Oracle MySQL before 5.7.3, Oracle MySQL Connector/C (aka libmysqlclient)
before 6.1.3, and MariaDB before 5.5.44 use the --ssl option to mean that
SSL is optional, which allows man-in-the-middle attackers to spoof servers
via a cleartext-downgrade attack, aka a "BACKRONYM" attack.

tyhicks	The MySQL documentation makes the behavior of the --ssl option clear. It isn't known if they'll release updates for the 5.5/5.6 series.
mdeslaur	not included in 5.5.47 or 5.6.28. Marking this issue as "ignored" since it doesn't look like upstream is going to fix this in 5.5 and 5.6, and we aren't going to diverge from upstream.