Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    During update from 22.05 I get this "PHP ERROR: Type: 64, File: /etc/inc/certs.inc"

    Scheduled Pinned Locked Moved
    Plus 23.01 Development Snapshots (Retired)
    4
    14
    1.2k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • N
      NRgia
      last edited by NRgia

      During update process I got the following when OpenVPN sync step is reached:

      PHP ERROR: Type: 64, File: /etc/inc/certs.inc, Line: 1021, Message: require_once(): Failed opening required 'ASN1_NULL.php' (include_path='.:/etc/inc:/usr/local/pfSense/include:/usr/local/pfSense/include/www:/usr/local/www:/usr/local/captiveportal:/usr/local/pkg:/usr/local/www/classes:/usr/local/www/classes/Form:/usr/local/share/pear:/usr/local/share/openssl_x509_crl/') @ 2022-07-23 14:23:37

      If I comment line 1021 I got:

      PHP ERROR: Type: 1, File: /usr/local/share/openssl_x509_crl/ASN1.php, Line: 271, Message: Uncaught Error: Class 'Ukrbublik\openssl_x509_crl\ASN1_NULL' not found in /usr/local/share/openssl_x509_crl/ASN1.php:271
Stack trace:
#0 /usr/local/share/openssl_x509_crl/ASN1.php(138): Ukrbublik\openssl_x509_crl\ASN1->decodeConstructed('0\x82\x06\x8F0\x82\x04w\xA0\x03\x02\x01\x02\x02\x01...', 18, 13)
#1 /usr/local/share/openssl_x509_crl/ASN1.php(314): Ukrbublik\openssl_x509_crl\ASN1->decode('0\x82\x06\x8F0\x82\x04w\xA0\x03\x02\x01\x02\x02\x01...', 18, 13)
#2 /usr/local/share/openssl_x509_crl/ASN1.php(138): Ukrbublik\openssl_x509_crl\ASN1->decodeConstructed('0\x82\x06\x8F0\x82\x04w\xA0\x03\x02\x01\x02\x02\x01...', 8, 1143)
#3 /usr/local/share/openssl_x509_crl/ASN1.php(314): Ukrbublik\openssl_x509_crl\ASN1->decode('0\x82\x06\x8F0\x82\x04w\xA0\x03\x02\x01\x02\x02\x01...', 8, 1143)
#4 /usr/local/share/openssl_x509_crl/ASN1.php(138): Ukrbublik\openssl_x509_crl\ASN1->decodeConstructed('0\x82\x06\x8F0\x82\x04w\xA0\x03\x02\x01\x02\x02\x01...', 4, 1679)
#5 /usr/local/share/openssl_x509_crl/ASN1.php(314): Ukrbublik\op @ 2022-07-23 15:10:16

      The process continues but I don't have any DNS resolution, Web interface, etc. I can ping public or local IPs.

      I reverted back to 22.05, using Boot Environments, thank you @cmcdonald

      Anyone knows how to fix this?
      Thank you

      1 Reply Last reply Reply Quote 0
      • stephenw10S
        stephenw10 Netgate Administrator
        last edited by

        Do you know which cert that is it's choking on? Can you re-create or renew it before attempting to upgrade again?

        GertjanG 1 Reply Last reply Reply Quote 0
        • GertjanG
          Gertjan @stephenw10
          last edited by Gertjan

          @stephenw10
          Not a cert.
          A file went missing : Failed opening required 'ASN1_NULL.php'
          This file should be here : /usr/local/share/openssl_x509_crl/ which is in the PHP search path.

          Using 22.05, the file is there.
          It's not part of "22.11" any more ? /or/ something went wrong during the update.

          @nrgia said in During update from 22.05 I get this "PHP ERROR: Type: 64, File: /etc/inc/certs.inc":

          If I comment line 1021 I got:

          even more mess. That is ok and normal.

          No "help me" PM's please. Use the forum, the community will thank you.
          Edit : and where are the logs ??

          1 Reply Last reply Reply Quote 1
          • stephenw10S
            stephenw10 Netgate Administrator
            last edited by

            It should be there:

            [22.09-DEVELOPMENT][admin@6100.stevew.lan]/root: find / -name "*ASN1_NULL.php*"
/usr/local/share/openssl_x509_crl/ASN1_NULL.php
            N 1 Reply Last reply Reply Quote 0
            • N
              NRgia @stephenw10
              last edited by NRgia

              @stephenw10 said in During update from 22.05 I get this "PHP ERROR: Type: 64, File: /etc/inc/certs.inc":

              It should be there:

              [22.09-DEVELOPMENT][admin@6100.stevew.lan]/root: find / -name "*ASN1_NULL.php*"
/usr/local/share/openssl_x509_crl/ASN1_NULL.php

              So on 22.05 ASN1.NULL is present:
              pfsense_22.05_ASN1_NULL_present.png

              During the update process I get this:

              pfsense_22_09_error.png

              Also the ASN1_NULL is missing from 22.09:

              pfsense_22_09_ASN1_NULL_missing.png

              So the update process deletes it somehow.

              1 Reply Last reply Reply Quote 0
              • stephenw10S
                stephenw10 Netgate Administrator
                last edited by

                Hmm, should be there. That box I checked was recently upgraded from 22.05.
                So I'd imagine the upgrade may not have completed successfully. Try running pkg upgrade at the command line and see if it offers you any package upgrades.

                N JeGrJ 2 Replies Last reply Reply Quote 0
                • N
                  NRgia @stephenw10
                  last edited by

                  @stephenw10 said in During update from 22.05 I get this "PHP ERROR: Type: 64, File: /etc/inc/certs.inc":

                  Hmm, should be there. That box I checked was recently upgraded from 22.05.
                  So I'd imagine the upgrade may not have completed successfully. Try running pkg upgrade at the command line and see if it offers you any package upgrades.

                  I believe you. I tried to update more than once, just to exclude an improper update, but I got the same result.

                  "pkg upgrade" will not work in the state the pfsense is in. No host can be reached. I can only ping IPs like 8.8.8.8, etc.

                  1 Reply Last reply Reply Quote 0
                  • stephenw10S
                    stephenw10 Netgate Administrator
                    last edited by

                    If you have a WAN side DHCP server you can run dhclient on the WAN NIC and it will pull DNS servers from there just to get external access.

                    N 1 Reply Last reply Reply Quote 0
                    • N
                      NRgia @stephenw10
                      last edited by NRgia

                      @stephenw10 said in During update from 22.05 I get this "PHP ERROR: Type: 64, File: /etc/inc/certs.inc":

                      If you have a WAN side DHCP server you can run dhclient on the WAN NIC and it will pull DNS servers from there just to get external access.

                      If by "WAN side DHCP server", you mean, that my IP is assigned that way then yes. If not...
                      Also the web interface cannot be accesed, I only have acces to CLI. I don't know how to do it in FreeBSD CLI

                      1 Reply Last reply Reply Quote 0
                      • stephenw10S
                        stephenw10 Netgate Administrator
                        last edited by

                        You can run for example: dhclient igb0
                        But if your WAN is already dhcp that probably won't help because it should have already happened. Is the dhcp server passing any dns servers to use?

                        1 Reply Last reply Reply Quote 0
                        • JeGrJ
                          JeGr LAYER 8 Moderator @stephenw10
                          last edited by JeGr

                          @stephenw10 said in During update from 22.05 I get this "PHP ERROR: Type: 64, File: /etc/inc/certs.inc":

                          Hmm, should be there. That box I checked was recently upgraded from 22.05.
                          So I'd imagine the upgrade may not have completed successfully. Try running pkg upgrade at the command line and see if it offers you any package upgrades.

                          Just to chime in: after your help with updating the pkg repo so we could update the lab VMs again, the 22.09 box updated to the recent 22.09 snapshot and also had a certificate PHP error popping up after reboot. And that box was on 22.09 beforehand, so it's at least nothing fixed to 22.05->snapshot but has to be in the last few snapshots.

                          Jul 28 17:26:40	php	44621	/etc/rc.packages: New alert found: PHP ERROR: Type: 64, File: /etc/inc/certs.inc, Line: 1021, Message: require_once(): Failed opening required 'ASN1_NULL.php' (include_path='.:/etc/inc:/usr/local/pfSense/include:/usr/local/pfSense/include/www:/usr/local/www:/usr/local/captiveportal:/usr/local/pkg:/usr/local/www/classes:/usr/local/www/classes/Form:/usr/local/share/pear:/usr/local/share/openssl_x509_crl/')

Jul 28 17:26:40	php	44621	/etc/rc.packages: PHP ERROR: Type: 64, File: /etc/inc/certs.inc, Line: 1021, Message: require_once(): Failed opening required 'ASN1_NULL.php' (include_path='.:/etc/inc:/usr/local/pfSense/include:/usr/local/pfSense/include/www:/usr/local/www:/usr/local/captiveportal:/usr/local/pkg:/usr/local/www/classes:/usr/local/www/classes/Form:/usr/local/share/pear:/usr/local/share/openssl_x509_crl/')

                          Don't forget to upvote 👍 those who kindly offered their time and brainpower to help you!

                          If you're interested, I'm available to discuss details of German-speaking paid support (for companies) if needed.

                          1 Reply Last reply Reply Quote 2
                          • stephenw10S
                            stephenw10 Netgate Administrator
                            last edited by

                            Hmm, doesn't appear to be specific to a snapshot either. It's still present on that box I updated after updating to todays snap.

                            N 1 Reply Last reply Reply Quote 0
                            • N
                              NRgia @stephenw10
                              last edited by

                              @stephenw10 said in During update from 22.05 I get this "PHP ERROR: Type: 64, File: /etc/inc/certs.inc":

                              Hmm, doesn't appear to be specific to a snapshot either. It's still present on that box I updated after updating to todays snap.

                              For the moment we don't know what's trigerring this?

                              1 Reply Last reply Reply Quote 0
                              • stephenw10S
                                stephenw10 Netgate Administrator
                                last edited by

                                Not yet. The file seems to be missing from some installs. We are still digging into what's causing that.

                                1 Reply Last reply Reply Quote 0
                                • First post
                                  Last post