Skip to content

Conversation

@rullzer
Copy link
Member

@rullzer rullzer commented Aug 12, 2020

Basically a switch (off by default for new installations) to support the legacy format or not.
This should hopefully allow us to kill the old ways at some point.

Future work:

  • Write docs
  • Setupcheck that checks for the config.php flag and links to the docs where we explain this a77c891
  • occ command to scan the files to see if there are any files that use the old format

@MorrisJobke
Copy link
Member

MorrisJobke commented Aug 12, 2020

  • Setupcheck that checks for the config.php flag and links to the docs where we explain this a77c891

Done

Copy link
Member

@nickvergessen nickvergessen left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Bail out immediately when you found a negative one.

Copy link
Member

@nickvergessen nickvergessen left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🦈

@rullzer rullzer force-pushed the enh/sse/make_legacy_cipher_opt_in branch from 0913b37 to 48476df Compare August 19, 2020 09:09
@nickvergessen
Copy link
Member

Some failing tests are related, others need a rebase

@rullzer rullzer force-pushed the enh/sse/make_legacy_cipher_opt_in branch from 48476df to 19d7de6 Compare August 19, 2020 13:09
rullzer and others added 3 commits August 19, 2020 15:45
* Systems that upgrade have this enabled by default
* New systems disable it
* We'll have to add some wargning in the setup checks if this is enabled

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
Signed-off-by: Morris Jobke <hey@morrisjobke.de>
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
@rullzer rullzer force-pushed the enh/sse/make_legacy_cipher_opt_in branch from 19d7de6 to 2bbb848 Compare August 19, 2020 13:45
@faily-bot
Copy link

faily-bot bot commented Aug 19, 2020

🤖 beep boop beep 🤖

Here are the logs for the failed build:

Status of 31974: failure

mysql5.6-php7.2

Show full log
There were 2 warnings:

1) Test\Files\ViewTest::testRenameFailDeleteTargetKeepSource
Trying to configure method "writeStream" which cannot be configured because it does not exist, has not been specified, is final, or is static

2) Test\Files\ViewTest::testCopyFailDeleteTargetKeepSource
Trying to configure method "writeStream" which cannot be configured because it does not exist, has not been specified, is final, or is static

--

There was 1 failure:

1) Test\Files\ObjectStore\ObjectStoreStorageTest::testCopy with data set #5 ('/sòurcē.txt', '/target.txt')
Expected /target.txt to be a copy of /drone/src/tests/data/lorem.txt
Failed asserting that two strings are equal.
--- Expected
+++ Actual
@@ @@
-'Lorem ipsum dolor sit amet, consectetur adipisicing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua.\n
-Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat.\n
-Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur.\n
-Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.'
+''

/drone/src/tests/lib/Files/Storage/Storage.php:222
/drone/src/tests/lib/Files/Storage/Storage.php:235

acceptance-app-files

  • tests/acceptance/features/app-files.feature:108
Show full log
  Scenario: show shares                                               # /drone/src/tests/acceptance/features/app-files.feature:108
    Given I am logged in                                              # LoginPageContext::iAmLoggedIn()
    And I share the link for "welcome.txt"                            # FilesAppSharingContext::iShareTheLinkFor()
    When I open the "Shares" section                                  # AppNavigationContext::iOpenTheSection()
    Then I see that the current section is "Shares"                   # AppNavigationContext::iSeeThatTheCurrentSectionIs()
    Then I see that the file list contains a file named "welcome.txt" # FileListContext::iSeeThatTheFileListContainsAFileNamed()
      Row for file welcome.txt in file list could not be found after 100 seconds (NoSuchElementException)

@rullzer rullzer merged commit b604d52 into master Aug 19, 2020
@rullzer rullzer deleted the enh/sse/make_legacy_cipher_opt_in branch August 19, 2020 18:10
@rullzer
Copy link
Member Author

rullzer commented Aug 19, 2020

Writing the docs is on my list for tomorrow

@rullzer
Copy link
Member Author

rullzer commented Aug 24, 2020

/backport to stable19

@kesselb kesselb added the pending documentation This pull request needs an associated documentation update label Aug 28, 2020
@kesselb
Copy link
Collaborator

kesselb commented Aug 28, 2020

Don't forget the documentation :) We already have on issue report for the new setup check: #22478

@AndyXheli
Copy link
Contributor

@rullzer What dose it mean by legacy format i enabled server side encryption when i installed NC 18. Do we need to stop using server side encryption ?

@weizenspreu
Copy link
Member

@axheli Legacy format here means the encryption scheme that was used before authenticated encryption was introduced back in 2016. When you first started using the SSE with NC 18 you are not using the legacy format.

@kesselb
Copy link
Collaborator

kesselb commented Aug 29, 2020

I guess it's safe to ignore the warning for now. The condition to show the warning is wrong.

@AndyXheli
Copy link
Contributor

@yahesh Got it thank you so much for explaining it.

@nickvergessen
Copy link
Member

Run occ encryption:scan:legacy-format to see which files use the legacy format.

@AndyXheli
Copy link
Contributor

@nickvergessen running it. Going to check it out! I have a few servers but I think this one was created a long time ago.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

3. to review Waiting for reviews enhancement feature: encryption (server-side) pending documentation This pull request needs an associated documentation update

Projects

None yet

Development

Successfully merging this pull request may close these issues.

8 participants