cannot upgrade pfsense: Certificate verification failed

[elmacotaco]

Hi, I'm trying to upgrade my pfsense to version 22.01 but I'm getting a certificate verification error. The same error happens when I try to update any of my installed packages, such as the acme package. See output below:

>>> Updating repositories metadata... 
Updating pfSense-core repository catalogue...
1082953728:error:141F0006:SSL routines:tls_construct_cert_verify:EVP lib:/var/jenkins/workspace/pfSense-build-release-tarballs/BUILD_NODE/pkg-aarch64/OS_MAJOR_VERSION/freebsd12/PLATFORM/aws/crypto/openssl/ssl/statem/statem_lib.c:283:
Certificate verification failed for /C=US/ST=Texas/L=Austin/O=Rubicon Communications, LLC (Netgate)/CN=repo00.netgate.com
1082953728:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/var/jenkins/workspace/pfSense-build-release-tarballs/BUILD_NODE/pkg-aarch64/OS_MAJOR_VERSION/freebsd12/PLATFORM/aws/crypto/openssl/ssl/statem/statem_clnt.c:1916:
Child process pid=55042 terminated abnormally: Segmentation fault
>>> Upgrading pfSense-upgrade... failed.

When I try to browse to the repo host (https://repo00.netgate.com/) the browser also says the cert is invalid. what is going on?

[johnpoz]

@elmacotaco said in cannot upgrade pfsense: Certificate verification failed:

(https://repo00.netgate.com/

see this thread

https://forum.netgate.com/topic/165700/repo01-netgate-com-tls-cert-seems-invalid

[elmacotaco]

@johnpoz Thanks, after doing a full power cycle as suggested in that thread, the upgrade worked.