Bug: defaultModel = 'yes' rather than "OC_DEFAULT_MODULE" for server-side file encryption on fresh install of 28.0.3 server; Files won't save at all

ℹ️ Support
,
3

I just noticed this in your output. That doesn’t look right. The defaultModule should say OC_DEFAULT_MODULE. Not even sure how it can say yes. :thinking:

That command just pulls the string value here[1] which should be the same as the value for default_encryption_module from the occ config:list core command.

So maybe it really isn’t enabled in your environment, but then the question is how’d that happen?

The command line sequence to enable server-side encryption is:

# enables the `encryption` *app*
./occ app:enable encryption
# Actually enables Server-side Encryption
./occ encryption:enable
# Actually encrypts existing user files
./occ encryption:encrypt-all

Both master key mode and encrypt home storage default to on these days (wasn’t always the case).

[1] server/lib/private/Encryption/Manager.php at e0705f1015ca69b603ef43931367bf653fbc08c8 · nextcloud/server · GitHub