Merge pull request #7412 from LibreSign/backport/7411/stable32

vitormattos · web-flow · commit cb99ac633db1 · 2026-04-05T18:40:12.000-03:00
[stable32] fix: validate engine name in migration to prevent installation failures
diff --git a/lib/Migration/Version13000Date20251031165700.php b/lib/Migration/Version13000Date20251031165700.php
@@ -138,7 +138,8 @@ private function migrateToNewestConfigFormat(): void {
 		$originalCaId = $this->appConfig->getValueString(Application::APP_ID, 'ca_id');
 		if (empty($originalCaId)) {
 			$engineName = $this->appConfig->getValueString(Application::APP_ID, 'certificate_engine');
-			if ($engineName) {
+			$validEngines = ['openssl', 'cfssl'];
+			if (!empty($engineName) && in_array($engineName, $validEngines, true)) {
 				$originalCaId = $this->caIdentifierService->generateCaId($engineName);
 			}
 		}

Original file line number	Diff line number	Diff line change
`@@ -138,7 +138,8 @@ private function migrateToNewestConfigFormat(): void {`
`138`	`138`	`$originalCaId = $this->appConfig->getValueString(Application::APP_ID, 'ca_id');`
`139`	`139`	`if (empty($originalCaId)) {`
`140`	`140`	`$engineName = $this->appConfig->getValueString(Application::APP_ID, 'certificate_engine');`
`141`		`- if ($engineName) {`
	`141`	`+ $validEngines = ['openssl', 'cfssl'];`
	`142`	`+ if (!empty($engineName) && in_array($engineName, $validEngines, true)) {`
`142`	`143`	`$originalCaId = $this->caIdentifierService->generateCaId($engineName);`
`143`	`144`	`}`
`144`	`145`	`}`