rules-updater.pl can only fetch "Core Rule Set" latest release

[rcbarnett]

CORERULES-94: Hi,

As time of writing, latest release is 2.2.5.
It seems that it is only possible to fetch the latest release of the Core Rule Set. Executing the following is successful :
{{monospaced}}rules-updater.pl -rhttp://www.modsecurity.org/autoupdate/repository/ -v2.2.5 -prules -Smodsecurity-crs{{monospaced}}
While any other version fails, for exemplethe following for 2.2.4:
{{monospaced}}rules-updater.pl -rhttp://www.modsecurity.org/autoupdate/repository/ -v2.2.4 -prules -Smodsecurity-crs
Fetching: modsecurity-crs/modsecurity-crs_2.2.4.zip ...
Failed to retrieve ruleset modsecurity-crs/modsecurity-crs_2.2.4.zip: 404 Not Found{{monospaced}}

In production environment, we can't update rules without making regression tests in pre-prod or development environments.
Is there something I'm doing wrong or is it the expected behaviour ?
If it's the expected behaviour, is there somewhere an alternate repository with older versions ?

[rcbarnett]

Original reporter: loic

[rcbarnett]

Original reporter: loic

[rcbarnett]

rcbarnett: The rules-updater.pl script has been deprecated. I was previously used with our SVN repo. Our current repo is on GitHub -
https://github.com/SpiderLabs/owasp-modsecurity-crs.

You can always download the most current version by accessing this URL-
https://github.com/SpiderLabs/owasp-modsecurity-crs/tarball/master

[rcbarnett]

rcbarnett: The rules-updater.pl script has been deprecated. I was previously used with our SVN repo. Our current repo is on GitHub -
https://github.com/SpiderLabs/owasp-modsecurity-crs.

You can always download the most current version by accessing this URL-
https://github.com/SpiderLabs/owasp-modsecurity-crs/tarball/master

[rcbarnett]

loic: Thanks for answering so quickly and for the GitHub site.
Ok for downloading the most current version on GitHub too.
But I have no solution on GitHub to do what I want, that is to be sure to install the same version of the CRS on every production system.
I think I will get the last version on GitHub and store it somewhere as a reference for production installation.

[rcbarnett]

loic: Thanks for answering so quickly and for the GitHub site.
Ok for downloading the most current version on GitHub too.
But I have no solution on GitHub to do what I want, that is to be sure to install the same version of the CRS on every production system.
I think I will get the last version on GitHub and store it somewhere as a reference for production installation.