WPK package creation

[Paweł Polski]

Hi,

I am trying to create custom wpk packages, but I don't want to overwrite wpk_root.pem certificate. To be sure is this possible? I am following this instructions: following https://documentation.wazuh.com/current/user-manual/agents/remote-upgrading/create-custom-wpk/generate-wpk-package-manually.html
but this case is not obvious for me. Could you provide me more instruction how can I do this?

Regards,
Pawel Polski

[Daniel Folch]

Hello,

As indicated here:
https://documentation.wazuh.com/current/user-manual/agents/remote-upgrading/install-custom-wpk.html#install-the-root-ca-into-the-agent

You can store the new certificate in the agent machine with a different name or on a different path and include it in the configuration with a new ca_store tag:

<agent-upgrade> <ca_verification> <enabled>yes</enabled> <ca_store>/var/ossec/etc/wpk_root.pem</ca_store> <ca_store>/path/to/certificate</ca_store> </ca_verification> </agent-upgrade>

This way you can add the new certificate without removing the default one.

​