During Update / Upgrade: ...terminated abnormally: Segmentation fault

nasheayahu

Netgate SG-2100
Serial: 1930204341
Netgate Device ID: ba142f07a604b197ff0d

21.05-RELEASE (arm64)
built on Tue Jun 01 16:52:48 EDT 2021
FreeBSD 12.2-STABLE

Tried to Update / Upgrade while the modem status was Good and is was doing well until got this:

1082953728:error:141F0006:SSL routines:tls_construct_cert_verify:EVP lib:/var/jenkins/workspace/pfSense-build-release-tarballs/BUILD_NODE/pkg-aarch64/OS_MAJOR_VERSION/freebsd12/PLATFORM/aws/crypto/openssl/ssl/statem/statem_lib.c:283:
Certificate verification failed for /C=US/ST=Texas/L=Austin/O=Rubicon Communications, LLC (Netgate)/CN=repo00.atx.netgate.com
1082953728:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/var/jenkins/workspace/pfSense-build-release-tarballs/BUILD_NODE/pkg-aarch64/OS_MAJOR_VERSION/freebsd12/PLATFORM/aws/crypto/openssl/ssl/statem/statem_clnt.c:1916:
Child process pid=28780 terminated abnormally: Segmentation fault

Before I do a complete new install with the latest is there something I need to do to fix this or is it fixable or will the new install complete successfully?

Thanks for your help!...

bmeeks

Not 100% sure if this applies to your particular appliance, but a few of the other Netgate appliances on ARM architecture have an issue with a hardware crypto chip getting stuck in a manner that causes this. And a simple reboot will NOT fix it. Only a full power-off reset by removing the power after a graceful shutdown will fix it.

Try this:

Within the GUI power down the box gracefully under DIAGNOSTICS > HALT.
Give the box time to halt (even better if you can have direct console access while this is happening so you can see when it halts).
When you are sure it has halted, then remove the power cord for several seconds to allow any residual charge in capacitors to bleed off.
Then restore the power and see if it works then.

SteveITS

@bmeeks My 2100 had that. IIRC it isn't an issue going forward.

to link it: https://docs.netgate.com/pfsense/en/latest/troubleshooting/upgrades.html#segmentation-fault-in-pkg

bigsy

@nasheayahu I've seen the same message on a Netgate 2100. It was fixed by rebooting.

I've also done the remove power cord on the 2100 but my reading of this recent Reddit message is that the need to do this is specific to the Netgate 1100. The Netgate docs could be a bit clearer about this.

jimp

That kind of segfault in pkg can also happen if you have a package installed that is not present in the current release. The most common one is an older Zabbix version. You should be able to uninstall that package and then upgrade as normal.