# After upgrading to PXC 8.4.5-5.1, I see TLS init warnings, missing binlog\_utils\_udf.so, and constant Galera “End of file” messages despite a healthy cluster **URL:** \ **Category:** Percona Operator for MySQL\ **Tags:** mysql, percona, new-release\ **Created:** [November 3, 2025, 11:40am UTC](https://forums.percona.com/t/after-upgrading-to-pxc-8-4-5-5-1-i-see-tls-init-warnings-missing-binlog-utils-udf-so-and-constant-galera-end-of-file-messages-despite-a-healthy-cluster/39676 "2025-11-03T11:40:42Z")\ **Posts on this page:** 4\ **Page:** 1
**Author:** ![noops](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/noops/32/21321_2.png) [@noops](https://forums.percona.com/u/noops)\ **Post date:** [November 3, 2025, 11:40am UTC](https://forums.percona.com/t/after-upgrading-to-pxc-8-4-5-5-1-i-see-tls-init-warnings-missing-binlog-utils-udf-so-and-constant-galera-end-of-file-messages-despite-a-healthy-cluster/39676/1 "2025-11-03T11:40:42Z")
Description After upgrading to Percona XtraDB Cluster 8.4.5-5.1 via the Percona Operator (crVersion: 1.18.0), I’m seeing several recurring issues in the MySQL logs across all PXC nodes: 1. TLS initialization warning [Warning] [MY-013595] [Server] Failed to initialize TLS for channel: mysql\_admin. [Warning] [MY-010069] [Server] Failed to set up SSL because of the following SSL library error: SSL context is not usable without certificate and private key [System] [MY-013603] [Server] No TLS configuration was given for channel mysql\_admin; re-using TLS configuration of channel mysql\_main. Even though TLS is enabled and configured via sslSecretName and sslInternalSecretName. 2. Missing shared library error [ERROR] [MY-010901] [Server] Can’t open shared library ‘binlog\_utils\_udf.so’ (errno: 2 /usr/lib64/mysql/plugin/binlog\_utils\_udf.so: cannot open shared object file: No such file or directory) This repeats multiple times on startup, though the cluster continues to operate normally. 3. Repeated Galera “Failed to establish connection: End of file” messages [Note] [MY-000000] [Galera] Failed to establish connection: End of file These appear continuously every few seconds, even though the cluster remains healthy and synced (wsrep\_cluster\_status=Primary, all nodes connected). Steps to Reproduce ``` 1\. Deploy a Percona XtraDB Cluster 8.4.5-5.1 using the Percona Operator (crVersion: 1.18.0) on Kubernetes (AKS). 2\. Enable TLS using sslSecretName and sslInternalSecretName. 3\. Check MySQL logs after pod restart. ``` Version ``` • Percona Operator: 1.18.0 • Percona XtraDB Cluster: 8.4.5-5.1 • Kubernetes: Azure AKS • TLS: Enabled (tls.enabled: true) ``` Logs Relevant excerpts: [Warning] [MY-013595] Failed to initialize TLS for channel: mysql\_admin [ERROR] [MY-010901] Can’t open shared library ‘binlog\_utils\_udf.so’ [Note] [MY-000000] [Galera] Failed to establish connection: End of file Expected Result ``` • TLS should initialize cleanly for all channels. • No missing plugin warnings for binlog_utils_udf.so if it is not expected in this version. • No continuous “End of file” messages once the cluster is in SYNCED state. ``` Actual Result ``` • TLS initialization produces repeated warnings. • The binlog_utils_udf.so plugin cannot be loaded. • Galera logs constant “Failed to establish connection: End of file” despite replication being healthy. ``` Additional Information ``` • The cluster is deployed in Azure AKS using the following Helm values (excerpt): ``` crVersion: 1.18.0 pxc: image: ``` repository: percona/percona-xtradb-cluster tag: "8.4.5-5.1" ``` configuration: |- ``` \[mysqld\] pxc-encrypt-cluster-traffic=ON default-time-zone = 'Asia/Jerusalem' sql_mode=STRICT_TRANS_TABLES,ERROR_FOR_DIVISION_BY_ZERO,NO_ENGINE_SUBSTITUTION wsrep_sync_wait = 1 \[galera\] socket.ssl=YES \[sst\] encrypt=4 ssl-ca=/etc/mysql/ssl-internal/ca.crt ssl-cert=/etc/mysql/ssl-internal/tls.crt ssl-key=/etc/mysql/ssl-internal/tls.key ``` tls: enabled: true All nodes complete SST/IST successfully and join the cluster (SYNCED), but the above warnings and errors persist. Questions ``` 1\. Is the TLS warning expected in 8.4.5 or a known regression? 2\. Is the missing binlog_utils_udf.so plugin intentional or a packaging issue? 3\. Do the repeated “End of file” messages indicate a harmless retry, or is there an underlying connectivity issue? ``` ---
**Author:** ![Slava\_Sarzhan](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/slava_sarzhan/32/3196_2.png) [@Slava\_Sarzhan](https://forums.percona.com/u/Slava_Sarzhan)\ **Post date:** [November 3, 2025, 9:08pm UTC](https://forums.percona.com/t/after-upgrading-to-pxc-8-4-5-5-1-i-see-tls-init-warnings-missing-binlog-utils-udf-so-and-constant-galera-end-of-file-messages-despite-a-healthy-cluster/39676/2 "2025-11-03T21:08:08Z")
Hi @noops did you perform an update from PXC 8.0 to PXC 8.4? Or just upgrade the operator from 1.17.0 to 1.18.0. ---
**Author:** ![noops](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/noops/32/21321_2.png) [@noops](https://forums.percona.com/u/noops)\ **Post date:** [November 6, 2025, 8:26am UTC](https://forums.percona.com/t/after-upgrading-to-pxc-8-4-5-5-1-i-see-tls-init-warnings-missing-binlog-utils-udf-so-and-constant-galera-end-of-file-messages-despite-a-healthy-cluster/39676/3 "2025-11-06T08:26:39Z")
i hade upgraded from pxc 8.0 into the 8.4 previusly to that oporator upgrade ---
**Author:** ![Slava\_Sarzhan](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/slava_sarzhan/32/3196_2.png) [@Slava\_Sarzhan](https://forums.percona.com/u/Slava_Sarzhan)\ **Post date:** [November 29, 2025, 5:22pm UTC](https://forums.percona.com/t/after-upgrading-to-pxc-8-4-5-5-1-i-see-tls-init-warnings-missing-binlog-utils-udf-so-and-constant-galera-end-of-file-messages-despite-a-healthy-cluster/39676/4 "2025-11-29T17:22:16Z")
> [@noops](#): > > `binlog` Hi @noops operator does not support major update yet (we will work on it soon). We did not test it so I can only share ideas: 1. About TLS - are you sure that secrets were not deleted? 2. PXC 8.4 does not have binlog\_utils\_udf plugin, it has component\_binlog\_utils\_udf. Try to remove binlog\_utils\_udf from cnf file. 3. [Galera] Failed to establish connection: End of file - difficult to say because it can be connected with different issues, but one of the problems can be resources, and as I know, PXC 8.4 needs to have more memory than PXC 8.0 to work correctly. Try to add resources.