The Apache Haus Forum

Forum Topics => News & General Discussion => Topic started by: Gregg on March 10, 2012, 02:52:16 AM

Title: Mod_security 2.6.4 for Apache 2.2.x & 2.4.1 released
Post by: Gregg on March 10, 2012, 02:52:16 AM
Binaries are available on our Download page (http://www.apachehaus.com/cgi-bin/download.plx).
Title: Re: Mod_security 2.6.4 for Apache 2.2.x & 2.4.1 released
Post by: DnvrSysEngr on March 11, 2012, 04:01:44 AM
Gregg:

Will you be building Mod_Security 2.6.4 with Visual C++ 2010?

- S
Title: Re: Mod_security 2.6.4 for Apache 2.2.x & 2.4.1 released
Post by: Gregg on March 12, 2012, 11:40:43 PM
I will have to build all of it's dependencies first, which I have started on. I also need to make some decisions as well, but I think I have come to my conclusion on those. (which versions of which for which versions of Apache).

I am also thinking on the lines of no longer including the PCRE DLL on the builds for 2.2.x. PCRE is built into Apache 2.2.x (linked static lib), so some of it's inside the libhttpd.dll in Apache already. Since we use the latest PCRE in Apache 2.2.x at time of compile (not the old 5.0.x version included with the Apache source), there should be no reason to build and distribute mod_security with a separate PCRE DLL on 2.2.x. It's already a DLL in 2.4 so nothing would change there.
Title: Re: Mod_security 2.6.4 for Apache 2.2.x & 2.4.1 released
Post by: Gregg on March 13, 2012, 06:49:28 AM
Quote from: Gregg on March 12, 2012, 11:40:43 PMI am also thinking on the lines of no longer including the PCRE DLL on the builds for 2.2.x.

Well, so much for that idea, at least until there is a backport to 2.2 for building with PCRE 8.30 (already in 2.4.1 and proposed for 2.2.23). Hopefully come 2.2.23 it will be in place.

mod_security will also not build with LUA 5.2.0 yet, so it will have to be 5.1.5 .. bummer.
Title: Re: Mod_security 2.6.4 for Apache 2.2.x & 2.4.1 released
Post by: Gregg on March 13, 2012, 07:17:00 AM
https://www.apachehaus.net/modules/mod_security2-2.6.5-vc10/
Edit: Update link & version
Title: Re: Mod_security 2.6.4 for Apache 2.2.x & 2.4.1 released
Post by: DnvrSysEngr on March 13, 2012, 06:48:18 PM
Gregg:

Thank your for the VC10 build of Mod_Security 2.6.4.

One quick question:  Mod_Security does not not show up as an installed module in my Apache Monitor.  2.6.3 showed, but 2.6.4 does not.  Any idea as to why?
- S
Title: Re: Mod_security 2.6.4 for Apache 2.2.x & 2.4.1 released
Post by: Gregg on March 13, 2012, 08:47:12 PM
I did not add in

    ap_add_version_component(mp, "mod_security2/" MODSEC_VERSION);

like I usually do.