22.01 - update fails

sgw

I don't see a subcategory for 22.01, so I post here.

I run 22.01 on a SG-1100 and now checking for updates fails:

# pkg update

Updating pfSense-core repository catalogue...
1078845440:error:141F0006:SSL routines:tls_construct_cert_verify:EVP lib:/var/jenkins/workspace/pfSense-img-build/BUILD_NODE/aarch64/OS_MAJOR_VERSION/freebsd12/PLATFORM/aws/sources/FreeBSD-src-plus-devel-12/crypto/openssl/ssl/statem/statem_lib.c:283:
Certificate verification failed for /C=US/ST=Texas/L=Austin/O=Rubicon Communications, LLC (Netgate)/CN=repo01.netgate.com
1078845440:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/var/jenkins/workspace/pfSense-img-build/BUILD_NODE/aarch64/OS_MAJOR_VERSION/freebsd12/PLATFORM/aws/sources/FreeBSD-src-plus-devel-12/crypto/openssl/ssl/statem/statem_clnt.c:1916:
Child process pid=58878 terminated abnormally: Segmentation fault

Gertjan

@sgw

Try this :
Select Diagnostics > Halt System and us Halt button.
The the device some time to stop.
Remove the power now.

Count to 60.

Get the power back, have it booted.
Test the update again.

sgw

@gertjan did that, now upgrade works. Thank you.

scurrier

See also: https://redmine.pfsense.org/issues/12835

This just happened to me while trying to upgrade to 22.01 on my SG-1100. My firewall is remote. Does anyone know of a way to work around the issue without needing to physically remove power?

This model firewall sure has a lot of issues.

scurrier

Actually, I rebooted with filesystem check and that resolved it and allowed the update to complete.

gpfsenser

@sgw I have a similar issue

Tried restart with fsck. Tried halt, and remove power for 30 seconds, halt and remove power for 2 minutes. Stand on head. Rub rabbits foot.

Seriously?

Anyway, looks like 22.01 is not in the cards right now:

Checking for upgrades (198 candidates): ....
Child process pid=59261 terminated abnormally: Segmentation fault
Failed

gpfsenser

@gpfsenser For me - seems to have been solved by removing 5.2 zabbix package, will re-install after update. Crossing fingers.... Would be nice to have some kind of package error messages or 'pre-flight' check.

gpfsenser

Finally got mine upgraded. It's a pretty big upgrade - make sure to allow time, take backup, and have your serial cable ready. No issues once I figured out it was an incompatible package stopping the upgrade.

stephenw10

I'm sorry about that. Looks like you were hitting this: https://redmine.pfsense.org/issues/12796
I thought that was fixed but apparently more digging required there.

Steve