Update to 22.01 Failed with "Authentication error"

[poormann]

Hi Team,

I am trying to update the SG-2100, but getting the "Authentication error" when the system tries to download one of the packages.

System 	Netgate SG-2100
BIOS 	Vendor: U-Boot
Version: 2018.03-devel-1.2.0ROGUE2-01.00.00.02+
Release Date: Fri Feb 7 2020
Version 	21.02-RELEASE-p1 (arm64)
built on Mon Feb 22 09:37:39 EST 2021
FreeBSD 12.2-STABLE

update log

>>> Updating repositories metadata... 
Updating pfSense-core repository catalogue...
Fetching meta.conf: . done
Fetching packagesite.pkg: . done
Processing entries: . done
pfSense-core repository update completed. 6 packages processed.
Updating pfSense repository catalogue...
Fetching meta.conf: . done
Fetching packagesite.pkg: .......... done
Processing entries: 
Processing entries............. done
pfSense repository update completed. 506 packages processed.
All repositories are up to date.
>>> Setting vital flag on pkg... done.
>>> Removing vital flag from php74... done.
>>> Downloading upgrade packages... 
Updating pfSense-core repository catalogue...
pfSense-core repository is up to date.
Updating pfSense repository catalogue...
pfSense repository is up to date.
All repositories are up to date.
Checking for upgrades (185 candidates): .......... done
Processing candidates (185 candidates): .......... done
The following 187 package(s) will be affected (of 0 checked):

New packages to be INSTALLED:
	libssh2: 1.9.0_3,3 [pfSense]
	mpdecimal: 2.5.1 [pfSense]
	openldap24-client: 2.4.59_4 [pfSense]
	openpgm: 5.2.122_6 [pfSense]
	py38-libzfs: 1.1.2021100100 [pfSense]
	py38-ply: 3.11 [pfSense]
	py38-setuptools: 57.0.0 [pfSense]
	python38: 3.8.12_1 [pfSense]

Installed packages to be UPGRADED:
	arm64resetbutton: 0.2 -> 0.3 [pfSense]
	bind-tools: 9.16.12 -> 9.16.23 [pfSense]
	c-icap: 0.5.7,2 -> 0.5.10,2 [pfSense]
	c-icap-modules: 0.5.4 -> 0.5.5 [pfSense]
	ca_root_nss: 3.58 -> 3.71 [pfSense]
	ccid: 1.4.32 -> 1.4.36 [pfSense]
	check_reload_status: 0.0.10_1 -> 0.0.11 [pfSense]
	clamav: 0.103.0,1 -> 0.104.1,1 [pfSense]
	cpdup: 1.20 -> 1.22 [pfSense]
	curl: 7.74.0 -> 7.80.0 [pfSense]
	cyrus-sasl: 2.1.27_1 -> 2.1.27_2 [pfSense]
	dbus: 1.12.20_3 -> 1.12.20_5 [pfSense]
	dnsmasq: 2.84,1 -> 2.86,1 [pfSense]
	expat: 2.2.10 -> 2.4.1 [pfSense]
	expiretable: 0.6_1 -> 0.6_2 [pfSense]
	filterlog: 0.1_6 -> 0.1_9 [pfSense]
	glib: 2.66.4_1,1 -> 2.70.2,2 [pfSense]
	hostapd: 2.9_2 -> 2.9_4 [pfSense]
	icu: 68.2,1 -> 70.1_1,1 [pfSense]
	isc-dhcp44-client: 4.4.2_1 -> 4.4.2P1 [pfSense]
	isc-dhcp44-relay: 4.4.2_1 -> 4.4.2P1 [pfSense]
	isc-dhcp44-server: 4.4.2_1 -> 4.4.2P1_1 [pfSense]
	krb5: 1.18.3 -> 1.19.2 [pfSense]
	libedit: 3.1.20191231,1 -> 3.1.20210216,1 [pfSense]
	libgcrypt: 1.8.7 -> 1.9.4 [pfSense]
	libgpg-error: 1.41 -> 1.43 [pfSense]
	libidn2: 2.3.0_1 -> 2.3.2 [pfSense]
	libnghttp2: 1.42.0 -> 1.46.0 [pfSense]
	libuv: 1.40.0 -> 1.42.0 [pfSense]
	libxml2: 2.9.10_2 -> 2.9.12 [pfSense]
	libxslt: 1.1.34_1 -> 1.1.34_2 [pfSense]
	libzmq4: 4.3.1_1 -> 4.3.4 [pfSense]
	lua-resty-core: 0.1.21_1 -> 0.1.22 [pfSense]
	lua-resty-lrucache: 0.10 -> 0.11 [pfSense]
	luajit-openresty: 2.1.20201027 -> 2.1.20210510 [pfSense]
	miniupnpd: 2.2.1,1 -> 2.2.1_1,1 [pfSense]
	mobile-broadband-provider-info: 20190618_1 -> 20210805 [pfSense]
	mpd5: 5.9 -> 5.9_6 [pfSense]
	nettle: 3.6 -> 3.7.3 [pfSense]
	nginx: 1.18.0_45,2 -> 1.20.2_1,2 [pfSense]
	nss_ldap: 1.265_13 -> 1.265_14 [pfSense]
	ntp: 4.2.8p15 -> 4.2.8p15_3 [pfSense]
	oniguruma: 6.9.6 -> 6.9.7.1 [pfSense]
	opensc: 0.21.0 -> 0.22.0 [pfSense]
	openvpn: 2.5.0 -> 2.5.4_1 [pfSense]
	openvpn-client-export: 2.5.0 -> 2.5.2 [pfSense]
	pam_ldap: 186 -> 186_1 [pfSense]
	pcre: 8.44 -> 8.45 [pfSense]
	pcre2: 10.36 -> 10.39 [pfSense]
	pcsc-lite: 1.9.0_1,2 -> 1.9.4,2 [pfSense]
	pfSense: 21.02_1 -> 22.01 [pfSense]
	pfSense-Status_Monitoring: 1.7.11_3 -> 1.7.11_4 [pfSense]
	pfSense-base: 21.02_1 -> 22.01 [pfSense-core]
	pfSense-default-config-serial: 21.02_1 -> 22.01 [pfSense-core]
	pfSense-kernel-pfSense: 21.02_1 -> 22.01 [pfSense-core]
	pfSense-pkg-openvpn-client-export: 1.5_6 -> 1.6_4 [pfSense]
	pfSense-pkg-squid: 0.4.45_3 -> 0.4.45_8 [pfSense]
	pfSense-rc: 21.02_1 -> 22.01 [pfSense-core]
	pfSense-u-boot-1100: 20181122 -> 20220202 [pfSense]
	pfSense-u-boot-2100: 20200309 -> 20210930_1 [pfSense]
	pfSense-u-boot-env: 20200316 -> 20211006 [pfSense]
	php74: 7.4.15 -> 7.4.26 [pfSense]
	php74-bcmath: 7.4.15 -> 7.4.26 [pfSense]
	php74-bz2: 7.4.15 -> 7.4.26 [pfSense]
	php74-ctype: 7.4.15 -> 7.4.26 [pfSense]
	php74-curl: 7.4.15 -> 7.4.26 [pfSense]
	php74-dom: 7.4.15 -> 7.4.26 [pfSense]
	php74-filter: 7.4.15 -> 7.4.26 [pfSense]
	php74-gettext: 7.4.15 -> 7.4.26 [pfSense]
	php74-intl: 7.4.15 -> 7.4.26 [pfSense]
	php74-json: 7.4.15 -> 7.4.26 [pfSense]
	php74-ldap: 7.4.15 -> 7.4.26 [pfSense]
	php74-mbstring: 7.4.15 -> 7.4.26 [pfSense]
	php74-opcache: 7.4.15 -> 7.4.26 [pfSense]
	php74-openssl: 7.4.15 -> 7.4.26 [pfSense]
	php74-pcntl: 7.4.15 -> 7.4.26 [pfSense]
	php74-pdo: 7.4.15 -> 7.4.26 [pfSense]
	php74-pdo_sqlite: 7.4.15 -> 7.4.26 [pfSense]
	php74-pear-Cache_Lite: 1.7.16,1 -> 1.8.3,1 [pfSense]
	php74-pear-HTTP_Request2: 2.3.0,1 -> 2.5.0,1 [pfSense]
	php74-pear-Net_SMTP: 1.9.0 -> 1.10.0 [pfSense]
	php74-pear-Net_Socket: 1.0.14 -> 1.2.2 [pfSense]
	php74-pecl-radius: 1.4.0.b1 -> 1.4.0b1_1 [pfSense]
	php74-pfSense-module: 0.69_1 -> 0.76 [pfSense]
	php74-posix: 7.4.15 -> 7.4.26 [pfSense]
	php74-readline: 7.4.15 -> 7.4.26 [pfSense]
	php74-session: 7.4.15 -> 7.4.26 [pfSense]
	php74-shmop: 7.4.15 -> 7.4.26 [pfSense]
	php74-simplexml: 7.4.15 -> 7.4.26 [pfSense]
	php74-sockets: 7.4.15 -> 7.4.26 [pfSense]
	php74-sqlite3: 7.4.15 -> 7.4.26 [pfSense]
	php74-sysvmsg: 7.4.15 -> 7.4.26 [pfSense]
	php74-sysvsem: 7.4.15 -> 7.4.26 [pfSense]
	php74-sysvshm: 7.4.15 -> 7.4.26 [pfSense]
	php74-tokenizer: 7.4.15 -> 7.4.26 [pfSense]
	php74-xml: 7.4.15 -> 7.4.26 [pfSense]
	php74-xmlreader: 7.4.15 -> 7.4.26 [pfSense]
	php74-xmlwriter: 7.4.15 -> 7.4.26 [pfSense]
	php74-zlib: 7.4.15 -> 7.4.26 [pfSense]
	radvd: 2.19 -> 2.19_2 [pfSense]
	readline: 8.0.4 -> 8.1.1 [pfSense]
	scponly: 4.8.20110526_4 -> 4.8.20110526_5 [pfSense]
	smartmontools: 7.2 -> 7.2_3 [pfSense]
	sqlite3: 3.34.0,1 -> 3.35.5_4,1 [pfSense]
	squid: 4.13 -> 4.15 [pfSense]
	sshguard: 2.4.1,1 -> 2.4.2_1,1 [pfSense]
	strongswan: 5.9.1 -> 5.9.4 [pfSense]
	unbound: 1.13.1 -> 1.13.2 [pfSense]
	wpa_supplicant: 2.9_7 -> 2.9_11 [pfSense]

Installed packages to be REINSTALLED:
	arc-5.21p [pfSense]
	arj-3.10.22_8 [pfSense]
	brotli-1.0.9,1 [pfSense]
	bsnmp-regex-0.6_2 [pfSense]
	bsnmp-ucd-0.4.5 [pfSense]
	choparp-20150613 [pfSense]
	cpustats-0.1_1 [pfSense]
	dhcp6-20080615.2_4 [pfSense]
	dhcpleases-0.5_1 [pfSense]
	dhcpleases6-0.1_3 [pfSense]
	dpinger-3.0 [pfSense]
	filterdns-2.0_5 [pfSense]
	gettext-runtime-0.21 [pfSense]
	gmp-6.2.1 [pfSense]
	iftop-1.0.p4 [pfSense]
	igmpproxy-0.3,1 [pfSense]
	indexinfo-0.3.1 [pfSense]
	ipmitool-1.8.18_3 [pfSense]
	json-c-0.15_1 [pfSense]
	ldns-1.7.1_2 [pfSense]
	libargon2-20190702 [pfSense]
	libevent-2.1.12 [pfSense]
	libffi-3.3_1 [pfSense]
	libiconv-1.16 [pfSense]
	libinotify-20180201_2 [pfSense]
	libltdl-2.4.6 [pfSense]
	liblz4-1.9.3,1 [pfSense]
	libmcrypt-2.5.8_3 [pfSense]
	libmspack-0.10.1 [pfSense]
	libucl-0.8.1 [pfSense]
	libunistring-0.9.10_1 [pfSense]
	links-2.20.2_1,1 [pfSense]
	lzo2-2.10_1 [pfSense]
	minicron-0.0.2 [pfSense]
	netgate-ca-20210105 [pfSense]
	netgate-ping-auth-20212005 [pfSense]
	norm-1.5r6_1 [pfSense]
	openvpn-auth-script-1.0.0.3 [pfSense]
	p7zip-16.02_3 [pfSense]
	pam_mkhomedir-0.2 [pfSense]
	perl5-5.32.1_1 [pfSense]
	pfSense-repo-22.01_2 [pfSense]
	pfSense-upgrade-1.0_12 [pfSense]
	pftop-0.7_9 [pfSense]
	php74-openssl_x509_crl-1.3 [pfSense]
	php74-pear-1.10.12 [pfSense]
	php74-pear-Auth_RADIUS-1.1.0_4 [pfSense]
	php74-pear-Crypt_CHAP-1.5.0 [pfSense]
	php74-pear-Mail-1.4.1,1 [pfSense]
	php74-pear-Net_IPv6-1.3.0.b2_2 [pfSense]
	php74-pear-Net_URL2-2.2.1 [pfSense]
	php74-pear-XML_RPC2-1.1.4 [pfSense]
	php74-pecl-mcrypt-1.0.4 [pfSense]
	php74-pecl-rrd-2.0.1_1 [pfSense]
	php74-phpseclib-2.0.17 [pfSense]
	php74-simplepie-1.5.1_1 [pfSense] (direct dependency changed: php74)
	pkg-1.17.5_2 [pfSense]
	qstats-0.2 [pfSense]
	rate-0.9_2 [pfSense]
	rrdtool-1.7.2_4 [pfSense]
	squid_radius_auth-1.10 [pfSense]
	squidclamav-7.1 [pfSense]
	ssh_tunnel_shell-0.2_1 [pfSense]
	uclcmd-0.1_3 [pfSense]
	unzoo-4.4_2 [pfSense]
	voucher-0.1_2 [pfSense]
	vstr-1.0.15_1 [pfSense]
	wol-0.7.1_4 [pfSense]
	xinetd-2.3.15_2 [pfSense]
	zip-3.0_1 [pfSense]

Number of packages to be installed: 8
Number of packages to be upgraded: 109
Number of packages to be reinstalled: 70

The process will require 169 MiB more space.
184 MiB to be downloaded.
[1/184] Fetching zip-3.0_1.pkg: .......... done
[2/184] Fetching xinetd-2.3.15_2.pkg: .......... done
[3/184] Fetching wpa_supplicant-2.9_11.pkg: .......... done
[4/184] Fetching wol-0.7.1_4.pkg: .... done
[5/184] Fetching vstr-1.0.15_1.pkg: .......... done
[6/184] Fetching voucher-0.1_2.pkg: . done
[7/184] Fetching unzoo-4.4_2.pkg: .. done
[8/184] Fetching unbound-1.13.2.pkg: .......... done
[9/184] Fetching uclcmd-0.1_3.pkg: .. done
[10/184] Fetching strongswan-5.9.4.pkg: .......... done
[11/184] Fetching sshguard-2.4.2_1,1.pkg: .......... done
[12/184] Fetching ssh_tunnel_shell-0.2_1.pkg: .......... done
[13/184] Fetching squidclamav-7.1.pkg: ........ done
[14/184] Fetching squid_radius_auth-1.10.pkg: .. done
[15/184] Fetching squid-4.15.pkg: .......... done
[16/184] Fetching sqlite3-3.35.5_4,1.pkg: .......... done
[17/184] Fetching smartmontools-7.2_3.pkg: .......... done
[18/184] Fetching scponly-4.8.20110526_5.pkg: ... done
[19/184] Fetching rrdtool-1.7.2_4.pkg: .......... done
[20/184] Fetching readline-8.1.1.pkg: .......... done
[21/184] Fetching rate-0.9_2.pkg: ...... done
[22/184] Fetching radvd-2.19_2.pkg: ...... done
[23/184] Fetching qstats-0.2.pkg: . done
[24/184] Fetching php74-zlib-7.4.26.pkg: ... done
[25/184] Fetching php74-xmlwriter-7.4.26.pkg: .. done
[26/184] Fetching php74-xmlreader-7.4.26.pkg: .. done
[27/184] Fetching php74-xml-7.4.26.pkg: ... done
[28/184] Fetching php74-tokenizer-7.4.26.pkg: .. done
[29/184] Fetching php74-sysvshm-7.4.26.pkg: . done
[30/184] Fetching php74-sysvsem-7.4.26.pkg: . done
[31/184] Fetching php74-sysvmsg-7.4.26.pkg: . done
[32/184] Fetching php74-sqlite3-7.4.26.pkg: ... done
[33/184] Fetching php74-sockets-7.4.26.pkg: ..... done
[34/184] Fetching php74-simplexml-7.4.26.pkg: ... done
[35/184] Fetching php74-simplepie-1.5.1_1.pkg: ......... done
[36/184] Fetching php74-shmop-7.4.26.pkg: . done
[37/184] Fetching php74-session-7.4.26.pkg: .... done
[38/184] Fetching php74-readline-7.4.26.pkg: .. done
[39/184] Fetching php74-posix-7.4.26.pkg: .. done
[40/184] Fetching php74-phpseclib-2.0.17.pkg: .......... done
[41/184] Fetching php74-pfSense-module-0.76.pkg: ..... done
[42/184] Fetching php74-pecl-rrd-2.0.1_1.pkg: .. done
[43/184] Fetching php74-pecl-radius-1.4.0b1_1.pkg: ... done
[44/184] Fetching php74-pecl-mcrypt-1.0.4.pkg: .. done
[45/184] Fetching php74-pear-XML_RPC2-1.1.4.pkg: ........ done
[46/184] Fetching php74-pear-Net_URL2-2.2.1.pkg: ... done
[47/184] Fetching php74-pear-Net_Socket-1.2.2.pkg: . done
[48/184] Fetching php74-pear-Net_SMTP-1.10.0.pkg: .. done
[49/184] Fetching php74-pear-Net_IPv6-1.3.0.b2_2.pkg: .. done
[50/184] Fetching php74-pear-Mail-1.4.1,1.pkg: ... done
[51/184] Fetching php74-pear-HTTP_Request2-2.5.0,1.pkg: .......... done
[52/184] Fetching php74-pear-Crypt_CHAP-1.5.0.pkg: . done
[53/184] Fetching php74-pear-Cache_Lite-1.8.3,1.pkg: .... done
[54/184] Fetching php74-pear-Auth_RADIUS-1.1.0_4.pkg: .. done
[55/184] Fetching php74-pear-1.10.12.pkg: .......... done
[56/184] Fetching php74-pdo_sqlite-7.4.26.pkg: .. done
[57/184] Fetching php74-pdo-7.4.26.pkg: ...... done
[58/184] Fetching php74-pcntl-7.4.26.pkg: .. done
[59/184] Fetching php74-openssl_x509_crl-1.3.pkg: .. done
[60/184] Fetching php74-openssl-7.4.26.pkg: ....... done
[61/184] Fetching php74-opcache-7.4.26.pkg: .......... done
[62/184] Fetching php74-mbstring-7.4.26.pkg: .......... done
[63/184] Fetching php74-ldap-7.4.26.pkg: .... done
[64/184] Fetching php74-json-7.4.26.pkg: ... done
[65/184] Fetching php74-intl-7.4.26.pkg: .......... done
[66/184] Fetching php74-gettext-7.4.26.pkg: . done
[67/184] Fetching php74-filter-7.4.26.pkg: ... done
[68/184] Fetching php74-dom-7.4.26.pkg: ....... done
[69/184] Fetching php74-curl-7.4.26.pkg: .... done
[70/184] Fetching php74-ctype-7.4.26.pkg: . done
[71/184] Fetching php74-bz2-7.4.26.pkg: .. done
[72/184] Fetching php74-bcmath-7.4.26.pkg: ... done
[73/184] Fetching php74-7.4.26.pkg: .......... done
[74/184] Fetching pftop-0.7_9.pkg: ....... done
[75/184] Fetching pfSense-u-boot-env-20211006.pkg: .. done
[76/184] Fetching pfSense-u-boot-2100-20210930_1.pkg: .......... done
[77/184] Fetching pfSense-u-boot-1100-20220202.pkg: .......... done
[78/184] Fetching pfSense-rc-22.01.pkg: .. done
SSL certificate subject doesn't match host repo00.atx.netgate.com
SSL certificate subject doesn't match host repo00.atx.netgate.com
pkg-static: https://repo00.atx.netgate.com/pkg/pfSense_plus-v22_01_aarch64-pfSense_plus_v22_01/All/pfSense-pkg-squid-0.4.45_8.pkg: Authentication error
Failed

how to resolve the problem?
thank you for your support in advance!

[poormann]

Hi there,

I have tried already many times, but still the same problem... no one can advise how to resolve it?

thank you for your support in advance!

[stephenw10]

Does it fail in the same place every time?

[bingo600]

@poormann
Do you have Zabbix Agent installed on your system ?
Several people have mentioned crashes if that one is installed during upgrade.

Solution :
Delete the package in the current system.
Upgrade to 22.x
Reinstall Zabbix Agent packag (config will be kept)

/Bingo

Ps:
I just today upgraded my "Summerhouse pfSense 2.5.2" to 2.6.0 and then 22.01 ... Just one minor issue quirk.

I Lost the Avahi package during 2.5.2 to 2.6.0 , but the system warned about no package match. I just reinstalled it ...

[poormann]

Hi there,

finally, I was able to update it, it is very strange, it was failing before on one package listed in the logs above, but today it was crashing many times by retrieving the other packages as well, but in the end, was able to get everything and make an update. I lost the system for 10 minutes after a reboot, I thought tomorrow I will have a very "nice" morning in the office with being hit by hundreds of questions about why the network is dead... The system is now alive, but during the boot process in logs I found some logs which do not really looking good, tomorrow will be more clear whether everything works as before :)
BR,