Werk #16357: Check certificates: Fix checking of common name of issuer

Component Checks & agents
Title Check certificates: Fix checking of common name of issuer
Date Apr 18, 2024
Checkmk Edition Checkmk Raw (CRE)
Checkmk Version 2.3.0b6 2.4.0b1
Level Trivial Change
Class Bug Fix
Compatibility Compatible - no manual interaction needed

The active certificate check (configured via the ruleset Check certificates) did not check the common name (CN) of the certificate issuer correctly:

  • If only the checking of the issuer CN was activated, the CN of the subject was checked instead.
  • If both the checking of the issuer and the subject CN where activated, the active check crashed with\ error: the argument '--subject-cn \<SUBJECT_CN>' cannot be used multiple times.

To the list of all Werks