Service "CERT" WARN: Verification: unable to get local issuer certificate

[itadmindd]

CMK version: 2.5.0p7
OS version: Debain 12

Error message: Verification: unable to get local issuer certificate Subject CN: xxx, Server certificate validity: 551 day(s)

After updating to version 2.5, we have been seeing the following message more frequently in the “CERT” service: Verification: unable to get local issuer certificate.

I tried to place the certificates on the CheckMK server under /homes/user using WinSCP, and then moved them to /usr/local/share/ca-certificates.

I’m concerned that the path where I placed the certificate might not be correct, but I’m not sure where else the certificates can or should be placed in this case.

I really appreciate your help.

[r.sander (Robert Sander)]

@itadmindd

then moved them to /usr/local/share/ca-certificates.

After that you need to run update-ca-certificates as root.

[marcel.arentz]

You can also upload the certificate directly within the checkmk site (Global settings > Site Management > Trusted certificate authorities for SSL). You don’t need command line access in this case.