block upload of new end-to-end encrypted files with invalid certificate

Signed-off-by: Matthieu Gallien <[email protected]>
nextcloud · Dec 7, 2023 · 5bb903d · 5bb903d
1 parent 4022478
commit 5bb903d
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/src/libsync/discovery.cpp b/src/libsync/discovery.cpp
@@ -1017,6 +1017,12 @@ void ProcessDirectoryJob::processFileAnalyzeLocalInfo(
             item->_status = SyncFileItem::Status::NormalError;
         }
 
+        if (item->_direction == SyncFileItem::Up && item->isEncrypted() && (item->_instruction == CSYNC_INSTRUCTION_NEW || item->_instruction == CSYNC_INSTRUCTION_SYNC)) {
+            item->_instruction = CSYNC_INSTRUCTION_ERROR;
+            item->_errorString = tr("Cannot upload new encrypted file because the selected certificate is not valid.");
+            item->_status = SyncFileItem::Status::NormalError;
+        }
+
         auto recurseQueryLocal = _queryLocal == ParentNotChanged ? ParentNotChanged : localEntry.isDirectory || item->_instruction == CSYNC_INSTRUCTION_RENAME ? NormalQuery : ParentDontExist;
         processFileFinalize(item, path, recurse, recurseQueryLocal, recurseQueryServer);
     };