Version 1.709

Released: 2026-08-31

• Faster ACME wildcard certificate issuance update
• Issue new certificates when the certificate key type is changed update
• System Backup script update update
• Software version changes custombuildupdate
• Fixed administrator settings checkboxes getting stuck in the enabled state evolution fix
• Fixed incorrect default value for "User Backup" in administrator settings evolution fix
• Fixed saving the "Personal DNS" option in reseller package settings evolution fix
• Limit external login redirect URLs to be single use only fix
• Removed inode configuration option from directadmin.conf removal

Faster ACME wildcard certificate issuance update

The configuration of the ACME client is updated to perform fewer checks when issuing wildcard certificates.

Previous versions used to perform two independent DNS record propagation tests:

• DNS lookup using the local system resolver.
• DNS lookup sent directly to the zone's authoritative DNS servers.

Starting this release, only the test against authoritative DNS servers will be performed. This should significantly reduce the time it takes to issue a new certificate on systems where the local system resolver uses caching.

In some non-standard network environments the DA server might not be able to communicate directly with the authoritative DNS servers. A new global configuration option acme_use_only_system_resolver is added to help in such situations.

Issue new certificates when the certificate key type is changed update

Changing the TLS certificate key type in the ACME settings will trigger a new certificate with the desired key type to be issued. A new certificate will be issued on the next periodic certificate provisioning task or after a manual trigger.

System Backup script update update

The System Backup component is updated to use a backup script that is bundled with DirectAdmin instead of using the sysbk tool.

Automatic migration will be performed with the DA update:

• Config file copied to the new location /usr/local/directadmin/data/admin/sysbk.conf
• custom.dirs and custom.files merged into /usr/local/directadmin/data/admin/sysbk.custom_paths
• All known DA paths and user home directories are removed from the merged sysbk.custom_paths file.

Added:

• Introduced new options to select which directories to backup.
• Addition directories and files are merged into a single list of paths.

Breaking Changes:

• User home directories are no longer included in system backups. The system backup should be used only for global system files.
• User-owned MySQL databases are no longer included in system backups. Only the da_roundcube will be added to system backup.

Software version changes custombuildupdate

• LiteSpeed web server updated from 6.3.6-8 to 6.3.6-9
• MariaDB 10.11 updated from 10.11.18 to 10.11.19
• MariaDB 11.4 updated from 11.4.12 to 11.4.13
• MariaDB 11.8 updated from 11.8.8 to 11.8.9
• MariaDB 12.3 updated from 12.3.2 to 12.3.3
• PHP 8.4 updated from 8.4.24 to 8.4.25
• PHP 8.5 updated from 8.5.9 to 8.5.10
• composer updated from 2.10.2 to 2.10.3
• dovecot updated from 2.4.4 to 2.4.5
• exim updated from 4.99.5 to 4.100
• lego updated from 5.3.1 to 5.4.0
• lz4 (PHP extension) updated from 0.7.0 to 0.7.1
• nginx web server updated from 1.31.3 to 1.31.4
• phalcon (PHP extension) updated from 5.18.0 to 5.20.3
• ncftp removed

Fixed administrator settings checkboxes getting stuck in the enabled state evolution fix

Some checkboxes on the administrator settings page could become stuck in the enabled state when certain DirectAdmin configuration flags were already set in the server configuration.

This release fixes the value handling so affected checkboxes can now be enabled or disabled normally.

Fixed incorrect default value for "User Backup" in administrator settings evolution fix

The "User Backup" checkbox in the administrator settings used an incorrect default value from other setting.

Fixed saving the "Personal DNS" option in reseller package settings evolution fix

The "Uses 3 IPs, domain gets own IP" option under the "Personal DNS" setting in reseller package create and modify pages used an incorrect value.

As a result, selecting this option was not saved in the server.

Limit external login redirect URLs to be single use only fix

Username and password logins via API (external integration, not the main login page) use a temporary redirect URL. These URLs were valid for up to 5 minutes and could be reused multiple times.

Starting this release, URLs will be valid for up to 5 minutes but can no longer be used multiple times. After the first use, the same URL will no longer work.

The URLs will only activate with a POST request. Visiting the URL will automatically perform the required POST request.

Removed inode configuration option from directadmin.conf removal

The inode configuration option controlled whether inode usage was shown in certain pages.

With this option removed, inode usage will always be shown.