Bug when using certificate from external CA

Start with lib/Handler/CertificateEngine/AEngineHandler.php, especially the opensslPkcs12Read call at line 143 shown in the logs, then follow certificate loading through SignEngineHandler.php and SignFileService.php. Compare signing with an externally uploaded CA certificate against a LibreSign-created certificate; done means external certificates sign reliably and the document status and error reporting match the expected behavior.

Describe the bug

When using certificates from an external CA (uploaded by each user manually) we get different errors: 1) Invalid Password 2) Empty Error Message after trying to sign the document 3) Sporadially the document gets signed.

To reproduce

• Upload certificate from external CA to libresign user account
• Try to sign a pdf file
• We get three different behaviors:
  1. Invalid Password Error (using correct password)
  2. libresign attempts to sign the pdf file which leads to an error with an empty error message. The signed pdf file is found in the directory but libresign lists it as "Ready to sign"
  3. After some attempts (about 10 on average) the pdf is correctly singed and libresign shows a success notification.

What else we tried:

• When using a Root CA created by libresign the issue is no longer present

Expected behavior

Same beavior for external CA and libresing created Root CA.

Screenshots

Operational System

Docker (Nextcloud AIO and Nextcloud standalone tried)

Browser Type and Version

No response

Libresign Version

15.0.8 (also tested with 13.4.5 and 14.2.5)

Nextcloud Server Version

14.3.0 (AIO) and 33.0.9 (standalone) and 32.X.X (standalone)

Logs from Nextcloud Server

{"reqId":"v4aULtrOqrERm7IP9w8J","level":3,"time":"2026-10-19T14:30:04+00:00","remoteAddr":"172.19.0.17","user":"[email protected]","app":"libresign","method":"POST","url":"/ocs/v2.php/apps/libresign/api/v1/sign/uuid/00000000-0000-4000-8000-000000000000?async=true","scriptName":"/ocs/v2.php","message":"Exception thrown: OCA\Libresign\Exception\InvalidPasswordException","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:153.0) Gecko/20100101 Firefox/153.0","version":"35.0.2.2","exception":{"Exception":"OCA\Libresign\Exception\InvalidPasswordException","Message":"","Code":0,"Trace":[{"file":"/var/www/html/custom_apps/libresign/lib/Handler/CertificateEngine/AEngineHandler.php","line":143,"function":"opensslPkcs12Read","class":"OCA\Libresign\Handler\CertificateEngine\AEngineHandler","type":"->","args":[null,"REDACTED"]},{"file":"/var/www/html/custom_apps/libresign/lib/Handler/SignEngine/SignEngineHandler.php","line":69,"function":"readCertificate","class":"OCA\Libresign\Handler\CertificateEngine\AEngineHandler","type":"->","args":[null,"REDACTED"]},{"file":"/var/www/html/custom_apps/libresign/lib/Service/SignFileService.php","line":877,"function":"readCertificate","class":"OCA\Libresign\Handler\SignEngine\SignEngineHandler","type":"->","args":[]},{"file":"/var/www/html/custom_apps/libresign/lib/Service/SignFileService.php","line":667,"function":"updateSignRequest","class":"OCA\Libresign\Service\SignFileService","type":"->","args":["*** sensitive parameters replaced "]},{"file":"/var/www/html/custom_apps/libresign/lib/Service/SignFileService.php","line":457,"function":"signSequentially","class":"OCA\Libresign\Service\SignFileService","type":"->","args":[[{"file":{"class":"OCA\Libresign\Db\File","id":175},"signRequest":{"class":"OCA\Libresign\Db\SignRequest","id":173}}]]},{"file":"/var/www/html/custom_apps/libresign/lib/Service/SignFileService.php","line":450,"function":"executeSigningStrategy","class":"OCA\Libresign\Service\SignFileService","type":"->","args":[[{"file":{"class":"OCA\Libresign\Db\File","id":175},"signRequest":{"class":"OCA\Libresign\Db\SignRequest","id":173}}]]},{"file":"/var/www/html/custom_apps/libresign/lib/Controller/SignFileController.php","line":247,"function":"sign","class":"OCA\Libresign\Service\SignFileService","type":"->","args":[]},{"file":"/var/www/html/custom_apps/libresign/lib/Controller/SignFileController.php","line":188,"function":"signSync","class":"OCA\Libresign\Controller\SignFileController","type":"->","args":[{"class":"OCA\Libresign\Db\File","id":175},[],{"user-agent":"Mozilla/5.0 (X11; Linux x86_64; rv:153.0) Gecko/20100101 Firefox/153.0","remote-address":"172.19.0.17"}]},{"file":"/var/www/html/custom_apps/libresign/lib/Controller/SignFileController.php","line":127,"function":"sign","class":"OCA\Libresign\Controller\SignFileController","type":"->","args":["password",[],"","REDACTED",null,"00000000-0000-4000-8000-000000000000",true,[]]},{"file":"/var/www/html/lib/private/AppFramework/Http/Dispatcher.php","line":198,"function":"signBySignerUuid","class":"OCA\Libresign\Controller\SignFileController","type":"->","args":["00000000-0000-4000-8000-000000000000","password",[],"","REDACTED",true,[]]},{"file":"/var/www/html/lib/private/AppFramework/Http/Dispatcher.php","line":86,"function":"executeController","class":"OC\AppFramework\Http\Dispatcher","type":"->","args":[{"class":"OCA\Libresign\Controller\SignFileController"},"signBySignerUuid"]},{"file":"/var/www/html/lib/private/AppFramework/App.php","line":138,"function":"dispatch","class":"OC\AppFramework\Http\Dispatcher","type":"->","args":[{"class":"OCA\Libresign\Controller\SignFileController"},"signBySignerUuid"]},{"file":"/var/www/html/lib/private/Route/Router.php","line":324,"function":"main","class":"OC\AppFramework\App","type":"::","args":["OCA\Libresign\Controller\SignFileController","signBySignerUuid",{"class":"OC\AppFramework\DependencyInjection\DIContainer"},{"_route":"ocs.libresign.signfile.signbysigneruuid","apiVersion":"v1","uuid":"00000000-0000-4000-8000-000000000000"}]},{"file":"/var/www/html/ocs/v1.php","line":88,"function":"match","class":"OC\Route\Router","type":"->","args":["/ocsapp/apps/libresign/api/v1/sign/uuid/00000000-0000-4000-8000-000000000000"]},{"file":"/var/www/html/lib/OC.php","line":1403,"function":"{closure:/var/www/html/ocs/v1.php:35}","args":[" sensitive parameters replaced "]},{"file":"/var/www/html/ocs/v1.php","line":35,"function":"handleRequests","class":"OC","type":"::","args":[{"class":"Closure"}]},{"file":"/var/www/html/ocs/v2.php","line":10,"args":["/var/www/html/ocs/v1.php"],"function":"require_once"}],"File":"/var/www/html/custom_apps/libresign/lib/Handler/CertificateEngine/AEngineHandler.php","Line":270,"message":"","CustomMessage":"Exception thrown: OCA\Libresign\Exception\InvalidPasswordException"}}
{"reqId":"zYXO2JQkRGLjBRpwqKRK","level":3,"time":"2026-10-19T14:30:10+00:00","remoteAddr":"172.19.0.17","user":"[email protected]","app":"libresign","method":"POST","url":"/ocs/v2.php/apps/libresign/api/v1/sign/uuid/00000000-0000-4000-8000-000000000000?async=true","scriptName":"/ocs/v2.php","message":"Exception thrown: OCA\Libresign\Exception\InvalidPasswordException","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:153.0) Gecko/20100101 Firefox/153.0","version":"35.0.2.2","exception":{"Exception":"OCA\Libresign\Exception\InvalidPasswordException","Message":"","Code":0,"Trace":[{"file":"/var/www/html/custom_apps/libresign/lib/Handler/CertificateEngine/AEngineHandler.php","line":143,"function":"opensslPkcs12Read","class":"OCA\Libresign\Handler\CertificateEngine\AEngineHandler","type":"->","args":[null,"REDACTED"]},{"file":"/var/www/html/custom_apps/libresign/lib/Handler/SignEngine/SignEngineHandler.php","line":69,"function":"readCertificate","class":"OCA\Libresign\Handler\CertificateEngine\AEngineHandler","type":"->","args":[null,"REDACTED"]},{"file":"/var/www/html/custom_apps/libresign/lib/Service/SignFileService.php","line":877,"function":"readCertificate","class":"OCA\Libresign\Handler\SignEngine\SignEngineHandler","type":"->","args":[]},{"file":"/var/www/html/custom_apps/libresign/lib/Service/SignFileService.php","line":667,"function":"updateSignRequest","class":"OCA\Libresign\Service\SignFileService","type":"->","args":[" sensitive parameters replaced "]},{"file":"/var/www/html/custom_apps/libresign/lib/Service/SignFileService.php","line":457,"function":"signSequentially","class":"OCA\Libresign\Service\SignFileService","type":"->","args":[[{"file":{"class":"OCA\Libresign\Db\File","id":175},"signRequest":{"class":"OCA\Libresign\Db\SignRequest","id":173}}]]},{"file":"/var/www/html/custom_apps/libresign/lib/Service/SignFileService.php","line":450,"function":"executeSigningStrategy","class":"OCA\Libresign\Service\SignFileService","type":"->","args":[[{"file":{"class":"OCA\Libresign\Db\File","id":175},"signRequest":{"class":"OCA\Libresign\Db\SignRequest","id":173}}]]},{"file":"/var/www/html/custom_apps/libresign/lib/Controller/SignFileController.php","line":247,"function":"sign","class":"OCA\Libresign\Service\SignFileService","type":"->","args":[]},{"file":"/var/www/html/custom_apps/libresign/lib/Controller/SignFileController.php","line":188,"function":"signSync","class":"OCA\Libresign\Controller\SignFileController","type":"->","args":[{"class":"OCA\Libresign\Db\File","id":175},[],{"user-agent":"Mozilla/5.0 (X11; Linux x86_64; rv:153.0) Gecko/20100101 Firefox/153.0","remote-address":"172.19.0.17"}]},{"file":"/var/www/html/custom_apps/libresign/lib/Controller/SignFileController.php","line":127,"function":"sign","class":"OCA\Libresign\Controller\SignFileController","type":"->","args":["password",[],"","REDACTED",null,"00000000-0000-4000-8000-000000000000",true,[]]},{"file":"/var/www/html/lib/private/AppFramework/Http/Dispatcher.php","line":198,"function":"signBySignerUuid","class":"OCA\Libresign\Controller\SignFileController","type":"->","args":["00000000-0000-4000-8000-000000000000","password",[],"","REDACTED",true,[]]},{"file":"/var/www/html/lib/private/AppFramework/Http/Dispatcher.php","line":86,"function":"executeController","class":"OC\AppFramework\Http\Dispatcher","type":"->","args":[{"class":"OCA\Libresign\Controller\SignFileController"},"signBySignerUuid"]},{"file":"/var/www/html/lib/private/AppFramework/App.php","line":138,"function":"dispatch","class":"OC\AppFramework\Http\Dispatcher","type":"->","args":[{"class":"OCA\Libresign\Controller\SignFileController"},"signBySignerUuid"]},{"file":"/var/www/html/lib/private/Route/Router.php","line":324,"function":"main","class":"OC\AppFramework\App","type":"::","args":["OCA\Libresign\Controller\SignFileController","signBySignerUuid",{"class":"OC\AppFramework\DependencyInjection\DIContainer"},{"_route":"ocs.libresign.signfile.signbysigneruuid","apiVersion":"v1","uuid":"00000000-0000-4000-8000-000000000000"}]},{"file":"/var/www/html/ocs/v1.php","line":88,"function":"match","class":"OC\Route\Router","type":"->","args":["/ocsapp/apps/libresign/api/v1/sign/uuid/00000000-0000-4000-8000-000000000000"]},{"file":"/var/www/html/lib/OC.php","line":1403,"function":"{closure:/var/www/html/ocs/v1.php:35}","args":[" sensitive parameters replaced "]},{"file":"/var/www/html/ocs/v1.php","line":35,"function":"handleRequests","class":"OC","type":"::","args":[{"class":"Closure"}]},{"file":"/var/www/html/ocs/v2.php","line":10,"args":["/var/www/html/ocs/v1.php"],"function":"require_once"}],"File":"/var/www/html/custom_apps/libresign/lib/Handler/CertificateEngine/AEngineHandler.php","Line":270,"message":"","CustomMessage":"Exception thrown: OCA\Libresign\Exception\InvalidPasswordException"}}
{"reqId":"mzc9fGd8uMEWO4Rc9Ecz","level":3,"time":"2026-10-19T14:30:16+00:00","remoteAddr":"172.19.0.17","user":"[email protected]","app":"libresign","method":"POST","url":"/ocs/v2.php/apps/libresign/api/v1/sign/uuid/00000000-0000-4000-8000-000000000000?async=true","scriptName":"/ocs/v2.php","message":"Exception thrown: OCA\Libresign\Exception\InvalidPasswordException","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:153.0) Gecko/20100101 Firefox/153.0","version":"35.0.2.2","exception":{"Exception":"OCA\Libresign\Exception\InvalidPasswordException","Message":"","Code":0,"Trace":[{"file":"/var/www/html/custom_apps/libresign/lib/Handler/CertificateEngine/AEngineHandler.php","line":143,"function":"opensslPkcs12Read","class":"OCA\Libresign\Handler\CertificateEngine\AEngineHandler","type":"->","args":[null,"REDACTED"]},{"file":"/var/www/html/custom_apps/libresign/lib/Handler/SignEngine/SignEngineHandler.php","line":69,"function":"readCertificate","class":"OCA\Libresign\Handler\CertificateEngine\AEngineHandler","type":"->","args":[null,"REDACTED"]},{"file":"/var/www/html/custom_apps/libresign/lib/Service/SignFileService.php","line":877,"function":"readCertificate","class":"OCA\Libresign\Handler\SignEngine\SignEngineHandler","type":"->","args":[]},{"file":"/var/www/html/custom_apps/libresign/lib/Service/SignFileService.php","line":667,"function":"updateSignRequest","class":"OCA\Libresign\Service\SignFileService","type":"->","args":[" sensitive parameters replaced "]},{"file":"/var/www/html/custom_apps/libresign/lib/Service/SignFileService.php","line":457,"function":"signSequentially","class":"OCA\Libresign\Service\SignFileService","type":"->","args":[[{"file":{"class":"OCA\Libresign\Db\File","id":175},"signRequest":{"class":"OCA\Libresign\Db\SignRequest","id":173}}]]},{"file":"/var/www/html/custom_apps/libresign/lib/Service/SignFileService.php","line":450,"function":"executeSigningStrategy","class":"OCA\Libresign\Service\SignFileService","type":"->","args":[[{"file":{"class":"OCA\Libresign\Db\File","id":175},"signRequest":{"class":"OCA\Libresign\Db\SignRequest","id":173}}]]},{"file":"/var/www/html/custom_apps/libresign/lib/Controller/SignFileController.php","line":247,"function":"sign","class":"OCA\Libresign\Service\SignFileService","type":"->","args":[]},{"file":"/var/www/html/custom_apps/libresign/lib/Controller/SignFileController.php","line":188,"function":"signSync","class":"OCA\Libresign\Controller\SignFileController","type":"->","args":[{"class":"OCA\Libresign\Db\File","id":175},[],{"user-agent":"Mozilla/5.0 (X11; Linux x86_64; rv:153.0) Gecko/20100101 Firefox/153.0","remote-address":"172.19.0.17"}]},{"file":"/var/www/html/custom_apps/libresign/lib/Controller/SignFileController.php","line":127,"function":"sign","class":"OCA\Libresign\Controller\SignFileController","type":"->","args":["password",[],"","REDACTED",null,"00000000-0000-4000-8000-000000000000",true,[]]},{"file":"/var/www/html/lib/private/AppFramework/Http/Dispatcher.php","line":198,"function":"signBySignerUuid","class":"OCA\Libresign\Controller\SignFileController","type":"->","args":["00000000-0000-4000-8000-000000000000","password",[],"","REDACTED",true,[]]},{"file":"/var/www/html/lib/private/AppFramework/Http/Dispatcher.php","line":86,"function":"executeController","class":"OC\AppFramework\Http\Dispatcher","type":"->","args":[{"class":"OCA\Libresign\Controller\SignFileController"},"signBySignerUuid"]},{"file":"/var/www/html/lib/private/AppFramework/App.php","line":138,"function":"dispatch","class":"OC\AppFramework\Http\Dispatcher","type":"->","args":[{"class":"OCA\Libresign\Controller\SignFileController"},"signBySignerUuid"]},{"file":"/var/www/html/lib/private/Route/Router.php","line":324,"function":"main","class":"OC\AppFramework\App","type":"::","args":["OCA\Libresign\Controller\SignFileController","signBySignerUuid",{"class":"OC\AppFramework\DependencyInjection\DIContainer"},{"_route":"ocs.libresign.signfile.signbysigneruuid","apiVersion":"v1","uuid":"00000000-0000-4000-8000-000000000000"}]},{"file":"/var/www/html/ocs/v1.php","line":88,"function":"match","class":"OC\Route\Router","type":"->","args":["/ocsapp/apps/libresign/api/v1/sign/uuid/00000000-0000-4000-8000-000000000000"]},{"file":"/var/www/html/lib/OC.php","line":1403,"function":"{closure:/var/www/html/ocs/v1.php:35}","args":[" sensitive parameters replaced "]},{"file":"/var/www/html/ocs/v1.php","line":35,"function":"handleRequests","class":"OC","type":"::","args":[{"class":"Closure"}]},{"file":"/var/www/html/ocs/v2.php","line":10,"args":["/var/www/html/ocs/v1.php"],"function":"require_once"}],"File":"/var/www/html/custom_apps/libresign/lib/Handler/CertificateEngine/AEngineHandler.php","Line":270,"message":"","CustomMessage":"Exception thrown: OCA\Libresign\Exception\InvalidPasswordException"}}
{"reqId":"v3FPDDiuhn4WNz3cFEJi","level":3,"time":"2026-10-19T14:30:29+00:00","remoteAddr":"172.19.0.17","user":"[email protected]","app":"libresign","method":"POST","url":"/ocs/v2.php/apps/libresign/api/v1/sign/uuid/00000000-0000-4000-8000-000000000000?async=true","scriptName":"/ocs/v2.php","message":"Exception thrown: OCA\Libresign\Exception\InvalidPasswordException","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:153.0) Gecko/20100101 Firefox/153.0","version":"35.0.2.2","exception":{"Exception":"OCA\Libresign\Exception\InvalidPasswordException","Message":"","Code":0,"Trace":[{"file":"/var/www/html/custom_apps/libresign/lib/Handler/CertificateEngine/AEngineHandler.php","line":143,"function":"opensslPkcs12Read","class":"OCA\Libresign\Handler\CertificateEngine\AEngineHandler","type":"->","args":[null,"REDACTED"]},{"file":"/var/www/html/custom_apps/libresign/lib/Handler/SignEngine/SignEngineHandler.php","line":69,"function":"readCertificate","class":"OCA\Libresign\Handler\CertificateEngine\AEngineHandler","type":"->","args":[null,"REDACTED"]},{"file":"/var/www/html/custom_apps/libresign/lib/Service/SignFileService.php","line":877,"function":"readCertificate","class":"OCA\Libresign\Handler\SignEngine\SignEngineHandler","type":"->","args":[]},{"file":"/var/www/html/custom_apps/libresign/lib/Service/SignFileService.php","line":667,"function":"updateSignRequest","class":"OCA\Libresign\Service\SignFileService","type":"->","args":[" sensitive parameters replaced "]},{"file":"/var/www/html/custom_apps/libresign/lib/Service/SignFileService.php","line":457,"function":"signSequentially","class":"OCA\Libresign\Service\SignFileService","type":"->","args":[[{"file":{"class":"OCA\Libresign\Db\File","id":175},"signRequest":{"class":"OCA\Libresign\Db\SignRequest","id":173}}]]},{"file":"/var/www/html/custom_apps/libresign/lib/Service/SignFileService.php","line":450,"function":"executeSigningStrategy","class":"OCA\Libresign\Service\SignFileService","type":"->","args":[[{"file":{"class":"OCA\Libresign\Db\File","id":175},"signRequest":{"class":"OCA\Libresign\Db\SignRequest","id":173}}]]},{"file":"/var/www/html/custom_apps/libresign/lib/Controller/SignFileController.php","line":247,"function":"sign","class":"OCA\Libresign\Service\SignFileService","type":"->","args":[]},{"file":"/var/www/html/custom_apps/libresign/lib/Controller/SignFileController.php","line":188,"function":"signSync","class":"OCA\Libresign\Controller\SignFileController","type":"->","args":[{"class":"OCA\Libresign\Db\File","id":175},[],{"user-agent":"Mozilla/5.0 (X11; Linux x86_64; rv:153.0) Gecko/20100101 Firefox/153.0","remote-address":"172.19.0.17"}]},{"file":"/var/www/html/custom_apps/libresign/lib/Controller/SignFileController.php","line":127,"function":"sign","class":"OCA\Libresign\Controller\SignFileController","type":"->","args":["password",[],"","REDACTED",null,"00000000-0000-4000-8000-000000000000",true,[]]},{"file":"/var/www/html/lib/private/AppFramework/Http/Dispatcher.php","line":198,"function":"signBySignerUuid","class":"OCA\Libresign\Controller\SignFileController","type":"->","args":["00000000-0000-4000-8000-000000000000","password",[],"","REDACTED",true,[]]},{"file":"/var/www/html/lib/private/AppFramework/Http/Dispatcher.php","line":86,"function":"executeController","class":"OC\AppFramework\Http\Dispatcher","type":"->","args":[{"class":"OCA\Libresign\Controller\SignFileController"},"signBySignerUuid"]},{"file":"/var/www/html/lib/private/AppFramework/App.php","line":138,"function":"dispatch","class":"OC\AppFramework\Http\Dispatcher","type":"->","args":[{"class":"OCA\Libresign\Controller\SignFileController"},"signBySignerUuid"]},{"file":"/var/www/html/lib/private/Route/Router.php","line":324,"function":"main","class":"OC\AppFramework\App","type":"::","args":["OCA\Libresign\Controller\SignFileController","signBySignerUuid",{"class":"OC\AppFramework\DependencyInjection\DIContainer"},{"_route":"ocs.libresign.signfile.signbysigneruuid","apiVersion":"v1","uuid":"00000000-0000-4000-8000-000000000000"}]},{"file":"/var/www/html/ocs/v1.php","line":88,"function":"match","class":"OC\Route\Router","type":"->","args":["/ocsapp/apps/libresign/api/v1/sign/uuid/00000000-0000-4000-8000-000000000000"]},{"file":"/var/www/html/lib/OC.php","line":1403,"function":"{closure:/var/www/html/ocs/v1.php:35}","args":[" sensitive parameters replaced "]},{"file":"/var/www/html/ocs/v1.php","line":35,"function":"handleRequests","class":"OC","type":"::","args":[{"class":"Closure"}]},{"file":"/var/www/html/ocs/v2.php","line":10,"args":["/var/www/html/ocs/v1.php"],"function":"require_once"}],"File":"/var/www/html/custom_apps/libresign/lib/Handler/CertificateEngine/AEngineHandler.php","Line":270,"message":"","CustomMessage":"Exception thrown: OCA\Libresign\Exception\InvalidPasswordException"}}
{"reqId":"fs4rb1bZW1Pe1wFGbXPK","level":3,"time":"2026-10-19T14:32:15+00:00","remoteAddr":"172.19.0.17","user":"[email protected]","app":"libresign","method":"POST","url":"/ocs/v2.php/apps/libresign/api/v1/sign/uuid/00000000-0000-4000-8000-000000000000?async=true","scriptName":"/ocs/v2.php","message":"Exception thrown: OCA\Libresign\Exception\InvalidPasswordException","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:153.0) Gecko/20100101 Firefox/153.0","version":"35.0.2.2","exception":{"Exception":"OCA\Libresign\Exception\InvalidPasswordException","Message":"","Code":0,"Trace":[{"file":"/var/www/html/custom_apps/libresign/lib/Handler/CertificateEngine/AEngineHandler.php","line":143,"function":"opensslPkcs12Read","class":"OCA\Libresign\Handler\CertificateEngine\AEngineHandler","type":"->","args":[null,"REDACTED"]},{"file":"/var/www/html/custom_apps/libresign/lib/Handler/SignEngine/SignEngineHandler.php","line":69,"function":"readCertificate","class":"OCA\Libresign\Handler\CertificateEngine\AEngineHandler","type":"->","args":[null,"REDACTED"]},{"file":"/var/www/html/custom_apps/libresign/lib/Service/SignFileService.php","line":877,"function":"readCertificate","class":"OCA\Libresign\Handler\SignEngine\SignEngineHandler","type":"->","args":[]},{"file":"/var/www/html/custom_apps/libresign/lib/Service/SignFileService.php","line":667,"function":"updateSignRequest","class":"OCA\Libresign\Service\SignFileService","type":"->","args":[" sensitive parameters replaced "]},{"file":"/var/www/html/custom_apps/libresign/lib/Service/SignFileService.php","line":457,"function":"signSequentially","class":"OCA\Libresign\Service\SignFileService","type":"->","args":[[{"file":{"class":"OCA\Libresign\Db\File","id":175},"signRequest":{"class":"OCA\Libresign\Db\SignRequest","id":173}}]]},{"file":"/var/www/html/custom_apps/libresign/lib/Service/SignFileService.php","line":450,"function":"executeSigningStrategy","class":"OCA\Libresign\Service\SignFileService","type":"->","args":[[{"file":{"class":"OCA\Libresign\Db\File","id":175},"signRequest":{"class":"OCA\Libresign\Db\SignRequest","id":173}}]]},{"file":"/var/www/html/custom_apps/libresign/lib/Controller/SignFileController.php","line":247,"function":"sign","class":"OCA\Libresign\Service\SignFileService","type":"->","args":[]},{"file":"/var/www/html/custom_apps/libresign/lib/Controller/SignFileController.php","line":188,"function":"signSync","class":"OCA\Libresign\Controller\SignFileController","type":"->","args":[{"class":"OCA\Libresign\Db\File","id":175},[],{"user-agent":"Mozilla/5.0 (X11; Linux x86_64; rv:153.0) Gecko/20100101 Firefox/153.0","remote-address":"172.19.0.17"}]},{"file":"/var/www/html/custom_apps/libresign/lib/Controller/SignFileController.php","line":127,"function":"sign","class":"OCA\Libresign\Controller\SignFileController","type":"->","args":["password",[],"","REDACTED",null,"00000000-0000-4000-8000-000000000000",true,[]]},{"file":"/var/www/html/lib/private/AppFramework/Http/Dispatcher.php","line":198,"function":"signBySignerUuid","class":"OCA\Libresign\Controller\SignFileController","type":"->","args":["00000000-0000-4000-8000-000000000000","password",[],"","REDACTED",true,[]]},{"file":"/var/www/html/lib/private/AppFramework/Http/Dispatcher.php","line":86,"function":"executeController","class":"OC\AppFramework\Http\Dispatcher","type":"->","args":[{"class":"OCA\Libresign\Controller\SignFileController"},"signBySignerUuid"]},{"file":"/var/www/html/lib/private/AppFramework/App.php","line":138,"function":"dispatch","class":"OC\AppFramework\Http\Dispatcher","type":"->","args":[{"class":"OCA\Libresign\Controller\SignFileController"},"signBySignerUuid"]},{"file":"/var/www/html/lib/private/Route/Router.php","line":324,"function":"main","class":"OC\AppFramework\App","type":"::","args":["OCA\Libresign\Controller\SignFileController","signBySignerUuid",{"class":"OC\AppFramework\DependencyInjection\DIContainer"},{"_route":"ocs.libresign.signfile.signbysigneruuid","apiVersion":"v1","uuid":"00000000-0000-4000-8000-000000000000"}]},{"file":"/var/www/html/ocs/v1.php","line":88,"function":"match","class":"OC\Route\Router","type":"->","args":["/ocsapp/apps/libresign/api/v1/sign/uuid/00000000-0000-4000-8000-000000000000"]},{"file":"/var/www/html/lib/OC.php","line":1403,"function":"{closure:/var/www/html/ocs/v1.php:35}","args":[" sensitive parameters replaced "]},{"file":"/var/www/html/ocs/v1.php","line":35,"function":"handleRequests","class":"OC","type":"::","args":[{"class":"Closure"}]},{"file":"/var/www/html/ocs/v2.php","line":10,"args":["/var/www/html/ocs/v1.php"],"function":"require_once"}],"File":"/var/www/html/custom_apps/libresign/lib/Handler/CertificateEngine/AEngineHandler.php","Line":270,"message":"","CustomMessage":"Exception thrown: OCA\Libresign\Exception\InvalidPasswordException"}}
{"reqId":"XKW4CT47GPiQYuXBBXlj","level":3,"time":"2026-10-19T14:32:24+00:00","remoteAddr":"172.19.0.17","user":"[email protected]","app":"libresign","method":"POST","url":"/ocs/v2.php/apps/libresign/api/v1/sign/uuid/00000000-0000-4000-8000-000000000000?async=true","scriptName":"/ocs/v2.php","message":"Exception thrown: OCA\Libresign\Exception\InvalidPasswordException","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:153.0) Gecko/20100101 Firefox/153.0","version":"35.0.2.2","exception":{"Exception":"OCA\Libresign\Exception\InvalidPasswordException","Message":"","Code":0,"Trace":[{"file":"/var/www/html/custom_apps/libresign/lib/Handler/CertificateEngine/AEngineHandler.php","line":143,"function":"opensslPkcs12Read","class":"OCA\Libresign\Handler\CertificateEngine\AEngineHandler","type":"->","args":[null,"REDACTED"]},{"file":"/var/www/html/custom_apps/libresign/lib/Handler/SignEngine/SignEngineHandler.php","line":69,"function":"readCertificate","class":"OCA\Libresign\Handler\CertificateEngine\AEngineHandler","type":"->","args":[null,"REDACTED"]},{"file":"/var/www/html/custom_apps/libresign/lib/Service/SignFileService.php","line":877,"function":"readCertificate","class":"OCA\Libresign\Handler\SignEngine\SignEngineHandler","type":"->","args":[]},{"file":"/var/www/html/custom_apps/libresign/lib/Service/SignFileService.php","line":667,"function":"updateSignRequest","class":"OCA\Libresign\Service\SignFileService","type":"->","args":[" sensitive parameters replaced "]},{"file":"/var/www/html/custom_apps/libresign/lib/Service/SignFileService.php","line":457,"function":"signSequentially","class":"OCA\Libresign\Service\SignFileService","type":"->","args":[[{"file":{"class":"OCA\Libresign\Db\File","id":175},"signRequest":{"class":"OCA\Libresign\Db\SignRequest","id":173}}]]},{"file":"/var/www/html/custom_apps/libresign/lib/Service/SignFileService.php","line":450,"function":"executeSigningStrategy","class":"OCA\Libresign\Service\SignFileService","type":"->","args":[[{"file":{"class":"OCA\Libresign\Db\File","id":175},"signRequest":{"class":"OCA\Libresign\Db\SignRequest","id":173}}]]},{"file":"/var/www/html/custom_apps/libresign/lib/Controller/SignFileController.php","line":247,"function":"sign","class":"OCA\Libresign\Service\SignFileService","type":"->","args":[]},{"file":"/var/www/html/custom_apps/libresign/lib/Controller/SignFileController.php","line":188,"function":"signSync","class":"OCA\Libresign\Controller\SignFileController","type":"->","args":[{"class":"OCA\Libresign\Db\File","id":175},[],{"user-agent":"Mozilla/5.0 (X11; Linux x86_64; rv:153.0) Gecko/20100101 Firefox/153.0","remote-address":"172.19.0.17"}]},{"file":"/var/www/html/custom_apps/libresign/lib/Controller/SignFileController.php","line":127,"function":"sign","class":"OCA\Libresign\Controller\SignFileController","type":"->","args":["password",[],"","REDACTED",null,"00000000-0000-4000-8000-000000000000",true,[]]},{"file":"/var/www/html/lib/private/AppFramework/Http/Dispatcher.php","line":198,"function":"signBySignerUuid","class":"OCA\Libresign\Controller\SignFileController","type":"->","args":["00000000-0000-4000-8000-000000000000","password",[],"","REDACTED",true,[]]},{"file":"/var/www/html/lib/private/AppFramework/Http/Dispatcher.php","line":86,"function":"executeController","class":"OC\AppFramework\Http\Dispatcher","type":"->","args":[{"class":"OCA\Libresign\Controller\SignFileController"},"signBySignerUuid"]},{"file":"/var/www/html/lib/private/AppFramework/App.php","line":138,"function":"dispatch","class":"OC\AppFramework\Http\Dispatcher","type":"->","args":[{"class":"OCA\Libresign\Controller\SignFileController"},"signBySignerUuid"]},{"file":"/var/www/html/lib/private/Route/Router.php","line":324,"function":"main","class":"OC\AppFramework\App","type":"::","args":["OCA\Libresign\Controller\SignFileController","signBySignerUuid",{"class":"OC\AppFramework\DependencyInjection\DIContainer"},{"_route":"ocs.libresign.signfile.signbysigneruuid","apiVersion":"v1","uuid":"00000000-0000-4000-8000-000000000000"}]},{"file":"/var/www/html/ocs/v1.php","line":88,"function":"match","class":"OC\Route\Router","type":"->","args":["/ocsapp/apps/libresign/api/v1/sign/uuid/00000000-0000-4000-8000-000000000000"]},{"file":"/var/www/html/lib/OC.php","line":1403,"function":"{closure:/var/www/html/ocs/v1.php:35}","args":[" sensitive parameters replaced "]},{"file":"/var/www/html/ocs/v1.php","line":35,"function":"handleRequests","class":"OC","type":"::","args":[{"class":"Closure"}]},{"file":"/var/www/html/ocs/v2.php","line":10,"args":["/var/www/html/ocs/v1.php"],"function":"require_once"}],"File":"/var/www/html/custom_apps/libresign/lib/Handler/CertificateEngine/AEngineHandler.php","Line":270,"message":"","CustomMessage":"Exception thrown: OCA\Libresign\Exception\InvalidPasswordException"}}
{"reqId":"fEOFoPjbnrwjhj64ZYOk","level":3,"time":"2026-10-19T14:32:35+00:00","remoteAddr":"172.19.0.17","user":"[email protected]","app":"core","method":"POST","url":"/ocs/v2.php/apps/libresign/api/v1/sign/uuid/00000000-0000-4000-8000-000000000000?async=true","scriptName":"/ocs/v2.php","message":"Sending mail to "{"[email protected]":"REDACTED ([email protected])"}" with subject "LibreSign: Ein Dokument wurde signiert" failed","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:153.0) Gecko/20100101 Firefox/153.0","version":"35.0.2.2","exception":{"Exception":"Symfony\Component\Mailer\Exception\TransportException","Message":"Connection could not be established with host "127.0.0.1:25": stream_socket_client(): Unable to connect to 127.0.0.1:25 (Connection refused)","Code":0,"Trace":[{"function":"{closure:Symfony\Component\Mailer\Transport\Smtp\Stream\SocketStream::initialize():153}","class":"Symfony\Component\Mailer\Transport\Smtp\Stream\SocketStream","type":"->","args":[" sensitive parameters replaced "]},{"file":"/var/www/html/3rdparty/symfony/mailer/Transport/Smtp/Stream/SocketStream.php","line":157,"function":"stream_socket_client","args":["127.0.0.1:25",0,"",10,4,null]},{"file":"/var/www/html/3rdparty/symfony/mailer/Transport/Smtp/SmtpTransport.php","line":272,"function":"initialize","class":"Symfony\Component\Mailer\Transport\Smtp\Stream\SocketStream","type":"->","args":[]},{"file":"/var/www/html/3rdparty/symfony/mailer/Transport/Smtp/SmtpTransport.php","line":204,"function":"start","class":"Symfony\Component\Mailer\Transport\Smtp\SmtpTransport","type":"->","args":[]},{"file":"/var/www/html/3rdparty/symfony/mailer/Transport/AbstractTransport.php","line":69,"function":"doSend","class":"Symfony\Component\Mailer\Transport\Smtp\SmtpTransport","type":"->","args":[{"class":"Symfony\Component\Mailer\SentMessage"}]},{"file":"/var/www/html/3rdparty/symfony/mailer/Transport/Smtp/SmtpTransport.php","line":142,"function":"send","class":"Symfony\Component\Mailer\Transport\AbstractTransport","type":"->","args":[{"class":"Symfony\Component\Mime\Email"},{"class":"Symfony\Component\Mailer\DelayedEnvelope"}]},{"file":"/var/www/html/3rdparty/symfony/mailer/Mailer.php","line":38,"function":"send","class":"Symfony\Component\Mailer\Transport\Smtp\SmtpTransport","type":"->","args":[{"class":"Symfony\Component\Mime\Email"},null]},{"file":"/var/www/html/lib/private/Mail/Mailer.php","line":213,"function":"send","class":"Symfony\Component\Mailer\Mailer","type":"->","args":[{"class":"Symfony\Component\Mime\Email"}]},{"file":"/var/www/html/custom_apps/libresign/lib/Service/MailService.php","line":254,"function":"send","class":"OC\Mail\Mailer","type":"->","args":[{"class":"OC\Mail\Message"}]},{"file":"/var/www/html/custom_apps/libresign/lib/Listener/MailNotifyListener.php","line":135,"function":"notifySignedUser","class":"OCA\Libresign\Service\MailService","type":"->","args":[{"class":"OCA\Libresign\Db\SignRequest","id":173},"[email protected]",{"class":"OCA\Libresign\Db\File","id":175},"REDACTED ([email protected])"]},{"file":"/var/www/html/custom_apps/libresign/lib/Listener/MailNotifyListener.php","line":49,"function":"sendSignedMailNotification","class":"OCA\Libresign\Listener\MailNotifyListener","type":"->","args":[{"class":"OCA\Libresign\Db\SignRequest","id":173},{"class":"OCA\Libresign\Service\IdentifyMethod\Account","availableSignatureMethods":["clickToSign","emailToken","password"],"defaultSignatureMethod":"password"},{"class":"OCA\Libresign\Db\File","id":175},{"class":"OC\User\User"}]},{"file":"/var/www/html/lib/private/EventDispatcher/ServiceEventListener.php","line":57,"function":"handle","class":"OCA\Libresign\Listener\MailNotifyListener","type":"->","args":[{"class":"OCA\Libresign\Events\SignedEvent"}]},{"file":"/var/www/html/3rdparty/symfony/event-dispatcher/EventDispatcher.php","line":206,"function":"__invoke","class":"OC\EventDispatcher\ServiceEventListener","type":"->","args":[{"class":"OCA\Libresign\Events\SignedEvent"},"OCA\Libresign\Events\SignedEvent",{"class":"Symfony\Component\EventDispatcher\EventDispatcher"}]},{"file":"/var/www/html/3rdparty/symfony/event-dispatcher/EventDispatcher.php","line":56,"function":"callListeners","class":"Symfony\Component\EventDispatcher\EventDispatcher","type":"->","args":[[{"class":"Closure"},{"class":"Closure"},{"class":"Closure"},{"class":"Closure"},{"class":"Closure"},"And 1 more entries, set log level to debug to see all entries"],"OCA\Libresign\Events\SignedEvent",{"class":"OCA\Libresign\Events\SignedEvent"}]},{"file":"/var/www/html/lib/private/EventDispatcher/EventDispatcher.php","line":74,"function":"dispatch","class":"Symfony\Component\EventDispatcher\EventDispatcher","type":"->","args":[{"class":"OCA\Libresign\Events\SignedEvent"},"OCA\Libresign\Events\SignedEvent"]},{"file":"/var/www/html/lib/private/EventDispatcher/EventDispatcher.php","line":87,"function":"dispatch","class":"OC\EventDispatcher\EventDispatcher","type":"->","args":["OCA\Libresign\Events\SignedEvent",{"class":"OCA\Libresign\Events\SignedEvent"}]},{"file":"/var/www/html/custom_apps/libresign/lib/Service/SignFileService.php","line":950,"function":"dispatchTyped","class":"OC\EventDispatcher\EventDispatcher","type":"->","args":[{"class":"OCA\Libresign\Events\SignedEvent"}]},{"file":"/var/www/html/custom_apps/libresign/lib/Service/SignFileService.php","line":670,"function":"dispatchSignedEvent","class":"OCA\Libresign\Service\SignFileService","type":"->","args":[]},{"file":"/var/www/html/custom_apps/libresign/lib/Service/SignFileService.php","line":457,"function":"signSequentially","class":"OCA\Libresign\Service\SignFileService","type":"->","args":[[{"file":{"class":"OCA\Libresign\Db\File","id":175},"signRequest":{"class":"OCA\Libresign\Db\SignRequest","id":173}}]]},{"file":"/var/www/html/custom_apps/libresign/lib/Service/SignFileService.php","line":450,"function":"executeSigningStrategy","class":"OCA\Libresign\Service\SignFileService","type":"->","args":[[{"file":{"class":"OCA\Libresign\Db\File","id":175},"signRequest":{"class":"OCA\Libresign\Db\SignRequest","id":173}}]]},{"file":"/var/www/html/custom_apps/libresign/lib/Controller/SignFileController.php","line":247,"function":"sign","class":"OCA\Libresign\Service\SignFileService","type":"->","args":[]},{"file":"/var/www/html/custom_apps/libresign/lib/Controller/SignFileController.php","line":188,"function":"signSync","class":"OCA\Libresign\Controller\SignFileController","type":"->","args":[{"class":"OCA\Libresign\Db\File","id":175},[],{"user-agent":"Mozilla/5.0 (X11; Linux x86_64; rv:153.0) Gecko/20100101 Firefox/153.0","remote-address":"172.19.0.17"}]},{"file":"/var/www/html/custom_apps/libresign/lib/Controller/SignFileController.php","line":127,"function":"sign","class":"OCA\Libresign\Controller\SignFileController","type":"->","args":["password",[],"","REDACTED",null,"00000000-0000-4000-8000-000000000000",true,[]]},{"file":"/var/www/html/lib/private/AppFramework/Http/Dispatcher.php","line":198,"function":"signBySignerUuid","class":"OCA\Libresign\Controller\SignFileController","type":"->","args":["00000000-0000-4000-8000-000000000000","password",[],"","REDACTED",true,[]]},{"file":"/var/www/html/lib/private/AppFramework/Http/Dispatcher.php","line":86,"function":"executeController","class":"OC\AppFramework\Http\Dispatcher","type":"->","args":[{"class":"OCA\Libresign\Controller\SignFileController"},"signBySignerUuid"]},{"file":"/var/www/html/lib/private/AppFramework/App.php","line":138,"function":"dispatch","class":"OC\AppFramework\Http\Dispatcher","type":"->","args":[{"class":"OCA\Libresign\Controller\SignFileController"},"signBySignerUuid"]},{"file":"/var/www/html/lib/private/Route/Router.php","line":324,"function":"main","class":"OC\AppFramework\App","type":"::","args":["OCA\Libresign\Controller\SignFileController","signBySignerUuid",{"class":"OC\AppFramework\DependencyInjection\DIContainer"},{"_route":"ocs.libresign.signfile.signbysigneruuid","apiVersion":"v1","uuid":"00000000-0000-4000-8000-000000000000"}]},{"file":"/var/www/html/ocs/v1.php","line":88,"function":"match","class":"OC\Route\Router","type":"->","args":["/ocsapp/apps/libresign/api/v1/sign/uuid/00000000-0000-4000-8000-000000000000"]},{"file":"/var/www/html/lib/OC.php","line":1403,"function":"{closure:/var/www/html/ocs/v1.php:35}","args":[" sensitive parameters replaced ***"]},{"file":"/var/www/html/ocs/v1.php","line":35,"function":"handleRequests","class":"OC","type":"::","args":[{"class":"Closure"}]},{"file":"/var/www/html/ocs/v2.php","line":10,"args":["/var/www/html/ocs/v1.php"],"function":"require_once"}],"message":"","CustomMessage":"Sending mail to "{"[email protected]":"REDACTED ([email protected])"}" with subject "LibreSign: Ein Dokument wurde signiert" failed"}}

Logs from Developers tools

No response

Additional context

No response