On Xenial updating to latest modsecurity2 causes error

[gquipster]

/etc/init.d/apache2 restart

• Restarting Apache httpd web server apache2 [fail]
• The apache2 configtest failed.
  Output of config test was:
  apache2: Syntax error on line 147 of /etc/apache2/apache2.conf: Syntax error on line 12 of /etc/apache2/mods-enabled/security2.conf: Could not open configuration file /usr/share/modsecurity-crs/owasp-crs.load: No such file or directory

Had to install Zesty version of modsecurity-crs to resolve: https://packages.ubuntu.com/zesty/modsecurity-crs

[gquipster]

Also affects trusty

[alexiacobws]

Confirmed on Trusty

Setting up libapache2-mod-security2 (2.9.2-1+ubuntu14.04.1+deb.sury.org+2) ...
apache2_invoke: Enable module security2
apache2_reload: Your configuration is broken. Not restarting Apache 2
apache2_reload: apache2: Syntax error on line 157 of /etc/apache2/apache2.conf: Syntax error on line 12 of /etc/apache2/mods-enabled/security2.conf: Could not open configuration file /usr/share/modsecurity-crs/owasp-crs.load: No such file or directory
Setting up libapache2-modsecurity (2.9.2-1+ubuntu14.04.1+deb.sury.org+2) ...
Setting up modsecurity-crs (2.2.8-1) ...

[jaydrogers]

I just had this same exact error happen to me on 14.04.5. The error I received was:

apache2: Syntax error on line 147 of /etc/apache2/apache2.conf: Syntax error on line 12 of /etc/apache2/mods-enabled/security2.conf: Could not open configuration file /usr/share/modsecurity-crs/owasp-crs.load: No such file or directory

The only way to get the webserver to start was to remove the config file that was causing it to break:

rm /etc/apache2/mods-enabled/security2.load

Does anyone know of a permanent solution for this?

[gquipster]

I resolved this by downloading the DEB file for the newest version of modsecurity-crs from the Zesty archive library:

https://packages.ubuntu.com/zesty/all/modsecurity-crs/download

and installing it manually.

The security2.load file then loaded without issue

[jaydrogers]

Awesome, thanks @gquipster!

For anyone landing here from a Google search, I ran these commands thanks to @gquipster:

wget http://mirrors.kernel.org/ubuntu/pool/universe/m/modsecurity-crs/modsecurity-crs_3.0.0-3_all.deb

sudo dpkg -i modsecurity-crs_3.0.0-3_all.deb

I was able to confirm the configuration was okay after install by running sudo apachectl configtest. After that I restarted the service with sudo service apache2 restart and everything came up okay.

[oerdnj]

I'll fix this as part of #733

[oerdnj]

Uploaded, so this and #733 should be fixed.