Update error: No valid signature found after Update from 2.1.0p44 to 2.3.0p21

[pk1nzl (Philipp Kinzl)]

CMK version: 2.3.0p21
OS version: Debian 12

**Error message: Update error: No valid signature found **

After the Update from 2.1.0p44 to 2.3.0p21 (and Debian Upgrade from 11 to 12)
The Agent Updater on the hosts does not work anymore.
It says on all hosts Update error: No valid signature found

I’ve baked and signed and also signed only once again with the passphrase (same as bevoee)

Here output from the client error log:
Response from agent bakery:

{‘result_code’: 0, ‘result’: {‘agent’: ‘ITxhcmNoPg…TSpQ8AMBoB’}, ‘severity’: ‘success’}
Downloaded agent has size 18516990 bytes.
Signature #1 is invalid.
No valid signature found.
See syslog or Logfile at /var/lib/check_mk_agent/cmk-update-agent.log for details.

Any Ideas?

Thank you guys
Regards Philipp

[aeckstein (Andre Eckstein)]

Hi,

maybe you ran into this :

.8. Automatic agent updates from versions prior to 2.2.0p8

Checkmk 2.3.0 no longer creates SHA1 signatures for agent packages. The verification of SHA256 signatures was introduced with Checkmk 2.2.0p8. In order for agent updates to version 2.3.0 to take place automatically, the agents must first be updated to version 2.2.0p8 or higher.

Update to version 2.4.0

So if you did not bake (and wait for the distribution) of the checkmk agents after the update to 2.2, you will end up in that situation.