OMD <site> performance check shows expired cert

Troubleshooting
1

CMK version: 2.4.0
OS version: Rocky Linux 9.5

Error message: Livestatus version: 2.4.0, Host checks: 0.0/s, Service checks: 1.7/s, Expired 17 hours 41 minutes ago

I have this error on both a production site (migrated from 2.3) and on a brand new site deployed on a brand new host.

The “OMD performance” service is critical, with a cert expired message.

All visible certs are valid, for 1000 years on the production site and for 10 years on the brand new test site.

Interestingly, both sites are showing the exact same time since expiration, even though certs have clearly all been generated at different time.

The agent output shows:

<<<livestatus_ssl_certs:sep(124)>>>
[temp]
/omd/sites/temp/etc/ssl/ca.pem|1747008000
/omd/sites/temp/etc/ssl/sites/temp.pem|1747008000

Those 2 certs are clearly valid, and this timestamp is wrong (and seems to be the cause of the error).

Anyone with the same issue ?

And congrats for this 2.4 release!

2

This problem is already fixed as part of this werk Werk #17903: OMD performance service reports wrong livestatus certificate expiration date . You can wait for 2.4.0p1 which will be released soon. Sorry for the inconvenience.

3

Great news, thanks.

I couldn’t find anything related in the forums and unfortunately didn’t check the werks.

Cheers.

4

Noticed this post as we hit this bug as well. Good to see it is resolved already.
One comment however, from the message I don’t find just the ‘expired’ very clear as the error message, maybe it should be changed to certificate expired or something alike?

5

Thanks for your feedback. I agree that just the word “expired” is not helpful here. Have opened an internal ticket.

6

There is a werk Werk #17903: OMD performance service reports wrong livestatus certificate expiration date . Its fixed in 2.4.0p1. You can update.

2 Likes
7

Thanks for taking the time to notify in this thread. Upgrade planned for the next couple of hours :wink:

1 Like