Hi,
although it's probably a matter of course here a small hint for new HTTP/2
testers:
Don't forget to add "HTTP/2" to the variable tx.allowed_http_versions
(set in modsecurity_crs_10_setup.conf) if the rule REQUEST_PROTOCOL
(in modsecurity_crs_30_http_policy.conf) is in use.
It takes me some minutes to get the new http2_module of Apache httpd
version 2.4.17 working ;-)
Regards
Jens
_______________________________________________
Owasp-modsecurity-core-rule-set mailing list
Owasp-modsecurity-core-rule-set@lists.owasp.org
https://lists.owasp.org/mailman/listinfo/owasp-modsecurity-core-rule-set
