ownCloud encryption not working with Notes App

[maltefiala]

We are getting a lot of feedback concerning encryption not working in ownCloud Notes. As suggested by @Raydiation I hereby open this one in core. Please everyone out there:

• check your SSL Keychain before testing this issue
• give us as much feedback as possible on this

Dependent Issues

• API does not work with encryption enabled notes#48
• Issues using myownnotes with encryption enabled owncloud aykit/MyOwnNotes#35

Core Devs
It would be great if you could comment on this.

Thanks.

[karlitschek]

@schiesbn Can you test?

[tigrino]

I run an encrypted ownCloud. The Notes app is installed and enabled. Accessing the url /index.php/apps/notes/api/v0.2/notes gives me the contents. Trying to access with the myownnotes from Android generates an error "There was a connection error. Please check your username / password". The log contains the following:
XXX - xxx [02/Jul/2014:21:08:15 +0000] "GET /index.php/apps/notes/api/v0.2/notes HTTP/1.1" 302 1599 "-" "Dalvik/1.6.0 (Linux; U; Android 4.2.2; A1-810 Build/JDQ39)"
XXX - xxx [02/Jul/2014:21:08:16 +0000] "GET /apps/files_encryption/files/error.php?p=0&errorCode=1 HTTP/1.1" 403 2510 "-" "Dalvik/1.6.0 (Linux; U; Android 4.2.2; A1-810 Build/JDQ39)"

SSL keychain for the https connection? I have a RapidSSL cert, installed in Apache and intermediate cert in the config as well. Seems to work fine.

[maltefiala]

Oh man, that issue....

@Raydiation: Is owncloud/notes#48 still unresolved? @tigrino says the API is working fine. A quick check on our testmachine gave us the impression that the app is working too with ownCloud encryption enabled (aykit/MyOwnNotes#35).

However, I have no idea (nor time to look at atm) how ownCloud implemented encryption. It would be great if we could figure out if owncloud/notes#48 is solved and the app is the only "weak" link here.

Questions

• What is the best way to test an encrypted ownCloud setting with API and the app?
• How can I make sure, my ownCloud instance is encrypted?
• Is it important what app is being installed first (Notes or Encryption)? We should test all possibilities....
• Is it important to use a recovery key?

[maltefiala]

@tigrino : Please use https://www.ssllabs.com/ssltest/ to test your chain. Additionally, it would be great if you could test it with encryption disabled as well. Just to make sure... and please provide us with every step you take ;)

[BernhardPosselt]

@maltemafia Can you try it with the newest beta of 7? Works for me

[tigrino]

Mmm... Taking the server offline and replacing it with a fresh instance to check the working without/with encryption may be possible but I would rather avoid doing that if possible... Mine is encryption first, long time ago, notes installed yesterday.

Call to the API (/index.php/apps/notes/api/v0.2/notes) returns this:
[{"modified":1404366591,"title":"Hello, world!","content":"Hello, world!","id":44061}]

The file on disk is encrypted and contains this:
FnI7GrzEBZWUaETq+A==00iv00qrBKD5IemmX9hIbzx

ssllabs check reports all ok with the certificate except for limited support for forward secrecy. Do you want the complete report here?

[maltefiala]

That would be great. But if you don't want to share it, just report this:

Additional Certificates (if supplied)

Certificates provided x (z bytes)
Chain issues REPORT THIS FIELD

[maltefiala]

@Raydiation : My colleague is testing 6.0.4 today and I will test 7 later on. Btw, my name is maltefiala, not to be confused with some mafia :)

@tigrino : What server version of ownCloud are you running?

[maltefiala]

My colleague @steppenhahn made various tests today. From our point of view, encryption seems to be the problem.

My Own Notes works like a charm with the encryption-plugin disabled. As soon as we activate the encryption-plugin, we get an 403 error and the following exception:

java.io.FileNotFoundException: https://myserver.com/owncloud/apps/files_encryption/files/error.php?p=0&errorCode=1

it does not matter if the encryption is disabled or enabled (admin-tab) - If the plugin is enabled, myownnotes does not work.

System tested

• ownCloud Server Version 6.0.4
• Notes Version: 0.9
• Encryption-Plugin-version: 0.5

Next Steps

We will investigate this issue on 7.0 this weekend.

[BernhardPosselt]

Try to log out after enabling encryption. The error code in the URL means that encryption is not yet initialized

[tigrino]

@maltefiala

Additional Certificates (if supplied)
Certificates provided 2 (2295 bytes)
Chain issues None

ownCloud 6.0.4 (stable)