Agent Updater Error on Windows Server

CMK version: 2.5.0p10
OS version: RHEL 9

Error message: Update error: module ‘OpenSSL.crypto’ has no attribute ‘verify’

Hello,
I’ve been using CheckMK for quite some time now, and for a while I’ve been experiencing an issue with Windows servers where the agent updater displays the message “module ‘OpenSSL.crypto’ has no attribute ‘verify’”.
I’m using CheckMK 2.5.0p10 and deploy the provided Python environment to all Windows servers. After carrying out a few tests, I’ve found that the above-mentioned function is no longer supported in Python 24.3.0.
Am I doing something wrong here, or does CheckMK need to provide a fix?

Hi.

Please have a look at the german forum entry: Wieder mal ein SSL-Problem - Global Community / Deutsch - Checkmk Forum
Regards,
Christian

I would also check if you have a system wide Python running on this machine.
If yes, it is possible that this system Python has a other version than the CMK Python and this leads to this error message.

As far as I know, we don’t have Python installed on Windows, so I have to use the environment from the Bakery; otherwise, updating isn’t possible.
My Linux machines have no problems whatsoever with the update process.
If the agent is installed on Windows and TLS and the updater are registered manually, everything works fine, no error message. However, as soon as a new version is released, the problem arises. For this reason, I rule out certificate issues, since the problem has been around for quite some time (I think since checkmk 2.3.0p3x or so).