Re: [mod-security-users] My OCSP request and response is not log

[Josh Amishav-Z. <ja...@ow...>]

Hi,

Regarding the response body logging, it sounds like you need to
configure SecResponseBodyMimeType. For details see:
https://github.com/SpiderLabs/ModSecurity/wiki/Reference-Manual#SecResponseBodyMimeType

- Josh

On Wed, Mar 18, 2015 at 12:48 PM, biau <bi...@se...> wrote:

> Hi all
>
> I had make my Apache act as reverse proxy to my OCSP responder.
>
> I tried to configure the modsecurity to log my OCSP request and
> response. here is my configuration
>
> <IfModule security2_module>
> SecAuditEngine On
> SecRuleEngine On
> SecRequestBodyAccess On
> SecResponseBodyAccess On
> SecAuditLogParts ABCEFHIZ
> SecAuditLogType Serial
> SecAuditLog logs/sec.log
> SecDebugLog logs/sec_debug.log
> SecDebugLogLevel 3
> </IfModule>
>
> the log is created, but in the log it only log for parts A,B,F and H. (C
> = request, and E=response) is missing.
>
> when i tried it with .html page, then the part C and E is appear.
>
> So, i want to know is it my configuration wrong? modsecurity can't log
> when it is reverse proxy? or it cannot log the binary(OCSP is in
> binary)?
>
> thank you
>
> best regards
> biau
>
>
>
> ------------------------------------------------------------------------------
> Dive into the World of Parallel Programming The Go Parallel Website,
> sponsored
> by Intel and developed in partnership with Slashdot Media, is your hub for
> all
> things parallel software development, from weekly thought leadership blogs
> to
> news, videos, case studies, tutorials and more. Take a look and join the
> conversation now. http://goparallel.sourceforge.net/
> _______________________________________________
> mod-security-users mailing list
> mod...@li...
> https://lists.sourceforge.net/lists/listinfo/mod-security-users
> Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs:
> http://www.modsecurity.org/projects/commercial/rules/
> http://www.modsecurity.org/projects/commercial/support/
>