Skip to content

The database should be secured #1920

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Closed
wants to merge 1,164 commits into from
Closed

The database should be secured #1920

wants to merge 1,164 commits into from

Conversation

shivamk01
Copy link

Digital Signature certificates should be generated using elliptic curve digital signature algorithm which is very secure so that the system cannot be copied or manipulated and the integrity is maintained.

Felipe Zimmerle and others added 30 commits September 27, 2017 12:41
Adds CHANGES info for #1562
4909713
@majordaw
Eliminate some reorder and sign warnings
495b47d
Adds CHANGES info for #1572
ba4e2e3
@majordaw
Store the connection and url parameters in std::string
a5266d6
Adds CHANGES info for #1571
658c9b5
Consideres under quote variable while loading the rules
210e72a
@asterite3
support macro expansion in @rx
a760302 
try to use macro expansion on @rx argument before matching.
If after expansion argument changed, make new Regex from
the macro-expanded argument and use that for matching.
Fixes #1528
@asterite3
add a test for macro expansion in @rx
10c4f9b
@asterite3
add @rx macro expansion test to list in Makefile
9e9db08
Removes a regex optimization added at #1536
fa7973a
CHANGES: add info about #1536
2988c5b
@victorhora
Support to JSON stuff on serial logging
63bef3d
@victorhora
Add missing statements
d285bc0
CHANGES: Adds info about #1583
e09304a
Makes auditlog more verbose on debug logs
d3f979f
Makes clear to the user when audit log is empty due to missing JSON sup.
3036462
Calls xml init and xml cleanup to avoid memory leak
41bf7f7 
Fix #1553
Removes xml initialization from CURL if/def
20edf9a
Avoids unicode initialization on every rules block
1ad9525 
ModSecurity-nginx/#67
ModSecurity/#1563
Adds test case for issue #1565
1518c43
Parser: Pipes are no longer welcomed inside regex dict element select…
30797a4 
…ion.

Issue #1591
Having disruptive msgs as disruptive [instead of warnings] on audit log
39fb75c 
Issue #1592
Refactoring on RuleMessage class, now accepting http code as parameter
274f9e5
Setting http response code on the auditlog
34e8b14
Support pipes inside quoted variable selection
93e18ca 
As of #1591 the pipe support was disable in the general selection which
was also affecting the quoted selection. This pactch adds the support
for pipes inside the quoted selection only.
Fix log while displaying the name of a dict selection by regex
c4fcb36
Adds missing info to the CHANGES file
351beb0
Fix memory issue while changing rule target dynamic
371fc03 
Issue #1590
@omadjoudj
Fix build on non x86 arch build failed on ppc64/ppc64le/arch64/armv7h…
968d83f 
…l/s390x due to how this arch represent chars
Adds CHANGES info about #1598
4ecfed3
Felipe Zimmerle and others added 24 commits September 11, 2018 15:40
test case: Adds test case related to #1831
dfbff09
@victorhora
Allow libMaxmind to work with Ubuntu PPA packages
0a88e02
@victorhora
Fix parser to support GeoLookup with MaxMind
d976888
@victorhora
Use glob.h when using OpenBSD
0c0b09e
@victorhora
Add exception to linker as OpenBSD doesn't like static
dce2fed
@victorhora
Explicitly include time.h to fix building the examples
5c048e3
@victorhora
Fix SecResponseBodyAccess and ctl:requestBodyAccess directives
379f370
@victorhora
Fix matching condition and adjust test case
a719871
parser: Updates the generated parser file
9c73c09
parser: Fix typo on SanitiseArgs
c2bc695 
Related to: #715 and #1889
@nowaits @victorhora
fix: function m.setvar not work in lua script
45cdb0e
@victorhora
Fix on top of jmx's m.setvar commit for USER collection in Lua scripts
6f458b5
@victorhora
Add test cases for m.setvar in Lua scripts
5aa79c1
@victorhora
CHANGES: Adds info about: #1859
0d53111
Handling key exceptions on the variable itself
ee50fea 
This is the first step towords to solve #1697
Having a better organization for Variables::
98b9ae6
Adds test case related to issue #1725
cdf2da1
CHANGES: Adds info about: 0x028e0 and 0x275a1
0e8cd76
Adds request IDs and URIs to the debug log
c721e10
Adds new transaction constructor that accepts the transaction id as p…
4dd2812 
…arameter.
Adds support to setenv action
bc3d3f1 
Issue #1044
Adds partial support to UpdateActionById
5cf477a
Refactoring on the Rule class
7110f97
Refactoring on the RULE variable
3e9ca37
@victorhora
Copy link
Contributor

@shivamk01 I believe there's something wrong with this Pull request. It seems like you're trying to merge the v3/dev/test branch with the v3/dev/test branch?

Digital Signature certificates should be generated using elliptic curve digital signature algorithm which is very secure so that the system cannot be copied or manipulated and the integrity is maintained.

As far as I know, there's no "Digital Signature certificates" being generated by ModSecurity so I will be closing this Pull request as I'm assuming it was created by error/accident.

@victorhora victorhora closed this Oct 1, 2018
@victorhora victorhora self-assigned this Oct 1, 2018
@victorhora victorhora added the 2.x Related to ModSecurity version 2.x label Oct 1, 2018
@victorhora victorhora added this to the v2.9.3 milestone Oct 1, 2018
@zimmerle zimmerle deleted the v3/dev/test branch December 5, 2018 17:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees

@victorhora victorhora

Labels
2.x Related to ModSecurity version 2.x
Projects
None yet
Milestone
v2.9.3
Development

Successfully merging this pull request may close these issues.