Werk #17668: check_cert: Consider more error types if self signed certificates are allowed
| Component | Checks & agents | ||||
| Title | check_cert: Consider more error types if self signed certificates are allowed | ||||
| Date | Oct 8, 2025 | ||||
| Level | Trivial Change | ||||
| Class | New Feature | ||||
| Compatibility | Compatible - no manual interaction needed | ||||
| Checkmk versions & editions |
|
The option Allow self-signed certificates now ignores three certificate errors: X509_V_ERR_DEPTH_ZERO_SELF_SIGNED_CERT, X509_V_ERR_SELF_SIGNED_CERT_IN_CHAIN, and X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY. These errors typically occur with self-signed certificates.
As a result, when this option is enabled, Checkmk will no longer report validation errors for these specific cases, allowing users to connect to services using self-signed certificates without issues. No user action is required to benefit from this improvement.