Re: ERROR 1045 (28000) Access denied for user

[James Preston]

Wish someone had an idea of where I should be looking :^(

On to next steps and results:
SSL is running server as far as I can tell and password plugin seems correct:
0 [Warning] [MY-010068] [Server] CA certificate ca.pem is self signed.
0 [System] [MY-013602] [Server] Channel mysql_main configured to support TLS. Encrypted connections are now supported for this channel.
mysql> show variables like '%caching%';
+----------------------------------------------+-----------------+
| Variable_name | Value |
+----------------------------------------------+-----------------+
| caching_sha2_password_auto_generate_rsa_keys | ON |
| caching_sha2_password_digest_rounds | 5000 |
| caching_sha2_password_private_key_path | private_key.pem |
| caching_sha2_password_public_key_path | public_key.pem |
+----------------------------------------------+-----------------+
4 rows in set (0.06 sec)

I have generated new keys and copied client and ca keys to client.
I do not get any errors on client regarding SSL only access denied.
Enabled general_log on server to try and get a better handle on where login is failing wrt finding a solution.

server mysqld.log shows:
8 [Warning] [MY-010319] [Server] Found invalid password for user: 'user@%'; Ignoring user

general_log shows:
17 Connect jhpreston@jim-vostro on using TCP/IP
17 Connect Access denied for user 'user'@'jim-vostro' (using password: YES)

In wireshark, the attempt to switch to sha256_password is gone probably due to generating new keys. But now the "unkown" "error" is back. Specifically it states: SHA2 Auth State: unknown.
Do not know what to make of that and will see if I can find any further info on the Internet regarding that.

If posting any other information from either the server logs, client, Wireshark would help someone find a solution or something to try/follow I am happy to give any data I can.