Preferring the .tar.gz download instead of .zip (+1 squashed commit)
Squashed commits:
[23b317d] Added attributes to download CRS file from Github by default
Strip the first directory on extraction, otherwise you end up with /etc/apache2/mod_security/crs/rules/owasp-modsecurity-crs-2.2.8
modsecurity_crs_10_config.conf.erb is now modsecurity_crs_10_setup.conf.erb upstream
Updated modsecurity_crs_10_setup.conf.erb to v2.2.8
Base configuration file is now modsecurity.conf upstream
Merged modsecurity.conf template with modsecurity.conf-recommended
Moved base config file location to attribute
Base configuration file is now modsecurity.conf upstream (missed the source attribute)
Added default apache mpm (+2 squashed commits)
Squashed commits:
[46d54a0] Installing libxml2-dev and libcurl3-dev
[7f8be19] Added apache2 development package logic borrowed from the passenger_apache2 cookbook
Updating to latest mod_security release
Added a mod-security.conf in addition to mod-security.load in order to bring into line with normal setup of Apache modules
I accidentally a /, round 2. (+2 squashed commits)
Squashed commits:
[02795c2] libcurl3-dev is actually libcurl4-openssl-dev in Debian Wheezy
[5b14ddf] I accidentally a /
Deploying mod-security.conf template
Merged modsecurity.conf template with modsecurity.conf-recommended
Don’t need to create or delete link to unicode.mapping, just create. (+1 squashed commit)
Squashed commits:
[de2fba5] Linking unicode.mapping in the modsecurity dir to the extracted source dir
Some rules now have multiple datafiles, passing array and iterating, instead of passing a string
Standarising on platform_family and correcting oversight where copied in logic was upgrading the required libs on Debian family only.
Basic attempt at adding support for Arch. Fixed copy & paste oversight in required libs packages for source install, ref commit 96212f31b4c46cb1c1fc2135c8bdaa32bd75b712
Should probably check the checksum of the correct file… (+2 squashed commits)
Squashed commits:
[4643960] Checksums provided are SHA256 not SHA1
[4036be7] Added verification of downloaded files. Moved to using notifies instead of subscribes, more readable and consistent with other notifications in the cookbook. (+3 squashed commits)
Squashed commits:
[5d4afad] Uncommenting the checksum attribute in remote_file, unused with create_if_missing action however.
[87212f8] Added sha256 checksums of specified remote files
[677e91b] Typo, install_mod_security is a bash resource

Added sha256 checksums of specified remote files

Uncommenting the checksum attribute in remote_file, unused with create_if_missing action however.

Added verification of downloaded files. Moved to using notifies instead of subscribes, more readable and consistent with other notifications in the cookbook.
Broke out the install_mod_security bash resource into multiple smaller execute resources