logo
Apache Lounge
Webmasters

 

About Forum Index Downloads Search Register Log in RSS X


Keep Server Online

If you find the Apache Lounge, the downloads and overall help useful, please express your satisfaction with a donation.

or

Bitcoin

A donation makes a contribution towards the costs, the time and effort that's going in this site and building.

Thank You! Steffen

Your donations will help to keep this site alive and well, and continuing building binaries. Apache Lounge is not sponsored.
Post new topic   Forum Index -> Third-party Modules View previous topic :: View next topic
Reply to topic   Topic: mod_security v2.6 RC1 is out Page Previous  1, 2, 3  Next
Author
maskego



Joined: 16 Apr 2010
Posts: 238

PostPosted: Thu 28 Apr '11 3:15    Post subject: Reply with quote

Ya.I upgrade it to 2.2.17 now.
but,[warn] ModSecurity: Loaded APR do not match with compiled! shows again.

how to fix it?
Back to top
somnang



Joined: 08 Apr 2011
Posts: 61

PostPosted: Thu 28 Apr '11 4:09    Post subject: Reply with quote

I do not get that warning so I can't tell you. Maybe your Apache was not compiled with the matching APR like what Smith suggested above. He can direct you the right version of Apache.
Back to top
maskego



Joined: 16 Apr 2010
Posts: 238

PostPosted: Thu 28 Apr '11 4:38    Post subject: Reply with quote

install apache 2.2.17,then get the warning message still.


Code:
[Thu Apr 28 10:39:50 2011] [notice] ModSecurity for Apache/2.6.0-rc1 (http://www.modsecurity.org/) configured.
[Thu Apr 28 10:39:50 2011] [notice] ModSecurity: APR compiled version="1.4.3-r1091861"; loaded version="1.4.2"
[Thu Apr 28 10:39:50 2011] [warn] ModSecurity: Loaded APR do not match with compiled!
[Thu Apr 28 10:39:50 2011] [notice] ModSecurity: PCRE compiled version="8.12"; loaded version="8.12 2011-01-15"
[Thu Apr 28 10:39:50 2011] [notice] ModSecurity: LUA compiled version="Lua 5.1"
[Thu Apr 28 10:39:50 2011] [notice] ModSecurity: LIBXML compiled version="2.7.7"
Back to top
somnang



Joined: 08 Apr 2011
Posts: 61

PostPosted: Thu 28 Apr '11 5:13    Post subject: Reply with quote

From the look of it, you are using ModSecurity that was compiled using different APR library I guess. Did you test other ModSecurity that Smith had on his server? I tested them all and they all works, 'cept for the version 2.5.13. Smile
Back to top
maskego



Joined: 16 Apr 2010
Posts: 238

PostPosted: Thu 28 Apr '11 7:25    Post subject: Reply with quote

hey,

The warning is caused by APR.
I use apache 2.2.17 and mod_security-2.6.0-rc1-2.2.17-x86.zip package.

somnang wrote:
From the look of it, you are using ModSecurity that was compiled using different APR library I guess. Did you test other ModSecurity that Smith had on his server? I tested them all and they all works, 'cept for the version 2.5.13. Smile
Back to top
somnang



Joined: 08 Apr 2011
Posts: 61

PostPosted: Thu 28 Apr '11 8:17    Post subject: Reply with quote

Well, let's just hope Smith answers your call on this matter because I have no knowledge on this.
Back to top
glsmith
Moderator


Joined: 16 Oct 2007
Posts: 2268
Location: Sun Diego, USA

PostPosted: Fri 29 Apr '11 2:01    Post subject: Reply with quote

Yes, which is why I rebuilt the module, the

mod_security-2.6.0-rc1-2.2.17-x86-r2.zip

is built using APR 1.4.2.

It was my oversite since I built with what I had compiled at the time.
Back to top
somnang



Joined: 08 Apr 2011
Posts: 61

PostPosted: Fri 29 Apr '11 3:33    Post subject: Reply with quote

Smith, can I ask for a favor please?

Can you recompile another version of your RC1 ModSec under VC9 please?
I am moving on to VC9+. My Apache is compiled on VC9 and if ModSec is compiled using the old compiler, I have a feeling that is what causing my serving to load extremely slow.

What other possibility that my serving is slow is this. I have maxed out my bandwidth on ComCast and ever since then, I had to deal with dialup speed cos I have reached their cap monthly bandwidth usage. So I have to wait two more days to see if that is not the main cause. Hopefully it was just my ISP and not the ModSec that is causing this slow speed.
Back to top
maskego



Joined: 16 Apr 2010
Posts: 238

PostPosted: Fri 29 Apr '11 3:48    Post subject: Reply with quote

smith,

When will the rebuilt package be available from this site?



glsmith wrote:
Yes, which is why I rebuilt the module, the

mod_security-2.6.0-rc1-2.2.17-x86-r2.zip

is built using APR 1.4.2.

It was my oversite since I built with what I had compiled at the time.
Back to top
glsmith
Moderator


Joined: 16 Oct 2007
Posts: 2268
Location: Sun Diego, USA

PostPosted: Fri 29 Apr '11 8:08    Post subject: Reply with quote

it's been there for over 24 hours now
Back to top
maskego



Joined: 16 Apr 2010
Posts: 238

PostPosted: Fri 29 Apr '11 9:57    Post subject: Reply with quote

testing...
no warning anymore.Laughing

glsmith wrote:
it's been there for over 24 hours now
Back to top
maskego



Joined: 16 Apr 2010
Posts: 238

PostPosted: Sat 30 Apr '11 5:17    Post subject: Reply with quote

When will 2.6 release?Smile
Back to top
somnang



Joined: 08 Apr 2011
Posts: 61

PostPosted: Sat 30 Apr '11 11:49    Post subject: Reply with quote

The final stable release should follow 2.6 very soon I hope. They said that if RC1 is stable enough, they might release final version right after RC1. I hope we don't get to see RC2. Smile

Smith, just wanna let you know that this version
mod_security-2.6.0-rc1-2.3.11-x86-r2.zip
cause Apache to crash

Moderator Edit: Removed now dead link so spiders and folks do not keep looking for it.
Back to top
glsmith
Moderator


Joined: 16 Oct 2007
Posts: 2268
Location: Sun Diego, USA

PostPosted: Sat 30 Apr '11 20:19    Post subject: Reply with quote

in Apache 2.2.17 I am sure it does, the 2.3.11 in that filename = Apache 2.3.11, the current released beta
Back to top
somnang



Joined: 08 Apr 2011
Posts: 61

PostPosted: Sun 01 May '11 0:43    Post subject: Reply with quote

oh I see.. Smile

Lol I am too eager to beta test all of your beta compilation Smile
Back to top
glsmith
Moderator


Joined: 16 Oct 2007
Posts: 2268
Location: Sun Diego, USA

PostPosted: Sun 01 May '11 2:14    Post subject: Reply with quote

2.3.11 is here
http://www.apachehaus.com/

there is a module with it that I can no longer get to work, mod_macro, so don't get used to that one since it will not be usable in the next beta, 2.3.12.

2.3.12 will come in a week or two if all the planets happen to align properly by that time.
Back to top
somnang



Joined: 08 Apr 2011
Posts: 61

PostPosted: Sun 01 May '11 3:35    Post subject: Reply with quote

lol I just hope there's no such thing as 3 planetary alignment too Smile

Well if the planetary alignment story holds true, then the vision that was given to me in a dream about 23 years ago will come true. That would be scary. At the mean time, keep up the good work on source code compilation. Thanks for your work.

Smith, I have an update for you.

Mod_security version 2.5.12 loads my site very fast but the version 2.6 loads my site very slow. Can you tell me why?
Back to top
maskego



Joined: 16 Apr 2010
Posts: 238

PostPosted: Thu 12 May '11 7:49    Post subject: Reply with quote

Will mod_security 2.6 be installed at apache2.2.18? Laughing
Back to top
glsmith
Moderator


Joined: 16 Oct 2007
Posts: 2268
Location: Sun Diego, USA

PostPosted: Thu 12 May '11 20:55    Post subject: Reply with quote

somnang:

Probably for all reasons discussed already. I think it's trying to do absolutely too much now anyway. Give it a whirl with the minimal config, still slow?

maskego:

It will work, but will warn about the APR version again since 2.2.18 is now on APR 1.4.4. There is nothing wrong with that, it should not affect anything.

Yes, that Apache 2.2.8 was a different story due to that APR being 2 minor versions behind. APIs however freeze when a minor version is release, so what is set at 1.4.0 should be same in 1.4.999, or it would break binary compatibility.
Back to top
maskego



Joined: 16 Apr 2010
Posts: 238

PostPosted: Fri 13 May '11 12:08    Post subject: Reply with quote

smith,
What happen about apache 2.2.8?Can you tell more details of it? Rolling Eyes
Back to top


Reply to topic   Topic: mod_security v2.6 RC1 is out View previous topic :: View next topic
Post new topic   Forum Index -> Third-party Modules Page Previous  1, 2, 3  Next