Percona renew ssl certificate

I got it.
Thank you for your explanation.

best regards,

Wow! So that’s what you were expecting!!

For the completeness and supporting bitone’s comment here’s what documentation says:

To enable encryption for SST using XtraBackup, specify the location of the keys and certificate files in the each node’s configuration under [sst]:

encrypt=4
ssl-ca=/etc/mysql/certs/ca.pem
ssl-cert=/etc/mysql/certs/server-cert.pem
ssl-key=/etc/mysql/certs/server-key.pem

The necessary key and certificate files are first searched at the ssl-ca, ssl-cert, and ssl-key options under [mysqld]. If these options are not set, the data directory is searched for ca.pem, server-cert.pem, and server-key.pem files. The [sst] section is not searched.

Thank you both.
K