Werk #17668: check_cert: Consider more error types if self signed certificates are allowed
| Component | Checks & agents | ||
| Title | check_cert: Consider more error types if self signed certificates are allowed | ||
| Date | Oct 8, 2025 | ||
| Level | Trivial Change | ||
| Class | New Feature | ||
| Compatibility | Compatible - no manual interaction needed | ||
| Checkmk versions & editions |
|
The option Allow self-signed certificates now ignores three certificate errors: X509_V_ERR_DEPTH_ZERO_SELF_SIGNED_CERT, X509_V_ERR_SELF_SIGNED_CERT_IN_CHAIN, and X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY. These errors typically occur with self-signed certificates.
As a result, when this option is enabled, Checkmk will no longer report validation errors for these specific cases, allowing users to connect to services using self-signed certificates without issues. No user action is required to benefit from this improvement.