Newbie, end to end encryption breaks my Nextcloud?

leccylee · March 28, 2023, 11:05am

Hi

Apologises for lack of logs etc, as im sure its just a mere “step” in setup I must have missed maybe.

I setup my nextcloud on a Linode server (latest ubuntu), following the tutorials to get setup. I then followed guides to harden SSH and add fail2ban etc. Thats it so far, a pretty much fresh install on a fresh Linode server. HTTPS and cert is setup too, on custom domain.

Now reason for wanting to start a nextcloud, End-to-End encrypted files, im basically trying to improve and replace google, iCloud etc!

So before I do more I try to setup End to End, I follow guides to

Switch on default encryption app
Turn on server side encryption in settings
enable end to end encryption app

At this point, all is well. UNTIL I try and either upload or download any test files, then I get a plethora of errors, some are 503 errors, some say encryption errors, permission denied errors, all sorts of different errors. (this all before turning on E2EE in clients)

As an experiment I further setup e2ee in my desktop clients thinking maybe that will help, no. Still nothing up or down, and piles of errors.

Where am I going wrong, sure ive missed a step maybe in setup?

leccylee · March 30, 2023, 10:18am

Anyone with ideas?, else looks like iCloud stays /cry

ZendaiOwl · March 31, 2023, 10:28pm

I don’t know, however it seems the end to end encryption app is not compatible together with server-side encryption

github.com

nextcloud/end_to_end_encryption/blob/master/README.md#limitation

# End-to-End Encryption App

This app provides all the necessary APIs to implement End-to-End encryption
on the client side. Additionally it makes sure that End-to-End encrypted
files are not accessible with the web interface and other WebDAV clients.

Here you can find the [API documentation](https://github.com/nextcloud/end_to_end_encryption/blob/master/doc/api.md).

## Limitation

- E2EE is currently not compatible to be used together with server-side encryption

![](doc/screenshots/e2ee-files-listing.png)

## Sysadmin documentation

```php
// config/config.php

    ...,

This file has been truncated. show original

github.com/nextcloud/end_to_end_encryption

e2e on next 25 and clarifications on activation with server-side encryption.

opened 05:10AM - 23 Oct 22 UTC

closed 04:57PM - 07 Dec 22 UTC

tigernero79

0. Needs triage bug

e2e on next 25 and clarifications on activation with server-side encryption. … I wanted to ask when e2e compatibility is expected with the latest version Nextcloud 25.0.0 and in your wiki you say that e2e is not compatible with server-side encryption plugin. question: what if both are active? will the folder he created on the server still be e2e encrypted? or not? how are they incompatible? why can't you have server-side file encryption while keeping clear names and have e2e for some folders? where is the limitation by enabling both extensions? thank you

leccylee · April 1, 2023, 5:14pm

Oh, thats odd I just followed a guide. Ok thank you, I will restore my server and have another play with server side off.