Re: Compiling modsecurity with yajl

Felipe Costa <[email protected]>
Newsgroups gmane.comp.apache.mod-security.user
Message-ID <MN2PR07MB6094384178B62C7227C0BAD9C86E0@MN2PR07MB6094.namprd07.prod.outlook.com>
Great news :)

Br.,

Felipe "Zimmerle" Costa

Security Researcher, Lead Developer ModSecurity

m: +55 81.98706.5547



[signature_480191669]

www.trustwave.com<http://www.trustwave.com/>



Recognized by industry analysts as a leader in managed security services.<https://www.trustwave.com/company/about-us/accolades/>


________________________________
From: Germán Chialli <[email protected]>
Sent: Tuesday, February 5, 2019 4:25 PM
To: [email protected]
Subject: Re: [mod-security-users] Compiling modsecurity with yajl

Hello,
I managed to get it to work downloading ModSecurity's source again and compiling it from scratch.
Thanks for your help!

On Tue, Feb 5, 2019 at 2:25 PM Felipe Costa <[email protected]<mailto:[email protected]>> wrote:

Hi German,


Are you sure that the mod_security2.so<http://scanmail.trustwave.com/?c=4062&d=pdXZ3EmthTkR1bC_wN2yEbaaguAG4kLME3eVSbSJVg&s=5&u=http%3a%2f%2fmod%5fsecurity2%2eso> is the most recent compiled one? Did you manage to start this compilation process in a clean environment?


Br.,

Felipe "Zimmerle" Costa

Security Researcher, Lead Developer ModSecurity

m: +55 81.98706.5547



[signature_480191669]

www.trustwave.com<http://www.trustwave.com/>



Recognized by industry analysts as a leader in managed security services.<https://www.trustwave.com/company/about-us/accolades/>


________________________________
From: Germán Chialli <[email protected]<mailto:[email protected]>>
Sent: Thursday, January 31, 2019 2:42:48 PM
To: [email protected]<mailto:[email protected]>
Subject: [mod-security-users] Compiling modsecurity with yajl

Hi all,

I'm trying to get the JSON parser to work with modsecurity 2.9.2 with Apache HTTPD. I have followed instructions from this link:
https://gist.github.com/rpfilomeno/1140359f4bd360137a98#file-modsecurity-installation-owasp-crs-for-centos-6-5-L22<https://scanmail.trustwave.com/?c=4062&d=pdXZ3EmthTkR1bC_wN2yEbaaguAG4kLMEyKSFeGPUg&s=5&u=https%3a%2f%2fgist%2egithub%2ecom%2frpfilomeno%2f1140359f4bd360137a98%23file-modsecurity-installation-owasp-crs-for-centos-6-5-L22>

I can see that yajl is found when I run the configure script. I see the following in the config.log:
$ cat config.log | grep yajl
  $ ./configure --with-yajl=/usr/local/lib /usr/local
configure:15950: checking for libyajl config script
configure:16071: using yajl v2.1.1
YAJL_CFLAGS='-DWITH_YAJL -I/usr/local/include/yajl  '
YAJL_LDADD='-lyajl  '
YAJL_LIBS='-lyajl  '

However after restarting apache, I still see the JSON support nor enabled error. Also, ldd mod_security2.so<http://scanmail.trustwave.com/?c=4062&d=pdXZ3EmthTkR1bC_wN2yEbaaguAG4kLME3eVSbSJVg&s=5&u=http%3a%2f%2fmod%5fsecurity2%2eso> doesn't show yajl.

What am I missing?

Thanks in advance,
Germán

_______________________________________________
mod-security-users mailing list
[email protected]<mailto:[email protected]>
https://lists.sourceforge.net/lists/listinfo/mod-security-users<https://scanmail.trustwave.com/?c=4062&d=pdXZ3EmthTkR1bC_wN2yEbaaguAG4kLME3DARebcAw&s=5&u=https%3a%2f%2flists%2esourceforge%2enet%2flists%2flistinfo%2fmod-security-users>
Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs:
http://www.modsecurity.org/projects/commercial/rules/<http://scanmail.trustwave.com/?c=4062&d=pdXZ3EmthTkR1bC_wN2yEbaaguAG4kLMEyKSEb-IBw&s=5&u=http%3a%2f%2fwww%2emodsecurity%2eorg%2fprojects%2fcommercial%2frules%2f>
http://www.modsecurity.org/projects/commercial/support/<http://scanmail.trustwave.com/?c=4062&d=pdXZ3EmthTkR1bC_wN2yEbaaguAG4kLMEyOWQ7PcUg&s=5&u=http%3a%2f%2fwww%2emodsecurity%2eorg%2fprojects%2fcommercial%2fsupport%2f>

_______________________________________________
mod-security-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/mod-security-users
Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs:
http://www.modsecurity.org/projects/commercial/rules/
http://www.modsecurity.org/projects/commercial/support/
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.