Occ encryption:decrypt-all leaves file versions encrypted

I ran occ encryption:decrypt-all. Now all my files are in plaintext, but all previous versions in file_versions are still encrypted.

How do I decrypt the file versions too?


Nextcloud version: 18.0.3
Operating system and version: Ubuntu 18.04.4
Apache or nginx version: Apache/2.4.29 2020-03-13T12:26:16
PHP version: PHP 7.2.24-0ubuntu0.18.04.3

The issue you are facing: After running occ encryption:decrypt-all, file versions are still encrypted.

Is this the first time you’ve seen this error? Yes

Steps to replicate it:

  1. Run occ encryption:decrypt-all
  2. Files are all decrypted, but file versions are still encrypted.

The output of your Nextcloud log in Admin > Logging:

no logging

The output of your config.php file in /path/to/nextcloud (make sure you remove any identifiable information!):

<?php
$CONFIG = array (
  'instanceid' => 'ocornotornotllp',
  'passwordsalt' => 'RNOTHAPPENING',
  'secret' => 't/CBLABLABLA',
  'trusted_domains' => 
  array (
    0 => 'nextcloud.example.com',
  ),
  'datadirectory' => '/mnt/nextcloud/nextcloud/data',
  'overwrite.cli.url' => 'https://nextcloud.example.com',
  'dbtype' => 'mysql',
  'version' => '18.0.3.0',
  'dbname' => 'nextcloud',
  'dbhost' => 'localhost',
  'dbport' => '',
  'dbtableprefix' => 'oc_',
  'mysql.utf8mb4' => true,
  'dbuser' => 'NAH',
  'dbpassword' => 'NOPE',
  'installed' => true,
  'htaccess.RewriteBase' => '/',
  'memcache.local' => '\\OC\\Memcache\\APCu',
  'memcache.locking' => '\\OC\\Memcache\\Redis',
  'filelocking.enabled' => 'true',
  'redis' => 
  array (
    'host' => '/var/run/redis/redis.sock',
    'port' => 0,
    'timeout' => 0.0,
  ),
  'maintenance' => false,
  'theme' => '',
  'loglevel' => 2,
  'updater.release.channel' => 'stable',
);

The output of your Apache/nginx/system log in /var/log/____:

no logging

Did you managed to solve this?

In case this is still an issue: If you still have your whole data folder and config file then you could try to decrypt the files outside of Nextcloud with this standalone script: https://github.com/syseleven/nextcloud-tools/blob/master/rescue/decrypt-all-files.php