File Manager - BorneoXploit

Editing: code_signing.html

<!DOCTYPE html>
<html class="writer-html5" lang="en" data-content_root="../">
<head>
 <meta charset="utf-8" />
 <meta name="readthedocs-addons-api-version" content="1"><meta name="viewport" content="width=device-width, initial-scale=1" />

<a href="../contents.html">
 
 <img src="../_static/logo-white.png" class="logo" alt="Logo"/>
 </a>
 <div class="switch-menus">
 <div class="version-switch"></div>
 <div class="language-switch"></div>
 </div>
<div role="search">
 <form id="rtd-search-form" class="wy-form" action="../search.html" method="get">
 <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" />
 <input type="hidden" name="check_keywords" value="yes" />
 <input type="hidden" name="area" value="default" />
 </form>
</div>
 </div><div class="wy-menu wy-menu-vertical" data-spy="affix" role="navigation" aria-label="Navigation menu">
 Getting Started
<ul>
<li class="toctree-l1"><a class="reference internal" href="../index.html">Introduction</a></li>
<li class="toctree-l1"><a class="reference internal" href="../release_schedule.html">Maintenance and release schedule</a></li>
<li class="toctree-l1"><a class="reference internal" href="../gdpr/index.html">GDPR-compliance</a></li>
<li class="toctree-l1"><a class="reference internal" href="../declarations/index.html">Declarations</a></li>
</ul>
Release notes
<ul>
<li class="toctree-l1"><a class="reference internal" href="../release_notes/index.html">Critical changes</a></li>
</ul>
Installation
<ul>
<li class="toctree-l1"><a class="reference internal" href="../installation/index.html">Installation and server configuration</a></li>
<li class="toctree-l1"><a class="reference internal" href="../configuration_database/index.html">Database configuration</a></li>
</ul>
Configuration
<ul>
<li class="toctree-l1"><a class="reference internal" href="../configuration_server/index.html">Nextcloud configuration</a></li>
<li class="toctree-l1"><a class="reference internal" href="../occ_command.html">Using the occ command</a></li>
<li class="toctree-l1"><a class="reference internal" href="../reference/index.html">Reference management</a></li>
<li class="toctree-l1"><a class="reference internal" href="../webhook_listeners/index.html">Webhook Listeners</a></li>
<li class="toctree-l1"><a class="reference internal" href="../windmill_workflows/index.html">Windmill Workflows</a></li>
</ul>
Files
<ul>
<li class="toctree-l1"><a class="reference internal" href="../configuration_files/index.html">File sharing and management</a></li>
<li class="toctree-l1"><a class="reference internal" href="../file_workflows/index.html">Flow</a></li>
<li class="toctree-l1"><a class="reference internal" href="../configuration_mimetypes/index.html">Mimetypes management</a></li>
</ul>
Apps
<ul>
<li class="toctree-l1"><a class="reference internal" href="../apps_management.html">Apps management</a></li>
<li class="toctree-l1"><a class="reference internal" href="../exapps_management/index.html">ExApps management</a></li>
<li class="toctree-l1"><a class="reference internal" href="../ai/index.html">Artificial Intelligence</a></li>
</ul>
Users
<ul>
<li class="toctree-l1"><a class="reference internal" href="../configuration_user/index.html">User management</a></li>
<li class="toctree-l1"><a class="reference internal" href="../desktop/index.html">Desktop Clients</a></li>
</ul>
Groupware
<ul>
<li class="toctree-l1"><a class="reference internal" href="../groupware/index.html">Groupware</a></li>
</ul>
Office
<ul>
<li class="toctree-l1"><a class="reference internal" href="../office/index.html">Office</a></li>
</ul>
Maintenance
<ul class="current">
<li class="toctree-l1"><a class="reference internal" href="../configuration_monitoring/index.html">Monitoring</a></li>
<li class="toctree-l1"><a class="reference internal" href="../maintenance/index.html">Maintenance</a></li>
<li class="toctree-l1 current"><a class="reference internal" href="index.html">Issues and troubleshooting</a><ul class="current">
<li class="toctree-l2"><a class="reference internal" href="general_troubleshooting.html">General troubleshooting</a></li>
<li class="toctree-l2"><a class="reference internal" href="applying_patch.html">Patching Nextcloud</a></li>
<li class="toctree-l2 current"><a class="current reference internal" href="#">Code signing</a><ul>
<li class="toctree-l3"><a class="reference internal" href="#faq">FAQ</a><ul>
<li class="toctree-l4"><a class="reference internal" href="#why-did-nextcloud-add-code-signing">Why did Nextcloud add code signing?</a></li>
<li class="toctree-l4"><a class="reference internal" href="#do-we-lock-down-nextcloud">Do we lock down Nextcloud?</a></li>
<li class="toctree-l4"><a class="reference internal" href="#not-open-source-anymore">Not open source anymore?</a></li>
<li class="toctree-l4"><a class="reference internal" href="#is-code-signing-mandatory-for-apps">Is code signing mandatory for apps?</a></li>
</ul>
</li>
<li class="toctree-l3"><a class="reference internal" href="#fixing-invalid-code-integrity-messages">Fixing invalid code integrity messages</a></li>
<li class="toctree-l3"><a class="reference internal" href="#rescans">Rescans</a></li>
<li class="toctree-l3"><a class="reference internal" href="#errors">Errors</a></li>
</ul>
</li>
</ul>
</li>
</ul>
Links
<ul>
<li class="toctree-l1"><a class="reference external" href="https://help.nextcloud.com/">Community Help Forum</a></li>
<li class="toctree-l1"><a class="reference external" href="https://docs.nextcloud.com/">User Manuals</a></li>
<li class="toctree-l1"><a class="reference external" href="https://docs.nextcloud.com/">Developer Manuals</a></li>
<li class="toctree-l1"><a class="reference external" href="https://nextcloud.com/install/">Download</a></li>
<li class="toctree-l1"><a class="reference external" href="https://apps.nextcloud.com">App Store</a></li>
<li class="toctree-l1"><a class="reference external" href="https://help.nextcloud.com/t/translation-knowledge-valid-for-the-entire-nextcloud-project-wiki/51550">Translations</a></li>
<li class="toctree-l1"><a class="reference external" href="https://github.com/nextcloud/">GitHub</a></li>
<li class="toctree-l1"><a class="reference external" href="https://github.com/nextcloud/server/wiki/Maintenance-and-Release-Schedule">Supported versions</a></li>
<li class="toctree-l1"><a class="reference external" href="https://nextcloud.com/enterprise/">Nextcloud Enterprise</a></li>
<li class="toctree-l1"><a class="reference external" href="https://github.com/nextcloud/server/blob/master/COPYING-README">License</a></li>
<li class="toctree-l1"><a class="reference external" href="https://nextcloud.com/">Nextcloud GmbH</a></li>
</ul>

</div>
 </div>
 </nav>

<section data-toggle="wy-nav-shift" class="wy-nav-content-wrap"><nav class="wy-nav-top" aria-label="Mobile navigation menu" >
 
 <a href="../contents.html">Nextcloud latest Administration Manual</a>
 </nav>

<div class="wy-nav-content">
 <div class="rst-content style-external-links">
 <div role="navigation" aria-label="Page navigation">
 <ul class="wy-breadcrumbs">
 <li><a href="../contents.html" class="icon icon-home" aria-label="Home"></a></li>
 <li class="breadcrumb-item"><a href="index.html">Issues and troubleshooting</a></li>
 <li class="breadcrumb-item active">Code signing</li>
 <li class="wy-breadcrumbs-aside">
 <a href="https://github.com/nextcloud/documentation/edit/master/admin_manual/issues/code_signing.rst" class="fa fa-github"> Edit on GitHub</a>
 </li>
 </ul>
 <hr/>
</div>
 <div role="main" class="document" itemscope="itemscope" itemtype="http://schema.org/Article">
 <div itemprop="articleBody">
 
 <section id="code-signing">
<h1>Code signing<a class="headerlink" href="#code-signing" title="Link to this heading"></a></h1>
Nextcloud supports code signing for the core releases, and for Nextcloud
applications. Code signing gives our users an additional layer of security by
ensuring that nobody other than authorized persons can push updates.
It also ensures that all upgrades have been executed properly, so that no files
are left behind, and all old files are properly replaced. In the past, invalid
updates were a significant source of errors when updating Nextcloud.
<section id="faq">
<h2>FAQ<a class="headerlink" href="#faq" title="Link to this heading"></a></h2>
<section id="why-did-nextcloud-add-code-signing">
<h3>Why did Nextcloud add code signing?<a class="headerlink" href="#why-did-nextcloud-add-code-signing" title="Link to this heading"></a></h3>
By supporting Code Signing we add another layer of security by ensuring that
nobody other than authorized persons can push updates for applications, and
ensuring proper upgrades.
</section>
<section id="do-we-lock-down-nextcloud">
<h3>Do we lock down Nextcloud?<a class="headerlink" href="#do-we-lock-down-nextcloud" title="Link to this heading"></a></h3>
The Nextcloud project is open source and always will be. We do not want to
make it more difficult for our users to run Nextcloud. Any code signing errors on
upgrades will not prevent Nextcloud from running, but will display a warning on
the Admin page. For applications that are not tagged “Official” the code signing
process is optional.
</section>
<section id="not-open-source-anymore">
<h3>Not open source anymore?<a class="headerlink" href="#not-open-source-anymore" title="Link to this heading"></a></h3>
The Nextcloud project is open source and always will be. The code signing
process is optional, though highly recommended. The code check for the
core parts of Nextcloud is enabled when the Nextcloud release version branch has
been set to stable.
For custom distributions of Nextcloud it is recommended to change the release
version branch in version.php to something else than “stable”.
</section>
<section id="is-code-signing-mandatory-for-apps">
<h3>Is code signing mandatory for apps?<a class="headerlink" href="#is-code-signing-mandatory-for-apps" title="Link to this heading"></a></h3>
Code signing is required for all applications on apps.nextcloud.com.
</section>
</section>
<section id="fixing-invalid-code-integrity-messages">
<h2>Fixing invalid code integrity messages<a class="headerlink" href="#fixing-invalid-code-integrity-messages" title="Link to this heading"></a></h2>
A code integrity error message (“Some files have not passed the integrity check…”) appears on your Nextcloud admin page under “Overview”, which provides
the following options:
<ol class="arabic simple">
<li>Link to this documentation entry.</li>
<li>Show a list of invalid files.</li>
<li>Trigger a rescan.</li>
</ol>
<img alt="Links for resolving code integrity warnings." src="../_images/code-integrity-admin.png" />
To debug issues caused by the code integrity check click on “List of invalid
files…”, and you will be shown a text document listing the different issues. The
content of the file will look similar to the following example:
<div class="highlight-default notranslate"><div class="highlight"><pre>Technical information
=====================
The following list covers which files have failed the integrity check. Please read
the previous linked documentation to learn more about the errors and how to fix
them.

Results
=======
- core
 - INVALID_HASH
 - /index.php
 - /version.php
 - EXTRA_FILE
 - /test.php
- calendar
 - EXCEPTION
 - OC\IntegrityCheck\Exceptions\InvalidSignatureException
 - Signature data not found.

Raw output
==========
Array
(
 [core] =&gt; Array
 (
 [INVALID_HASH] =&gt; Array
 (
 [/index.php] =&gt; Array
 (
 [expected] =&gt;
 f1c5e2630d784bc9cb02d5a28f55d6f24d06dae2a0fee685f3
 c2521b050955d9d452769f61454c9ddfa9c308146ade10546c
 fa829794448eaffbc9a04a29d216
 [current] =&gt;
 ce08bf30bcbb879a18b49239a9bec6b8702f52452f88a9d321
 42cad8d2494d5735e6bfa0d8642b2762c62ca5be49f9bf4ec2
 31d4a230559d4f3e2c471d3ea094
 )

[/version.php] =&gt; Array
 (
 [expected] =&gt;
 c5a03bacae8dedf8b239997901ba1fffd2fe51271d13a00cc4
 b34b09cca5176397a89fc27381cbb1f72855fa18b69b6f87d7
 d5685c3b45aee373b09be54742ea
 [current] =&gt;
 88a3a92c11db91dec1ac3be0e1c87f862c95ba6ffaaaa3f2c3
 b8f682187c66f07af3a3b557a868342ef4a271218fe1c1e300
 c478e6c156c5955ed53c40d06585
 )

)

[EXTRA_FILE] =&gt; Array
 (
 [/test.php] =&gt; Array
 (
 [expected] =&gt;
 [current] =&gt;
 09563164f9904a837f9ca0b5f626db56c838e5098e0ccc1d8b
 935f68fa03a25c5ec6f6b2d9e44a868e8b85764dafd1605522
 b4af8db0ae269d73432e9a01e63a
 )

)

[calendar] =&gt; Array
 (
 [EXCEPTION] =&gt; Array
 (
 [class] =&gt; OC\IntegrityCheck\Exceptions\InvalidSignature
 Exception
 [message] =&gt; Signature data not found.
 )

)

)
</pre></div>
</div>
In above error output it can be seen that:
<ol class="arabic simple">
<li>In the Nextcloud core (that is, the Nextcloud server itself) the files
“index.php” and “version.php” do have the wrong version.</li>
<li>In the Nextcloud core the unrequired extra file “/test.php” has been found.</li>
<li>It was not possible to verify the signature of the calendar application.</li>
</ol>
The solution is to upload the correct “index.php” and “version.php” files, and
delete the “test.php” file. For the calendar exception contact the developer of
the application. For other means on how to receive support please take a look at
<a class="reference external" href="https://nextcloud.com/support/">https://nextcloud.com/support/</a>. After fixing these problems verify by clicking
“Rescan…”.
<div class="admonition note">
Note
When using a FTP client to upload those files make sure it is using the
<code class="docutils literal notranslate">Binary</code> transfer mode instead of the <code class="docutils literal notranslate">ASCII</code> transfer mode.
</div>
</section>
<section id="rescans">
<h2>Rescans<a class="headerlink" href="#rescans" title="Link to this heading"></a></h2>
Rescans are triggered at installation, and by updates. You may run scans manually with the <code class="docutils literal notranslate">occ</code> command. The first command scans the Nextcloud server files, and the second command scans the named app. There is not yet a command to manually scan all apps:
<div class="highlight-default notranslate"><div class="highlight"><pre>occ integrity:check-core
occ integrity:check-app $appid
</pre></div>
</div>
See <a class="reference internal" href="../occ_command.html">Using the occ command</a> to learn more about using <code class="docutils literal notranslate">occ</code>.
</section>
<section id="errors">
<h2>Errors<a class="headerlink" href="#errors" title="Link to this heading"></a></h2>
<div class="admonition warning">
Warning
Please don’t modify the mentioned <code class="docutils literal notranslate">signature.json</code> itself.
</div>
The following errors can be encountered when trying to verify a code signature.
<ul class="simple">
<li><code class="docutils literal notranslate">INVALID_HASH</code>
<ul>
<li>The file has a different hash than specified within <code class="docutils literal notranslate">signature.json</code>. This
usually happens when the file has been modified after writing the signature
data.</li>
</ul>
</li>
<li><code class="docutils literal notranslate">MISSING_FILE</code>
<ul>
<li>The file cannot be found but has been specified within <code class="docutils literal notranslate">signature.json</code>.
Either a required file has been left out, or <code class="docutils literal notranslate">signature.json</code> needs to be
edited.</li>
</ul>
</li>
<li><code class="docutils literal notranslate">EXTRA_FILE</code>
<ul>
<li>The file does not exist in <code class="docutils literal notranslate">signature.json</code>. This usually happens when a
file has been removed and <code class="docutils literal notranslate">signature.json</code> has not been updated. It also
happens if you have placed additional files in your Nextcloud installation
folder.</li>
</ul>
</li>
<li><code class="docutils literal notranslate">EXCEPTION</code>
<ul>
<li>Another exception has prevented the code verification. There are currently
these following exceptions:
<ul>
<li><code class="docutils literal notranslate">Signature data not found.</code>
<ul>
<li>The app has mandatory code signing enforced but no <code class="docutils literal notranslate">signature.json</code>
file has been found in its <code class="docutils literal notranslate">appinfo</code> folder.</li>
</ul>
</li>
<li><code class="docutils literal notranslate">Certificate is not valid.</code>
<ul>
<li>The certificate has not been issued by the official Nextcloud Code
Signing Root Authority.</li>
</ul>
</li>
<li><code class="docutils literal notranslate">Certificate is not valid for required scope. (Requested: %s, current: %s)</code>
<ul>
<li>The certificate is not valid for the defined application. Certificates
are only valid for the defined app identifier and cannot be used for
others.</li>
</ul>
</li>
<li><code class="docutils literal notranslate">Signature could not get verified.</code>
<ul>
<li>There was a problem with verifying the signature of <code class="docutils literal notranslate">signature.json</code>.</li>
</ul>
</li>
</ul>
</li>
</ul>
</li>
</ul>
</section>
</section>

</div>
 </div>
 <footer><div class="rst-footer-buttons" role="navigation" aria-label="Footer">
 <a href="applying_patch.html" class="btn btn-neutral float-left" title="Patching Nextcloud" accesskey="p" rel="prev"> Previous</a>
 </div>

<hr/>

<div role="contentinfo">
 &#169; Copyright 2016-2026 Nextcloud GmbH and Nextcloud contributors.
 </div>

</footer>
 </div>
 </div>
 </section>
 </div>

<div class="rst-versions" data-toggle="rst-versions" role="note" aria-label="versions">
 
 ☁️ latest
 
 
 <div class="rst-other-versions">
 <dl>
 <dt>☁️ Versions</dt>
 
 <dd style="width: 32%">
 <a href="https://docs.nextcloud.com/server/latest/admin_manual"
 
 style="color: var(--dark-link-color);"
 
 >
 latest
 </a>
 </dd>
 
 <dd style="width: 32%">
 <a href="https://docs.nextcloud.com/server/stable/admin_manual"
 
 >
 stable
 </a>
 </dd>
 
 <dd style="width: 32%">
 <a href="https://docs.nextcloud.com/server/32/admin_manual"
 
 >
 32
 </a>
 </dd>
 
 <dd style="width: 32%">
 <a href="https://docs.nextcloud.com/server/31/admin_manual"
 
 >
 31
 </a>
 </dd>
 
 </dl>
 </div>
 </div>
<script>
 jQuery(function () {
 SphinxRtdTheme.Navigation.enable(true);
 });
 </script>

</body>
</html>

Cancel