Werk #16357: Check certificates: Fix checking of common name of issuer

Component Checks & agents
Title Check certificates: Fix checking of common name of issuer
Date Apr 18, 2024
Level Trivial Change
Class Bug Fix
Compatibility Compatible - no manual interaction needed
Checkmk versions & editions
2.4.0b1 Checkmk Raw (CRE), Checkmk Enterprise (CEE), Checkmk Cloud (CCE), Checkmk MSP (CME)
2.3.0b6 Checkmk Raw (CRE), Checkmk Enterprise (CEE), Checkmk Cloud (CCE), Checkmk MSP (CME)

The active certificate check (configured via the ruleset Check certificates) did not check the common name (CN) of the certificate issuer correctly:

  • If only the checking of the issuer CN was activated, the CN of the subject was checked instead.
  • If both the checking of the issuer and the subject CN where activated, the active check crashed with\ error: the argument '--subject-cn \<SUBJECT_CN>' cannot be used multiple times.

To the list of all Werks