During update from 22.05 I get this "PHP ERROR: Type: 64, File: /etc/inc/certs.inc"

[Gertjan]

@stephenw10
Not a cert.
A file went missing : Failed opening required 'ASN1_NULL.php'
This file should be here : /usr/local/share/openssl_x509_crl/ which is in the PHP search path.

Using 22.05, the file is there.
It's not part of "22.11" any more ? /or/ something went wrong during the update.

@nrgia said in During update from 22.05 I get this "PHP ERROR: Type: 64, File: /etc/inc/certs.inc":

If I comment line 1021 I got:

even more mess. That is ok and normal.

[stephenw10]

It should be there:

[22.09-DEVELOPMENT][admin@6100.stevew.lan]/root: find / -name "*ASN1_NULL.php*"
/usr/local/share/openssl_x509_crl/ASN1_NULL.php

[NRgia]

@stephenw10 said in During update from 22.05 I get this "PHP ERROR: Type: 64, File: /etc/inc/certs.inc":

It should be there:

[22.09-DEVELOPMENT][admin@6100.stevew.lan]/root: find / -name "*ASN1_NULL.php*"
/usr/local/share/openssl_x509_crl/ASN1_NULL.php

So on 22.05 ASN1.NULL is present:
login-to-view

During the update process I get this:

login-to-view

Also the ASN1_NULL is missing from 22.09:

login-to-view

So the update process deletes it somehow.

[stephenw10]

Hmm, should be there. That box I checked was recently upgraded from 22.05.
So I'd imagine the upgrade may not have completed successfully. Try running pkg upgrade at the command line and see if it offers you any package upgrades.

[NRgia]

@stephenw10 said in During update from 22.05 I get this "PHP ERROR: Type: 64, File: /etc/inc/certs.inc":

Hmm, should be there. That box I checked was recently upgraded from 22.05.
So I'd imagine the upgrade may not have completed successfully. Try running pkg upgrade at the command line and see if it offers you any package upgrades.

I believe you. I tried to update more than once, just to exclude an improper update, but I got the same result.

"pkg upgrade" will not work in the state the pfsense is in. No host can be reached. I can only ping IPs like 8.8.8.8, etc.

[stephenw10]

If you have a WAN side DHCP server you can run dhclient on the WAN NIC and it will pull DNS servers from there just to get external access.

[NRgia]

@stephenw10 said in During update from 22.05 I get this "PHP ERROR: Type: 64, File: /etc/inc/certs.inc":

If you have a WAN side DHCP server you can run dhclient on the WAN NIC and it will pull DNS servers from there just to get external access.

If by "WAN side DHCP server", you mean, that my IP is assigned that way then yes. If not...
Also the web interface cannot be accesed, I only have acces to CLI. I don't know how to do it in FreeBSD CLI

[stephenw10]

You can run for example: dhclient igb0
But if your WAN is already dhcp that probably won't help because it should have already happened. Is the dhcp server passing any dns servers to use?

[JeGr]

@stephenw10 said in During update from 22.05 I get this "PHP ERROR: Type: 64, File: /etc/inc/certs.inc":

Hmm, should be there. That box I checked was recently upgraded from 22.05.
So I'd imagine the upgrade may not have completed successfully. Try running pkg upgrade at the command line and see if it offers you any package upgrades.

Just to chime in: after your help with updating the pkg repo so we could update the lab VMs again, the 22.09 box updated to the recent 22.09 snapshot and also had a certificate PHP error popping up after reboot. And that box was on 22.09 beforehand, so it's at least nothing fixed to 22.05->snapshot but has to be in the last few snapshots.

Jul 28 17:26:40	php	44621	/etc/rc.packages: New alert found: PHP ERROR: Type: 64, File: /etc/inc/certs.inc, Line: 1021, Message: require_once(): Failed opening required 'ASN1_NULL.php' (include_path='.:/etc/inc:/usr/local/pfSense/include:/usr/local/pfSense/include/www:/usr/local/www:/usr/local/captiveportal:/usr/local/pkg:/usr/local/www/classes:/usr/local/www/classes/Form:/usr/local/share/pear:/usr/local/share/openssl_x509_crl/')

Jul 28 17:26:40	php	44621	/etc/rc.packages: PHP ERROR: Type: 64, File: /etc/inc/certs.inc, Line: 1021, Message: require_once(): Failed opening required 'ASN1_NULL.php' (include_path='.:/etc/inc:/usr/local/pfSense/include:/usr/local/pfSense/include/www:/usr/local/www:/usr/local/captiveportal:/usr/local/pkg:/usr/local/www/classes:/usr/local/www/classes/Form:/usr/local/share/pear:/usr/local/share/openssl_x509_crl/')

[stephenw10]

Hmm, doesn't appear to be specific to a snapshot either. It's still present on that box I updated after updating to todays snap.

[NRgia]

@stephenw10 said in During update from 22.05 I get this "PHP ERROR: Type: 64, File: /etc/inc/certs.inc":

Hmm, doesn't appear to be specific to a snapshot either. It's still present on that box I updated after updating to todays snap.

For the moment we don't know what's trigerring this?

[stephenw10]

Not yet. The file seems to be missing from some installs. We are still digging into what's causing that.