Can't decrypt files

#1

Steps to reproduce

1.Files was uploaded from owncloud client 2.5.4 (ubuntu 18.04) (from user1)
2. After was sync with new pc (from user1)
2. We have trouble with “too many open files”
3. Change password for user1 from db
4. Change password for user1 from web admin -> users -> change password
5. After was sync with new pc by owncloud client 2.5.4 (from user1) multikeydecrypt with share key faild (no start line)

Expected behaviour

We must open files or sync without errors.

Actual behaviour

We can not open files and get the following errors:

  1. 0906D06C:PEM routines:PEM_read_bio:no start line
  2. 0607A082:digital envelope routines:EVP_CIPHER_CTX_set_key_length:invalid key length
  3. 04065072:rsa routines:RSA_EAY_PRIVATE_DECRYPT:padding check failed
  4. 0407109F:rsa routines:RSA_padding_check_PKCS1_type_2:pkcs decoding error

Server configuration

Operating system: CentOS7 3.10.0-957.12.2.el7.x86_64

Web server: Apache/2.4.6 (CentOS)

Database: 5.5.60-MariaDB MariaDB Server

PHP version: PHP 7.2.19

ownCloud version: 10.0.10 (stable)

Updated from an older ownCloud or fresh install:

Where did you install ownCloud from: official site

List of activated apps:

Default encryption module ( Bjoern Schiessle, Clark Tomlinson )

Are you using encryption: yes

Client configuration

Browser: Firefox 69.0.1

Operating system: Ubuntu 18.04

#2

Hi,
When you open a topic in the server category, there is a template that needs to be filled out. This is to ensure that no information is missing and we can help you as fast as possible. Please fill out the template and post it here.

Also your error messages are not helpful without context, we need to know what steps you take to get these errors, so we can reproduce it and then tell you what is wrong. But all of this is part of the template, so please fill it out.

Thanks,

2 Likes
#3

I add information to my post

1 Like
#4

Some additional questions:

Where do you see this error message?

Not sure what you mean with “db”? Do you mean LDAP?

Where exactly do you see these messages? WebUI, owncloud sync client, owncloud.log?

2 Likes
#5

We have trouble with “too many open files”

16T15:12:36+00:00",“remoteAddr”:"",“user”:"–",“app”:“PHP”,“method”:"–",“url”:"–",“message”:“fopen(/var/www/disk/data/user1/files/sometime_used/code/php/mm.web/config/AS/AS12476): failed to open stream: Too many open files at /var/www/disk/lib/private/Files/Storage/Local.php#298”}

We solve this problem with editing next config /etc/security/limits.conf

apache soft nofile 500000
apache hard nofile 500000
mysql soft nofile 500000
mysql hard nofile 500000

I mean that we open mariadb then change users password in table oc_users

Change password for user1 from db

I mean that we open mariadb then change users password in table oc_users. Not from WebUI

We can not open files and get the following errors:

WebUI

In owncloud sync client we see next multikeydecrypt with share key faild (no start line)

#6

So I guess you’re trying to change the user password of a user who has user based encryption enabled.

If the user has lost the password and you don’t have recovery keys enabled you won’t be able to access the files on the server.

If the user still knows the password they can log into the ownCloud WebUI and change the master password of the encryption key, by entering the old AND the new password.

If you have recovery key enabled you can disable user based encryption with it and then re-enable it with a new key and the new password.

More information in the docs:
https://doc.owncloud.com/server/10.1/admin_manual/configuration/files/encryption/disabling-encryption.html
https://doc.owncloud.com/server/10.1/admin_manual/configuration/files/encryption/enabling-user-key-encryption.html

Please read the docs carefully.

1 Like
#7

Can you tell me how manually
decrypt the file key using
recovery key?

#8 
root@ubuntu1804:/var/www/owncloud# occ encryption:decrypt-all --help
Usage:
  encryption:decrypt-all [options] [--] [<user>]

Arguments:
  user                       User for whom you want to decrypt all files (optional). [default: ""]

Options:
  -m, --method[=METHOD]      Use recovery or password. If recovery method is chosen then the recovery password will be used to decrypt files. If password method is chosen then individual user passwords will be used to decrypt files.
[...]

You might have to run the occ command on your machine with sudo, php -f and the full path to the occ executable.

1 Like
#9

When use occ, we were able to partially decrypt the files, but a large number of files could not be restored.

We are trying to decrypt the file key and the file itself using the source code of the ownCloud service and the openssl library functions for php.

  1. We managed to get the user’s private key.

  2. When trying to decrypt filekey via function openssl_open using sharedkey
    0407109F:rsa routines:RSA_padding_check_PKCS1_type_2:pkcs decoding error

  3. We also tried to use a bunch of functions

  • openssl_private_decrypt (to get the RC4 key)

  • openssl_decrypt (to decrypt filekey)

    However, we were not able to get the RC4 key, by a similar error
    0407109F:rsa routines:RSA_padding_check_PKCS1_type_2:pkcs decoding error

For each file, we have recoverykey, but the method described above for obtaining filekey did not give us results, even when using master private key.

How to decrypt filekey using recovery key, openssl functions, class Crypt (from owncloud source files)?

#10

Can you tell me what I need to add in order to get more information about my problem?

#11

Цитата
:frowning_face:
Can anybody help?

#12

Sorry, don’t know. Perhaps there is some openssl support forum/irc somewhere?