Pull in the default SSL config for DB backup/restore commands

[brandonkelly]

Description

Updates craft\db\mysql\Schema::_createDumpConfigFile() to pull in the default ssl_* values (via mysql --print-defaults) if none of the PDO::MYSQL_ATTR_SSL_* DB connection attributes are set.

Also adds attribute checks for PDO::MYSQL_ATTR_SSL_CAPATH and MYSQL_ATTR_SSL_CIPHER.

Related issues

• Fixes Problem with MySQL: Production-Ready Docker Images for Craft #18756

[Copilot]

Pull request overview

Updates MySQL backup/restore config generation so that when PDO SSL attributes aren’t explicitly set, Craft carries over the default MySQL SSL settings that would normally come from the system/user my.cnf chain (via mysql --print-defaults) even though --defaults-file causes those config files to be ignored.

Changes:

• Expand SSL attribute handling in _createDumpConfigFile() to include CAPATH and CIPHER, and fall back to config-file-derived SSL defaults when no SSL attributes are set.
• Add _sslDefaultsFromConfigFiles() to extract ssl_* directives from mysql --print-defaults output and append them to the generated temporary my.cnf.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.