Problem with packages
-
After upgrading pfsense from 2.4.5 to 2.5.2, I got errors. Next, I reinstalled version 2.4.5 and restored the backup. Everything is fine, but I can't install "OpenVPN Client Export" and "HAProxy". Tried to install, but I get the message "Please wait while the update system initializes". In "System->Update" selected "Previous stable version (2.4.5 Depricated)" and now my "Available Packages" list is empty with an error "Unable to retrieve package information.". Change to "Latest stable version (2.5.x)" doesn't change the situation. I've already spent a lot of time, but I can't solve this problem.
I have a question: can these packages be installed manually via console? -
@abracadabras said in Problem with packages:
Everything is fine, but I can't install "OpenVPN Client Export" and "HAProxy".
Pk to get an older version back on line, but you have to make sure that that ypou respect this rule : Every pfSense release mentions :
This means : when their is a pfSense update available, you stop installing or upgrading packages.
First, you upgrade pfSense to the latest release version.
Then, and on then : upgrade packages.Because : packages are always on the 'latest' version an can use dependencies that do not exist in older versions.
There is no such thing as "Package X is for pfSense version Y"I guess that not respecting this rule, by installing "OpenVPN Client Export" on a pfSense 2.4.5 (p3 ?) won't break pfSense.
I'm less sure about "HAProxy". -
@gertjan thanks for the reply!
So it turns out that if I have packages installed and the pfsense version is not the latest, then backups are pointless? If my server goes down, I can't rebuild it? -
@abracadabras said in Problem with packages:
then backups are pointless?
You only need to backup the 'config'.
Entire disk copies can be use full, but normally, why would you care ?
If your system isn't on the latest version, and the (example) disk fails, after changing the disk, you can install whatever version you've kept - or, download the latest from here, or, if you have a Netgate device, ask for the latest version of pfSense using the support channel.
Import the downloaded config, and you'll be fine.Only when you decide to stay with an older pfSense version, you have to be careful ....
-
@gertjan Yeah, I'm in the same situation. I have all the versions of pfsense that the company uses. I reinstalled pfsense 2.4.5 then restored CONFIG. And now I do not have OpenVPN Client Export and HAProxy. Thought that if I installed the pfsense 2.4.5 branch in "System\Update", I could install packages((
-
@abracadabras
I'm not sure, but :
"2.4.5" is waaaaay to old. Your system has security issues.
"((" is an understatement.2.4.5-p3 ..... is probably still usable, but safety precautions have to takes before (like an insurance fee - you can't take one after the accident)
It is known that experts might decide to stay on an older version.
The will keep a copy of the installed pfSEnse on a save place.
They will keep a copy of what they found here : /var/cache as I guess that's the place where downloaded packages are stored.
It's probably possible to install these package "txz" files manually.
How ? Dono, I'm not an expert.@abracadabras said in Problem with packages:
After upgrading pfsense from 2.4.5 to 2.5.2, I got errors
Like what ?
-
This post is deleted! -
After upgrading pfsense from 2.4.5 to 2.5.2, I got errors
Like what ?
On version 2.5.2 I have problems with multi WAN and OpenVPN client (doesn't want to connect to the server, may be a version problem, but rolled back because of multiWAN)
-
@abracadabras said in Problem with packages:
.... OpenVPN client
OpenVPN bahaves differently because before 2.5.x, the version of OpenVPN server and client was 2.4.x.
pfSense 2.5.2 uses the 2.5.x family tree. See here : https://openvpn.net/community-downloads/
pfSense 2.5.2 uses OpenVPN 2.5.2 :openvpn --version OpenVPN 2.5.2 amd64-portbld-freebsd12.2 [SSL (OpenSSL)] [LZO] [LZ4] [MH/RECVDA] [AEAD] built on Jun 24 2021 library versions: OpenSSL 1.1.1k-freebsd 25 Mar 2021, LZO 2.10 Originally developed by James Yonan Copyright (C) 2002-2018 OpenVPN Inc <sales@openvpn.net> Compile time defines: enable_async_push=yes enable_comp_stub ..... bla bla....Shifts from 2.4.x to 2.5.x can - and did - change parameter usage - and can - and did - use new default settings.
If your, for example OpenVPN supplier didn't change its OpenVPN software, you have to 'fiddle' a bit with the settings (looking things up - understanding what the log tries to tell you, etc).
See the pfSense OpenVPN forum or the official OpenVPN support forum for details.
See at the bottom of https://openvpn.net/community-downloads/ for some major changes.
Not a real show stopper actually. OpenVPN still works, but - as for example our Windows desktop version, changes ones in a while.MultiWAN : .... dono.
-
@gertjan with OpenVPN I think I can handle it, but the problem with multiWAN as far as I know has not been fixed yet.
