UpdraftPlus 1.9.26 is being released today.
The reason for this release is because a very small number of users have not been successful in connecting to Amazon S3, due to SSL certificate validation failures.
We were able to investigate the cause of these failures, and found that:
- Some Amazon S3 servers’ SSL certificates are signed by a 1024-bit key. These keys are now considered weak by cryptographic experts.
- Consequently, Mozilla Firefox (the browser) has begun the processing of dropping support for SSL connections secured by 1024-bit keys (see: https://blog.mozilla.org/security/2014/09/08/phasing-out-certificates-with-1024-bit-rsa-keys/#comments). (They are not alone – browser vendors generally are in process of doing this).
- This affected UpdraftPlus, because UpdraftPlus uses Firefox’s set of root SSL certificates in order to validate its SSL connections.
UpdraftPlus 1.9.26 re-adds support for these Amazon S3 SSL certificates (via re-adding the root certificates which Firefox have dropped). If you had this problem, then you can visit the “Updates” page in your WordPress dashboard, and update to UpdraftPlus 1.9.26.
Ideally, if you had this problem, you should contact Amazon S3 and ask them to update their servers. 1024-bits is not considered sufficient for security on the 2014 Internet. But, since for the affected users the choice was this or no encryption at all, for now, we’ll have to wait longer until these certificates can be dropped.
David Anderson (lead developer, founder, UpdraftPlus).
You guys are awesome! I just learned what happens when you install WordPress on a parked domain… you wipe out the installation of the domain its parked to Yikes! Well within about 90 minutes (learning curve to figure out how to fix what I screwed up) I was able to get UpdraftPlus installed and restore my system to only 24 hours old. Thank you UpdraftPlus for your awesome product that even a rookie can figure out how to get things back rocking out!
My heartiest regards,
Richard g Wallen running UpdraftPlus Premium
You are welcome!
Best wishes,
David
I also want to send a HUGE thank you. Never ever in all the sites I’ve ever hosted on did I have a more smooth transition go thru as well as it did with UpdraftPlus. Even tho I purchased the migration script to go with the restore, it turns out I didn’t need it since it was the same domain and a change of hosting, but the 30.00 to me is worth it just to have no stress on changing hosts. Once the nameservers changed, I added UpdraftPlus, moved my backup files into the proper folder and within minutes my site was seriously back to normal. WOW!! I just can’t thank you enough. I’m so happy I wanna do a dance. :) Thank you so much!!
Oh and I added a little “promo” for the script on my site as well for all those who might like to try it, This really is an awesome plugin.
Hi,
Thank you – you are welcome!
Best wishes,
David