Issue Atomic ModSecurity No valid configurations found. Please run: /var/asl/bin/asl -c stderr

[ValentinoG]

Hi there

I'm seeing the following error:

Atomic ModSecurity No valid configurations found. Please run: /var/asl/bin/asl -c stderr

while trying to enable Mod Security on a fresh CentOS 7 server, Plesk Onyx 17.8.11.

Any input on how to solve the problem?

Thanks!

 

[IgorG]

Please check this thread Resolved - Error: ASL has not been configured

 

[ValentinoG]

Thanks. That thread is a bit old though. I'm getting the error the first time I configure Mod Security + Atomic Corp Rules. Here's a screenshot.

 

[ValentinoG]

Sorry to bother but I'm seeing the same error on a new server too.

 

[IgorG]

Switch to OWASP ModSecurity.
There is something wrong on Atomic side.

 

[brother4]

My whole web pages were not accessible today therefore some hours any more and mail mailbox get spammed hourly. Even by turning off Mod_Security or uninstalling the Plesk component it didn't make a difference.

I finally solved the problem as follows (so that at least the websites were accessible again):

1. disable Mod_Security
2. uninstall Mod_Security from the Plesk components
3. install Mod_Security again via Plesk components (but leave switched off)
4. restart server
5. Tools & Settings > SSL/TLS Certificates > Select Let's Encrypt certificate & Button: Use as default

I have no idea why the last so 5th step is necessary. But only with this step it works.

But Mod_Secuirty does not currently work with this solution. A licensing problem etc. does not seem to exist. Also no proxy is needed or something else has changed since then.

Hourly mails:

Subject: Cron <root@serv> cd / && run-parts --report /etc/cron.hourly
run-parts: /etc/cron.hourly/asl exited with return code 126

Error Message Plesk Backend:

Der ModSecurity-Regelsatz konnte nicht installiert werden: modsecurity_ctl failed: gpg: key {:deleted-for-security-reasons:}: "Atomicorp (Atomicorp Official Signing Key) <[email protected]>" not changed gpg: Total number processed: 1 gpg: unchanged: 1 gpg: assuming signed data in `/tmp/tmpZjFIMB/aum' gpg: Signature made Tue Oct 16 14:25:50 2018 CEST using RSA key ID {:deleted-for-security-reasons:} gpg: Good signature from "Atomicorp (Atomicorp Official Signing Key) <[email protected]>" gpg: WARNING: This key is not certified with a trusted signature! gpg: There is no indication that the signature belongs to the owner. Primary key fingerprint: {:deleted-for-security-reasons:} TERM environment variable not set. --2018-11-19 19:30:48-- https://www.atomicorp.com/RPM-GPG-KEY.atomicorp.txt Resolving www.atomicorp.com (www.atomicorp.com)... {:deleted-for-security-reasons:} Connecting to www.atomicorp.com (www.atomicorp.com)|{:deleted-for-security-reasons:}|:443... connected. HTTP request sent, awaiting response... 200 OK Length: 1694 (1.7K) [text/plain] Saving to: 'STDOUT' 0K . 100% 246M=0s 2018-11-19 19:30:48 (246 MB/s) - written to stdout [1694/1694] aum failed with exitcode 3. stdout: Checking versions ... Updating Web Application Firewall to 201811141229: updated[75G[[1;31m[1;32mPASS[0m[0m] Warning: Not an array or iterable object in foreach, variable is NULL in src/component/c_apache.php on line 29 ------------------------------------------------------------------------------- Errors were encountered: L CODE SOURCE MESSAGE - ---- ----------------------------- ------------------------------------------ [0;33m2 9901 ASLCommon::cmd_exec ERROR: '(1) /usr/sbin/apache2ctl -t 2>&1 >/dev/null -- [Mon Nov 19 19:31:03.475207 2018] [so:warn] [pid 6665] AH01574: module security2_module is already loaded, skipping||[Mon Nov 19 19:31:03.475332 2018] [so:warn] [pid 6665] AH01574: module unique_id_module is already loaded, skipping||AH00526: Syntax error on line 35 of /etc/apache2/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf:||ModSecurity: Found another rule with the same id' [0m[0;33m2 601 c_modsec::apply_rules There is a problem with the apache config: 1 [0m[0;33m2 601 c_modsec::apply_rules There is a problem with the apache config: Rolling back to the previous update [0m[0;33m2 48 c_modsec::apply_rules Reverting all changes [0m[0;33m2 48 ASLRBC::rollback_file Could not retrieve versions for /etc/asl/system.properties [0m[1;31m3 600 c_modsec::apply_rules Errors occurred with Apache [0m{:deleted-for-security-reasons:} stderr: Unable to download tortix rule set