diff --git a/src/v/net/connection.cc b/src/v/net/connection.cc
index 789b7b012b81..80fb5a02effd 100644
--- a/src/v/net/connection.cc
+++ b/src/v/net/connection.cc
@@ -38,6 +38,7 @@ bool is_reconnect_error(const std::system_error& e) {
         case GNUTLS_E_UNSUPPORTED_VERSION_PACKET:
         case GNUTLS_E_NO_CIPHER_SUITES:
         case GNUTLS_E_PREMATURE_TERMINATION:
+        case GNUTLS_E_DECRYPTION_FAILED:
             return true;
         default:
             return false;
diff --git a/tests/rptest/tests/rpk_registry_test.py b/tests/rptest/tests/rpk_registry_test.py
index 2eb55148dd31..090d6859fc1e 100644
--- a/tests/rptest/tests/rpk_registry_test.py
+++ b/tests/rptest/tests/rpk_registry_test.py
@@ -284,7 +284,6 @@ def test_registry_subject(self):
         assert len(out) == 0
         assert len(out_deleted) == 0
 
-    @ok_to_fail
     @cluster(num_nodes=3)
     def test_produce_consume_avro(self):
         # First we register the schemas with their references.
@@ -349,7 +348,6 @@ def test_produce_consume_avro(self):
         assert json.loads(msg["value"]) == expected_msg_1
         assert json.loads(msg["key"]) == expected_msg_2
 
-    @ok_to_fail
     @cluster(num_nodes=3)
     def test_produce_consume_proto(self):
         # First we register the schemas with their references.