Skip to content

The signature check done during decryption is bypassed#105

Closed
sharidas wants to merge 1 commit into
masterfrom
bypass-signature-check
Closed

The signature check done during decryption is bypassed#105
sharidas wants to merge 1 commit into
masterfrom
bypass-signature-check

Conversation

@sharidas

@sharidas sharidas commented Mar 7, 2019

Copy link
Copy Markdown
Contributor

The signature check done during decryption is
bypassed. This would help to not block files
transferred from one user to another.

Signed-off-by: Sujith H sharidasan@owncloud.com

The signature check done during decryption is
bypassed. This would help to not block files
transferred from one user to another.

Signed-off-by: Sujith H <sharidasan@owncloud.com>
@sharidas

sharidas commented Mar 7, 2019

Copy link
Copy Markdown
Contributor Author

Requires PR - owncloud/core#34710

@PVince81 PVince81 left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

as discussed, this is a bit too convoluted and there are concerns:

  • this would always bypass signature check even outside of transfer ownership
  • gather file list in an array has a risk of memory overflow with lots of files

Let's try with a simpler solution instead in a separate PR: throw the exception out and let the transfer command log the file name. Then have a flag to disable signature check for the transfer command to retry with it disabled after a failure. Then reenable after each file.

@sharidas

sharidas commented Apr 4, 2019

Copy link
Copy Markdown
Contributor Author

Closing this PR on behalf of #115

@sharidas sharidas closed this Apr 4, 2019
@sharidas sharidas deleted the bypass-signature-check branch April 4, 2019 05:59
@patrickjahns patrickjahns removed this from the development milestone Aug 13, 2019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants