In cased of installing a SSL certificate from a local CA, where do I have to place the certificate, the key and the CA certificate?

Troubleshooting
1

CMK version: 2.4.0p5
OS version: Ubuntu 24.04.2

Error message:

Output of “cmk --debug -vvn hostname”: (If it is a problem with checks or plugins)

2

What’s the purpose? HTTPS for the frontend? In that case, please read here:

3

I already read this document, but within 3.3 Using internal CAs it is only said that the CA certificate needs to be located in /etc/ssl/certs after running the update-ca-certificates script. So I assume that the SSL certificate and the key have to be located in default locations /etc/ssl resp. /etc/ssl/private.

4

Apart of this I am a little bit confused by the output of Setup / Maintanance / Certificate overview displaying certificate and CA .pem files being located in /omd/sites/SiteID/etc/…

5

In case you intend to change to https it has nothing to do with checkmk. You may look at your apache ssl configuration because its different per distribution.
For RedHat we find in /etc/httpd/conf.d/ssl.conf the options SSLCertificateFile and SSLCertificateKeyFile which points to the cert and key.

Later on if it comes to agent configuration for automatic updates or distributed monitoring you need to provide the certificate from your CA root

I hope that helps.

Mike