[checkmk-commits] [Checkmk/checkmk] 4e0f61: 16225 FIX Ignore certificates with negative serial...

Branch: refs/heads/2.2.0 Home: https://github.com/Checkmk/checkmk Commit: 4e0f6149a9bafd487f12fea4df11deda3282954b https://github.com/Checkmk/checkmk/commit/4e0f6149a9bafd487f12fea4df11deda3… Author: Maximilian Wirtz <maximilian.wirtz(a)checkmk.com> Date: 2023-11-27 (Mon, 27 Nov 2023) Changed paths: A .werks/16225 M cmk/gui/watolib/config_domains.py M tests/unit/cmk/gui/watolib/test_config_domains.py Log Message: ----------- 16225 FIX Ignore certificates with negative serial numbers X509 certificates contain a serial number which is used for various purposes. Since RFC5280 (May 2008) certificates must be a positive integer. There used to be certificates with negative serial numbers which were accepted. Our underlying libraries start to deprecate the support for these certificates, therefore Checkmk now deems them invalid. Please note that these certificates are very uncommon. If Checkmk encounters such a certificate it will log it to `var/log/web.log`. Change-Id: Ic226483622de239c19ffd142ad35dbf8aeb2cead