From 7ef97d593e38603cb6520de0edef03689b938c41 Mon Sep 17 00:00:00 2001 From: Maxence Lange Date: Mon, 16 Mar 2026 09:56:57 -0100 Subject: [PATCH] fix(lookup-server): accept self-signed lus on globalscale fix(lookup-server): accept self-signed lus on globalscale Signed-off-by: Maxence Lange [skip ci] --- lib/private/Collaboration/Collaborators/LookupPlugin.php | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/lib/private/Collaboration/Collaborators/LookupPlugin.php b/lib/private/Collaboration/Collaborators/LookupPlugin.php index 10ce4dedb7ab9..6757246210c3d 100644 --- a/lib/private/Collaboration/Collaborators/LookupPlugin.php +++ b/lib/private/Collaboration/Collaborators/LookupPlugin.php @@ -53,11 +53,16 @@ public function search($search, $limit, $offset, ISearchResult $searchResult): b try { $client = $this->clientService->newClient(); + /** + * @psalm-suppress TypeDoesNotContainType - $isGlobalScaleEnabled always true at this point + * @psalm-suppress RedundantCondition - guard rail in case we re-activate LUS out of GlobalScale + */ $response = $client->get( $lookupServerUrl . '/users?search=' . urlencode($search), [ 'timeout' => 10, 'connect_timeout' => 3, + 'verify' => !($isGlobalScaleEnabled && $this->config->getSystemValueBool('gss.selfsigned.allow', false) === true) ] );