SG-1100 update?

ebcdic

I looked under System/Update to see if 22.01 was available for my SG-1100, but it says "Unable to check for updates", and in the system log I see

Feb 17 10:31:18 kernel pid 87501 (pkg-static), jid 0, uid 0: exited on signal 11 (core dumped)
Feb 17 10:31:26 kernel pid 5487 (pkg-static), jid 0, uid 0: exited on signal 11 (core dumped)

and there are similar messages over the past few days.

I'm currently on 21.05.

stephenw10

You probably need to do a full power cycle on it to reset the crypto hardware (actually removing the power).
You can run at the command line: pkg-static -d update
That will also fail but the output would confirm the issue.

Steve

ebcdic

@stephenw10 said in SG-1100 update?:

pkg-static -d update

The output:

DBG(1)[56640]> pkg initialized
Updating pfSense-core repository catalogue...
DBG(1)[56640]> PkgRepo: verifying update for pfSense-core
DBG(1)[56640]> Pkgrepo, begin update of '/var/db/pkg/repo-pfSense-core.sqlite'
DBG(1)[56640]> Request to fetch pkg+https://repo.netgate.com/pkg/pfSense_plus-v21_05_2_aarch64-core/meta.conf
DBG(1)[56640]> opening libfetch fetcher
DBG(1)[56640]> Fetch > libfetch: connecting
DBG(1)[56640]> Fetch: fetching from: https://repo01.netgate.com/pkg/pfSense_plus-v21_05_2_aarch64-core/meta.conf with opts "i"
1082880000:error:141F0006:SSL routines:tls_construct_cert_verify:EVP lib:/usr/local/poudriere/jails/pfSense_plus-v21_05_aarch64/usr/src/crypto/openssl/ssl/statem/statem_lib.c:283:
DBG(1)[56640]> Fetch: fetching from: https://repo01.netgate.com/pkg/pfSense_plus-v21_05_2_aarch64-core/meta.conf with opts "i"
Certificate verification failed for /C=US/ST=Texas/L=Austin/O=Rubicon Communications, LLC (Netgate)/CN=repo01.netgate.com
1082880000:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/usr/local/poudriere/jails/pfSense_plus-v21_05_aarch64/usr/src/crypto/openssl/ssl/statem/statem_clnt.c:1915:
Segmentation fault (core dumped)

stephenw10

@ebcdic said in SG-1100 update?:

1082880000:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/usr/local/poudriere/jails/pfSense_plus-v21_05_aarch64/usr/src/crypto/openssl/ssl/statem/statem_clnt.c:1915:
Segmentation fault (core dumped)

Yeah that's almost certainly the crypto hardware not responding. A full power cycle should clear that.

Steve

ebcdic

Thanks, power cycling did indeed clear it and I have now been able to update to 22.01.