Issue Failed to activate the ModSecurity

[tobasium]

Hi Team,

I have issue to activate Atomic Basic ModSecurity. I have updated to debian 9 and also (Plesk OnyxVersion 17.8.11)

If I want to activate Atomic Basic ModSecurity i get the following issue:

Der ModSecurity-Regelsatz konnte nicht installiert werden: modsecurity_ctl failed: gpg: key FFBD5D0A4520AFA9: "Atomicorp (Atomicorp Official Signing Key) <[email protected]>" not changed gpg: Total number processed: 1 gpg: unchanged: 1 gpg: assuming signed data in '/tmp/tmpZvSxw9/aum' gpg: Signature made Wed Mar 14 19:24:49 2018 CET gpg: using RSA key FFBD5D0A4520AFA9 gpg: Good signature from "Atomicorp (Atomicorp Official Signing Key) <[email protected]>" [unknown] gpg: WARNING: This key is not certified with a trusted signature! gpg: There is no indication that the signature belongs to the owner. Primary key fingerprint: 1818 66DF 9DAC A40E 5B42 9B08 FFBD 5D0A 4520 AFA9 TERM environment variable not set. --2018-03-14 19:46:51-- https://www.atomicorp.com/RPM-GPG-KEY.atomicorp.txt Resolving www.atomicorp.com (www.atomicorp.com)... 74.208.77.16 Connecting to www.atomicorp.com (www.atomicorp.com)|74.208.77.16|:443... connected. Warning: apt-key output should not be parsed (stdout is not a terminal) HTTP request sent, awaiting response... 200 OK Length: 1694 (1.7K) [text/plain] Saving to: 'STDOUT' 0K . 100% 65.7M=0s 2018-03-14 19:46:52 (65.7 MB/s) - written to stdout [1694/1694] W: The repository 'Atomicorp stretch Release' does not have a Release file. E: Failed to fetch http://updates.atomicorp.com/channels/tortix-common/debian/dists/stretch/main/binary-amd64/Packages 404 Not Found [IP: 192.99.9.170 80] E: Some index files failed to download. They have been ignored, or old ones used instead. sed: can't read /etc/asl/config: No such file or directory Command '['sed', '-i', '-e', 's#^MODSEC_RULES_PATH\\s*=.*#MODSEC_RULES_PATH="/etc/apache2/modsecurity.d/rules/tortix/modsec"#g', '-e', 's#^RESTART_APACHE\\s*=.*#RESTART_APACHE="no"#g', '-e', 's#^AUTOMATIC_UPDATES\\s*=.*#AUTOMATIC_UPDATES="no"#g', '/etc/asl/config']' returned non-zero exit status 2 Unable to download tortix rule set

I tested to uninstall ModSecruity and reinstall but the issue still present.

Clould someone help me?

Don't know where the mistake is and how to resolve it.

 

[IgorG]

As you can see there is a problem with downloading from Atomic server. I would suggest you contact Atomic. Also following KB article may be useful:

Modsecurity ruleset update error on Plesk behind proxy: urlopen error [Errno 111] Connection refused> Unable to download tortix rule set

And if you try to use Forum Search engine, you will see a lot of mentions of "Unable to download tortix rule set" phrase.

 

[tobasium]

Thanks for the link. I already search Forum and google but the most answers are for the license Mod Secruity and did not work for me. Already testet a lot since the last 3 days.

 

[tobasium]

I think that maybe the link ist not the right but didn't kniow how to change:

http://updates.atomicorp.com/channels/tortix-common/debian/dists/stretch/main/binary-amd64/Packages

There are no files for debian stretch.

 

[Bitpalast]

... that's what the error message says, too: "The repository 'Atomicorp stretch Release' does not have a Release file."

 

[Janusz]

Hi tobasium. I have exactly the same issue as you after installing Plesk OnyxVersion 17.8.11 on Debian 9.
Have you succeeded in your research? I have tried everything after googling similar issues and nothing ...

If I change rule set to "OWASP ModSecurity" then the module saves OK, but the problem is with "Atomic Basic ModSecurity".

Please advice.

 

[Janusz]

If I change the link http://updates.atomicorp.com/channels/tortix-common/debian/dists/stretch/main/binary-amd64/Packages to jessie, so it will be:
http://updates.atomicorp.com/channels/tortix-common/debian/dists/jessie/main/binary-amd64/Packages, the response is 200, so jessie exists.

Do you think it would be safe to change in sources.list the atomicorp repository from stretch to jessie and update packages this way on Debian 9?

 

[Bitpalast]

Maybe you can contact Atomic on this. I think there must be a reason why the newer version does not have its own repository. Normally this is the case when it is not officially supported.

 

[tobasium]

Hi,

I have change to Comodo ModSecurity there you get get also free, works for me without problems.

I did not change links. This could be give errors.

 

[Janusz]

Thanks. So I did the same ... now only Comodo.
I got response from Atomicorp, that they don't support Debian 9 yet.

 

[RuslanT]

Janusz is correct, Atomicorp don't support Debian 9 yet. You can track Plesk release notes for issue PPP-31722 we'll include the issue in release notes when they add the support.