Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    During update from 22.05 I get this "PHP ERROR: Type: 64, File: /etc/inc/certs.inc"

    Scheduled Pinned Locked Moved Plus 23.01 Development Snapshots (Retired)
    14 Posts 4 Posters 1.6k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • GertjanG
      Gertjan @stephenw10
      last edited by Gertjan

      @stephenw10
      Not a cert.
      A file went missing : Failed opening required 'ASN1_NULL.php'
      This file should be here : /usr/local/share/openssl_x509_crl/ which is in the PHP search path.

      Using 22.05, the file is there.
      It's not part of "22.11" any more ? /or/ something went wrong during the update.

      @nrgia said in During update from 22.05 I get this "PHP ERROR: Type: 64, File: /etc/inc/certs.inc":

      If I comment line 1021 I got:

      even more mess. That is ok and normal.

      No "help me" PM's please. Use the forum, the community will thank you.
      Edit : and where are the logs ??

      1 Reply Last reply Reply Quote 1
      • stephenw10S
        stephenw10 Netgate Administrator
        last edited by

        It should be there:

        [22.09-DEVELOPMENT][admin@6100.stevew.lan]/root: find / -name "*ASN1_NULL.php*"
        /usr/local/share/openssl_x509_crl/ASN1_NULL.php
        
        N 1 Reply Last reply Reply Quote 0
        • N
          NRgia @stephenw10
          last edited by NRgia

          @stephenw10 said in During update from 22.05 I get this "PHP ERROR: Type: 64, File: /etc/inc/certs.inc":

          It should be there:

          [22.09-DEVELOPMENT][admin@6100.stevew.lan]/root: find / -name "*ASN1_NULL.php*"
          /usr/local/share/openssl_x509_crl/ASN1_NULL.php
          

          So on 22.05 ASN1.NULL is present:
          pfsense_22.05_ASN1_NULL_present.png

          During the update process I get this:

          pfsense_22_09_error.png

          Also the ASN1_NULL is missing from 22.09:

          pfsense_22_09_ASN1_NULL_missing.png

          So the update process deletes it somehow.

          1 Reply Last reply Reply Quote 0
          • stephenw10S
            stephenw10 Netgate Administrator
            last edited by

            Hmm, should be there. That box I checked was recently upgraded from 22.05.
            So I'd imagine the upgrade may not have completed successfully. Try running pkg upgrade at the command line and see if it offers you any package upgrades.

            N JeGrJ 2 Replies Last reply Reply Quote 0
            • N
              NRgia @stephenw10
              last edited by

              @stephenw10 said in During update from 22.05 I get this "PHP ERROR: Type: 64, File: /etc/inc/certs.inc":

              Hmm, should be there. That box I checked was recently upgraded from 22.05.
              So I'd imagine the upgrade may not have completed successfully. Try running pkg upgrade at the command line and see if it offers you any package upgrades.

              I believe you. I tried to update more than once, just to exclude an improper update, but I got the same result.

              "pkg upgrade" will not work in the state the pfsense is in. No host can be reached. I can only ping IPs like 8.8.8.8, etc.

              1 Reply Last reply Reply Quote 0
              • stephenw10S
                stephenw10 Netgate Administrator
                last edited by

                If you have a WAN side DHCP server you can run dhclient on the WAN NIC and it will pull DNS servers from there just to get external access.

                N 1 Reply Last reply Reply Quote 0
                • N
                  NRgia @stephenw10
                  last edited by NRgia

                  @stephenw10 said in During update from 22.05 I get this "PHP ERROR: Type: 64, File: /etc/inc/certs.inc":

                  If you have a WAN side DHCP server you can run dhclient on the WAN NIC and it will pull DNS servers from there just to get external access.

                  If by "WAN side DHCP server", you mean, that my IP is assigned that way then yes. If not...
                  Also the web interface cannot be accesed, I only have acces to CLI. I don't know how to do it in FreeBSD CLI

                  1 Reply Last reply Reply Quote 0
                  • stephenw10S
                    stephenw10 Netgate Administrator
                    last edited by

                    You can run for example: dhclient igb0
                    But if your WAN is already dhcp that probably won't help because it should have already happened. Is the dhcp server passing any dns servers to use?

                    1 Reply Last reply Reply Quote 0
                    • JeGrJ
                      JeGr LAYER 8 Moderator @stephenw10
                      last edited by JeGr

                      @stephenw10 said in During update from 22.05 I get this "PHP ERROR: Type: 64, File: /etc/inc/certs.inc":

                      Hmm, should be there. That box I checked was recently upgraded from 22.05.
                      So I'd imagine the upgrade may not have completed successfully. Try running pkg upgrade at the command line and see if it offers you any package upgrades.

                      Just to chime in: after your help with updating the pkg repo so we could update the lab VMs again, the 22.09 box updated to the recent 22.09 snapshot and also had a certificate PHP error popping up after reboot. And that box was on 22.09 beforehand, so it's at least nothing fixed to 22.05->snapshot but has to be in the last few snapshots.

                      Jul 28 17:26:40	php	44621	/etc/rc.packages: New alert found: PHP ERROR: Type: 64, File: /etc/inc/certs.inc, Line: 1021, Message: require_once(): Failed opening required 'ASN1_NULL.php' (include_path='.:/etc/inc:/usr/local/pfSense/include:/usr/local/pfSense/include/www:/usr/local/www:/usr/local/captiveportal:/usr/local/pkg:/usr/local/www/classes:/usr/local/www/classes/Form:/usr/local/share/pear:/usr/local/share/openssl_x509_crl/')
                      
                      Jul 28 17:26:40	php	44621	/etc/rc.packages: PHP ERROR: Type: 64, File: /etc/inc/certs.inc, Line: 1021, Message: require_once(): Failed opening required 'ASN1_NULL.php' (include_path='.:/etc/inc:/usr/local/pfSense/include:/usr/local/pfSense/include/www:/usr/local/www:/usr/local/captiveportal:/usr/local/pkg:/usr/local/www/classes:/usr/local/www/classes/Form:/usr/local/share/pear:/usr/local/share/openssl_x509_crl/')
                      

                      Don't forget to upvote 👍 those who kindly offered their time and brainpower to help you!

                      If you're interested, I'm available to discuss details of German-speaking paid support (for companies) if needed.

                      1 Reply Last reply Reply Quote 2
                      • stephenw10S
                        stephenw10 Netgate Administrator
                        last edited by

                        Hmm, doesn't appear to be specific to a snapshot either. It's still present on that box I updated after updating to todays snap.

                        N 1 Reply Last reply Reply Quote 0
                        • N
                          NRgia @stephenw10
                          last edited by

                          @stephenw10 said in During update from 22.05 I get this "PHP ERROR: Type: 64, File: /etc/inc/certs.inc":

                          Hmm, doesn't appear to be specific to a snapshot either. It's still present on that box I updated after updating to todays snap.

                          For the moment we don't know what's trigerring this?

                          1 Reply Last reply Reply Quote 0
                          • stephenw10S
                            stephenw10 Netgate Administrator
                            last edited by

                            Not yet. The file seems to be missing from some installs. We are still digging into what's causing that.

                            1 Reply Last reply Reply Quote 0
                            • First post
                              Last post
                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.