Bug 227917 - www/apache24: Add mod_security v3 support
Summary: www/apache24: Add mod_security v3 support
Status: Closed Feedback Timeout
Alias: None
Product: Ports & Packages
Classification: Unclassified
Component: Individual Port(s) (show other bugs)
Version: Latest
Hardware: Any Any
: --- Affects Some People
Assignee: freebsd-apache mailing list
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2018-05-02 05:51 UTC by epopen
Modified: 2019-04-24 16:39 UTC (History)
4 users (show)

See Also:
bugzilla: maintainer-feedback? (apache)
marius.halden: maintainer-feedback+


Attachments
modsecurity-rename.patch (9.72 KB, patch)
2018-05-02 10:43 UTC, Marius Halden
no flags Details | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description epopen 2018-05-02 05:51:47 UTC
Hi All.

The bug reference with bug #220353

I running Apache from prots www/apache24.
Found next version of ModSecurity in www/mod_security3 before.

And known it require connector to work with Apache as below.
   https://github.com/SpiderLabs/ModSecurity-apache
I tried make it but failure.
So I have no idea let it work.

Can help ports official support add either merge into apache like www/nginx or individual ports?

Thank a lot.
Comment 1 Bernard Spil freebsd_committer 2018-05-02 08:55:40 UTC
Hi Marius,

The www/mod_security3 port is not correctly named. It implies that it is a module (to apache) but in reality it is a stand-alone solution that needs a connector (in nginx or apache) to operate.

I'd like to rename www/mod_security3 to security/modsecurity3 which is more in line with upstream naming, and add a www/mod_security3 port which is actually the Apache connector libexec/apache24/mod_security.so which establishes the connection. (from https://github.com/SpiderLabs/ModSecurity-apache)

Can you please provide a patch for the renaming?

Cheers, Bernard (with hat apache@)
Comment 2 Marius Halden 2018-05-02 10:43:46 UTC
Created attachment 192989 [details]
modsecurity-rename.patch

Hi,

You can try the attached patch, it also changes the dependency for nginx and nginx-devel.
Comment 3 Jochen Neumeister freebsd_committer 2019-02-15 19:25:49 UTC
is this still relevant?
Comment 4 epopen 2019-04-24 16:39:07 UTC
Hi all

Just now, I try to build Apache connector and successful.
Output: /usr/local/libexec/apache24/mod_security3.so

But neither LLVM/CLANG nor gcc8
Got error "Segmentation fault (core dumped)"

May migrate to nginx just in time :(

Thanks a lot.