RocketChat / RocketChat/Rocket.Chat

[6.10.2] - E2EE encryption disabled but mobile app is asking for E2EE password.

Open
#33,052 3 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

planned
Dominant language
TypeScript
Stars
46.1k
Forks
13.9k
Avg merge
3d 3h
Merged PRs (30d)
130

Description

Description:

The ReactNative app is asking for E2EE password since the update to RocketChat 6.10.2.
E2EE is deactivated on server side and browser is showing the chats without E2EE password request.
This is not shown on all channels. But I have a private, a public and direct message (between three persons) which I receive the request on the app.

Opened a ticket for the app as well: https://github.com/RocketChat/Rocket.Chat.ReactNative/issues/5822
@diegolmello asked me to open it to the server as well.

Effected rooms:

  • direct chat started with RocketChat version 3.13.3
  • direct chat started with RockatChat version 3.2
  • channel start around RockatChat version 3.3 or 3.4
  • private room started with RocketChat 6.2.2

I guess something wrong happened during setup of the rooms in older versions.
Happy to share further information.

Steps to reproduce:

Open effected chat in the app

Expected behavior:

Open chat without asking for E2EE password

Actual behavior:

App is showing the request to enter E2EE password

Server Setup Information:
  • Version of Rocket.Chat Server: 6.10.2
  • License Type: Community
  • Number of Users: 51
  • Operating System: Rocky Linux 8
  • Deployment Method: tar
  • Number of Running Instances: 1
  • DB Replicaset Oplog: yes
  • NodeJS Version: v14.21.3
  • MongoDB Version: 5.0.28 / wiredTiger (oplog Enabled)
Client Setup Information

Rocket.Chat App Version: 4.50.1.63100
Device Name: Pixel 7 Pro
OS Version: Android 14

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Begin by reproducing the password prompt in the affected private, public, and direct rooms using Rocket.Chat Server 6.10.2 and the React Native app 4.50.1. Compare the app behavior with the browser, then review the related ReactNative issue #5822 and server-side E2EE handling; done means affected chats open without an E2EE password when encryption is disabled.

Written by the indexing model from the issue text.

Assessment

Tech stack
react-native, typescript
Domain
mobile-dev, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.