UpdraftPlus 1.9.26 is being released today to address a specific issue affecting a small number of users.

Issues addressed

Some users experienced difficulties connecting to Amazon S3 due to SSL certificate validation failures. After investigation, we identified the following:

1024-bit SSL Certificates: Certain Amazon S3 servers use SSL certificates signed by 1024-bit keys, which are now considered weak by cryptographic standards.

Browser Support Changes: Mozilla Firefox and other browsers have started to drop support for SSL connections secured by 1024-bit keys.

Impact on UpdraftPlus: UpdraftPlus relies on Firefox’s set of root SSL certificates for validating SSL connections, which led to these connection issues.

Update Details

Re-added support: UpdraftPlus 1.9.26 reintroduces support for these Amazon S3 SSL certificates by restoring the root certificates that Firefox has dropped.

Action required: If you encountered this issue, please visit the ‘Updates’ page in your WordPress dashboard to update to UpdraftPlus 1.9.26.

Recommended action

If you are affected, we advise contacting Amazon S3 to request an update of their servers, as 1024-bit keys are no longer considered secure. However, until these certificates can be phased out, this update provides a temporary solution to ensure continued encryption and connectivity.