Hi,
I am experiencing an issue with the PHP File Change Scanner / File Integrity Scanner in Admin Tools Pro.
Every time I run the scan, I receive the following warning message:
Core file verification unavailable
The most recent PHP File Change Scanner run could not download the CoreSums checksums data, so files were not verified against the official Joomla core checksums...
Steps already taken:
I checked the component configuration and increased the "CoreSums download timeout" from default to 60 seconds, but the issue persists.
The server has outbound internet connectivity, but it seems the request to the CoreSums service is failing, timing out, or being blocked.
Could you please advise if there is an alternative CoreSums URL, a specific IP/domain we need to whitelist on our server firewall, or if this might be caused by cURL/OpenSSL configuration on the host?
Thank you for your support.
Best regards,
#43228 CoreSums checksums error
Posted in ‘Admin Tools for Joomla!’
This is a public ticket
Everybody will be able to see its contents. Do not include usernames, passwords or any other sensitive information.
Environment Information
Joomla! version
6.1.2
PHP version
8.3.32
Admin Tools version
7.9.0
Latest post by nicholas on Friday, 31 July 2026 04:20 CDT
Friday, 31 July 2026 04:11 CDT
papaya_srl
Friday, 31 July 2026 04:20 CDT
nicholas
Akeeba Staff
Manager
Most likely you are hitting a server firewall. The CoreSums come from https://getpanopticon.com/checksums/index.html which is served over CloudFlare CDN. If you can whitelist a domain name, that would be getpanopticon.com and www.getpanopticon.com. If you need to whitelist an IP you need to resolve the domain name from your server since this being behind a CDN you see a different IP depending on where you are.
You can of course download the very same PHP software generating the CoreSums as we use and host it yourself. On the page I linked there's the “Reproducible, auditable content” which tells you where to find it: https://github.com/akeeba/coresums It only uses very basic PHP to generate static files you can serve any way you like – and there's an option in Admin Tools to point your site to your own copy of CoreSums. We do that on purpose. We do NOT want people to blindly trust us in matters of security. We want all security-relevant services we provide to be fully auditable by anyone, and possible to host yourself so you can cut us out of your security risk analysis.
I hope this helps!
Nicholas K. Dionysopoulos
Lead Developer and Director
🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!