Re: [mod-security-users] Compiling modsecurity with yajl

[Felipe C. <FC...@tr...>]

Hi German,


Are you sure that the mod_security2.so is the most recent compiled one? Did you manage to start this compilation process in a clean environment?


Br.,

Felipe "Zimmerle" Costa

Security Researcher, Lead Developer ModSecurity

m: +55 81.98706.5547



[signature_480191669]

www.trustwave.com<http://www.trustwave.com/>



Recognized by industry analysts as a leader in managed security services.<https://www.trustwave.com/company/about-us/accolades/>


________________________________
From: Germán Chialli <gch...@gm...>
Sent: Thursday, January 31, 2019 2:42:48 PM
To: mod...@li...
Subject: [mod-security-users] Compiling modsecurity with yajl

Hi all,

I'm trying to get the JSON parser to work with modsecurity 2.9.2 with Apache HTTPD. I have followed instructions from this link:
https://gist.github.com/rpfilomeno/1140359f4bd360137a98#file-modsecurity-installation-owasp-crs-for-centos-6-5-L22<https://scanmail.trustwave.com/?c=4062&d=mqbT3OoFvcK9m4kp3T8f4ZtXViQ38OQ-NzM6ieGW4A&s=5&u=https%3a%2f%2fgist%2egithub%2ecom%2frpfilomeno%2f1140359f4bd360137a98%23file-modsecurity-installation-owasp-crs-for-centos-6-5-L22>

I can see that yajl is found when I run the configure script. I see the following in the config.log:
$ cat config.log | grep yajl
  $ ./configure --with-yajl=/usr/local/lib /usr/local
configure:15950: checking for libyajl config script
configure:16071: using yajl v2.1.1
YAJL_CFLAGS='-DWITH_YAJL -I/usr/local/include/yajl  '
YAJL_LDADD='-lyajl  '
YAJL_LIBS='-lyajl  '

However after restarting apache, I still see the JSON support nor enabled error. Also, ldd mod_security2.so<http://scanmail.trustwave.com/?c=4062&d=mqbT3OoFvcK9m4kp3T8f4ZtXViQ38OQ-N2Y91bSQ5A&s=5&u=http%3a%2f%2fmod%5fsecurity2%2eso> doesn't show yajl.

What am I missing?

Thanks in advance,
Germán