windows installer fixes

src/Linux_Client.py

@@ -520,6 +520,9 @@ def main():
     ensure_enrolled(config, machine_id)
 
     def run_forwarder_cycle():
+        # Continuously verify/renew PKI enrollment if server is licensed & online
+        ensure_enrolled(config, machine_id)
+
         print(f"[*] Scanning Linux journalctl for unsent entries (last {args.hours} hours)...")
         candidate_logs = get_recent_linux_logs(hours=args.hours, state=state)
         print(f"[*] Found {len(candidate_logs)} unsent candidate entries (INFO to ERROR, entries > {args.hours}h and already-sent skipped).")

src/Win_Client.py

@@ -427,6 +427,13 @@ def send_encrypted_logs_over_socket(config: dict, logs: list):
     key_path = os.path.join(cert_dir, "client.key")
     has_mtls_certs = os.path.exists(ca_path) and os.path.exists(cert_path) and os.path.exists(key_path)
 
+    if not has_mtls_certs and enrollment_secret and hub_url:
+        try:
+            enroll_client_if_needed(hub_url, enrollment_secret, cert_dir, machine_id, machine_id, os_type="windows")
+            has_mtls_certs = os.path.exists(ca_path) and os.path.exists(cert_path) and os.path.exists(key_path)
+        except Exception as e:
+            print(f"[!] Warning: Enrollment before TLS connection failed: {e}")
+
     if has_mtls_certs:
         print(f"[*] Connecting to LOGAR server at {server_host}:{server_port} over mTLS (TLS 1.3)...")
         sock = None
@@ -572,6 +579,9 @@ def main():
     ensure_enrolled(config, machine_id)
 
     def run_forwarder_cycle():
+        # Continuously verify/renew PKI enrollment if server is licensed & online
+        ensure_enrolled(config, machine_id)
+
         print(f"[*] Scanning Windows Application event log for unsent entries (last {args.hours} hours)...")
         candidate_logs = get_recent_windows_logs(hours=args.hours, state=state)
         print(f"[*] Found {len(candidate_logs)} unsent candidate entries (INFO to ERROR, entries > {args.hours}h and already-sent skipped).")