Some files have not passed the integrity check: "Invalid files" during integrity scan

[rcfa]

Adding some apps/integrations seem to add mime file types:

Technical information
=====================
The following list covers which files have failed the integrity check. Please read
the previous linked documentation to learn more about the errors and how to fix
them.

Results
=======

• core
  - INVALID_HASH
  - core/js/mimetypelist.js
  - EXTRA_FILE
  - core/img/filetypes/dwg.svg
  - core/img/filetypes/3dm.svg
  - core/img/filetypes/3ds.svg
  - core/img/filetypes/3mf.svg
  - core/img/filetypes/bim.svg
  - core/img/filetypes/brp.svg
  - core/img/filetypes/dae.svg
  - core/img/filetypes/fbx.svg
  - core/img/filetypes/fcstd.svg
  - core/img/filetypes/glb.svg
  - core/img/filetypes/gltf.svg
  - core/img/filetypes/ifc.svg
  - core/img/filetypes/igs.svg
  - core/img/filetypes/obj.svg
  - core/img/filetypes/off.svg
  - core/img/filetypes/ply.svg
  - core/img/filetypes/stp.svg
  - core/img/filetypes/stl.svg
  - core/img/filetypes/wrl.svg
  - core/img/filetypes/mtl.svg

There seems to be a lack of a way to update the proper checksums based on that, as these files are simply not expected, and thus cause the relevant errors to be thrown.

Similarly, for whatever reason a .htaccess file went missing, and doesn’t get installed even if removing and reinstalling the app:

• libresign
  - FILE_MISSING
  - vendor/tecnickcom/tcpdf/tools/.htaccess

The problem with bugs like these: they get people used to the error messages, so if truly malicious code modifications happen, they will be ignored and dismissed.
So it would be very important that users are empowered to fix issues like these after verifying that everything is indeed OK.

The suggestions shown, do not solve the issue…

…is there any solution planned?

[jtr]

What version of NC?

Have you filed a bug report?

Issues · nextcloud/server

[CptDayDreamer]

Same problem here. Did you solve it?

[danktankk]

same problem but a massive list after my upgrade to version 27. Its pretty much the entire 3rd party app list and more.

The error is the same for all of the entries:

[expected] =>
[current] => very long alphanumeric string

What do I need to do to fix this?

[gabglus]

I have the same problem after update to 28.0.6

[jtr]

This is just a general error. You need to show the actual files mentioned/etc.

It could be:

• files that you uploaded to the wrong place
• something else?

https://docs.nextcloud.com/server/latest/admin_manual/issues/code_signing.html#fixing-invalid-code-integrity-messages

[bkraul]

No, this is happening even with the docker image for 28.0.6. I am guessing the checksums were not included in the release and hopefully we will be getting a minor update soon. And yes, 27.1.10 is also having the same issue.

This is the full list of files. It hints that they may have be new files, but no signatures were added to the integrity checker.

Technical information
=====================
The following list covers which files have failed the integrity check. Please read
the previous linked documentation to learn more about the errors and how to fix
them.

Results
=======
- tasks
	- EXTRA_FILE
		- img/color_picker.svg
		- js/tasks-dashboard.js.map
		- js/tasks-talk.js.LICENSE.txt
		- js/tasks-dashboard.js.LICENSE.txt
		- js/tasks-main.js
		- js/tasks-dashboard.js
		- js/tasks-main.js.LICENSE.txt
		- js/tasks-main.js.map
		- js/tasks-talk.js
		- js/tasks-talk.js.map
		- css/tasks-talk.scss
		- l10n/kn.js
		- l10n/kn.json

Raw output
==========
Array
(
    [tasks] => Array
        (
            [EXTRA_FILE] => Array
                (
                    [img/color_picker.svg] => Array
                        (
                            [expected] => 
                            [current] => 03d54e1f4a1876b6bab9efea137d2fe74bb03cf6d702be1638bb8e54b8acf462456aefa1ee31cfbc30138d23baf9fab87da9f54549627a194170bed3670cf572
                        )

                    [js/tasks-dashboard.js.map] => Array
                        (
                            [expected] => 
                            [current] => a5b0bb98563b318fbdf6fa79bba969d5b658c9e447d8a26fcadeac6e6acaf2c436d5aa2f312fe0a047b0856560041a7ea1f7a955ec63d58d3348b03ee7531a56
                        )

                    [js/tasks-talk.js.LICENSE.txt] => Array
                        (
                            [expected] => 
                            [current] => e32b01689a9878b3c3d7dbfaa3e8a531d4914b1bd248b5b74af5185e7e047fb95d4c2b611505d715ea351b23648707939dca210a1acd885143c2ac01b8fd0818
                        )

                    [js/tasks-dashboard.js.LICENSE.txt] => Array
                        (
                            [expected] => 
                            [current] => 553f3402a2adb4c3901122ed06c8953ec8c98aec1bcef4c704ecd3287d14e2f75e81eee0749589f3d7a1a10e3425f72cb5b0bf41146c2623c0ae8b724efb2aad
                        )

                    [js/tasks-main.js] => Array
                        (
                            [expected] => 
                            [current] => 7de826c0a0625a6edcefa729ea4b9608ff6ae39e48529ecd1595e4e37de0b376ef4feb5caa43f261d3501e173cc49c47549e82506f8c79602895e1cf2d286162
                        )

                    [js/tasks-dashboard.js] => Array
                        (
                            [expected] => 
                            [current] => acfd067896461c6f002ce0825d64ac58574cf48adb29d382bffc95e44f4dd11a2e84bcbcd3bd87ec37634738d2f024495a2b57906dffd11fb7b9af4091a668f0
                        )

                    [js/tasks-main.js.LICENSE.txt] => Array
                        (
                            [expected] => 
                            [current] => cace284f567db0330529eacdbd43d85fa9c7efe3c344a7f854ffe329fb074d0a6ec0e876998dca6bd96db22d260ddb27738a77f37b950fea14550b4ce23a26d6
                        )

                    [js/tasks-main.js.map] => Array
                        (
                            [expected] => 
                            [current] => 26894afd9d016f5d0156cbdff73a75fbad65d95cc7a20b7ec67075eebab565147ff081642e01a9259ac31d9a4b51829fc12d9d3212a4dd9fdc13b82933375dd0
                        )

                    [js/tasks-talk.js] => Array
                        (
                            [expected] => 
                            [current] => eeca436ec50caf7977b2aff5c714d6a879569c91990c34b76885c7204a9398582d310d1f07d2fdff92a72e70d9b2a2895c4cbb774c921d59a3870c4a00423d33
                        )

                    [js/tasks-talk.js.map] => Array
                        (
                            [expected] => 
                            [current] => 78f302d75cb2aa7723a68aabe1c7cab0e5042c24273321e793939192f9875d4f8b21490d0cb8545f719e66194159043ac85d81b33f3033b09f73c202fdb33000
                        )

                    [css/tasks-talk.scss] => Array
                        (
                            [expected] => 
                            [current] => 26c663d4f7697f390d790ae61706b0d89a94c316b5749a3764eceeb3b51a0734940d509004ea682a45ddb1d763bfa28f5aac83e3f8ee471853eb15dc6f14d6b4
                        )

                    [l10n/kn.js] => Array
                        (
                            [expected] => 
                            [current] => e44ad874b75fac7f1a4ea1355ab3405e0188a1b0e24d5e5a394ae79287a0fa3a122fc523ed1df4402777911392f8877bf52bccc475ac8267879785874c94b6ca
                        )

                    [l10n/kn.json] => Array
                        (
                            [expected] => 
                            [current] => 8bcf23f791168a969b18e65ad314d53eab9e3744fbf4909dde99eb023d165822bb95c8c2547456f35d0097a6580867008fcabf863c9a4732619982a6be14ff89
                        )

                )

        )

)

[jtr]

@bkraul

No, this is happening even with the docker image for 28.0.6. I am guessing the checksums were not included in the release and hopefully we will be getting a minor update soon. And yes, 27.1.10 is also having the same issue.

None of those files are in either of those Docker images. Those files are also not part of the current versions of the Tasks app. So the integrity check results are correct: those files are not expected and should not exist in your environment. As to why you have them: don’t have enough information about your environment to do more than speculate.

[bkraul]

Turns out you are correct. Apparently there is an incompatibility with the current version of the Tasks app. I removed it, and the integrity warning went away. What’s more, I attempted to redownload and reinstall and this was the result:

As far as how I have my docker mappings:

      - ~/nextcloud/mysite/data:/var/www/html/data
      - ~/nextcloud/mysite/config:/var/www/html/config
      - ~/nextcloud/mysite/custom_apps:/var/www/html/custom_apps

Where Tasks was obviously put in custom_apps, and apparently factored in the integrity check.

[devnull]

For example you can search every file color_picker.svg. And on one position it is wrong.

find /path/to/nextcloud-or-docker -name color_picker.svg

Post results.

@bkraul

                    [img/color_picker.svg] => Array
                        (
                            [expected] => 
                            [current] => 03d54e1f4a1876b6bab9efea137d2fe74bb03cf6d702be1638bb8e54b8acf462456aefa1ee31cfbc30138d23baf9fab87da9f54549627a194170bed3670cf572
                        )

File was not expected (at this position). Same for the other files.