Werk #16357: Check certificates: Fix checking of common name of issuer

Name: checkmk
Rating: 4.7 (114 reviews)

Component

Checks & agents

Title

Check certificates: Fix checking of common name of issuer

Date

Apr 18, 2024

Level

Trivial Change

Class

Bug Fix

Compatibility

Compatible - no manual interaction needed

Checkmk versions & editions

2.4.0b1 Not yet released	Checkmk Raw (CRE), Checkmk Enterprise (CEE), Checkmk Cloud (CCE), Checkmk MSP (CME)
2.3.0b6	Checkmk Raw (CRE), Checkmk Enterprise (CEE), Checkmk Cloud (CCE), Checkmk MSP (CME)

The active certificate check (configured via the ruleset Check certificates) did not check the common name (CN) of the certificate issuer correctly:

If only the checking of the issuer CN was activated, the CN of the subject was checked instead.
If both the checking of the issuer and the subject CN where activated, the active check crashed with\ error: the argument '--subject-cn \<SUBJECT_CN>' cannot be used multiple times.

To the list of all Werks