Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Netgate 1100 dns stops

    General pfSense Questions
    6
    50
    6.2k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • F
      Freek_Box
      last edited by

      @stephenw10

      DBG(1)[40213]> pkg initialized
      Updating pfSense-core repository catalogue...
      DBG(1)[40213]> PkgRepo: verifying update for pfSense-core
      DBG(1)[40213]> Pkgrepo, begin update of '/var/db/pkg/repo-pfSense-core.sqlite'
      DBG(1)[40213]> Request to fetch pkg+https://repo.netgate.com/pkg/pfSense_plus-v21_05_2_aarch64-core/meta.conf
      DBG(1)[40213]> opening libfetch fetcher
      DBG(1)[40213]> Fetch > libfetch: connecting
      DBG(1)[40213]> Fetch: fetching from: https://repo00.atx.netgate.com/pkg/pfSense_plus-v21_05_2_aarch64-core/meta.conf with opts "i"
      1082900480:error:141F0006:SSL routines:tls_construct_cert_verify:EVP lib:/var/jenkins/workspace/pfSense-build-release-tarballs/BUILD_NODE/pkg-aarch64/OS_MAJOR_VERSION/freebsd12/PLATFORM/aws/crypto/openssl/ssl/statem/statem_lib.c:283:
      DBG(1)[40213]> Fetch: fetching from: https://repo00.atx.netgate.com/pkg/pfSense_plus-v21_05_2_aarch64-core/meta.conf with opts "i"
      Certificate verification failed for /C=US/ST=Texas/L=Austin/O=Rubicon Communications, LLC (Netgate)/CN=repo00.atx.netgate.com
      1082900480:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/var/jenkins/workspace/pfSense-build-release-tarballs/BUILD_NODE/pkg-aarch64/OS_MAJOR_VERSION/freebsd12/PLATFORM/aws/crypto/openssl/ssl/statem/statem_clnt.c:1915:
      Segmentation fault (core dumped)

      1 Reply Last reply Reply Quote 0
      • F
        Freek_Box
        last edited by

        When I do:
        pkg-static clean -ay; pkg-static install -fy pkg pfSense-repo pfSense-upgrade

        I get:
        pkg-static: Repository pfSense missing. 'pkg update' required
        pkg-static: No package database installed. Nothing to do!
        Updating pfSense-core repository catalogue...
        1082900480:error:141F0006:SSL routines:tls_construct_cert_verify:EVP lib:/var/jenkins/workspace/pfSense-build-release-tarballs/BUILD_NODE/pkg-aarch64/OS_MAJOR_VERSION/freebsd12/PLATFORM/aws/crypto/openssl/ssl/statem/statem_lib.c:283:
        Certificate verification failed for /C=US/ST=Texas/L=Austin/O=Rubicon Communications, LLC (Netgate)/CN=repo01.atx.netgate.com
        1082900480:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/var/jenkins/workspace/pfSense-build-release-tarballs/BUILD_NODE/pkg-aarch64/OS_MAJOR_VERSION/freebsd12/PLATFORM/aws/crypto/openssl/ssl/statem/statem_clnt.c:1915:
        Child process pid=4480 terminated abnormally: Segmentation fault

        1 Reply Last reply Reply Quote 0
        • stephenw10S
          stephenw10 Netgate Administrator
          last edited by

          The segfault like that indicates the crypto chip is in an unreachable state. You need to completely power cycle the device to reset it. So halt the device then remove the power for 10s or so. It should update correctly when rebooted.
          https://docs.netgate.com/pfsense/en/latest/troubleshooting/upgrades.html#segmentation-fault-in-pkg

          Steve

          F leresL 2 Replies Last reply Reply Quote 0
          • F
            Freek_Box @stephenw10
            last edited by

            @stephenw10

            I have no possibility to unplug it is that a problem? The device is hours away from me.

            S 1 Reply Last reply Reply Quote 0
            • S
              SteveITS Galactic Empire @Freek_Box
              last edited by

              @freek_box If you click that doc page URL it's a known issue. It shouldn't affect normal operations but does affect packages and therefore upgrades. I believe it's just a one time fix though. I haven't had it recur on my 2100.

              Pre-2.7.2/23.09: Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
              When upgrading, allow 10-15 minutes to restart, or more depending on packages and device speed.
              Upvote 👍 helpful posts!

              1 Reply Last reply Reply Quote 0
              • stephenw10S
                stephenw10 Netgate Administrator
                last edited by

                Unfortunately I know of no other way to reset that once it has entered that state. It will not be able to connect to the update repo until the crypto chip is reachable again.

                F 1 Reply Last reply Reply Quote 0
                • F
                  Freek_Box @stephenw10
                  last edited by

                  @stephenw10 only rebooting is not enough?

                  GertjanG stephenw10S 2 Replies Last reply Reply Quote 0
                  • GertjanG
                    Gertjan @Freek_Box
                    last edited by Gertjan

                    @freek_box
                    Noop.
                    The 'crypto chip' van't be reset using a command.
                    A 10 seconds power down can bring it back online.

                    edit : that is : a clean, commanded power down by the GUI or console(SSH),. Some ripping out the power and put it back in again could create other issues like a dirty file system.

                    So : console or SSH option 6.
                    Or GUI : Diagnostics > Halt System
                    Let the system shut down.
                    Then, remove the power for 10 seconds.
                    Power back in.
                    Done.

                    No "help me" PM's please. Use the forum, the community will thank you.
                    Edit : and where are the logs ??

                    1 Reply Last reply Reply Quote 0
                    • stephenw10S
                      stephenw10 Netgate Administrator @Freek_Box
                      last edited by

                      @freek_box said in Netgate 1100 dns stops:

                      only rebooting is not enough?

                      It is not. The crypto chip remains powered as long as the PSU is connected to the device.

                      Steve

                      1 Reply Last reply Reply Quote 0
                      • F
                        Freek_Box
                        last edited by

                        So how do I know if I'm on the correct version? I also have a VPS running with version:
                        a8e32727-a8c5-41de-8bfa-c86b0675cc45-image.png

                        GertjanG 1 Reply Last reply Reply Quote 0
                        • GertjanG
                          Gertjan @Freek_Box
                          last edited by Gertjan

                          @freek_box
                          You didn't notice it, way back in 2021, that this info
                          7bbf64c3-d21b-40b3-bcf8-801b9fe4e151-image.png
                          is refreshed every couple of hours or so.

                          And then yours stopped refreshing for 18 months => not showing that you missed several major updates.
                          Like being on Windows 7, and don't know that 8, 8,1 and then 10 - and now 11 saw the light.

                          Or look here : https://www.pfsense.org/download/

                          Or look here : https://www.netgate.com/blog/tag/releases

                          Or on the dashboard of pfSense itself :
                          cbbbe23e-9a57-430a-a0b9-0207c8e5edc2-image.png

                          No joke : never - ever - trust automated system 😊 : you have to check (a couple of clicks actually) to see if a newer "version" is available.

                          2.4.4 is .... ancient.

                          Check out Troubleshooting Upgrades.

                          No "help me" PM's please. Use the forum, the community will thank you.
                          Edit : and where are the logs ??

                          F 1 Reply Last reply Reply Quote 0
                          • F
                            Freek_Box @Gertjan
                            last edited by

                            @gertjan LOL I did not see that 2021 damm alright thnx!

                            1 Reply Last reply Reply Quote 1
                            • F
                              Freek_Box
                              last edited by

                              I also have a old machine with pfsense on it see screenshot by switching it from branch it now sees it can be updated. Is this device safely to update to 2.5 I though there was something with this hardware that it could not run a newer version or something?

                              4debc9d7-25ca-428b-8823-4c0cb5b1309f-image.png

                              S 1 Reply Last reply Reply Quote 0
                              • S
                                SteveITS Galactic Empire @Freek_Box
                                last edited by

                                @freek_box That's not an 1100 I take it? It might be clearer to start a new thread for a different topic...

                                You might be thinking of AES-NI which Netgate originally planned to make required, but backed away from that 2-3 years ago.

                                Pre-2.7.2/23.09: Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
                                When upgrading, allow 10-15 minutes to restart, or more depending on packages and device speed.
                                Upvote 👍 helpful posts!

                                1 Reply Last reply Reply Quote 0
                                • stephenw10S
                                  stephenw10 Netgate Administrator
                                  last edited by

                                  Yes, you should be able to update that. It will probably end up going to 2.6 directly once you start the process. Be sure to backup the config in case you do need to reinstall.

                                  Steve

                                  F 1 Reply Last reply Reply Quote 0
                                  • F
                                    Freek_Box @stephenw10
                                    last edited by Freek_Box

                                    So I tried to do the update from 2.4.4 to 2.4.5 but it got in an error. Now if I go to the update screen it says:

                                    378700f6-cc38-4548-bfff-1c7b488b12ce-image.png

                                    The error report:
                                    [30-Sep-2022 07:43:55 UTC] PHP Warning: PHP Startup: Unable to load dynamic library 'readline.so' (tried: /usr/local/lib/php/20170718/readline.so (Shared object "libreadline.so.7" not found, required by "readline.so"), /usr/local/lib/php/20170718/readline.so.so (Cannot open "/usr/local/lib/php/20170718/readline.so.so")) in Unknown on line 0

                                    1 Reply Last reply Reply Quote 0
                                    • stephenw10S
                                      stephenw10 Netgate Administrator
                                      last edited by

                                      You likely can't upgrade to 2.4.5 because there is no branch existing for that. The 'previous stable' branch is 2.5.2 at this point.
                                      The only way to get to 2.4.5 would be to reinstall to it.

                                      That particular PHP error is known during upgrade and is not normally an issue. However it looks like it attempted and failed to upgrade to 2.4.5 so the current state is unknown.

                                      You may be able to recover it as shown here:
                                      https://docs.netgate.com/pfsense/en/latest/troubleshooting/upgrades.html#upgrade-not-offered-library-errors

                                      If you have the option though I would just install 22.05 clean and restore your config.

                                      Steve

                                      1 Reply Last reply Reply Quote 0
                                      • F
                                        Freek_Box
                                        last edited by

                                        @stephenw10

                                        So maybe a stupid question but how would I install 22.05? Do I have to create a bootable USB or something?

                                        S 1 Reply Last reply Reply Quote 0
                                        • stephenw10S
                                          stephenw10 Netgate Administrator
                                          last edited by

                                          If you want to reinstall cleanly then yes. Open a ticket with us to get the recovery image:
                                          https://www.netgate.com/tac-support-request

                                          Assuming this is still for an 1100 instructions are here:
                                          https://docs.netgate.com/pfsense/en/latest/solutions/sg-1100/reinstall-pfsense.html

                                          Steve

                                          1 Reply Last reply Reply Quote 0
                                          • S
                                            SteveITS Galactic Empire @Freek_Box
                                            last edited by

                                            @freek_box https://docs.netgate.com/pfsense/en/latest/solutions/sg-1100/reinstall-pfsense.html

                                            Pre-2.7.2/23.09: Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
                                            When upgrading, allow 10-15 minutes to restart, or more depending on packages and device speed.
                                            Upvote 👍 helpful posts!

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.