naxsi as a dynamic module error on nginx 1.10.0

[Andrew Hutchings]

Hi Anoop,

This looks to me like another module has broken the linking a bit. 
Possibly Passenger given the symbols triggering the error and the fact 
they released a fix for their module linking 8 days ago.

Can you try compiling without Passenger and then starting NGINX to see 
if this fixes it?

Kind Regards
Andrew

On 27/04/16 14:59, Anoop Alias wrote:
> I build naxsi-0.55rc1 as a module for nginx 1.10.0 and getting the
> following 2 different error on centos7 and centos6
>
> Error on Centos6
> nginx: [emerg] dlopen() "/etc/nginx/modules/ngx_http_naxsi_module.so"
> failed (/etc/nginx/modules/ngx_http_naxsi_module.so: undefined symbol:
> pp_get_app_type_name) in /etc/nginx/conf.d/dynamic_modules.conf:1
>
> # nginx -V nginx version: nginx/1.10.0 built by gcc 4.8.2 20140120
> (Red Hat 4.8.2-15) (GCC)built with OpenSSL 1.0.1e-fips 11 Feb 2013 TLS
> SNI support enabled configure arguments: --prefix=/etc/nginx
> --sbin-path=/usr/sbin/nginx --modules-path=/etc/nginx/modules
> --conf-path=/etc/nginx/nginx.conf
> --error-log-path=/var/log/nginx/error_log
> --http-log-path=/var/log/nginx/access_log
> --pid-path=/var/run/nginx.pid --lock-path=/var/run/nginx.lock
> --http-client-body-temp-path=/var/cache/nginx/client_temp
> --http-proxy-temp-path=/var/cache/nginx/proxy_temp
> --http-fastcgi-temp-path=/var/cache/nginx/fastcgi_temp
> --http-uwsgi-temp-path=/var/cache/nginx/uwsgi_temp
> --http-scgi-temp-path=/var/cache/nginx/scgi_temp --user=nobody
> --group=nobody --with-http_ssl_module --with-http_realip_module
> --with-http_addition_module --with-http_sub_module
> --with-http_dav_module --with-http_flv_module --with-http_mp4_module
> --with-http_gunzip_module --with-http_gzip_static_module
> --with-http_random_index_module --with-http_secure_link_module
> --with-http_stub_status_module --with-http_auth_request_module
> --add-dynamic-module=naxsi-0.55rc1/naxsi_src --with-file-aio
> --with-threads --with-stream --with-stream_ssl_module
> --with-http_slice_module --with-ipv6 --with-http_v2_module
> --add-dynamic-module=ngx_pagespeed-release-1.11.33.0-beta
> --with-cc=/opt/rh/devtoolset-2/root/usr/bin/gcc
> --add-module=/usr/local/rvm/gems/ruby-2.3.0/gems/passenger-5.0.27/src/nginx_module
> --add-module=ngx_cache_purge-2.3 --with-cc-opt='-O2 -g -pipe -Wall
> -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong
> --param=ssp-buffer-size=4 -grecord-gcc-switches -m64 -mtune=generic'
> --with-ld-opt=-Wl,-E
>
> Error on Centos7
>
> nginx -t nginx: [emerg] dlopen()
> "/etc/nginx/modules/ngx_http_naxsi_module.so" failed
> (/etc/nginx/modules/ngx_http_naxsi_module.so: undefined symbol:
> psg_variant_map_new) in /etc/nginx/conf.d/dynamic_modules.conf:1
>
> # nginx -V nginx version: nginx/1.10.0 built by gcc 4.8.5 20150623
> (Red Hat 4.8.5-4) (GCC)built with OpenSSL 1.0.1e-fips 11 Feb 2013 TLS
> SNI support enabled configure arguments: --prefix=/etc/nginx
> --sbin-path=/usr/sbin/nginx --modules-path=/etc/nginx/modules
> --conf-path=/etc/nginx/nginx.conf
> --error-log-path=/var/log/nginx/error_log
> --http-log-path=/var/log/nginx/access_log
> --pid-path=/var/run/nginx.pid --lock-path=/var/run/nginx.lock
> --http-client-body-temp-path=/var/cache/nginx/client_temp
> --http-proxy-temp-path=/var/cache/nginx/proxy_temp
> --http-fastcgi-temp-path=/var/cache/nginx/fastcgi_temp
> --http-uwsgi-temp-path=/var/cache/nginx/uwsgi_temp
> --http-scgi-temp-path=/var/cache/nginx/scgi_temp --user=nobody
> --group=nobody --with-http_ssl_module --with-http_realip_module
> --with-http_addition_module --with-http_sub_module
> --with-http_dav_module --with-http_flv_module --with-http_mp4_module
> --with-http_gunzip_module --with-http_gzip_static_module
> --with-http_random_index_module --with-http_secure_link_module
> --with-http_stub_status_module --with-http_auth_request_module
> --add-dynamic-module=naxsi-0.55rc1/naxsi_src --with-file-aio
> --with-threads --with-stream --with-stream_ssl_module
> --with-http_slice_module --with-ipv6 --with-http_v2_module
> --add-dynamic-module=ngx_pagespeed-release-1.11.33.0-beta
> --add-module=/usr/local/rvm/gems/ruby-2.3.0/gems/passenger-5.0.27/src/nginx_module
> --add-module=ngx_cache_purge-2.3 --with-cc-opt='-O2 -g -pipe -Wall
> -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong
> --param=ssp-buffer-size=4 -grecord-gcc-switches -m64 -mtune=generic'
> --with-ld-opt=-Wl,-E
>
> if naxsi loading is disabled .Everything works.
>
> NAXSI changelog for 0.55rc1 at https://github.com/nbs-system/naxsi/releases
>
> states
>
> Confirmed support as a dynamic module (introduced in nginx 1.9.11)
>
> Just wanted to know if this is an issue with NAXSI itself or something
> to do with my configure args for nginx .
>
> Thank you,
>

-- 
Andrew Hutchings (LinuxJedi)
Technical Product Manager, NGINX Inc.