search

Upload / Up1

Client-side encrypted image host web server
MIT License
813 stars 97 forks source link

upload/paste from one system, retrieve from other: 404 ? #67

Open juju4 opened 7 years ago

juju4 commented 7 years ago

Hello,

I'm playing with up1 and set up my test environment following ansible role https://github.com/juju4/ansible-up1

uploading/pasting and checking on system works fine but when trying links on a different system, I got a 404 error. Also tried with share.riseup.net with the same result https://10.x.y.z/168efb80-bdbf-4e35-9863-c0c6dbfa40dc https://share.riseup.net/3be6687e-cc6d-433b-8db7-5e1e0089fedb

Using /#_pVqhGoJVFz0ewPiFpNL8A returns "file not found or corrupt"

Two things

Thanks

andre-d commented 7 years ago

Uploaded files are cached in ram, it is failing to actually download the file and appears to work the first time because of this.

On Mar 5, 2017 10:36 AM, "Julien" notifications@github.com wrote:

Hello,

I'm playing with up1 and set up my test environment following ansible role https://github.com/juju4/ansible-up1

uploading/pasting and checking on system works fine but when trying links on a different system, I got a 404 error. Also tried with share.riseup.net with the same result https://10.x.y.z/168efb80-bdbf-4e35-9863-c0c6dbfa40dc https://share.riseup.net/3be6687e-cc6d-433b-8db7-5e1e0089fedb

Using /#_pVqhGoJVFz0ewPiFpNL8A returns "file not found or corrupt"

Two things

  • where is the client key // how exchanged?
  • any browser extension that could mess up? (classical privacy conscious ones) Didn't see anomaly in web console.

Thanks

— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub https://github.com/Upload/Up1/issues/67, or mute the thread https://github.com/notifications/unsubscribe-auth/AArlslch28Uq-JfpGJrj7Yj3nzxHOb0Vks5ritaMgaJpZM4MTcnZ .

andre-d commented 7 years ago

Oh I see, files are accessed using #key not /key like you are doing there. If you are getting "file not found or corrupt" with # take a look at the console then and verify that the request to access the encrypted file is working.

On Mar 5, 2017 11:59 AM, "Andre D" andre@andred.ca wrote:

Uploaded files are cached in ram, it is failing to actually download the file and appears to work the first time because of this.

On Mar 5, 2017 10:36 AM, "Julien" notifications@github.com wrote:

Hello,

I'm playing with up1 and set up my test environment following ansible role https://github.com/juju4/ansible-up1

uploading/pasting and checking on system works fine but when trying links on a different system, I got a 404 error. Also tried with share.riseup.net with the same result https://10.x.y.z/168efb80-bdbf-4e35-9863-c0c6dbfa40dc https://share.riseup.net/3be6687e-cc6d-433b-8db7-5e1e0089fedb

Using /#_pVqhGoJVFz0ewPiFpNL8A returns "file not found or corrupt"

Two things

  • where is the client key // how exchanged?
  • any browser extension that could mess up? (classical privacy conscious ones) Didn't see anomaly in web console.

Thanks

— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub https://github.com/Upload/Up1/issues/67, or mute the thread https://github.com/notifications/unsubscribe-auth/AArlslch28Uq-JfpGJrj7Yj3nzxHOb0Vks5ritaMgaJpZM4MTcnZ .

andre-d commented 7 years ago

All key data exists in the # (uri fragment) and none is ever sent or exchanged with the server. The fragment is not sent to the server under http.

On Mar 5, 2017 12:03 PM, "Andre D" andre@andred.ca wrote:

Oh I see, files are accessed using #key not /key like you are doing there. If you are getting "file not found or corrupt" with # take a look at the console then and verify that the request to access the encrypted file is working.

On Mar 5, 2017 11:59 AM, "Andre D" andre@andred.ca wrote:

Uploaded files are cached in ram, it is failing to actually download the file and appears to work the first time because of this.

On Mar 5, 2017 10:36 AM, "Julien" notifications@github.com wrote:

Hello,

I'm playing with up1 and set up my test environment following ansible role https://github.com/juju4/ansible-up1

uploading/pasting and checking on system works fine but when trying links on a different system, I got a 404 error. Also tried with share.riseup.net with the same result https://10.x.y.z/168efb80-bdbf-4e35-9863-c0c6dbfa40dc https://share.riseup.net/3be6687e-cc6d-433b-8db7-5e1e0089fedb

Using /#_pVqhGoJVFz0ewPiFpNL8A returns "file not found or corrupt"

Two things

  • where is the client key // how exchanged?
  • any browser extension that could mess up? (classical privacy conscious ones) Didn't see anomaly in web console.

Thanks

— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub https://github.com/Upload/Up1/issues/67, or mute the thread https://github.com/notifications/unsubscribe-auth/AArlslch28Uq-JfpGJrj7Yj3nzxHOb0Vks5ritaMgaJpZM4MTcnZ .

juju4 commented 7 years ago

Thanks for the quick feedback

Ok. Clearer on key location.

Now, why can't download... https://10.x.y.z/#E75HLjZyZlIshMuVQQaMTQ is the right link to exchange so in webserver log, got

"GET /i/AL5DbFh88BBiZTHgXsAp-g HTTP/1.1" 404

# file /var/www-up1/src/i/*
/var/www-up1/src/i/tmp-28419LTxS89nRLUqu.tmp: data
/var/www-up1/src/i/tmp-28419TRKiv6ixSlo6.tmp: data
/var/www-up1/src/i/tmp-28419d9ZMPhuX60Sd.tmp: data
/var/www-up1/src/i/tmp-28419dbAm1XebTaoZ.tmp: data
/var/www-up1/src/i/tmp-28419gt3Obenq9I8Z.tmp: data
/var/www-up1/src/i/tmp-28419nLCNwlZjGNrZ.tmp: data

browser console doesn't highlight issue. Navigated to KEY download.js:74 GET ... 404 (Not found) updown.js:17