afmarulanda/wazuh-ansible-4.8.1
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Added tasks to verify SHA512 checksum

Browse Source
This commit is contained in:
David Correa Rodríguez 2023-08-31 12:18:16 +02:00
parent 86fb18a0c5
commit 06314eb8f9
No known key found for this signature in database
GPG Key ID: 8787C7C9FF271262
1 changed files with 16 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
roles/wazuh/ansible-wazuh-agent/tasks/Windows.yml
View File

@ -30,16 +30,29 @@
when: when:
- not wazuh_package_downloaded.stat.exists - not wazuh_package_downloaded.stat.exists
- name: Windows | Download SHA512 checksum file
win_get_url:
url: "{{ wazuh_winagent_sha512_url }}"
dest: "{{ wazuh_winagent_config.download_dir }}"
when:
- not wazuh_package_downloaded.stat.exists
- name: Extract checksum from SHA512 file
win_shell: Get-Content "{{ wazuh_winagent_config.download_dir }}{{ wazuh_winagent_package_name }}.sha512" | ForEach-Object { $_.Split(' ')[0] }
register: extracted_checksum
when:
- not wazuh_package_downloaded.stat.exists
- name: Windows | Verify the Wazuh Agent installer - name: Windows | Verify the Wazuh Agent installer
win_stat: win_stat:
path: "{{ wazuh_winagent_config.download_dir }}{{ wazuh_winagent_package_name }}" path: "{{ wazuh_winagent_config.download_dir }}{{ wazuh_winagent_package_name }}"
get_checksum: true get_checksum: true
checksum_algorithm: md5 checksum_algorithm: sha512
register: wazuh_agent_status register: wazuh_agent_status
failed_when: failed_when:
- wazuh_agent_status.stat.checksum != wazuh_winagent_config.md5 - wazuh_agent_status.stat.checksum != extracted_checksum.stdout
when: when:
- wazuh_winagent_config.check_md5 - wazuh_winagent_config.check_sha512
- name: Windows | Install Agent if not already installed - name: Windows | Install Agent if not already installed