Error: openssl_encrypt()
Nobody has claimed this yet.
- Dominant language
- PHP
- Stars
- 272
- Forks
- 37
- PR merge metrics
- No merged PRs in 30d
Description
Hi there,
while encrypting the Backup I get a lot of these messages in the log (like every 10s):
[PHP] Fehler: Error: openssl_encrypt(): IV passed is only 12 bytes long, cipher expects an IV of precisely 16 bytes, padding with \0 at /var/www/nextcloud/apps/backup/lib/Service/EncryptService.php#210
It seems like the Backup still works, I was just wondering what this is about and also found this https://help.nextcloud.com/t/php-openssl-issue-with-backup-kicking-off/138618 but it seems like there aren't any news.
I'm using Nextcloud with Nextcloudpi on a Raspberry Pi 4 (so aes-256-cbc encryption is utilized), Nextcloud 24.0.5 and Backup 1.1.3.
Is this something that can be fixed or should I just ignore it?
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start in apps/backup/lib/Service/EncryptService.php around line 210 and inspect how the IV is passed to openssl_encrypt() for AES-256-CBC. Reproduce the backup on the reported Nextcloud and Backup versions, then verify whether the warning can be eliminated without breaking encryption or restore behavior.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- php
- Domain
- security
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100