Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    During update from 22.05 I get this "PHP ERROR: Type: 64, File: /etc/inc/certs.inc"

    Scheduled Pinned Locked Moved Plus 23.01 Development Snapshots (Retired)
    14 Posts 4 Posters 1.6k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • stephenw10S
      stephenw10 Netgate Administrator
      last edited by

      Do you know which cert that is it's choking on? Can you re-create or renew it before attempting to upgrade again?

      GertjanG 1 Reply Last reply Reply Quote 0
      • GertjanG
        Gertjan @stephenw10
        last edited by Gertjan

        @stephenw10
        Not a cert.
        A file went missing : Failed opening required 'ASN1_NULL.php'
        This file should be here : /usr/local/share/openssl_x509_crl/ which is in the PHP search path.

        Using 22.05, the file is there.
        It's not part of "22.11" any more ? /or/ something went wrong during the update.

        @nrgia said in During update from 22.05 I get this "PHP ERROR: Type: 64, File: /etc/inc/certs.inc":

        If I comment line 1021 I got:

        even more mess. That is ok and normal.

        No "help me" PM's please. Use the forum, the community will thank you.
        Edit : and where are the logs ??

        1 Reply Last reply Reply Quote 1
        • stephenw10S
          stephenw10 Netgate Administrator
          last edited by

          It should be there:

          [22.09-DEVELOPMENT][admin@6100.stevew.lan]/root: find / -name "*ASN1_NULL.php*"
/usr/local/share/openssl_x509_crl/ASN1_NULL.php
          N 1 Reply Last reply Reply Quote 0
          • N
            NRgia @stephenw10
            last edited by NRgia

            @stephenw10 said in During update from 22.05 I get this "PHP ERROR: Type: 64, File: /etc/inc/certs.inc":

            It should be there:

            [22.09-DEVELOPMENT][admin@6100.stevew.lan]/root: find / -name "*ASN1_NULL.php*"
/usr/local/share/openssl_x509_crl/ASN1_NULL.php

            So on 22.05 ASN1.NULL is present:
            pfsense_22.05_ASN1_NULL_present.png

            During the update process I get this:

            pfsense_22_09_error.png

            Also the ASN1_NULL is missing from 22.09:

            pfsense_22_09_ASN1_NULL_missing.png

            So the update process deletes it somehow.

            1 Reply Last reply Reply Quote 0
            • stephenw10S
              stephenw10 Netgate Administrator
              last edited by

              Hmm, should be there. That box I checked was recently upgraded from 22.05.
              So I'd imagine the upgrade may not have completed successfully. Try running pkg upgrade at the command line and see if it offers you any package upgrades.

              N JeGrJ 2 Replies Last reply Reply Quote 0
              • N
                NRgia @stephenw10
                last edited by

                @stephenw10 said in During update from 22.05 I get this "PHP ERROR: Type: 64, File: /etc/inc/certs.inc":

                Hmm, should be there. That box I checked was recently upgraded from 22.05.
                So I'd imagine the upgrade may not have completed successfully. Try running pkg upgrade at the command line and see if it offers you any package upgrades.

                I believe you. I tried to update more than once, just to exclude an improper update, but I got the same result.

                "pkg upgrade" will not work in the state the pfsense is in. No host can be reached. I can only ping IPs like 8.8.8.8, etc.

                1 Reply Last reply Reply Quote 0
                • stephenw10S
                  stephenw10 Netgate Administrator
                  last edited by

                  If you have a WAN side DHCP server you can run dhclient on the WAN NIC and it will pull DNS servers from there just to get external access.

                  N 1 Reply Last reply Reply Quote 0
                  • N
                    NRgia @stephenw10
                    last edited by NRgia

                    @stephenw10 said in During update from 22.05 I get this "PHP ERROR: Type: 64, File: /etc/inc/certs.inc":

                    If you have a WAN side DHCP server you can run dhclient on the WAN NIC and it will pull DNS servers from there just to get external access.

                    If by "WAN side DHCP server", you mean, that my IP is assigned that way then yes. If not...
                    Also the web interface cannot be accesed, I only have acces to CLI. I don't know how to do it in FreeBSD CLI

                    1 Reply Last reply Reply Quote 0
                    • stephenw10S
                      stephenw10 Netgate Administrator
                      last edited by

                      You can run for example: dhclient igb0
                      But if your WAN is already dhcp that probably won't help because it should have already happened. Is the dhcp server passing any dns servers to use?

                      1 Reply Last reply Reply Quote 0
                      • JeGrJ
                        JeGr LAYER 8 Moderator @stephenw10
                        last edited by JeGr

                        @stephenw10 said in During update from 22.05 I get this "PHP ERROR: Type: 64, File: /etc/inc/certs.inc":

                        Hmm, should be there. That box I checked was recently upgraded from 22.05.
                        So I'd imagine the upgrade may not have completed successfully. Try running pkg upgrade at the command line and see if it offers you any package upgrades.

                        Just to chime in: after your help with updating the pkg repo so we could update the lab VMs again, the 22.09 box updated to the recent 22.09 snapshot and also had a certificate PHP error popping up after reboot. And that box was on 22.09 beforehand, so it's at least nothing fixed to 22.05->snapshot but has to be in the last few snapshots.

                        Jul 28 17:26:40	php	44621	/etc/rc.packages: New alert found: PHP ERROR: Type: 64, File: /etc/inc/certs.inc, Line: 1021, Message: require_once(): Failed opening required 'ASN1_NULL.php' (include_path='.:/etc/inc:/usr/local/pfSense/include:/usr/local/pfSense/include/www:/usr/local/www:/usr/local/captiveportal:/usr/local/pkg:/usr/local/www/classes:/usr/local/www/classes/Form:/usr/local/share/pear:/usr/local/share/openssl_x509_crl/')

Jul 28 17:26:40	php	44621	/etc/rc.packages: PHP ERROR: Type: 64, File: /etc/inc/certs.inc, Line: 1021, Message: require_once(): Failed opening required 'ASN1_NULL.php' (include_path='.:/etc/inc:/usr/local/pfSense/include:/usr/local/pfSense/include/www:/usr/local/www:/usr/local/captiveportal:/usr/local/pkg:/usr/local/www/classes:/usr/local/www/classes/Form:/usr/local/share/pear:/usr/local/share/openssl_x509_crl/')

                        Don't forget to upvote 👍 those who kindly offered their time and brainpower to help you!

                        If you're interested, I'm available to discuss details of German-speaking paid support (for companies) if needed.

                        1 Reply Last reply Reply Quote 2
                        • stephenw10S
                          stephenw10 Netgate Administrator
                          last edited by

                          Hmm, doesn't appear to be specific to a snapshot either. It's still present on that box I updated after updating to todays snap.

                          N 1 Reply Last reply Reply Quote 0
                          • N
                            NRgia @stephenw10
                            last edited by

                            @stephenw10 said in During update from 22.05 I get this "PHP ERROR: Type: 64, File: /etc/inc/certs.inc":

                            Hmm, doesn't appear to be specific to a snapshot either. It's still present on that box I updated after updating to todays snap.

                            For the moment we don't know what's trigerring this?

                            1 Reply Last reply Reply Quote 0
                            • stephenw10S
                              stephenw10 Netgate Administrator
                              last edited by

                              Not yet. The file seems to be missing from some installs. We are still digging into what's causing that.

                              1 Reply Last reply Reply Quote 0
                              • First post
                                Last post
                              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.