my $sth = $dbh->prepare (q#SHOW SESSION STATUS LIKE ?#);

$sth->execute ('Ssl_version');
(undef, my $sslver) = $sth->fetchrow_array;
die "SSL version $sslver insecure" unless $sslver =~ /^TLSv1\.[123]/;
$sth->execute ('Ssl_cipher');
(undef, my $cipher) = $sth->fetchrow_array;
die "SSL cipher $cipher insecure" if $cipher =~ /NULL/;