Guild icon
S3Drive
Community / support / Encrypted file sharing / CORS setup required
Avatar
Is the E2E Enciphering in the settings only for Rclone stored products and not files in any object storage service? There is the principle of encryption is what I download the corresponding to the local is still do not need to enter any decryption password can be opened to use, I am very confused!
Avatar
E2E encryption is supported for both S3 and Rclone endpoints. For S3 endpoint as on your attached screenshot E2E encryption is enabled correctly and will apply for any NEW files that are uploaded, existing files will remain unencrypted until you reupload them. For Rclone endpoints E2E needs to be enabled via crypt, please refer to: https://docs.s3drive.app/setup/providers/#other-protocolsproviders
Personal storage compatible with S3, WebDav and 70+ other Rclone back-ends
Avatar
Avatar
Tom
E2E encryption is supported for both S3 and Rclone endpoints. For S3 endpoint as on your attached screenshot E2E encryption is enabled correctly and will apply for any NEW files that are uploaded, existing files will remain unencrypted until you reupload them. For Rclone endpoints E2E needs to be enabled via crypt, please refer to: https://docs.s3drive.app/setup/providers/#other-protocolsproviders
U mean before uploading the files have been encrypted all the time by local E2E encryption ? But when I try to download my files I don't see any prompt about The step that requires the input of a key to decrypt.I don't need to do any decryption either before downloading or when it's ready to open locally, which is strange. Does this encryption really work on my file data? I don't understand how that works. Please explain!
Avatar
You don't see prompt when downloading, because it's decrypted automatically by the app, your E2E encryption password is stored inside. If you disable E2E you will then no longer be able to download encrypted files until you turn it on again.
5:58 PM
Describe please your workflow. What you do and what you expect. I am sure lots of context is lost here in the translation.
Avatar
Look at this:I download my files bys shared links and get this filename so how to decrypt it.
Avatar
... so you've encrypted files in S3Drive and expect to be openable by a different app?
6:00 PM
S3Drive uses Rclone crypt, so you can use anything that's compatible with that.
Avatar
I mean what should I do on files downloaded by shared links
Avatar
If you need to share encrypted files externally use Share function within S3Drive. It does support encryption.
Avatar
how about decryption ? other encryption methods algorithm
Avatar
it doesn't work for me Look at this below
6:08 PM
Avatar
Download saves file locally.
6:09 PM
Share link create a link to be shared with someone else.
Avatar
muw8 can't be opened ,download by shared link
6:09 PM
original file is.mp4
Avatar
Can you upload screenshot step by step what you do?
6:11 PM
This is my procedure. Is this file encrypted? Need how to decrypt!
Avatar
Right, you need to disable the "Presigned URL" option.
6:12 PM
6s of the video
6:12 PM
6:13 PM
Avatar
another mistake
6:13 PM
6:13 PM
something went wrong
Avatar
Right, can you send me this link please?
6:14 PM
this one
Avatar
Right, so the issue is that CORS settings are not set up for your Huawei Cloud bucket.
6:16 PM
Bear with me few minutes please.
Avatar
what should I do I don't know the rules of grammar
Avatar
Please got to Settings and find an option: "Set up CORS", click on it.
Avatar
I set up at s3drive App now I made it success
Avatar
This shall set up your bucket for Web.
Avatar
Ok I will
Avatar
Basically if you can login to your Huawei S3 bucket through Web: https://web.s3drive.app/ then this would be a confirmation that your CORS settings are set up correctly.
Easy-to-use client that converts any S3 server into your personal encrypted file storage. Rclone compatible, mount as drive, WebDav server, file versioning.
Avatar
I found it easily
Avatar
If you know how to set it up yourself, then go ahead. Otherwise please use Settings in the S3Drive.
6:21 PM
We use these settings, if you want to set it up yourself: <CORSConfiguration xmlns="http://s3.amazonaws.com/doc/2006-03-01/"> <CORSRule> <ID>S3Drive</ID> <AllowedOrigin>https://web.s3drive.app</AllowedOrigin> <AllowedMethod>GET</AllowedMethod> <AllowedMethod>HEAD</AllowedMethod> <AllowedMethod>POST</AllowedMethod> <AllowedMethod>PUT</AllowedMethod> <AllowedMethod>DELETE</AllowedMethod> <MaxAgeSeconds>3600</MaxAgeSeconds> <ExposeHeader>etag</ExposeHeader> <ExposeHeader>x-amz-meta-x-amz-key</ExposeHeader> <ExposeHeader>x-amz-meta-x-amz-iv</ExposeHeader> <ExposeHeader>x-amz-meta-x-amz-cek-alg</ExposeHeader> <ExposeHeader>x-amz-meta-x-amz-wrap-alg</ExposeHeader> <ExposeHeader>x-amz-meta-x-amz-key-v2</ExposeHeader> <ExposeHeader>x-amz-meta-x-amz-tag-len</ExposeHeader> <ExposeHeader>x-amz-meta-x-amz-unencrypted-content-length</ExposeHeader> <ExposeHeader>x-amz-version-id</ExposeHeader> <ExposeHeader>x-amz-meta-key</ExposeHeader> <ExposeHeader>x-amz-meta-iv</ExposeHeader> <ExposeHeader>x-amz-meta-chunk</ExposeHeader> <ExposeHeader>x-amz-meta-cek-alg</ExposeHeader> <ExposeHeader>x-amz-meta-s3drive</ExposeHeader> <ExposeHeader>x-amz-meta-mtime</ExposeHeader> <AllowedHeader>*</AllowedHeader> </CORSRule> </CORSConfiguration>
Avatar
Great work. I'll Learn it from it
6:29 PM
when hard deleting files...
Avatar
Hmm, perhaps Huawei Cloud doesn't support versioning? Do you have versioning enabled disabled in the settings? (edited)
Avatar
yes enabled
Avatar
Sorry, I meant disabled.
Avatar
OK I will try
Avatar
Hard delete tries to delete versions, but Huawei doesn't seem to support versions just yet.
6:36 PM
disabled still failed
Avatar
I need to check that, but... actually it maybe mistake on our side. If versioning is disabled, then in fact normal delete is hard delete, because no version existed, so if you delete the files, it's gone.
6:37 PM
We should disable hard delete button if versioning is disabled.
Avatar
Avatar
Tom
I need to check that, but... actually it maybe mistake on our side. If versioning is disabled, then in fact normal delete is hard delete, because no version existed, so if you delete the files, it's gone.
All disabled it works
6:38 PM
It's great that you helped me solve another big problem.
👍 2
Tom changed the channel name: Encrypted file sharing / CORS setup required 3/14/2024 10:45 AM
Exported 56 message(s)
Timezone: UTC+0