20.0.5 onwards: Certificate is not valid on all apps #25243

LecrisUT · 2021-01-21T04:31:12Z

After the upgrade to 20.0.5 all apps fail integrity check with:

Results
=======
- core
	- EXCEPTION
		- OC\IntegrityCheck\Exceptions\InvalidSignatureException
		- Certificate is not valid.
......
Raw output
==========
Array
(
    [core] => Array
        (
            [EXCEPTION] => Array
                (
                    [class] => OC\IntegrityCheck\Exceptions\InvalidSignatureException
                    [message] => Certificate is not valid.
                )

        )

The documentation page does not give any hints on how to fix this issue.

Server configuration

Operating system: CentOS Stream

Web server: Caddy 2.3.0

Database: MariaDB 10.3.17

PHP version: 7.4.14

Nextcloud version: 20.0.5++

Updated from an older Nextcloud/ownCloud or fresh install:

Where did you install Nextcloud from:

Signing status: In the main body

Signing status

Login as admin user into your Nextcloud and access 
http://example.com/index.php/settings/integrity/failed 
paste the results here.

List of activated apps:

App list

If you have access to your command line run e.g.:
sudo -u www-data php occ app:list
from within your Nextcloud installation folder

Nextcloud configuration:

Config report

If you have access to your command line run e.g.:
sudo -u www-data php occ config:list system
from within your Nextcloud installation folder

or 

Insert your config.php content here. 
Make sure to remove all sensitive content such as passwords. (e.g. database password, passwordsalt, secret, smtp password, …)

Are you using external storage, if yes which one: local/smb/sftp/...

Are you using encryption: yes/no

Are you using an external user-backend, if yes which one: LDAP/ActiveDirectory/Webdav/...

LDAP configuration (delete this part if not used)

LDAP config

With access to your command line run e.g.:
sudo -u www-data php occ ldap:show-config
from within your Nextcloud installation folder

Without access to your command line download the data/owncloud.db to your local
computer or access your SQL server remotely and run the select query:
SELECT * FROM `oc_appconfig` WHERE `appid` = 'user_ldap';


Eventually replace sensitive data as the name/IP-address of your LDAP server or groups.

Client configuration

Browser:

Operating system:

Logs

Web server error log

Insert your webserver log here

Nextcloud log (data/nextcloud.log)

Nextcloud log

Insert your Nextcloud log here

Browser log

Insert your browser log here, this could for example include:

a) The javascript console log
b) The network log
c) ...

The text was updated successfully, but these errors were encountered:

muhviehstah · 2021-01-21T09:45:52Z

same here on latest 21 beta

layz89 · 2021-01-21T10:13:23Z

Exactly, the same in version 21 beta 7

AlexG-78 · 2021-01-21T12:55:19Z

Same here on 21. Beta 7

AnnabellaRenee87 · 2021-01-21T23:14:37Z

Getting the same thing on 21, beta 7 as well.

tcitworld · 2021-01-22T08:25:05Z

Should be fixed by #25214 for 21, not sure about 20.0.5

LecrisUT · 2021-01-22T08:38:49Z

Seems like it would be fixed as early as 21 beta 8. If 21 is still a long way from release, either the breaking changes in 20.0.5 should be reverted, or all of the changes for this PR should be merged.

It is becoming a breaking bug, since some apps can have bugs (e.g. I am not able to login via social login due to a bug) and we cannot update them due to the certificate issue, leaving us in a limbo until then.

tcitworld · 2021-01-22T09:06:00Z

I meant the 21 release cycle, so 21 beta 8, not 21's final first release.

LecrisUT · 2021-01-25T02:05:09Z

For now just applying these 2 commits will solve this issue:

d751fed
fcbbcac
I suggested these to be integrated in 20.0.6 20.0.6 #25294

bmunro-peralex · 2021-02-03T12:13:12Z

So it looks like those commits didn't make it to 20.0.7 either, by looking at the source

fuomag9 · 2022-10-20T15:24:47Z

Same here after updating to nextcloud 25

Technical information
=====================
The following list covers which files have failed the integrity check. Please read
the previous linked documentation to learn more about the errors and how to fix
them.

Results
=======
- related_resources
	- EXCEPTION
		- OC\IntegrityCheck\Exceptions\InvalidSignatureException
		- Signature data not found.

Raw output
==========
Array
(
    [related_resources] => Array
        (
            [EXCEPTION] => Array
                (
                    [class] => OC\IntegrityCheck\Exceptions\InvalidSignatureException
                    [message] => Signature data not found.
                )

        )

)

wiesty · 2022-10-20T16:03:39Z

Same after 25 update:

Technical information

=====================
The following list covers which files have failed the integrity check. Please read
the previous linked documentation to learn more about the errors and how to fix
them.
Results
=======
- core
	- INVALID_HASH
		- .htaccess
	- EXTRA_FILE
		- .htaccess.old
- related_resources
	- EXCEPTION
		- OC\IntegrityCheck\Exceptions\InvalidSignatureException
		- Signature data not found.
Raw output
==========
Array
(
    [core] => Array
        (
            [INVALID_HASH] => Array
                (
                    [.htaccess] => Array
                        (
                            [expected] => d9cab0f07716234242423432rf23f23f34faf82913968b7
                            [current] => 5b462bc8c1c1da259
                        )
                )
            [EXTRA_FILE] => Array
                (
                    [.htaccess.old] => Array
                        (
                            [expected] => 
                            [current] => ab4cb3a5cb7c839ece26775ab5b23r3223f2fce233ff23
                )
        )
    [related_resources] => Array
        (
            [EXCEPTION] => Array
                (
                    [class] => OC\IntegrityCheck\Exceptions\InvalidSignatureException
                    [message] => Signature data not found.
                )
        )
)

muhviehstah · 2022-10-20T16:11:20Z

same here after 25 update

- related_resources
	- EXCEPTION
		- OC\IntegrityCheck\Exceptions\InvalidSignatureException
		- Signature data not found.

MarslMarcello · 2022-10-20T17:33:42Z

same here after 25 update

- related_resources
	- EXCEPTION
		- OC\IntegrityCheck\Exceptions\InvalidSignatureException
		- Signature data not found.

+1

zenhighzer · 2022-10-21T17:03:42Z

same here after 25 update (via docker container)

related_resources
- EXCEPTION
  - OC\IntegrityCheck\Exceptions\InvalidSignatureException
  - Signature data not found.

xenophil90 · 2022-10-22T09:45:36Z

Same here.

Technical information
=====================
The following list covers which files have failed the integrity check. Please read
the previous linked documentation to learn more about the errors and how to fix
them.

Results
=======
- related_resources
	- EXCEPTION
		- OC\IntegrityCheck\Exceptions\InvalidSignatureException
		- Signature data not found.

Raw output
==========
Array
(
    [related_resources] => Array
        (
            [EXCEPTION] => Array
                (
                    [class] => OC\IntegrityCheck\Exceptions\InvalidSignatureException
                    [message] => Signature data not found.
                )

        )

)

codewithelvin · 2022-10-24T15:56:05Z

The same issue here with NC 25 Docker

Technical information
=====================
The following list covers which files have failed the integrity check. Please read
the previous linked documentation to learn more about the errors and how to fix
them.

Results
=======
- related_resources
	- EXCEPTION
		- OC\IntegrityCheck\Exceptions\InvalidSignatureException
		- Signature data not found.

Raw output
==========
Array
(
    [related_resources] => Array
        (
            [EXCEPTION] => Array
                (
                    [class] => OC\IntegrityCheck\Exceptions\InvalidSignatureException
                    [message] => Signature data not found.
                )

        )

)

MitchT1966 · 2022-10-25T05:05:59Z

...and: same here. NC 25.0.0 with Docker. Any idea how this can be fixed and when?

Technical information

The following list covers which files have failed the integrity check. Please read
the previous linked documentation to learn more about the errors and how to fix
them.

Results

related_resources
- EXCEPTION
  - OC\IntegrityCheck\Exceptions\InvalidSignatureException
  - Signature data not found.

Raw output

Array
(
[related_resources] => Array
(
[EXCEPTION] => Array
(
[class] => OC\IntegrityCheck\Exceptions\InvalidSignatureException
[message] => Signature data not found.
)

)

wiesty · 2022-10-28T06:56:01Z

Same after 25 update:

Technical information

=====================
The following list covers which files have failed the integrity check. Please read
the previous linked documentation to learn more about the errors and how to fix
them.
Results
=======
- core
	- INVALID_HASH
		- .htaccess
	- EXTRA_FILE
		- .htaccess.old
- related_resources
	- EXCEPTION
		- OC\IntegrityCheck\Exceptions\InvalidSignatureException
		- Signature data not found.
Raw output
==========
Array
(
    [core] => Array
        (
            [INVALID_HASH] => Array
                (
                    [.htaccess] => Array
                        (
                            [expected] => d9cab0f07716234242423432rf23f23f34faf82913968b7
                            [current] => 5b462bc8c1c1da259
                        )
                )
            [EXTRA_FILE] => Array
                (
                    [.htaccess.old] => Array
                        (
                            [expected] => 
                            [current] => ab4cb3a5cb7c839ece26775ab5b23r3223f2fce233ff23
                )
        )
    [related_resources] => Array
        (
            [EXCEPTION] => Array
                (
                    [class] => OC\IntegrityCheck\Exceptions\InvalidSignatureException
                    [message] => Signature data not found.
                )
        )
)

successfully updated to 25.0.1 RC1 and it fixed all errors.

MitchT1966 · 2022-10-28T17:01:18Z

A question: is there a way to install rc1 (or any other beta) in docker and if so, how? Sorry if this doesn't fit into this stream - any help appreciated

muhviehstah · 2022-10-29T08:30:20Z

A question: is there a way to install rc1 (or any other beta) in docker and if so, how? Sorry if this doesn't fit into this stream - any help appreciated

for me updating the apps fixed the Problem without updating to RC1

LecrisUT added 0. Needs triage Pending check for reproducibility or if it fits our roadmap bug labels Jan 21, 2021

This was referenced Jan 24, 2021

Integrity-Check is failing on NC21 Beta7 #25303

Closed

🎯 📚 📕 FAQ ➕ KNOWN ISSUES #23369

Open

LecrisUT mentioned this issue Jan 25, 2021

20.0.6 #25294

Merged

kesselb mentioned this issue Jan 26, 2021

InvalidSignatureException after updating to v21 beta 7 #25322

Closed

bmunro-peralex mentioned this issue Jan 27, 2021

when updated from 20.0.4-Apache to 20.0.6-Apache has caused integrity check to fail nextcloud/docker#1388

Closed

kesselb mentioned this issue Jan 27, 2021

[21beta7] - Could not validate CRL signature #25350

Closed

LecrisUT closed this as completed Apr 21, 2021

kyrofa mentioned this issue Jul 15, 2021

Core and all apps are reported with code integrity errrors nextcloud-snap/nextcloud-snap#1698

Closed

fuomag9 mentioned this issue Oct 22, 2022

occ integrity:check-app and Admin panel "rescan" deliver inconsistent results #17801

Open

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

20.0.5 onwards: Certificate is not valid on all apps #25243

20.0.5 onwards: Certificate is not valid on all apps #25243

LecrisUT commented Jan 21, 2021

muhviehstah commented Jan 21, 2021

layz89 commented Jan 21, 2021

AlexG-78 commented Jan 21, 2021

AnnabellaRenee87 commented Jan 21, 2021

tcitworld commented Jan 22, 2021

LecrisUT commented Jan 22, 2021

tcitworld commented Jan 22, 2021

LecrisUT commented Jan 25, 2021

bmunro-peralex commented Feb 3, 2021

fuomag9 commented Oct 20, 2022 •

edited

wiesty commented Oct 20, 2022 •

edited

muhviehstah commented Oct 20, 2022 •

edited

MarslMarcello commented Oct 20, 2022

zenhighzer commented Oct 21, 2022

xenophil90 commented Oct 22, 2022 •

edited

codewithelvin commented Oct 24, 2022

MitchT1966 commented Oct 25, 2022

wiesty commented Oct 28, 2022 •

edited

MitchT1966 commented Oct 28, 2022

muhviehstah commented Oct 29, 2022

20.0.5 onwards: Certificate is not valid on all apps #25243

20.0.5 onwards: Certificate is not valid on all apps #25243

Comments

LecrisUT commented Jan 21, 2021

Server configuration

LDAP configuration (delete this part if not used)

Client configuration

Logs

Web server error log

Nextcloud log (data/nextcloud.log)

Browser log

muhviehstah commented Jan 21, 2021

layz89 commented Jan 21, 2021

AlexG-78 commented Jan 21, 2021

AnnabellaRenee87 commented Jan 21, 2021

tcitworld commented Jan 22, 2021

LecrisUT commented Jan 22, 2021

tcitworld commented Jan 22, 2021

LecrisUT commented Jan 25, 2021

bmunro-peralex commented Feb 3, 2021

fuomag9 commented Oct 20, 2022 • edited

wiesty commented Oct 20, 2022 • edited

muhviehstah commented Oct 20, 2022 • edited

MarslMarcello commented Oct 20, 2022

zenhighzer commented Oct 21, 2022

xenophil90 commented Oct 22, 2022 • edited

codewithelvin commented Oct 24, 2022

MitchT1966 commented Oct 25, 2022

Technical information

Results

Raw output

wiesty commented Oct 28, 2022 • edited

successfully updated to 25.0.1 RC1 and it fixed all errors.

MitchT1966 commented Oct 28, 2022

muhviehstah commented Oct 29, 2022

fuomag9 commented Oct 20, 2022 •

edited

wiesty commented Oct 20, 2022 •

edited

muhviehstah commented Oct 20, 2022 •

edited

xenophil90 commented Oct 22, 2022 •

edited

wiesty commented Oct 28, 2022 •

edited