Skip to content

Encryption Migration - "occ encryption:scan:legacy-format" No Longer Available? #5822

Description

@b0ssi

Nextcloud Server Version: 20.0.3

After a recent upgrade to 20.0.3 I attempted to follow advise given in Settings -> Administration -> Overview -> Security & Setup Warnings:

The old server-side-encryption format is enabled. We recommend disabling this. For more details see the documentation.

The linked docs refer to a command that doesn't seem to be available (any more?):

occ encryption:scan:legacy-format

Activity

  1. thomwiggers commented on Dec 21, 2020

    @thomwiggers

    That command works fine. The docs don't explain how to migrate, however.

  2. thomwiggers commented on Dec 21, 2020

    @thomwiggers

    (note that you should run ./occ encryption:scan:legacy-format, and not run ./occ occ encryption:scan:legacy-format which was a mistake I made)

  3. b0ssi commented on Dec 21, 2020

    @b0ssi
    Author

    It doesn't work for me:

    $ php occ encryption:scan:legacy-format

    There are no commands defined in the "encryption:scan" namespace.

    Did you mean this?
    encryption

    Nextcloud-20.0.4
    php-7.3

    Am I missing anything obvious?

  4. thomwiggers commented on Dec 21, 2020

    @thomwiggers

    It turns out that if you don't have the encryption plugin enabled, this message is present.

  5. thomwiggers commented on Dec 21, 2020

    @thomwiggers
  6. b0ssi commented on Dec 21, 2020

    @b0ssi
    Author

    Good observation, thanks. It's not intuitive but makes sense technically and I can reproduce that behavior on my end.
    It might be of help to add a note about this detail to that documentation page.

  7. keunes commented on Feb 10, 2021

    @keunes
    Contributor

    @b0ssi @thomwiggers From the documentation I gather I should
    a) check if I can remove the legacy encryption mode
    b) if I can, remove it by editing config.php

    To be able to check, should I activate (again) the End-to-End Encryption app (or is it another app)?
    And/Or, do you know if I do not need to check, and can I just safely proceed with b (editing config.php)?

  8. b0ssi commented on Feb 11, 2021

    @b0ssi
    Author

    @keunes iirc it's the Default encryption module (built-in I believe) that @thomwiggers is also referring to. Turned out it needs to be enabled to run the check in the subject of this issue (otherwise getting said error - cmd unavailable).

  9. keunes commented on Feb 17, 2021

    @keunes
    Contributor

    @b0ssi Thanks for the reply. The thing is: I was wondering whether the End-to-End Encryption app I linked to earlier - which I found in my installation's app store - is actually is the same as the encryption app that @thomwiggers referred to - which, given it's deprecated, might not be in my installation's app store any-more.

    I'm hesitant to install the above 'End-to-End Encryption' app linked above because I'm not sure it's the same as what was installed before (thus what I'd need to activate again), and I don't want to accidentally create additional (potential future) issues.

    EDIT

    Still don't know if if both apps I referred to above are the same. But I just ran occ app:enable encryption and then occ encryption:scan:legacy-format and all seems fine, so I deactivated legacy support. Sorry for the tags, and thanks again for chipping in!

  10. b0ssi commented on Feb 18, 2021

    @b0ssi
    Author

    Hi @keunes, not a problem. I don't think you'd need to worry about the End-to-End Encryption app. It's distinct from the Encryption app, which is server-side only (I'm fairly certain, but if maybe someone from the team can confirm). For me, just enabling the Encryption app again temporarily to run the scan worked just fine. Hope it helped!

  11. shelterx commented on Apr 20, 2021

    @shelterx

    It''s a bit weird, see my comment here, bug or not?

    nextcloud/server#24681 (comment)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions