logo
Apache Lounge
Webmasters

 

About Forum Index Downloads Search Register Log in RSS X


Keep Server Online

If you find the Apache Lounge, the downloads and overall help useful, please express your satisfaction with a donation.

or

Bitcoin

A donation makes a contribution towards the costs, the time and effort that's going in this site and building.

Thank You! Steffen

Your donations will help to keep this site alive and well, and continuing building binaries. Apache Lounge is not sponsored.
Post new topic   Forum Index -> Third-party Modules View previous topic :: View next topic
Reply to topic   Topic: ModSecurity 2.7.1 RC Win64 2.4 available
Author
Steffen
Moderator


Joined: 15 Oct 2005
Posts: 3092
Location: Hilversum, NL, EU

PostPosted: Wed 07 Nov '12 12:21    Post subject: ModSecurity 2.7.1 RC Win64 2.4 available Reply with quote

The soon to be released 2.7.1 is now available for 2.4.x Win64.
When it is official then other flavors follow and download pages are updated.

Download: Removed

Steffen

Changes with 2.7.1

* Changed "Encryption" name of directives and options related to hmac feature to "Hash".

SecEncryptionEngine to SecHashEngine
SecEncryptionKey to SecHashKey
SecEncryptionParam to SecHashParam
SecEncryptionMethodRx to SecHashMethodRx
SecEncryptionMethodPm to SecHashMethodPm
@validateEncryption to @validateHash
ctl:EncryptionEnforcement to ctl:HashEnforcement
ctl:EncryptionEngine to ctl:HashEngine

* Added a better random bytes generator using apr_generate_random_bytes() to create
the HMAC key.

* Fixed byte conversion issue during logging under Linux s390x platform.

* Fixed compilation bug with LibXML2 2.9.0 (Thanks Athmane Madjoudj).

* Fixed parsing error with modsecurity-recommended.conf and Apache 2.4.

* Fixed DROP action was disabled for Apache 2 module by mistake.

* Fixed bug when use ctl:ruleRemoveByTag.

* The doc/ directory now contains the instructions to access online documentation.


Last edited by Steffen on Fri 09 Nov '12 21:57; edited 1 time in total
Back to top
Steffen
Moderator


Joined: 15 Oct 2005
Posts: 3092
Location: Hilversum, NL, EU

PostPosted: Fri 09 Nov '12 21:47    Post subject: Reply with quote

Got a note from the author (Breno) that he changed the source to fix some issues with IIS and a minor (Breno said) one in Apache.

So we have to wait longer for a final, expected next monday.

Although a minor issue in Apache with @strmatch, I removed the download above.

Steffen
Back to top


Reply to topic   Topic: ModSecurity 2.7.1 RC Win64 2.4 available View previous topic :: View next topic
Post new topic   Forum Index -> Third-party Modules