[Page 1, 2 Next]

Topic: Can mod_security-2.5.13-win32 run at apache 2.2.8?

[1]

Topic: Can mod_security-2.5.13-win32 run at apache 2.2.8?

[maskego]

Can mod_security-2.5.13-win32 run at apache 2.2.8?Or only run at apache 2.2.14?

The apache 2.2.8 ran mod_security-2.5.12 well before.

I test mod_security-2.5.13 at both apache 2.2.8 and apache 2.2.17,it shows the error as below .


AppName: httpd.exe AppVer: 2.2.8.0
ModName: mod_security2.so
ModVer: 0.0.0.0 Offset: 0001ed3d

AppName: httpd.exe AppVer: 2.2.17
ModName: mod_security2.so
ModVer: 0.0.0.0 Offset: 0001ed3d

Is the file of mod_security2.so's issue? What is the way to fix it?

regards.

[glsmith]

It works for me on 2.2.17

Do you have pcre.dll & libxml2.dll in your /bin folder?
Where did you download these Apache versions from?

[maskego]

I download apache 2.2.17 from apache site.

Can mod_security 2.5.13 run at apache 2.x?The documents says it compatible to apache 2.x.

[glsmith]

Certainly ... but

Apache builds on VC6, these are VC9, they tend not to mix well.

[maskego]

My apache 2.2.x is vc6 for apache.Vc9 is for IIS to use php.I think mod_security2.so should for vc6 not for vc9 which runs at apache web application.

Is there good way to upgrade mod_security 2.5.12 to mod_security 2.5.13 under the same apache web application setting environment?

Or where can i download the mod_security2.so that suit win apache 2.2.x web application?

regards.

[maskego]

My OS is winxp professional.

The apache shows message again:

signature error AppName: httpd.exe AppVer: 2.2.14
ModName: mod_security2.so
ModVer: 0.0.0.0 Offset: 0001ed3d

[glsmith]

It just so happens I run my own vc6 build of Apache. I am going to upgrade the ssl in it to 1.0.0c so while I'm doing that, I may as well upgrade mod_security as well. I should have something later in the day, which should work for Apache from Apache.org.

I will not however claim it will run with 2.2.8 from Apache.org. If Apache were a car there was a change in the intake manifold used in 2.2.9. So technically what I build today should only be used in 2.2.9 and up.

None the less, 2.2.17 has a long list of important updates from 2.2.9. I suggest not to use older versions simply because of this. It's just like keeping windows up to date. Since Apache is a public facing listening device on the Net, prudence suggest keeping it up to date as well.

[glsmith]

http://www.apachehaus.net/mod_security-2.5.13-vc6-x86.zip

[maskego]

I run mod_security 2.5.13 at apache 2.2.14,but the error shows as before.Maybe it's not the version of apache issue which concerns about error message.

I simplely think the mod_security 2.5.13 should compatible with apache 2.2.x version as least.It because it's hard to make sure that every version of apache 2.2.x can run smoothly at installed application machines.

And,I keep my winxp updated and update the pactch always.

[maskego]

I download modsecurity 2.5.13 from apachehaus again.
The error message shows again.

signature error:
AppName: httpd.exe AppVer: 2.2.14.0 ModName: mod_security2.so
ModVer: 0.0.0.0 Offset: 0001ba21

I use the same environment to deploy modsecurity 2.5.12 again,the modsecurity 2.5.12 run smoothly.

environment :

winxp professional.
Apache 2.2.14
MySQL 5.1.41
PHP 5.3.1
XAMPP for Windows 1.7.3.
http://www.apachefriends.org/download.php?xampp-win32-1.7.3.exe

I don't know why does it show signature error with httpd.exe.Any way to fix it?


regards.

[James Blond]

apachefriends compile their binaries with VC6. I think it doesn't load cause you can't mix VC6 and VC9 builds as Gregg told you.

[glsmith]

I posted a zip to vc6 binaries I am running myself up a couple post.

[maskego]

Where can i find the mod_security 2.5.13 that suit for the apache 2.2.x vc6 and vc9?

I can do nothing about that signature error message.I try hard and hard,but it doesn't work.

The same environment that the mod_security 2.5.12 can run so well.Where is the difference between 2.5.12 and 2.5.13's modsecurity.so file?

best regard.

[glsmith]

right here, should work with your xampp
http://www.apachehaus.net/mod_security-2.5.13-vc6-x86.zip

[maskego]

I install this mod_security-2.5.13-vc6-x86.zip,but the signature error message shows still.

signature error:
AppName: httpd.exe AppVer: 2.2.14.0 ModName: mod_security2.so
ModVer: 0.0.0.0 Offset: 0001ba21

And there is no mod_security log data in the log folder.

I go crazy for install this version of mod_security2.5.13...

Last time,I installed mod_security2.5.12 in the same environment smoothly.

I'd like to install the new version of mod_security2.5.13.But,why does it become so hard...

Any good idea?

Where can I download the mod_security 2.5.13 that I can install smoothly as the mod_security 2.5.12 that I installed before?

[maskego]

Please help...oh..

[glsmith]

no and this does not seem right

Edit:

I downloaded xampp and extracted the binaries. The mod_security2.so loaded no problem. It doesn't seem to work though. Same exact module on 2.2.17 works with same config as it is expected to.

[maskego]

It's so strange.
What is the main reason to cause to show the signature error of httpd.exe?

Oh..

Can we remove the modsecurity.so 's signature?then,this issue can be solved?

[glsmith]

Guess it could mean that, nothing surprises me
here, no signature

http://www.apachehaus.net/mod_security-2.5.13-vc6-x86-r2.zip

[maskego]

thank you for this mod_security2.so file.

I download the apache 2.2.17 from apachelounge site to test the new mod_security2.so file.It shows the signature message still.

I think it's not the httpd.exe file's issue to cause the error message shows.