Skip to content

[stable-4.0] Bugfix/e2ee fixes for hardware certificate end to end encryption#9614

Merged
mgallien merged 4 commits intostable-4.0from
backport/9514/stable-4.0
Mar 12, 2026
Merged

[stable-4.0] Bugfix/e2ee fixes for hardware certificate end to end encryption#9614
mgallien merged 4 commits intostable-4.0from
backport/9514/stable-4.0

Conversation

@backportbot
Copy link

@backportbot backportbot bot commented Mar 12, 2026

Backport of PR #9514

we need to use the certificate that was used to encrypt folder metadata
when reading and decrypting them

Signed-off-by: Matthieu Gallien <matthieu.gallien@nextcloud.com>
we also want to get the fingerprint of a software certificate not only
for hardware ones

should enable us to have correct behavior in all cases (and maybe be
able to migrate software certificates if there is a need)

Signed-off-by: Matthieu Gallien <matthieu.gallien@nextcloud.com>
during discovery of all certificates, the private key handle can become
invalid

to avoid having invalid references, rather store the certificate handle
and use it to get the cached key

Signed-off-by: Matthieu Gallien <matthieu.gallien@nextcloud.com>
ensure the proper owner user certificate is used after a migration

Signed-off-by: Matthieu Gallien <matthieu.gallien@nextcloud.com>
@mgallien mgallien merged commit 6d98e73 into stable-4.0 Mar 12, 2026
15 checks passed
@mgallien mgallien deleted the backport/9514/stable-4.0 branch March 12, 2026 12:08
@sonarqubecloud
Copy link

Quality Gate Failed Quality Gate failed

Failed conditions
38.6% Coverage on New Code (required ≥ 80%)
4 New Code Smells (required ≤ 0)

See analysis details on SonarQube Cloud

Catch issues before they fail your Quality Gate with our IDE extension SonarQube for IDE

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant