ModSecurity was not compiled with JSON support

[17096835560]

I used ModSec v3 and the log format setting SecAuditLogFormat JSON.
But when I view the log, I see the following information:
{"error":"ModSecurity was not compiled with JSON support."}

My system is CentOS 7 and yajl has been installed. Use yum to install yajl yajl-devel

How should I solve this problem?

[airween]

Hi @17096835560,

yajl has been installed. Use yum to install yajl yajl-devel

This is very weird.

After you run ./configure, what information did you get?

[17096835560]

his is very weird.

After you run ./configure, what information did you get?

[root@localhost ModSecurity]# ./configure --prefix=/usr/local/modsecurity
checking for a BSD-compatible install... /usr/bin/install -c
checking whether build environment is sane... yes
checking for a thread-safe mkdir -p... /usr/bin/mkdir -p
checking for gawk... gawk
checking whether make sets $(MAKE)... yes
checking whether make supports nested variables... yes
checking for g++... g++
checking whether the C++ compiler works... yes
checking for C++ compiler default output file name... a.out
checking for suffix of executables...
checking whether we are cross compiling... no
checking for suffix of object files... o
checking whether we are using the GNU C++ compiler... yes
checking whether g++ accepts -g... yes
checking for style of include used by make... GNU
checking dependency style of g++... gcc3
checking for gcc... gcc
checking whether we are using the GNU C compiler... yes
checking whether gcc accepts -g... yes
checking for gcc option to accept ISO C89... none needed
checking dependency style of gcc... gcc3
checking for ar... ar
checking the archiver (ar) interface... ar
checking whether make sets $(MAKE)... (cached) yes
checking for pkg-config... /usr/bin/pkg-config
checking pkg-config is at least version 0.9.0... yes
checking whether g++ supports C++17 features with -std=c++17... yes
configure: Nothing about YAJL was informed during the configure phase. Trying to detect it on the platform...
configure: using YAJL v2.0.4
configure: Nothing about GeoIP was informed during the configure phase. Trying to detect it on the platform...
configure: GeoIP library was not found
configure: Nothing about MaxMind was informed during the configure phase. Trying to detect it on the platform...
configure: using MaxMind v1.2.0
configure: Nothing about LMDB was informed during the configure phase. Trying to detect it on the platform...
*** LOOKING AT PATH: /usr/lib
*** LOOKING AT PATH: /usr/local/lib
*** LOOKING AT PATH: /usr/local/liblmdb
*** LOOKING AT PATH: /usr/local/lmdb
*** LOOKING AT PATH: /usr/local
*** LOOKING AT PATH: /opt/liblmdb
*** LOOKING AT PATH: /opt/lmdb
*** LOOKING AT PATH: /opt
*** LOOKING AT PATH: /usr
*** LOOKING AT PATH: /usr/lib64
*** LOOKING AT PATH: /opt/local
configure: LMDB library was not found
*** LOOKING AT PATH: /usr/lib
*** LOOKING AT PATH: /usr/local/lib
*** LOOKING AT PATH: /usr/local/fuzzy
*** LOOKING AT PATH: /usr/local/libfuzzy
*** LOOKING AT PATH: /usr/local
*** LOOKING AT PATH: /opt
*** LOOKING AT PATH: /usr
*** LOOKING AT PATH: /usr/lib64
*** LOOKING AT PATH: /opt/local
configure: SSDEEP library was not found
*** LOOKING AT PATH: /usr/lib
*** LOOKING AT PATH: /usr/local/lib
*** LOOKING AT PATH: /usr/local/lib64
*** LOOKING AT PATH: /usr/local/lua
*** LOOKING AT PATH: /usr/local/liblua
*** LOOKING AT PATH: /usr/local
*** LOOKING AT PATH: /opt
*** LOOKING AT PATH: /usr
*** LOOKING AT PATH: /usr/lib64
configure: LUA library found at: /usr/lib64//liblua-5.1.so
*** LOOKING AT PATH: /opt/local
configure: LUA library found at: /usr/lib64//liblua-5.1.so
*** LOOKING AT PATH: /usr/lib/lua5.3/liblua
configure: LUA library found at: /usr/lib64//liblua-5.1.so
*** LOOKING AT PATH: /usr/lib/lua5.2/liblua
configure: LUA library found at: /usr/lib64//liblua-5.1.so
configure: LUA library was not found
checking for libcurl config script... no
configure: *** curl library not found.
checking for libxml2 >= 2.6.29 via pkg-config... not found
checking for libxml2 config script... no
configure: *** libxml2 library not found.
configure: PCRE2 is enabled by default.
configure: Nothing about PCRE2 was informed during the configure phase. Trying to detect it on the platform...
configure: using PCRE2_VERSION 10.23
configure: using PCRE2_LDADD -lpcre2-8
configure: using PCRE2_LIBS
configure: using PCRE2_LDFLAGS
configure: using PCRE2_CFLAGS
configure: using PCRE2_DISPLAY -lpcre2-8 ,
checking how to run the C preprocessor... gcc -E
checking for grep that handles long lines and -e... /usr/bin/grep
checking for egrep... /usr/bin/grep -E
checking for ANSI C header files... yes
checking for sys/types.h... yes
checking for sys/stat.h... yes
checking for stdlib.h... yes
checking for string.h... yes
checking for memory.h... yes
checking for strings.h... yes
checking for inttypes.h... yes
checking for stdint.h... yes
checking for unistd.h... yes
checking string usability... no
checking string presence... no
checking for string... no
checking iostream usability... no
checking iostream presence... no
checking for iostream... no
checking sys/utsname.h usability... yes
checking sys/utsname.h presence... yes
checking for sys/utsname.h... yes
checking build system type... x86_64-unknown-linux-gnu
checking host system type... x86_64-unknown-linux-gnu
checking how to print strings... printf
checking for a sed that does not truncate output... /usr/bin/sed
checking for fgrep... /usr/bin/grep -F
checking for ld used by gcc... /opt/rh/devtoolset-11/root/usr/libexec/gcc/x86_64-redhat-linux/11/ld
checking if the linker (/opt/rh/devtoolset-11/root/usr/libexec/gcc/x86_64-redhat-linux/11/ld) is GNU ld... yes
checking for BSD- or MS-compatible name lister (nm)... /opt/rh/devtoolset-11/root/usr/bin/nm -B
checking the name lister (/opt/rh/devtoolset-11/root/usr/bin/nm -B) interface... BSD nm
checking whether ln -s works... yes
checking the maximum length of command line arguments... 1572864
checking whether the shell understands some XSI constructs... yes
checking whether the shell understands "+="... yes
checking how to convert x86_64-unknown-linux-gnu file names to x86_64-unknown-linux-gnu format... func_convert_file_noop
checking how to convert x86_64-unknown-linux-gnu file names to toolchain format... func_convert_file_noop
checking for /opt/rh/devtoolset-11/root/usr/libexec/gcc/x86_64-redhat-linux/11/ld option to reload object files... -r
checking for objdump... objdump
checking how to recognize dependent libraries... pass_all
checking for dlltool... no
checking how to associate runtime and link libraries... printf %s\n
checking for archiver @file support... @
checking for strip... strip
checking for ranlib... ranlib
checking command to parse /opt/rh/devtoolset-11/root/usr/bin/nm -B output from gcc object... ok
checking for sysroot... no
checking for mt... no
checking if : is a manifest tool... no
checking for dlfcn.h... yes
checking for objdir... .libs
checking if gcc supports -fno-rtti -fno-exceptions... no
checking for gcc option to produce PIC... -fPIC -DPIC
checking if gcc PIC flag -fPIC -DPIC works... yes
checking if gcc static flag -static works... no
checking if gcc supports -c -o file.o... yes
checking if gcc supports -c -o file.o... (cached) yes
checking whether the gcc linker (/opt/rh/devtoolset-11/root/usr/libexec/gcc/x86_64-redhat-linux/11/ld -m elf_x86_64) supports shared libraries... yes
checking whether -lc should be explicitly linked in... no
checking dynamic linker characteristics... GNU/Linux ld.so
checking how to hardcode library paths into programs... immediate
checking whether stripping libraries is possible... yes
checking if libtool supports shared libraries... yes
checking whether to build shared libraries... yes
checking whether to build static libraries... yes
checking how to run the C++ preprocessor... g++ -std=c++17 -E
checking for ld used by g++ -std=c++17... /opt/rh/devtoolset-11/root/usr/libexec/gcc/x86_64-redhat-linux/11/ld -m elf_x86_64
checking if the linker (/opt/rh/devtoolset-11/root/usr/libexec/gcc/x86_64-redhat-linux/11/ld -m elf_x86_64) is GNU ld... yes
checking whether the g++ -std=c++17 linker (/opt/rh/devtoolset-11/root/usr/libexec/gcc/x86_64-redhat-linux/11/ld -m elf_x86_64) supports shared libraries... yes
checking for g++ -std=c++17 option to produce PIC... -fPIC -DPIC
checking if g++ -std=c++17 PIC flag -fPIC -DPIC works... yes
checking if g++ -std=c++17 static flag -static works... no
checking if g++ -std=c++17 supports -c -o file.o... yes
checking if g++ -std=c++17 supports -c -o file.o... (cached) yes
checking whether the g++ -std=c++17 linker (/opt/rh/devtoolset-11/root/usr/libexec/gcc/x86_64-redhat-linux/11/ld -m elf_x86_64) supports shared libraries... yes
checking dynamic linker characteristics... (cached) GNU/Linux ld.so
checking how to hardcode library paths into programs... immediate
Checking platform... Identified as Linux
./configure: line 19347: test: =: unary operator expected
checking for doxygen... no
configure: WARNING: doxygen not found - will not generate any doxygen documentation
checking for perl... /usr/bin/perl
checking for valgrind... no
checking that generated files are newer than configure... done
configure: creating ./config.status
config.status: creating modsecurity.pc
config.status: creating Makefile
config.status: creating doc/Makefile
config.status: creating src/Makefile
config.status: creating others/Makefile
config.status: creating tools/Makefile
config.status: creating tools/rules-check/Makefile
config.status: creating test/Makefile
config.status: creating test/benchmark/Makefile
config.status: creating examples/Makefile
config.status: creating examples/simple_example_using_c/Makefile
config.status: creating examples/multiprocess_c/Makefile
config.status: creating examples/multithread/Makefile
config.status: creating examples/reading_logs_with_offset/Makefile
config.status: creating examples/reading_logs_via_rule_message/Makefile
config.status: creating examples/using_bodies_in_chunks/Makefile
config.status: creating src/config.h
config.status: src/config.h is unchanged
config.status: executing depfiles commands
config.status: executing libtool commands

ModSecurity - for Linux

Mandatory dependencies

• libInjection ....v3.9.2-92-gb9fcaaf
• Mbed TLS ....v3.6.0
• SecLang tests ....a3d4405

Optional dependencies

• GeoIP/MaxMind ....found
  • (MaxMind) v1.2.0
    -lmaxminddb , -DWITH_MAXMIND
• LibCURL ....not found
• YAJL ....found v2.0.4
  -lyajl , -DWITH_YAJL
• LMDB ....not found
• LibXML2 ....not found
• SSDEEP ....not found
• LUA ....not found
• PCRE ....found
  using pcre v
  ,
• PCRE2 ....found v10.23
  -lpcre2-8 ,

Other Options

• Test Utilities ....enabled
• Assertions ....disabled
• SecDebugLog ....enabled
• afl fuzzer ....disabled
• library examples ....enabled
• Building parser ....disabled
• Treating pm operations as critical section ....disabled

[airween]

Well, based on the script's output, it seems that configure script found the YAJL library.

Just for sure, could you try to rebuild the whole library?

make clean
make -j `nproc`
make install

Then

ldd /path/to/your/libmodsecurity3.so

What do you get?

[17096835560]

Thank you very much. Running “make clean ” solved the problem

[airween]

Thank you very much. Running “make clean ” solved the problem

Great, it's good to see that. Feel free to close the issue if you don't have any other question.