modsecurity-nginx incompatible versions

[last1]

pkg/ports installs nginx 1.24 but modsecurity3-nginx only wants to work against nginx 1.22.

I tried building it from ports but it's hardcoded to build against nginx 1.22 as well.

I modified /usr/ports/security/modsecurity3-nginx/Makefile & /usr/ports/security/modsecurity3-nginx/distinfo with the proper details for nginx 1.24 and that starts the build but it fails with some pcre errors:

/usr/ports/security/modsecurity3-nginx/work/ModSecurity-nginx-1.0.1/src/ngx_http_modsecurity_module.c:78:9: error: use of undeclared identifier 'pcre_malloc'
    if (pcre_malloc != ngx_http_modsec_pcre_malloc) {
        ^
/usr/ports/security/modsecurity3-nginx/work/ModSecurity-nginx-1.0.1/src/ngx_http_modsecurity_module.c:81:27: error: use of undeclared identifier 'pcre_malloc'
        old_pcre_malloc = pcre_malloc;

It seems similar to this bug here: https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=263197

But I'm unsure where to set PCRE_ONE (?) I tried setenv PCRE_ONE but no luck
^

 

[sko]

modsecurity has been abandoned and considered EOL:

F5 NGINX ModSecurity WAF Is Transitioning to End-of-Life

Due to changes in third-party support for ModSecurity, F5 NGINX ModSecurity WAF will reach end-of-life in March 2024. Learn about the benefits of our replacement WAF, NGINX App Protect.

www.nginx.com

End of Sale and Trustwave Support for ModSecurity Web Application Firewall

Trustwave is announcing the End-of-Life (EOL) of our support for ModSecurity effective July 1, 2024. We will then hand over the maintenance of ModSecurity code back to the open-source community.

www.trustwave.com

 

[last1]

modsecurity has been abandoned and considered EOL:

F5 NGINX ModSecurity WAF Is Transitioning to End-of-Life

Due to changes in third-party support for ModSecurity, F5 NGINX ModSecurity WAF will reach end-of-life in March 2024. Learn about the benefits of our replacement WAF, NGINX App Protect.

www.nginx.com

End of Sale and Trustwave Support for ModSecurity Web Application Firewall

Trustwave is announcing the End-of-Life (EOL) of our support for ModSecurity effective July 1, 2024. We will then hand over the maintenance of ModSecurity code back to the open-source community.

www.trustwave.com

ugh. Still, any advice on how to build with pcre ?
or are there replacements ?

edit: https://www.loadbalancer.org/blog/w...er-the-commercial-end-of-life-of-modsecurity/