[x] Uploaded files via client are stored encrypted. (Inspect with xxd)
[x] Uploaded files via desktop are stored encrypted.
[x] Files saved via TextEditor or Colabora are stored encrypted.
[x] Files on external SFTP, WND storage are stored encrypted.
[x] Test_Plan_Files_external_CLI.md:Change Mount option for an SFTP mount
[x] option disable encryption is there.
[x] disable, and check it with list command.
[x] disable, and inspect files with xxd.
[ ] files added to the storge + occ file:scan are not encrypted.
[x] move file from main storage to unencrypted external storage. The file gets decrypted on disk.
[x] move file from unencrypted external storage to main storage. The file gets encrypted on disk.
[x] move file one encrypted external storage to another encrypted external storage. The file gets encrypted on disk.
[x] Receiving fedrated share folder from an unencrypted server.
[x] Test_Plan_External.md:The admin adds an external site with different type of encryption from the external site settings page
[x] The external site icon must be visible in the apps menu
[x] Test_Plan_External.md:The admin adds an external site with different type of encryption and clicks the icon on the apps menu
[x] The external site page should not be visible in the webUI
[x] Files added locally to the received folder are not encrypted.
[x] Files added locally can be read by the remote server.
[x] Sending fedrated share folder to an unencrypted server.
[x] Files added locally to the folder are encrypted.
[x] Files can be cleanly read by feaderated servers.
[x] Test_Plan_Federated_Sharing.md:share a file (server A), in (server B) using different oC versions both servers with encryption
[x] shared file can be seen from server B
[x] Test_Plan_Federated_Sharing.md:share a file with link (server A), add link to your owncloud (server B) using different O.C versions both servers with encryption
[x] shared file can be seen from server B
[x] Public link to folder with file drop
[x] files dropped into the folder are encrypted.
[x] Public link to folder with file drop in unencrypted SFTP drive
[x] files dropped into the folder are not encrypted.
[x] Test_Plan_Files_Transfer_Ownership.md:files:transfer-ownership with encryption enabled
[x] Test_Plan_Files_Transfer_Ownership.md:Transfer from user1 to user2, both users are in group "group1". Non-decrypted encrypted files
[x] The files/folders are transferred to user2 and they do not appear for user1 any longer
[x] Confirm user2 can read.
[x] update migration from previous core release
[x] Test_Plan_Updater.md:* Create a file, encrypt the server and create another file after the encryption.
[x] latest app on previous core can encrypt files, unencrypted files remain unencrypted.
[x] update to latest oc10 succeeds. unencrypted files remain unencrypted.
[x] decrypt works, encrypt of new files works.
[x] update migration from previous app release to current release
[x] previous app release on current core can encrypt files
jnweiger
commented
2 years ago
Encryption Test Plan
TODO: qualify test items from https://github.com/owncloud/enterprise/issues/4933#issuecomment-1005287788 to become regression test items here.
Setup
Setup details (click to view)
* Cloned from 135.181.147.142 (Erwin's HSM setup) * `env OC10_DNSNAME=oc1070-enc-hsm-DATE ./make_oc10_apps.sh encryption hsmdaemon-0.0.8.zip` * `env OC10_DNSNAME=oc1070-enc150-hsm-DATE ./make_oc10_apps.sh encryption=1.5.0 hsmdaemon-0.0.8.zip`Testing functionality
The toplevel checkmark indictes the test was performed. The indented checkmarks indicate the results were as expected.
[x] move file one encrypted external storage to another encrypted external storage. The file gets encrypted on disk.
[x] files dropped into the folder are not encrypted.
[x] Confirm user2 can read.
[x] decrypt works, encrypt of new files works.
journalctl -a | grep hsmdaemon"Requested","url":"/decrypt/...",Decrypting,Decrypt,module":"/usr/.../libsofthsm2.so,"slotID":757826573,"found object","id":"\u0013\ufffd?...,Decryptedxxd /var/www/owncloud/data/admin/files/Photos/Portugal.jpg | lessocc encryption:decrypt-allworks[ ] encrypted and unencrypted external storages work.