">,</span>mgm_valid<span class="token punctuation">,</span>mgm_extra</code></pre>
     </div>
     <p>
      These values are defined as follows:
     </p>
     <div class="itemizedlist">
      <ul class="itemizedlist" style="list-style-type: circle; ">
       <li class="listitem">
        <p>
         <code class="literal">
          api_valid
         </code>
         : A fixed number of days of
                validity for client certificates.
        </p>
        <p>
         <code class="literal">
          api_extra
         </code>
         : A number of extra days for
                client certificates.
        </p>
        <p>
         <code class="literal">
          dn_valid
         </code>
         : A fixed number of days of
                validity for client certificates for data node
                certificates.
        </p>
        <p>
         <code class="literal">
          dn_extra
         </code>
         : A number of extra days for
                data node certificates.
        </p>
        <p>
         <code class="literal">
          mgm_valid
         </code>
         : A fixed number of days of
                validity for management server certificates.
        </p>
        <p>
         <code class="literal">
          mgm_extra
         </code>
         : A number of extra days for
                management server certificates.
        </p>
       </li>
      </ul>
     </div>
     <p>
      In other words, for each node type (API node, data node,
            management node), certificates are created with a lifetime
            equal to a whole fixed number of days, plus some random
            amount of time less than or equal to the number of extra
            days. The default schedule is shown here:
     </p>
     <div class="copytoclipboard-wrapper">
      <pre class="programlisting one-line language-simple"><div class="docs-select-all right" id="sa13892688"><div class="copy-help left">Press ⌘+C to copy</div> <div class="right"><button class="clipboard-btn" title="Copy to Clipboard"><span class="icon-clipboard"></span></button></div></div><code class="language-simple"><span class="token operator">--</span>schedule<span class="token operator">=</span>120<span class="token punctuation">,</span>10<span class="token punctuation">,</span>130<span class="token punctuation">,</span>10<span class="token punctuation">,</span>150<span class="token punctuation">,</span>0</code></pre>
     </div>
     <p>
      Following the default schedule, client certificates begin
            expiring on the 120
      <sup>
       th
      </sup>
      day, and
            expire at random intervals over the next 10 days; data node
            certificates expire at random times between the
            130
      <sup>
       th
      </sup>
      and
            140
      <sup>
       th
      </sup>
      days; and management node
            certificates expire on the 150
      <sup>
       th
      </sup>
      day (with no random interval following).
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="option_ndb_sign_keys_sign">
      </a>
      <a class="link" href="mysql-cluster-programs-ndb-sign-keys.html#option_ndb_sign_keys_sign">
       <code class="option">
        --sign
       </code>
      </a>
     </p>
     <a class="indexterm" name="idm46045096047600">
     </a>
     <a class="indexterm" name="idm46045096046112">
     </a>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for sign">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --sign
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Disabled by
         </th>
         <td>
          <code class="literal">
           skip-sign
          </code>
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <p>
      Create signed certificates; enabled by default. Use
      <a class="link" href="mysql-cluster-programs-ndb-sign-keys.html#option_ndb_sign_keys_skip-sign">
       <code class="option">
        --skip-sign
       </code>
      </a>
      to create
            certificate signing requests instead.
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="option_ndb_sign_keys_skip-sign">
      </a>
      <a class="link" href="mysql-cluster-programs-ndb-sign-keys.html#option_ndb_sign_keys_skip-sign">
       <code class="option">
        --skip-sign
       </code>
      </a>
     </p>
     <a class="indexterm" name="idm46045096032912">
     </a>
     <a class="indexterm" name="idm46045096031424">
     </a>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for skip-sign">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --skip-sign
          </code>
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <p>
      Create certificate signing requests instead of signed
            certificates.
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="option_ndb_sign_keys_stdio">
      </a>
      <a class="link" href="mysql-cluster-programs-ndb-sign-keys.html#option_ndb_sign_keys_stdio">
       <code class="option">
        --stdio
       </code>
      </a>
     </p>
     <a class="indexterm" name="idm46045096021728">
     </a>
     <a class="indexterm" name="idm46045096020240">
     </a>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for stdio">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --stdio
          </code>
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <p>
      Read certificate signing requests from
      <code class="literal">
       stdin
      </code>
      , and write X.509 to
      <code class="literal">
       stdout
      </code>
      .
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="option_ndb_sign_keys_to-dir">
      </a>
      <a class="link" href="mysql-cluster-programs-ndb-sign-keys.html#option_ndb_sign_keys_to-dir">
       <code class="option">
        --to-dir
       </code>
      </a>
     </p>
     <a class="indexterm" name="idm46045096009200">
     </a>
     <a class="indexterm" name="idm46045096007712">
     </a>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for to-dir">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --to-dir=dirname
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Type
         </th>
         <td>
          Directory name
         </td>
        </tr>
        <tr>
         <th>
          Default Value
         </th>
         <td>
          <code class="literal">
           [none]
          </code>
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <p>
      Specify the output directory for created files. For private
            key files, this can be overriden using
      <a class="link" href="mysql-cluster-programs-ndb-sign-keys.html#option_ndb_sign_keys_keys-to-dir">
       <code class="option">
        --keys-to-dir
       </code>
      </a>
      .
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="option_ndb_sign_keys_usage">
      </a>
      <a class="link" href="mysql-cluster-programs-ndb-sign-keys.html#option_ndb_sign_keys_usage">
       <code class="option">
        --usage
       </code>
      </a>
     </p>
     <a class="indexterm" name="idm46045095992448">
     </a>
     <a class="indexterm" name="idm46045095990960">
     </a>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for usage">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --usage
          </code>
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <p>
      Print help text, then exit (alias for
      <a class="link" href="mysql-cluster-programs-ndb-sign-keys.html#option_ndb_sign_keys_help">
       <code class="option">
        --help
       </code>
      </a>
      ).
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="option_ndb_sign_keys_version">
      </a>
      <a class="link" href="mysql-cluster-programs-ndb-sign-keys.html#option_ndb_sign_keys_version">
       <code class="option">
        --version
       </code>
      </a>
     </p>
     <a class="indexterm" name="idm46045095980272">
     </a>
     <a class="indexterm" name="idm46045095978784">
     </a>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for version">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --version
          </code>
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <p>
      Print version information, then exit.
     </p>
    </li>
   </ul>
  </div>
 </div>
 <br/>
</div>
