|
From: Eero V. <eer...@ik...> - 2018-11-07 05:35:19
|
Hi List, Trying to compile modsecurity for nginx, using these instructions: https://www.nginx.com/blog/compiling-and-installing-modsecurity-for-open-source-nginx/ but module always fails to load: nginx: [emerg] module "/etc/nginx/modules/ngx_http_modsecurity_module.so" is not binary compatible in /etc/nginx/nginx.conf:10 I am using source packages from aws linux. I mroanaged get module working with full recompline of nginx package, but not single module. any clues how to fix this issue. Someone said that it might be related to compile parameters: https://www.nginx.com/blog/compiling-and-installing-modsecurity-for-open-source-nginx/, but how to pick correct ones from large list that nginx -V produces? Eero |
|
From: Ervin H. <ai...@gm...> - 2018-11-07 06:59:56
|
Hi Eero, On Wed, Nov 07, 2018 at 07:34:51AM +0200, Eero Volotinen wrote: > Hi List, > > Trying to compile modsecurity for nginx, using these instructions: > > https://www.nginx.com/blog/compiling-and-installing-modsecurity-for-open-source-nginx/ > > but module always fails to load: > nginx: [emerg] module "/etc/nginx/modules/ngx_http_modsecurity_module.so" > is not binary compatible in /etc/nginx/nginx.conf:10 I've followed this documentation: https://github.com/SpiderLabs/ModSecurity-nginx and got a working nGinx with ModSecurity. a. |
|
From: Eero V. <eer...@ik...> - 2018-11-07 07:11:00
|
Looks like problem is with compile parameters. they must match nginx binary? like this: https://dzhorov.com/2017/04/compiling-dynamic-modules-into-nginx-centos-7 Eero On Wed, Nov 7, 2018 at 9:03 AM Ervin Hegedüs <ai...@gm...> wrote: > Hi Eero, > > On Wed, Nov 07, 2018 at 07:34:51AM +0200, Eero Volotinen wrote: > > Hi List, > > > > Trying to compile modsecurity for nginx, using these instructions: > > > > > https://www.nginx.com/blog/compiling-and-installing-modsecurity-for-open-source-nginx/ > > > > but module always fails to load: > > nginx: [emerg] module "/etc/nginx/modules/ngx_http_modsecurity_module.so" > > is not binary compatible in /etc/nginx/nginx.conf:10 > > I've followed this documentation: > > https://github.com/SpiderLabs/ModSecurity-nginx > > and got a working nGinx with ModSecurity. > > > a. > > > _______________________________________________ > mod-security-users mailing list > mod...@li... > https://lists.sourceforge.net/lists/listinfo/mod-security-users > Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs: > http://www.modsecurity.org/projects/commercial/rules/ > http://www.modsecurity.org/projects/commercial/support/ > |
|
From: Ervin H. <ai...@gm...> - 2018-11-07 07:26:40
|
Hi, On Wed, Nov 07, 2018 at 09:10:35AM +0200, Eero Volotinen wrote: > Looks like problem is with compile parameters. they must match nginx binary? > > like this: > https://dzhorov.com/2017/04/compiling-dynamic-modules-into-nginx-centos-7 as I see, on this example the nGinx had recompiled from source with additional modules, so I can't interpret "match nginx binary" :). I've follow this idea - I'm a Debian user, grabbed the source of current nginx _package_, added the modsec module path, and build a new package. That's it. a. |
|
From: Eero V. <eer...@ik...> - 2018-11-07 08:23:09
|
Well. not really. trying to compile module with same parameters like: ./configure --prefix=/usr/share/nginx --add-dynamic-module=../ModSecurity-nginx --sbin-path=/usr/sbin/nginx --modules-path=/usr/lib64/nginx/modules --conf-path=/etc/nginx/nginx.conf --error-log-path=/var/log/nginx/error.log --http-log-path=/var/log/nginx/access.log --http-client-body-temp-path=/var/lib/nginx/tmp/client_body --http-proxy-temp-path=/var/lib/nginx/tmp/proxy --http-fastcgi-temp-path=/var/lib/nginx/tmp/fastcgi --http-uwsgi-temp-path=/var/lib/nginx/tmp/uwsgi --http-scgi-temp-path=/var/lib/nginx/tmp/scgi --pid-path=/run/nginx.pid --lock-path=/run/lock/subsys/nginx --user=nginx --group=nginx --with-file-aio --with-ipv6 --with-http_ssl_module --with-http_v2_module --with-http_realip_module --with-http_addition_module --with-http_xslt_module=dynamic --with-http_image_filter_module=dynamic --with-http_geoip_module=dynamic --with-http_sub_module --with-http_dav_module --with-http_flv_module --with-http_mp4_module --with-http_gunzip_module --with-http_gzip_static_module --with-http_random_index_module --with-http_secure_link_module --with-http_degradation_module --with-http_slice_module --with-http_stub_status_module --with-http_perl_module=dynamic --with-mail=dynamic --with-mail_ssl_module --with-pcre --with-pcre-jit --with-stream=dynamic --with-stream_ssl_module --with-google_perftools_module --with-debug --with-cc-opt='-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -m64 -mtune=generic' --with-ld-opt='-Wl,-z,relro -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -Wl,-E' that worked. it's was **** in the *** Eero On Wed, Nov 7, 2018 at 9:27 AM Ervin Hegedüs <ai...@gm...> wrote: > Hi, > > On Wed, Nov 07, 2018 at 09:10:35AM +0200, Eero Volotinen wrote: > > Looks like problem is with compile parameters. they must match nginx > binary? > > > > like this: > > > https://dzhorov.com/2017/04/compiling-dynamic-modules-into-nginx-centos-7 > > as I see, on this example the nGinx had recompiled from source > with additional modules, so I can't interpret "match nginx > binary" :). > > I've follow this idea - I'm a Debian user, grabbed the source of > current nginx _package_, added the modsec module path, and build > a new package. > > That's it. > > > a. > > > > _______________________________________________ > mod-security-users mailing list > mod...@li... > https://lists.sourceforge.net/lists/listinfo/mod-security-users > Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs: > http://www.modsecurity.org/projects/commercial/rules/ > http://www.modsecurity.org/projects/commercial/support/ > |
