Okay, I'm to the point of picking through the #mysql login conversation with Wireshark, trying to figure out at what point SSL/TLS negotiation is failing. #debian6 talking to #debian8