Skip to content

20.0.5 onwards: Certificate is not valid on all apps #25243

Closed
Closed
20.0.5 onwards: Certificate is not valid on all apps#25243
Labels
0. Needs triagePending check for reproducibility or if it fits our roadmapbug

Description

@LecrisUT
LecrisUT
opened on Jan 21, 2021

After the upgrade to 20.0.5 all apps fail integrity check with:

Results
=======
- core
	- EXCEPTION
		- OC\IntegrityCheck\Exceptions\InvalidSignatureException
		- Certificate is not valid.
......
Raw output
==========
Array
(
    [core] => Array
        (
            [EXCEPTION] => Array
                (
                    [class] => OC\IntegrityCheck\Exceptions\InvalidSignatureException
                    [message] => Certificate is not valid.
                )

        )

The documentation page does not give any hints on how to fix this issue.

Server configuration

Operating system: CentOS Stream

Web server: Caddy 2.3.0

Database: MariaDB 10.3.17

PHP version: 7.4.14

Nextcloud version: 20.0.5++

Updated from an older Nextcloud/ownCloud or fresh install:

Where did you install Nextcloud from:

Signing status: In the main body

Signing status 
Login as admin user into your Nextcloud and access 
http://example.com/index.php/settings/integrity/failed 
paste the results here.

List of activated apps:

App list 
If you have access to your command line run e.g.:
sudo -u www-data php occ app:list
from within your Nextcloud installation folder

Nextcloud configuration:

Config report 
If you have access to your command line run e.g.:
sudo -u www-data php occ config:list system
from within your Nextcloud installation folder

or 

Insert your config.php content here. 
Make sure to remove all sensitive content such as passwords. (e.g. database password, passwordsalt, secret, smtp password, …)

Are you using external storage, if yes which one: local/smb/sftp/...

Are you using encryption: yes/no

Are you using an external user-backend, if yes which one: LDAP/ActiveDirectory/Webdav/...

LDAP configuration (delete this part if not used)

LDAP config 
With access to your command line run e.g.:
sudo -u www-data php occ ldap:show-config
from within your Nextcloud installation folder

Without access to your command line download the data/owncloud.db to your local
computer or access your SQL server remotely and run the select query:
SELECT * FROM `oc_appconfig` WHERE `appid` = 'user_ldap';


Eventually replace sensitive data as the name/IP-address of your LDAP server or groups.

Client configuration

Browser:

Operating system:

Logs

Web server error log

Web server error log 
Insert your webserver log here

Nextcloud log (data/nextcloud.log)

Nextcloud log 
Insert your Nextcloud log here

Browser log

Browser log 
Insert your browser log here, this could for example include:

a) The javascript console log
b) The network log
c) ...

Activity

  1. LecrisUT
    added
    0. Needs triagePending check for reproducibility or if it fits our roadmap
    bug
    on Jan 21, 2021

  2. muhviehstah commented on Jan 21, 2021

    @muhviehstah
    muhviehstah
    on Jan 21, 2021

    same here on latest 21 beta

  3. layz89 commented on Jan 21, 2021

    @layz89
    layz89
    on Jan 21, 2021

    Exactly, the same in version 21 beta 7

  4. AlexG-78 commented on Jan 21, 2021

    @AlexG-78
    AlexG-78
    on Jan 21, 2021

    Same here on 21. Beta 7

  5. AnnabellaRenee87 commented on Jan 21, 2021

    @AnnabellaRenee87
    AnnabellaRenee87
    on Jan 21, 2021

    Getting the same thing on 21, beta 7 as well.

  6. tcitworld commented on Jan 22, 2021

    @tcitworld
    tcitworld
    on Jan 22, 2021
    Member

    Should be fixed by #25214 for 21, not sure about 20.0.5

  7. LecrisUT commented on Jan 22, 2021

    @LecrisUT
    LecrisUT
    on Jan 22, 2021
    Author

    Seems like it would be fixed as early as 21 beta 8. If 21 is still a long way from release, either the breaking changes in 20.0.5 should be reverted, or all of the changes for this PR should be merged.

    It is becoming a breaking bug, since some apps can have bugs (e.g. I am not able to login via social login due to a bug) and we cannot update them due to the certificate issue, leaving us in a limbo until then.

  8. tcitworld commented on Jan 22, 2021

    @tcitworld
    tcitworld
    on Jan 22, 2021
    Member

    I meant the 21 release cycle, so 21 beta 8, not 21's final first release.

  9. LecrisUT commented on Jan 25, 2021

    @LecrisUT
    LecrisUT
    on Jan 25, 2021
    Author

    For now just applying these 2 commits will solve this issue:

  10. bmunro-peralex commented on Feb 3, 2021

    @bmunro-peralex
    bmunro-peralex
    on Feb 3, 2021

    So it looks like those commits didn't make it to 20.0.7 either, by looking at the source

  11. LecrisUT
    closed this as completedon Apr 21, 2021

  12. fuomag9 commented on Oct 20, 2022

    @fuomag9
    fuomag9
    on Oct 20, 2022

    Same here after updating to nextcloud 25

    Technical information
=====================
The following list covers which files have failed the integrity check. Please read
the previous linked documentation to learn more about the errors and how to fix
them.

Results
=======
- related_resources
	- EXCEPTION
		- OC\IntegrityCheck\Exceptions\InvalidSignatureException
		- Signature data not found.

Raw output
==========
Array
(
    [related_resources] => Array
        (
            [EXCEPTION] => Array
                (
                    [class] => OC\IntegrityCheck\Exceptions\InvalidSignatureException
                    [message] => Signature data not found.
                )

        )

)

  13. wiesty commented on Oct 20, 2022

    @wiesty
    wiesty
    on Oct 20, 2022

    Same after 25 update:

    Technical information

    =====================
The following list covers which files have failed the integrity check. Please read
the previous linked documentation to learn more about the errors and how to fix
them.
Results
=======
- core
	- INVALID_HASH
		- .htaccess
	- EXTRA_FILE
		- .htaccess.old
- related_resources
	- EXCEPTION
		- OC\IntegrityCheck\Exceptions\InvalidSignatureException
		- Signature data not found.
Raw output
==========
Array
(
    [core] => Array
        (
            [INVALID_HASH] => Array
                (
                    [.htaccess] => Array
                        (
                            [expected] => d9cab0f07716234242423432rf23f23f34faf82913968b7
                            [current] => 5b462bc8c1c1da259
                        )
                )
            [EXTRA_FILE] => Array
                (
                    [.htaccess.old] => Array
                        (
                            [expected] => 
                            [current] => ab4cb3a5cb7c839ece26775ab5b23r3223f2fce233ff23
                )
        )
    [related_resources] => Array
        (
            [EXCEPTION] => Array
                (
                    [class] => OC\IntegrityCheck\Exceptions\InvalidSignatureException
                    [message] => Signature data not found.
                )
        )
)

  14. muhviehstah commented on Oct 20, 2022

    @muhviehstah
    muhviehstah
    on Oct 20, 2022

    same here after 25 update

    - related_resources
	- EXCEPTION
		- OC\IntegrityCheck\Exceptions\InvalidSignatureException
		- Signature data not found.

  15. MarslMarcello commented on Oct 20, 2022

    @MarslMarcello
    MarslMarcello
    on Oct 20, 2022

    same here after 25 update

    - related_resources
	- EXCEPTION
		- OC\IntegrityCheck\Exceptions\InvalidSignatureException
		- Signature data not found.

    +1

  16. zenhighzer commented on Oct 21, 2022

    @zenhighzer
    zenhighzer
    on Oct 21, 2022

    same here after 25 update (via docker container)

    • related_resources
      • EXCEPTION
        • OC\IntegrityCheck\Exceptions\InvalidSignatureException
        • Signature data not found.

  17. xenophil90 commented on Oct 22, 2022

    @xenophil90
    xenophil90
    on Oct 22, 2022

    Same here.

    Technical information
=====================
The following list covers which files have failed the integrity check. Please read
the previous linked documentation to learn more about the errors and how to fix
them.

Results
=======
- related_resources
	- EXCEPTION
		- OC\IntegrityCheck\Exceptions\InvalidSignatureException
		- Signature data not found.

Raw output
==========
Array
(
    [related_resources] => Array
        (
            [EXCEPTION] => Array
                (
                    [class] => OC\IntegrityCheck\Exceptions\InvalidSignatureException
                    [message] => Signature data not found.
                )

        )

)

  18. codewithelvin commented on Oct 24, 2022

    @codewithelvin
    codewithelvin
    on Oct 24, 2022

    The same issue here with NC 25 Docker

    Technical information
=====================
The following list covers which files have failed the integrity check. Please read
the previous linked documentation to learn more about the errors and how to fix
them.

Results
=======
- related_resources
	- EXCEPTION
		- OC\IntegrityCheck\Exceptions\InvalidSignatureException
		- Signature data not found.

Raw output
==========
Array
(
    [related_resources] => Array
        (
            [EXCEPTION] => Array
                (
                    [class] => OC\IntegrityCheck\Exceptions\InvalidSignatureException
                    [message] => Signature data not found.
                )

        )

)

  19. MitchT1966 commented on Oct 25, 2022

    @MitchT1966
    MitchT1966
    on Oct 25, 2022

    ...and: same here. NC 25.0.0 with Docker. Any idea how this can be fixed and when?

    Technical information

    The following list covers which files have failed the integrity check. Please read
    the previous linked documentation to learn more about the errors and how to fix
    them.

    Results

    • related_resources
      • EXCEPTION
        • OC\IntegrityCheck\Exceptions\InvalidSignatureException
        • Signature data not found.

    Raw output

    Array
    (
    [related_resources] => Array
    (
    [EXCEPTION] => Array
    (
    [class] => OC\IntegrityCheck\Exceptions\InvalidSignatureException
    [message] => Signature data not found.
    )

        )

    )

  20. wiesty commented on Oct 28, 2022

    @wiesty
    wiesty
    on Oct 28, 2022

    Same after 25 update:

    Technical information

    =====================
The following list covers which files have failed the integrity check. Please read
the previous linked documentation to learn more about the errors and how to fix
them.
Results
=======
- core
	- INVALID_HASH
		- .htaccess
	- EXTRA_FILE
		- .htaccess.old
- related_resources
	- EXCEPTION
		- OC\IntegrityCheck\Exceptions\InvalidSignatureException
		- Signature data not found.
Raw output
==========
Array
(
    [core] => Array
        (
            [INVALID_HASH] => Array
                (
                    [.htaccess] => Array
                        (
                            [expected] => d9cab0f07716234242423432rf23f23f34faf82913968b7
                            [current] => 5b462bc8c1c1da259
                        )
                )
            [EXTRA_FILE] => Array
                (
                    [.htaccess.old] => Array
                        (
                            [expected] => 
                            [current] => ab4cb3a5cb7c839ece26775ab5b23r3223f2fce233ff23
                )
        )
    [related_resources] => Array
        (
            [EXCEPTION] => Array
                (
                    [class] => OC\IntegrityCheck\Exceptions\InvalidSignatureException
                    [message] => Signature data not found.
                )
        )
)

    successfully updated to 25.0.1 RC1 and it fixed all errors.

  21. MitchT1966 commented on Oct 28, 2022

    @MitchT1966
    MitchT1966
    on Oct 28, 2022

    A question: is there a way to install rc1 (or any other beta) in docker and if so, how? Sorry if this doesn't fit into this stream - any help appreciated

  22. muhviehstah commented on Oct 29, 2022

    @muhviehstah
    muhviehstah
    on Oct 29, 2022

    A question: is there a way to install rc1 (or any other beta) in docker and if so, how? Sorry if this doesn't fit into this stream - any help appreciated

    for me updating the apps fixed the Problem without updating to RC1

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    0. Needs triagePending check for reproducibility or if it fits our roadmapbug

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions