Wazuh_Stuff/custom_cert.patch
2025-02-21 08:44:38 +01:00

30 lines
1.3 KiB
Diff

diff --git a/wazuh-install.sh b/wazuh-install.sh
index d6baf0a..c1dc598 100644
--- a/wazuh-install.sh
+++ b/wazuh-install.sh
@@ -4013,10 +4013,20 @@ function cert_generateDashboardcertificates() {
}
function cert_generateRootCAcertificate() {
-
- common_logger "Generating the root certificate."
- cert_executeAndValidate "openssl req -x509 -new -nodes -newkey rsa:2048 -keyout ${cert_tmp_path}/root-ca.key -out ${cert_tmp_path}/root-ca.pem -batch -subj '/OU=Wazuh/O=Wazuh/L=California/' -days 3650"
-
+ common_logger "Checking for an existing root certificate."
+
+ # Define expected file names
+ existing_ca_key="root-ca.key"
+ existing_ca_cert="root-ca.pem"
+
+ if [[ -f "./$existing_ca_key" && -f "./$existing_ca_cert" ]]; then
+ common_logger "Existing root certificate found. Copying to target paths."
+ cp "./$existing_ca_key" "${cert_tmp_path}/root-ca.key"
+ cp "./$existing_ca_cert" "${cert_tmp_path}/root-ca.pem"
+ else
+ common_logger "No existing root certificate found. Generating a new one."
+ cert_executeAndValidate "openssl req -x509 -new -nodes -newkey rsa:2048 -keyout ${cert_tmp_path}/root-ca.key -out ${cert_tmp_path}/root-ca.pem -batch -subj '/OU=Wazuh/O=Wazuh/L=California/' -days 3650"
+ fi
}
function cert_parseYaml() {