How to install ssl certifcate

[Kevin Jan]

Hi Wazuh Team,

We tried putting ssl ceritficate in wazuh manager and i followed the documentation. im a bit lost because it still being detected in out vapt scanner as self signed certificate. may we have a better suggestion in fixing it?

Thanks,

-Kevin

[Marcos Darío Buslaiman]

Hi Kevin,
Thanks for using wazuh! 

Sorry for the late response, just to get a better understanding, I will need more information about your scenario, 

Are you executing a fresh installation? Which version of Wazuh are you installing?

Or do you already have a Wazuh environment running but you need to change your SSL Certificate?
Please let me know which document have you followed.

Regards 

Best regards,
Marcos Buslaiman
___________________________________________
IT Security Engineer  Wazuh, Inc.
WAZUH - The Open Source Security Platform

[Kevin Jan]

Hi Marcos,

I'm using 4.3.3 and it's been running for a year now. I'd like to install a certificate that would make it https appear in the browser and pass the vapt. I followed this article: https://documentation.wazuh.com/current/user-manual/certificates.html. It seems my wazuh manager is still showing as not secure and  having "self signed" certificate vapt

[Kevin Jan]

thanks for your help and please bear with me as I have very little idea in installing certificate 

[Marcos Darío Buslaiman]

Hi Kevin

If I don't misunderstand you, the documentation to follow is this https://documentation.wazuh.com/current/user-manual/wazuh-dashboard/configuring-third-party-certs/index.html
If you already have your SSL certificate, you will need to execute the steps described in this part of the document https://documentation.wazuh.com/current/user-manual/wazuh-dashboard/configuring-third-party-certs/ssl.html#configuring-lets-encrypt-ssl-certificates-in-the-wazuh-dashboard

Please remember to take a backup before modifying any configuration like the file /etc/wazuh-dashboard/opensearch_dashboards.yml 

and also take a backup of your current certificates just in case that was needed to roll back the configuration (/etc/wazuh-dashboard/certs/).

Please, let me know if this information is useful for you or have any doubts or questions.

Regards!

Marcos

[Kevin Jan]

Hi Marcos,

We're following this article and we couldn't solve the error shown below. I know this would be outside of wazuh but can you help us in solving it?

Cheers!

-Kevin

[Marcos Darío Buslaiman]

Hi Kevin,

Sorry for the late response,

According to the error message, could be some issue with the access to ports 80 or 443, you will need to verify if they are open.

You can execute this.
 netstat -tunap| grep ":80\|:443"

Also, please verify the log error on /var/log/letsencrypt/ letsencrypt.log

Looking forward to your update.

Regards

Marcos.

[Amit Eilat]

Hi All,

I'm struggling with configuring the ssl certificate for the web browser

I'm using 4.5.1 version, and on an offline environment

Could very much use some help

Thank you :)

ב-יום שני, 10 ביולי 2023 בשעה 23:23:28 UTC+3, Marcos Darío Buslaiman כתב/ה: