Werk #15693: Disable SHA1 signatures for agents

Komponente Agent bakery
Titel Disable SHA1 signatures for agents
Datum 04.08.2023
Checkmk-Version 2.3.0b1
Level Kleine Änderung
Klasse Neues Feature
Kompatibilität Inkompatibel - Manuelle Interaktion könnte erforderlich sein
Affected Editions
2.3.0b1 Checkmk Enterprise (CEE), Checkmk Cloud (CCE), Checkmk MSP (CME)

tl,dr; Update agents to 2.2.0b8 or later before updating the site to 2.3.0!

With this Werk Checkmk will no longer generate and validate SHA1 signatures for agent packages. With Werk #15692 Checkmk generated SHA256 signatures and the agent-updater is capable to verify SHA256 signatures since 2.2.0b8.

If you have agent updaters older than 2.2.0b8 these will not be able to verify agent packages anymore and therefore need manual updating after this Werk. We recommend to install at least 2.2.0p8 and update all agents before updating to 2.3.0.

If you were on 2.2.0p8 or beyond and all agents are up-to-date then no intervention will be necessary.

Zur Liste aller Werks