Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Netgate 1100 dns stops

    Scheduled Pinned Locked Moved General pfSense Questions
    50 Posts 6 Posters 8.7k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • F
      Freek_Box @stephenw10
      last edited by Freek_Box

      So I tried to do the update from 2.4.4 to 2.4.5 but it got in an error. Now if I go to the update screen it says:

      378700f6-cc38-4548-bfff-1c7b488b12ce-image.png

      The error report:
      [30-Sep-2022 07:43:55 UTC] PHP Warning: PHP Startup: Unable to load dynamic library 'readline.so' (tried: /usr/local/lib/php/20170718/readline.so (Shared object "libreadline.so.7" not found, required by "readline.so"), /usr/local/lib/php/20170718/readline.so.so (Cannot open "/usr/local/lib/php/20170718/readline.so.so")) in Unknown on line 0

      1 Reply Last reply Reply Quote 0
      • stephenw10S
        stephenw10 Netgate Administrator
        last edited by

        You likely can't upgrade to 2.4.5 because there is no branch existing for that. The 'previous stable' branch is 2.5.2 at this point.
        The only way to get to 2.4.5 would be to reinstall to it.

        That particular PHP error is known during upgrade and is not normally an issue. However it looks like it attempted and failed to upgrade to 2.4.5 so the current state is unknown.

        You may be able to recover it as shown here:
        https://docs.netgate.com/pfsense/en/latest/troubleshooting/upgrades.html#upgrade-not-offered-library-errors

        If you have the option though I would just install 22.05 clean and restore your config.

        Steve

        1 Reply Last reply Reply Quote 0
        • F
          Freek_Box
          last edited by

          @stephenw10

          So maybe a stupid question but how would I install 22.05? Do I have to create a bootable USB or something?

          S 1 Reply Last reply Reply Quote 0
          • stephenw10S
            stephenw10 Netgate Administrator
            last edited by

            If you want to reinstall cleanly then yes. Open a ticket with us to get the recovery image:
            https://www.netgate.com/tac-support-request

            Assuming this is still for an 1100 instructions are here:
            https://docs.netgate.com/pfsense/en/latest/solutions/sg-1100/reinstall-pfsense.html

            Steve

            1 Reply Last reply Reply Quote 0
            • S
              SteveITS Galactic Empire @Freek_Box
              last edited by

              @freek_box https://docs.netgate.com/pfsense/en/latest/solutions/sg-1100/reinstall-pfsense.html

              Pre-2.7.2/23.09: Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
              When upgrading, allow 10-15 minutes to restart, or more depending on packages and device speed.
              Upvote 👍 helpful posts!

              1 Reply Last reply Reply Quote 0
              • F
                Freek_Box
                last edited by

                No this is not for the 1100 but for the other machine,
                I got it upgraded to 2.4.5:

                Schermafbeelding 2022-10-12 om 15.21.38.png

                But know I'm getting more php erros:

                Warning: PHP Startup: Unable to load dynamic library 'curl.so' (tried: /usr/local/lib/php/20170718/curl.so (Shared object "libcurl.so.4" not found, required by "curl.so"), /usr/local/lib/php/20170718/curl.so.so (/usr/local/lib/php/20170718/curl.so.so: invalid file format)) in Unknown on line 0

                Warning: PHP Startup: Unable to load dynamic library 'mbstring.so' (tried: /usr/local/lib/php/20170718/mbstring.so (Shared object "libonig.so.5" not found, required by "mbstring.so"), /usr/local/lib/php/20170718/mbstring.so.so (/usr/local/lib/php/20170718/mbstring.so.so: invalid file format)) in Unknown on line 0

                Warning: PHP Startup: Unable to load dynamic library 'rrd.so' (tried: /usr/local/lib/php/20170718/rrd.so (Shared object "librrd.so.8" not found, required by "rrd.so"), /usr/local/lib/php/20170718/rrd.so.so (/usr/local/lib/php/20170718/rrd.so.so: invalid file format)) in Unknown on line 0

                I can connect from my computer to it but can't go on the internet for some reason that is not working

                When I do:
                pkg-static clean -ay; pkg-static install -fy pkg pfSense-repo pfSense-upgrade

                I get the error:

                Updating pfSense-core repository catalogue...
                Certificate verification failed for /C=GB/ST=Greater Manchester/L=Salford/O=Comodo CA Limited/CN=AAA Certificate Services
                12835124:error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed:/usr/local/poudriere/jails/pfSense_v2_4_5_amd64/usr/src/crypto/openssl/ssl/s3_clnt.c:1269:

                S 1 Reply Last reply Reply Quote 0
                • F
                  Freek_Box
                  last edited by

                  Ah the DNS resolver is not starting:
                  Schermafbeelding 2022-10-12 om 15.28.49.png

                  1 Reply Last reply Reply Quote 0
                  • S
                    SteveITS Galactic Empire @Freek_Box
                    last edited by

                    @freek_box said in Netgate 1100 dns stops:

                    No this is not for the 1100

                    That's why it's confusing to post multiple questions in one thread. :)

                    There are manuals online with instructions for other Netgate devices. Otherwise this is for CE, for your own hardware:
                    https://docs.netgate.com/pfsense/en/latest/install/index.html

                    Pre-2.7.2/23.09: Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
                    When upgrading, allow 10-15 minutes to restart, or more depending on packages and device speed.
                    Upvote 👍 helpful posts!

                    F 1 Reply Last reply Reply Quote 1
                    • F
                      Freek_Box @SteveITS
                      last edited by

                      @steveits

                      Yeah your right maybe start a new post, only I have a question if I install the new version will the certificat problem be solved or does it indeed have to do with my hardware?

                      GertjanG 1 Reply Last reply Reply Quote 0
                      • GertjanG
                        Gertjan @Freek_Box
                        last edited by

                        @freek_box said in Netgate 1100 dns stops:

                        will the certificat problem be solved or does it indeed have to do with my hardware?

                        You mean the "crypto chip reset procedure" ?
                        As said : shut down pfSense with the GUI or SSH/console command.
                        Wait for it too shut down.
                        Remove the power xx seconds.
                        Power up.
                        .....
                        Install a recent version - that is 2.6.0 on non Netgate devices, and contact TAC for 22.05. Brunr the USB drives. Install and call it a day.

                        No "help me" PM's please. Use the forum, the community will thank you.
                        Edit : and where are the logs ??

                        F 1 Reply Last reply Reply Quote 0
                        • F
                          Freek_Box @Gertjan
                          last edited by

                          @gertjan

                          No I mean that this error that I"m now getting on the Deciso pfsense firewall:

                          Certificate verification failed for /C=GB/ST=Greater Manchester/L=Salford/O=Comodo CA Limited/CN=AAA Certificate Services
                          12835124:error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed:/usr/local/poudriere/jails/pfSense_v2_4_5_amd64/usr/src/crypto/openssl/ssl/s3_clnt.c:1269:

                          R 1 Reply Last reply Reply Quote 0
                          • R
                            rcoleman-netgate Netgate @Freek_Box
                            last edited by

                            @freek_box Backup your config.

                            If it is a Netgate box (non-APU or MinnowBoard) open a ticket at https://go.netgate.com/ for the firmware
                            Other: download from https://pfsense.org/download/

                            Install
                            Restore config
                            Use system
                            .....
                            Profit?

                            Ryan
                            Repeat, after me: MESH IS THE DEVIL! MESH IS THE DEVIL!
                            Requesting firmware for your Netgate device? https://go.netgate.com
                            Switching: Mikrotik, Netgear, Extreme
                            Wireless: Aruba, Ubiquiti

                            GertjanG 1 Reply Last reply Reply Quote 0
                            • GertjanG
                              Gertjan @rcoleman-netgate
                              last edited by

                              @rcoleman-netgate said in Netgate 1100 dns stops:

                              Profit?

                              Profit !

                              No "help me" PM's please. Use the forum, the community will thank you.
                              Edit : and where are the logs ??

                              1 Reply Last reply Reply Quote 0
                              • stephenw10S
                                stephenw10 Netgate Administrator
                                last edited by

                                Check the system clock.

                                But after lib errors like that I would just install 2.6 clean and restore the config.

                                Steve

                                1 Reply Last reply Reply Quote 0
                                • F
                                  Freek_Box
                                  last edited by

                                  If it doesnt work I already orderd a 1100 so then I will put the Deciso with the trash and do a fresh install on the 1100

                                  1 Reply Last reply Reply Quote 0
                                  • F
                                    Freek_Box
                                    last edited by

                                    I did the new install pretty proud of myself haha!
                                    The problem is indeed fixed thanks for all your help!

                                    1 Reply Last reply Reply Quote 1
                                    • leresL
                                      leres @stephenw10
                                      last edited by leres

                                      @stephenw10 said in Netgate 1100 dns stops:

                                      The segfault like that indicates the crypto chip is in an unreachable state. You need to completely power cycle the device to reset it. So halt the device then remove the power for 10s or so. It should update correctly when rebooted.
                                      https://docs.netgate.com/pfsense/en/latest/troubleshooting/upgrades.html#segmentation-fault-in-pkg

                                      I've been seeing this error, intermittently, since August. I power cycled yesterday but still saw an error early this morning:

                                      Subject: XXX - Arpwatch Notification : Cron <root@pylon> /usr/local/bin/php -q /root/pkg_check.php

X-Cron-Env: <SHELL=/bin/sh>
X-Cron-Env: <PATH=/sbin:/bin:/usr/sbin:/usr/bin:/usr/local/sbin:/usr/local/bin>
X-Cron-Env: <HOME=/root>
X-Cron-Env: <LOGNAME=root>
X-Cron-Env: <USER=root>

1078734848:error:1409441A:SSL routines:ssl3_read_bytes:tlsv1 alert decode error:/var/jenkins/workspace/pfSense-img-build/BUILD_NODE/aarch64/OS_MAJOR_VERSION/freebsd12/PLATFORM/aws/sources/FreeBSD-src-plus-RELENG_22_05/crypto/openssl/ssl/record/rec_layer_s3.c:1544:SSL alert number 50

                                      When I hit this interactively, retrying always succeeds. (Maybe I'm encountering a different crypto hardware issue?)

                                      1 Reply Last reply Reply Quote 0
                                      • stephenw10S
                                        stephenw10 Netgate Administrator
                                        last edited by

                                        Also on an 1100?

                                        That's not the same error, no segfault there. It's not the crypto chip stuck in a bad state.

                                        Steve

                                        1 Reply Last reply Reply Quote 0
                                        • First post
                                          Last post
                                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.