naxsi as a dynamic module error on nginx 1.10.0

[Anoop Alias]

Hi Andrew,

Yes you are correct . Without passenger naxsi is loading and working fine.

So I should be contacting passenger list with the error right?

Thank you,
Anoop



On Wed, Apr 27, 2016 at 8:03 PM, Andrew Hutchings <ahutchings at nginx.com> wrote:
> Hi Anoop,
>
> This looks to me like another module has broken the linking a bit. Possibly
> Passenger given the symbols triggering the error and the fact they released
> a fix for their module linking 8 days ago.
>
> Can you try compiling without Passenger and then starting NGINX to see if
> this fixes it?
>
> Kind Regards
> Andrew
>
>
> On 27/04/16 14:59, Anoop Alias wrote:
>>
>> I build naxsi-0.55rc1 as a module for nginx 1.10.0 and getting the
>> following 2 different error on centos7 and centos6
>>
>> Error on Centos6
>> nginx: [emerg] dlopen() "/etc/nginx/modules/ngx_http_naxsi_module.so"
>> failed (/etc/nginx/modules/ngx_http_naxsi_module.so: undefined symbol:
>> pp_get_app_type_name) in /etc/nginx/conf.d/dynamic_modules.conf:1
>>
>> # nginx -V nginx version: nginx/1.10.0 built by gcc 4.8.2 20140120
>> (Red Hat 4.8.2-15) (GCC)built with OpenSSL 1.0.1e-fips 11 Feb 2013 TLS
>> SNI support enabled configure arguments: --prefix=/etc/nginx
>> --sbin-path=/usr/sbin/nginx --modules-path=/etc/nginx/modules
>> --conf-path=/etc/nginx/nginx.conf
>> --error-log-path=/var/log/nginx/error_log
>> --http-log-path=/var/log/nginx/access_log
>> --pid-path=/var/run/nginx.pid --lock-path=/var/run/nginx.lock
>> --http-client-body-temp-path=/var/cache/nginx/client_temp
>> --http-proxy-temp-path=/var/cache/nginx/proxy_temp
>> --http-fastcgi-temp-path=/var/cache/nginx/fastcgi_temp
>> --http-uwsgi-temp-path=/var/cache/nginx/uwsgi_temp
>> --http-scgi-temp-path=/var/cache/nginx/scgi_temp --user=nobody
>> --group=nobody --with-http_ssl_module --with-http_realip_module
>> --with-http_addition_module --with-http_sub_module
>> --with-http_dav_module --with-http_flv_module --with-http_mp4_module
>> --with-http_gunzip_module --with-http_gzip_static_module
>> --with-http_random_index_module --with-http_secure_link_module
>> --with-http_stub_status_module --with-http_auth_request_module
>> --add-dynamic-module=naxsi-0.55rc1/naxsi_src --with-file-aio
>> --with-threads --with-stream --with-stream_ssl_module
>> --with-http_slice_module --with-ipv6 --with-http_v2_module
>> --add-dynamic-module=ngx_pagespeed-release-1.11.33.0-beta
>> --with-cc=/opt/rh/devtoolset-2/root/usr/bin/gcc
>>
>> --add-module=/usr/local/rvm/gems/ruby-2.3.0/gems/passenger-5.0.27/src/nginx_module
>> --add-module=ngx_cache_purge-2.3 --with-cc-opt='-O2 -g -pipe -Wall
>> -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong
>> --param=ssp-buffer-size=4 -grecord-gcc-switches -m64 -mtune=generic'
>> --with-ld-opt=-Wl,-E
>>
>> Error on Centos7
>>
>> nginx -t nginx: [emerg] dlopen()
>> "/etc/nginx/modules/ngx_http_naxsi_module.so" failed
>> (/etc/nginx/modules/ngx_http_naxsi_module.so: undefined symbol:
>> psg_variant_map_new) in /etc/nginx/conf.d/dynamic_modules.conf:1
>>
>> # nginx -V nginx version: nginx/1.10.0 built by gcc 4.8.5 20150623
>> (Red Hat 4.8.5-4) (GCC)built with OpenSSL 1.0.1e-fips 11 Feb 2013 TLS
>> SNI support enabled configure arguments: --prefix=/etc/nginx
>> --sbin-path=/usr/sbin/nginx --modules-path=/etc/nginx/modules
>> --conf-path=/etc/nginx/nginx.conf
>> --error-log-path=/var/log/nginx/error_log
>> --http-log-path=/var/log/nginx/access_log
>> --pid-path=/var/run/nginx.pid --lock-path=/var/run/nginx.lock
>> --http-client-body-temp-path=/var/cache/nginx/client_temp
>> --http-proxy-temp-path=/var/cache/nginx/proxy_temp
>> --http-fastcgi-temp-path=/var/cache/nginx/fastcgi_temp
>> --http-uwsgi-temp-path=/var/cache/nginx/uwsgi_temp
>> --http-scgi-temp-path=/var/cache/nginx/scgi_temp --user=nobody
>> --group=nobody --with-http_ssl_module --with-http_realip_module
>> --with-http_addition_module --with-http_sub_module
>> --with-http_dav_module --with-http_flv_module --with-http_mp4_module
>> --with-http_gunzip_module --with-http_gzip_static_module
>> --with-http_random_index_module --with-http_secure_link_module
>> --with-http_stub_status_module --with-http_auth_request_module
>> --add-dynamic-module=naxsi-0.55rc1/naxsi_src --with-file-aio
>> --with-threads --with-stream --with-stream_ssl_module
>> --with-http_slice_module --with-ipv6 --with-http_v2_module
>> --add-dynamic-module=ngx_pagespeed-release-1.11.33.0-beta
>>
>> --add-module=/usr/local/rvm/gems/ruby-2.3.0/gems/passenger-5.0.27/src/nginx_module
>> --add-module=ngx_cache_purge-2.3 --with-cc-opt='-O2 -g -pipe -Wall
>> -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong
>> --param=ssp-buffer-size=4 -grecord-gcc-switches -m64 -mtune=generic'
>> --with-ld-opt=-Wl,-E
>>
>> if naxsi loading is disabled .Everything works.
>>
>> NAXSI changelog for 0.55rc1 at
>> https://github.com/nbs-system/naxsi/releases
>>
>> states
>>
>> Confirmed support as a dynamic module (introduced in nginx 1.9.11)
>>
>> Just wanted to know if this is an issue with NAXSI itself or something
>> to do with my configure args for nginx .
>>
>> Thank you,
>>
>
> --
> Andrew Hutchings (LinuxJedi)
> Technical Product Manager, NGINX Inc.
>
> _______________________________________________
> nginx mailing list
> nginx at nginx.org
> http://mailman.nginx.org/mailman/listinfo/nginx



-- 
Anoop P Alias