naxsi as a dynamic module error on nginx 1.10.0

Anoop Alias anoopalias01 at gmail.com
Wed Apr 27 13:59:09 UTC 2016


I build naxsi-0.55rc1 as a module for nginx 1.10.0 and getting the
following 2 different error on centos7 and centos6

Error on Centos6
nginx: [emerg] dlopen() "/etc/nginx/modules/ngx_http_naxsi_module.so"
failed (/etc/nginx/modules/ngx_http_naxsi_module.so: undefined symbol:
pp_get_app_type_name) in /etc/nginx/conf.d/dynamic_modules.conf:1

# nginx -V nginx version: nginx/1.10.0 built by gcc 4.8.2 20140120
(Red Hat 4.8.2-15) (GCC)built with OpenSSL 1.0.1e-fips 11 Feb 2013 TLS
SNI support enabled configure arguments: --prefix=/etc/nginx
--sbin-path=/usr/sbin/nginx --modules-path=/etc/nginx/modules
--conf-path=/etc/nginx/nginx.conf
--error-log-path=/var/log/nginx/error_log
--http-log-path=/var/log/nginx/access_log
--pid-path=/var/run/nginx.pid --lock-path=/var/run/nginx.lock
--http-client-body-temp-path=/var/cache/nginx/client_temp
--http-proxy-temp-path=/var/cache/nginx/proxy_temp
--http-fastcgi-temp-path=/var/cache/nginx/fastcgi_temp
--http-uwsgi-temp-path=/var/cache/nginx/uwsgi_temp
--http-scgi-temp-path=/var/cache/nginx/scgi_temp --user=nobody
--group=nobody --with-http_ssl_module --with-http_realip_module
--with-http_addition_module --with-http_sub_module
--with-http_dav_module --with-http_flv_module --with-http_mp4_module
--with-http_gunzip_module --with-http_gzip_static_module
--with-http_random_index_module --with-http_secure_link_module
--with-http_stub_status_module --with-http_auth_request_module
--add-dynamic-module=naxsi-0.55rc1/naxsi_src --with-file-aio
--with-threads --with-stream --with-stream_ssl_module
--with-http_slice_module --with-ipv6 --with-http_v2_module
--add-dynamic-module=ngx_pagespeed-release-1.11.33.0-beta
--with-cc=/opt/rh/devtoolset-2/root/usr/bin/gcc
--add-module=/usr/local/rvm/gems/ruby-2.3.0/gems/passenger-5.0.27/src/nginx_module
--add-module=ngx_cache_purge-2.3 --with-cc-opt='-O2 -g -pipe -Wall
-Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong
--param=ssp-buffer-size=4 -grecord-gcc-switches -m64 -mtune=generic'
--with-ld-opt=-Wl,-E

Error on Centos7

nginx -t nginx: [emerg] dlopen()
"/etc/nginx/modules/ngx_http_naxsi_module.so" failed
(/etc/nginx/modules/ngx_http_naxsi_module.so: undefined symbol:
psg_variant_map_new) in /etc/nginx/conf.d/dynamic_modules.conf:1

# nginx -V nginx version: nginx/1.10.0 built by gcc 4.8.5 20150623
(Red Hat 4.8.5-4) (GCC)built with OpenSSL 1.0.1e-fips 11 Feb 2013 TLS
SNI support enabled configure arguments: --prefix=/etc/nginx
--sbin-path=/usr/sbin/nginx --modules-path=/etc/nginx/modules
--conf-path=/etc/nginx/nginx.conf
--error-log-path=/var/log/nginx/error_log
--http-log-path=/var/log/nginx/access_log
--pid-path=/var/run/nginx.pid --lock-path=/var/run/nginx.lock
--http-client-body-temp-path=/var/cache/nginx/client_temp
--http-proxy-temp-path=/var/cache/nginx/proxy_temp
--http-fastcgi-temp-path=/var/cache/nginx/fastcgi_temp
--http-uwsgi-temp-path=/var/cache/nginx/uwsgi_temp
--http-scgi-temp-path=/var/cache/nginx/scgi_temp --user=nobody
--group=nobody --with-http_ssl_module --with-http_realip_module
--with-http_addition_module --with-http_sub_module
--with-http_dav_module --with-http_flv_module --with-http_mp4_module
--with-http_gunzip_module --with-http_gzip_static_module
--with-http_random_index_module --with-http_secure_link_module
--with-http_stub_status_module --with-http_auth_request_module
--add-dynamic-module=naxsi-0.55rc1/naxsi_src --with-file-aio
--with-threads --with-stream --with-stream_ssl_module
--with-http_slice_module --with-ipv6 --with-http_v2_module
--add-dynamic-module=ngx_pagespeed-release-1.11.33.0-beta
--add-module=/usr/local/rvm/gems/ruby-2.3.0/gems/passenger-5.0.27/src/nginx_module
--add-module=ngx_cache_purge-2.3 --with-cc-opt='-O2 -g -pipe -Wall
-Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong
--param=ssp-buffer-size=4 -grecord-gcc-switches -m64 -mtune=generic'
--with-ld-opt=-Wl,-E

if naxsi loading is disabled .Everything works.

NAXSI changelog for 0.55rc1 at https://github.com/nbs-system/naxsi/releases

states

Confirmed support as a dynamic module (introduced in nginx 1.9.11)

Just wanted to know if this is an issue with NAXSI itself or something
to do with my configure args for nginx .

Thank you,

-- 
Anoop P Alias



More information about the nginx mailing list