Downloading, sharing, modifying older (encrypted) images fails, displaying works #40193
Comments
cpm1
added
0. Needs triage
|
I don't see a richdocuments relation, transferring back |
|
Might still be fixed already with #39447 but would only affect new files or reuploaded ones. |
|
Hi @cpm1 - The error message you're receiving:
...comes up when the File key file for the associated file isn't found.
|
joshtrichards
changed the title
|
Sorry for not replying earlier ..
master key
Exactly. I created that folder back in 2019, shared it via link with several people and recently realised that nobody can download the images anymore. Yet they show just fine in the in-line image viewer of nextcloud.
Sure, here's the output: |
|
In case you need more details for reproducing this issue I am going to describe a scenario that I encountered recently. Few months ago (at that time the Nextcloud server version was probably 25.0.5):
About a week ago (meanwhile the server was updated to 27.1.5):
Now:
Tried some things (to see what happens) but nothing changed concerning the download:
|
|
Possibly relevant: #45669 |
|
For the record, while testing the fix for #46196 I've noticed that the |
joshtrichards
added
the
needs review
Bug description
server side encryption is enabled.
I have some images stored since 2019. Displaying them within Nextcloud works as expected, but downloading them results in a file which is correctly named, but contains the description of a 500 server error. The Nextcloud desktop client reports additionally
Cannot decrypt this file, probably this is a shared file. Please ask the file owner to reshare the file with you.during sync operation.
Note that this does not happen with newly added images, just with older ones. Also, it might be related to nextcloud/richdocuments#2996 .. the symptoms sound similar.
With this bug, it is not possible to download any older images, which is quite a major issue. I can't say when exactly it started, as I didn't try to access those images in a while, but I seem to remember it working in v26.
Steps to reproduce
Expected behavior
Selected photo is downloaded correctly.
Installation method
Community Manual installation with Archive
Nextcloud Server version
27
Operating system
Debian/Ubuntu
PHP engine version
PHP 8.2
Web server
Apache (supported)
Database engine version
MariaDB
Is this bug present after an update or on a fresh install?
Upgraded to a MAJOR version (ex. 22 to 23)
Are you using the Nextcloud Server Encryption module?
Encryption is Enabled
What user-backends are you using?
Configuration report
{ "system": { "installed": true, "dbtype": "mysql", "dbname": "***REMOVED SENSITIVE VALUE***", "dbpassword": "***REMOVED SENSITIVE VALUE***", "dbhost": "***REMOVED SENSITIVE VALUE***", "dbtableprefix": "", "passwordsalt": "***REMOVED SENSITIVE VALUE***", "forcessl": true, "blacklisted_files": [ ".htaccess" ], "overwritehost": "", "overwriteprotocol": "", "overwritewebroot": "", "overwritecondaddr": "", "proxy": "", "proxyuserpwd": "***REMOVED SENSITIVE VALUE***", "theme": "", "default_language": "de", "default_phone_region": "de", "3rdpartyroot": "", "3rdpartyurl": "", "defaultapp": "files", "knowledgebaseenabled": true, "mail_domain": "***REMOVED SENSITIVE VALUE***", "mail_smtpdebug": false, "mail_smtpmode": "sendmail", "mail_smtphost": "***REMOVED SENSITIVE VALUE***", "mail_smtpport": 25, "mail_smtptimeout": 10, "mail_smtpsecure": "", "mail_smtpauth": false, "mail_smtpauthtype": "LOGIN", "mail_smtpname": "***REMOVED SENSITIVE VALUE***", "mail_smtppassword": "***REMOVED SENSITIVE VALUE***", "memcache.local": "\\OC\\Memcache\\APCu", "filelocking.enabled": true, "memcache.locking": "\\OC\\Memcache\\Redis", "redis": { "host": "***REMOVED SENSITIVE VALUE***", "port": 6379, "timeout": 0, "password": "***REMOVED SENSITIVE VALUE***" }, "trashbin_retention_obligation": "30, auto", "allow_user_to_change_display_name": true, "appcodechecker": "", "updatechecker": true, "check_for_working_htaccess": true, "log_type": "file", "loglevel": 2, "logdateformat": "F d, Y H:i:s", "logtimezone": "Europe\/Berlin", "remember_login_cookie_lifetime": 1296000, "session_lifetime": 86400, "custom_csp_policy": "default-src 'self'; script-src 'self' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; frame-src *; img-src *; font-src 'self' data:; media-src *", "xframe_restriction": true, "maintenance": false, "apps_paths": [ { "path": "\/var\/www\/nextcloud\/apps", "url": "\/apps", "writable": true } ], "customclient_desktop": "", "customclient_android": "", "customclient_ios": "", "enable_previews": true, "preview_max_scale_factor": 10, "preview_libreoffice_path": "\/usr\/bin\/libreoffice", "preview_office_cl_parameters": "", "enable_avatars": true, "openssl": [], "singleuser": false, "instanceid": "***REMOVED SENSITIVE VALUE***", "datadirectory": "***REMOVED SENSITIVE VALUE***", "version": "27.0.2.1", "trusted_domains": [ "***REMOVED SENSITIVE VALUE***" ], "secret": "***REMOVED SENSITIVE VALUE***", "overwrite.cli.url": "***REMOVED SENSITIVE VALUE***", "updater.release.channel": "stable", "mysql.utf8mb4": true, "dbuser": "***REMOVED SENSITIVE VALUE***", "encryption.key_storage_migrated": false } }List of activated Apps
Nextcloud Signing status
Nextcloud Logs
{ "app": "no app in context", "data": [ ], "level": 3, "message": "Cannot decrypt this file, probably this is a shared file. Please ask the file owner to reshare the file with you.", "method": "GET", "remoteAddr": REMOTE-IP, "reqId": "ZwUzYvaInJ9Lkoj2bj1P", "time": "August 25, 2023 12:26:09", "url": "/nextcloud/remote.php/dav/files/USERNAME/Photos/IMG_5568.JPG", "user": USERNAME, "userAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15", "version": "27.0.2.1" } { "app": "webdav", "exception": { "Code": 0, "CustomMessage": "Cannot decrypt this file, probably this is a shared file. Please ask the file owner to reshare the file with you.", "Exception": "OC\Encryption\Exceptions\DecryptionFailedException", "exception": { }, "File": "/var/www/nextcloud/apps/encryption/lib/Crypto/Encryption.php", "Hint": "Diese Datei kann nicht entschlüsselt werden, es handelt sich wahrscheinlich um eine geteilte Datei. Bitte kontaktieren Sie den Eigentümer der Datei und bitten Sie darum, die Datei noch einmal mit Ihnen zu teilen.", "Line": 398, "message": "Cannot decrypt this file, probably this is a shared file. Please ask the file owner to reshare the file with you.", "Message": "Cannot decrypt this file, probably this is a shared file. Please ask the file owner to reshare the file with you.", "Trace": [ { "args": [ "*** sensitive parameters replaced ***" ], "class": "OCA\Encryption\Crypto\Encryption", "file": "/var/www/nextcloud/lib/private/Files/Stream/Encryption.php", "function": "decrypt", "line": 517, "type": "->" }, { "class": "OC\Files\Stream\Encryption", "file": "/var/www/nextcloud/lib/private/Files/Stream/Encryption.php", "function": "readCache", "line": 316, "type": "->" }, { "class": "OC\Files\Stream\Encryption", "function": "stream_read", "type": "->" }, { "file": "/var/www/nextcloud/apps/files_external/3rdparty/icewind/streams/src/Wrapper.php", "function": "fread", "line": 55 }, { "class": "Icewind\Streams\Wrapper", "file": "/var/www/nextcloud/apps/files_external/3rdparty/icewind/streams/src/CallbackWrapper.php", "function": "stream_read", "line": 96, "type": "->" }, { "class": "Icewind\Streams\CallbackWrapper", "function": "stream_read", "type": "->" }, { "file": "/var/www/nextcloud/3rdparty/sabre/http/lib/Sapi.php", "function": "stream_copy_to_stream", "line": 110 }, { "class": "Sabre\HTTP\Sapi", "file": "/var/www/nextcloud/3rdparty/sabre/dav/lib/DAV/Server.php", "function": "sendResponse", "line": 490, "type": "::" }, { "class": "Sabre\DAV\Server", "file": "/var/www/nextcloud/3rdparty/sabre/dav/lib/DAV/Server.php", "function": "invokeMethod", "line": 253, "type": "->" }, { "class": "Sabre\DAV\Server", "file": "/var/www/nextcloud/3rdparty/sabre/dav/lib/DAV/Server.php", "function": "start", "line": 321, "type": "->" }, { "class": "Sabre\DAV\Server", "file": "/var/www/nextcloud/apps/dav/lib/Server.php", "function": "exec", "line": 364, "type": "->" }, { "class": "OCA\DAV\Server", "file": "/var/www/nextcloud/apps/dav/appinfo/v2/remote.php", "function": "exec", "line": 35, "type": "->" }, { "args": [ "/var/www/nextcloud/apps/dav/appinfo/v2/remote.php" ], "file": "/var/www/nextcloud/remote.php", "function": "require_once", "line": 172 } ] }, "level": 3, "message": "Cannot decrypt this file, probably this is a shared file. Please ask the file owner to reshare the file with you.", "method": "GET", "remoteAddr": REMOTE-IP, "reqId": "ZwUzYvaInJ9Lkoj2bj1P", "time": "August 25, 2023 12:26:09", "url": "/nextcloud/remote.php/dav/files/USERNAME/Photos/IMG_5568.JPG", "user": USERNAME, "userAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15", "version": "27.0.2.1" }Additional info
nextcloud.log output repeats for every tried/failed image. IPs and usernames removed.
The text was updated successfully, but these errors were encountered: