we searched for an answer to this issue on Google - and only saw the response of the person who updated akeeba backup manually. Do you have an automated solution?
#22472 cURL library error #3: malformed
Posted in ‘Akeeba Backup for WordPress’
This is a public ticket
Everybody will be able to see its contents. Do not include usernames, passwords or any other sensitive information.
Environment Information
WordPress version
n/a
PHP version
n/a
Akeeba Backup version
n/a
Latest post by nicholas on Thursday, 16 April 2015 07:04 CDT
Thursday, 16 April 2015 07:04 CDT
nicholas
Akeeba Staff
Manager
Hello David,
First, please make sure that you have entered your Download ID according to our instructions. Then go to Akeeba Backup, click on the update button and then click on "Refresh update information". The Direct Download URL should change to something like "https://www.akeebabackup.com/download/backup-wordpress/1-3-0/akeebabackupwp-zip-36.html?dlid=somethingsomethingsomething" (please do NOT paste that somethingsomethingsomething in your reply, it's your Download ID and must remain secret).
If you have already done that and you see the right download URL you probably have a server with an old version of PHP compiled against an extremely old version of the OpenSSL library. These versions of OpenSSL do not support SSL certificates signed with the newer (and secure) SHA-256 signature, like the one we're using on our site.
We can't switch to the old, insecure SHA-1 signature because that would compromise your security AND would cause our site to display as "insecure" on major browsers. We also can't switch to an insecure (plain HTTP) site for security and privacy reasons. So the only course of action is the rational one: ask your host to update to a PHP and OpenSSL version published in the last two (2) years. As you can see it's not that much to ask, considering that security updates to PHP and OpenSSL are published every 3-6 weeks.
First, please make sure that you have entered your Download ID according to our instructions. Then go to Akeeba Backup, click on the update button and then click on "Refresh update information". The Direct Download URL should change to something like "https://www.akeebabackup.com/download/backup-wordpress/1-3-0/akeebabackupwp-zip-36.html?dlid=somethingsomethingsomething" (please do NOT paste that somethingsomethingsomething in your reply, it's your Download ID and must remain secret).
If you have already done that and you see the right download URL you probably have a server with an old version of PHP compiled against an extremely old version of the OpenSSL library. These versions of OpenSSL do not support SSL certificates signed with the newer (and secure) SHA-256 signature, like the one we're using on our site.
We can't switch to the old, insecure SHA-1 signature because that would compromise your security AND would cause our site to display as "insecure" on major browsers. We also can't switch to an insecure (plain HTTP) site for security and privacy reasons. So the only course of action is the rational one: ask your host to update to a PHP and OpenSSL version published in the last two (2) years. As you can see it's not that much to ask, considering that security updates to PHP and OpenSSL are published every 3-6 weeks.
Nicholas K. Dionysopoulos
Lead Developer and Director
🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!