Removed sslmanager key from the docker manager image to 4.14.2

This commit is contained in:
Carlos Bordon 2025-11-26 15:22:12 -03:00
parent 47a73bdde6
commit 2d122e1dc9
No known key found for this signature in database
GPG Key ID: 4C040368C34BF037
2 changed files with 7 additions and 8 deletions

View File

@ -40,6 +40,10 @@ COPY config/filebeat.yml /etc/filebeat/
RUN chmod go-w /etc/filebeat/filebeat.yml RUN chmod go-w /etc/filebeat/filebeat.yml
# Remove wazuh-authd default certs to force generation of new ones at container startup
RUN rm -f /var/ossec/etc/sslmanager.key && \
rm -f /var/ossec/etc/sslmanager.cert
ADD https://raw.githubusercontent.com/wazuh/wazuh/$FILEBEAT_TEMPLATE_BRANCH/extensions/elasticsearch/7.x/wazuh-template.json /etc/filebeat ADD https://raw.githubusercontent.com/wazuh/wazuh/$FILEBEAT_TEMPLATE_BRANCH/extensions/elasticsearch/7.x/wazuh-template.json /etc/filebeat
RUN chmod go-w /etc/filebeat/wazuh-template.json RUN chmod go-w /etc/filebeat/wazuh-template.json

View File

@ -6,8 +6,6 @@ source /permanent_data.env
WAZUH_INSTALL_PATH=/var/ossec WAZUH_INSTALL_PATH=/var/ossec
WAZUH_CONFIG_MOUNT=/wazuh-config-mount WAZUH_CONFIG_MOUNT=/wazuh-config-mount
AUTO_ENROLLMENT_ENABLED=${AUTO_ENROLLMENT_ENABLED:-true}
############################################################################## ##############################################################################
# Aux functions # Aux functions
@ -215,13 +213,10 @@ main() {
# Remove some files in permanent_data (i.e. .template.db) # Remove some files in permanent_data (i.e. .template.db)
remove_data_files remove_data_files
# Generate wazuh-authd certs if AUTO_ENROLLMENT_ENABLED is true and does not exist # Create wazuh-authd key and cert if not present
if [ $AUTO_ENROLLMENT_ENABLED == true ] if [ ! -e ${WAZUH_INSTALL_PATH}/etc/sslmanager.key ]
then then
if [ ! -e ${WAZUH_INSTALL_PATH}/etc/sslmanager.key ] create_ossec_key_cert
then
create_ossec_key_cert
fi
fi fi
# Mount selected files (WAZUH_CONFIG_MOUNT) to container # Mount selected files (WAZUH_CONFIG_MOUNT) to container