# Got \[Galera\] Handshake failed: tlsv1 alert decrypt error when replacing SSL cert **URL:** \ **Category:** Percona XtraDB Cluster\ **Tags:** percona\ **Created:** [September 28, 2023, 7:03am UTC](https://forums.percona.com/t/got-galera-handshake-failed-tlsv1-alert-decrypt-error-when-replacing-ssl-cert/25507 "2023-09-28T07:03:22Z")\ **Posts on this page:** 2\ **Page:** 1
**Author:** ![irwanseptian](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/irwanseptian/32/12983_2.png) [@irwanseptian](https://forums.percona.com/u/irwanseptian)\ **Post date:** [September 28, 2023, 7:03am UTC](https://forums.percona.com/t/got-galera-handshake-failed-tlsv1-alert-decrypt-error-when-replacing-ssl-cert/25507/1 "2023-09-28T07:03:22Z")
Hi everyone, I got issue when i’m trying to replace the old certificate with the new certificate. The certificate that I created are self signed certificates, I’m following this guideline [Encrypt PXC traffic - Percona XtraDB Cluster](https://docs.percona.com/percona-xtradb-cluster/8.0/encrypt-traffic.html#upgrade-certificates) to replace the certs. The cluster consist of 3 nodes, and the first node already uses the merge certificate and it successfully restarted and running, but whenever I try to replace the certs on the second node somehow it throws `[Galera] Handshake failed: tlsv1 alert decrypt error`. Do I miss something important? ---
**Author:** ![irwanseptian](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/irwanseptian/32/12983_2.png) [@irwanseptian](https://forums.percona.com/u/irwanseptian)\ **Post date:** [October 2, 2023, 12:50pm UTC](https://forums.percona.com/t/got-galera-handshake-failed-tlsv1-alert-decrypt-error-when-replacing-ssl-cert/25507/2 "2023-10-02T12:50:08Z")
nvm, I already solved this issue. I solved this issue by creating the new SSL certificate with the same CA key, previously i’ve created the SSL cert with new CA key. My bad. 😅