Werk #18558: HPE StoreOnce: Fix inverted TLS certificate verification

Component

Checks & agents

Title

HPE StoreOnce: Fix inverted TLS certificate verification

Date

Jun 2, 2026

Level

Trivial Change

Class

Bug Fix

Compatibility

Compatible - no manual interaction needed

Checkmk versions & editions

3.0.0b1 Not yet released	Checkmk Community, Checkmk Pro, Checkmk Ultimate, Checkmk Cloud, Checkmk Ultimate MT
2.5.0p6	Checkmk Community, Checkmk Pro, Checkmk Ultimate, Checkmk Cloud, Checkmk Ultimate MT

Previously, the HPE StoreOnce special agent did not respect the Ignore TLS certificate option. The logic controlling certificate verification was inverted: enabling Ignore TLS certificate caused the agent to still verify the certificate.

As a result, monitoring an appliance with a self-signed (or otherwise untrusted) certificate failed even with Ignore TLS certificate enabled. The special agent service went to CRIT with a connection error such as:

Connection error: ... certificate verify failed: self-signed certificate in certificate chain

This has been fixed. Enabling Ignore TLS certificate now disables certificate verification as expected.

This regression was introduced in version 2.5.0; earlier versions were not affected.

To the list of all Werks