Encryption error since upgrade to 25.0.2

[privsec]

next cloud encryption is an absolute joke.

Don’t use it

[ekevu123]

What's the best way to turn off encryption for a Nextcloud instance that is already in use? I found different tutorials in the internet, so let's ask to be on the safe side. I have regular backups (thanks to Cloudron).

[savity]

Hey i have the same issue anyone got a solution for this? I can't even download files from my Cloud since i always get this issue? Is it possible to disable and enable again?

And yes it is since Upgrading to Ubuntu 22.04

https://help.nextcloud.com/t/server-side-encryption-error/142257/2

@nebulade Hey found the issue can you guys change this pls? Nextcloud is not usable

https://github.com/nextcloud/server/issues/32003

[provider_sect]
default = default_sect
#legacy = legacy_sect commented out

[default_sect]
activate = 1

#[legacy_sect]
#activate = 0

[guyds]

Same issue here, but I'm still on Ubuntu 20.04.

This is a major issue because we can't access any of our files anymore and we can't even apply the temporary workaround since the openssl config for the Nextcloud app is on a readonly filesystem.

Unfortunately this isn't the first time I'm experiencing issues with the server side encryption in Nextcloud
Therefore I want to turn off the encryption alltogether, but that's only possible after this issue gets fixed

[humptydumpty]

https://cryptomator.org/ to the rescue - I use it for the sensitive stuff that I have on NC.

[guyds]

@humptydumpty There are several alternatives indeed, such as cryptomator, but they don't solve the current issue with the Nextcloud encryption.
The only way to get access again to our Nextcloud files is by modifying the openssl config, but that's something only @girish or @nebulon can do I guess.

[girish]

I have pushed a new package 4.16.0-1 to fix this.

[savity]

@girish works i have upgraded now

[guyds]

@girish Thanks, it's working again!

[ekevu123]

Two things worked for me:

• occ encryption:decrypt-all (on one of the server) which safely decrypted all files and disabled encryption in a couple of minutes
• on another server, this command didn't decrypt all files but ran without errors, so I needed to come up with another way. So, I put all files and folders into one folder on my laptop, used occ encryption:disable to disable encryption and then created a copy on my laptop, waited for the copy of the folder to upload to the server, then I would delete the original (and rename the copy). Took some time, but it worked.