• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

Netgate 1100 dns stops

Scheduled Pinned Locked Moved General pfSense Questions
50 Posts 6 Posters 6.4k Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • S
    stephenw10 Netgate Administrator
    last edited by Sep 30, 2022, 12:19 PM

    You likely can't upgrade to 2.4.5 because there is no branch existing for that. The 'previous stable' branch is 2.5.2 at this point.
    The only way to get to 2.4.5 would be to reinstall to it.

    That particular PHP error is known during upgrade and is not normally an issue. However it looks like it attempted and failed to upgrade to 2.4.5 so the current state is unknown.

    You may be able to recover it as shown here:
    https://docs.netgate.com/pfsense/en/latest/troubleshooting/upgrades.html#upgrade-not-offered-library-errors

    If you have the option though I would just install 22.05 clean and restore your config.

    Steve

    1 Reply Last reply Reply Quote 0
    • F
      Freek_Box
      last edited by Oct 12, 2022, 12:23 PM

      @stephenw10

      So maybe a stupid question but how would I install 22.05? Do I have to create a bootable USB or something?

      S 1 Reply Last reply Oct 12, 2022, 12:43 PM Reply Quote 0
      • S
        stephenw10 Netgate Administrator
        last edited by Oct 12, 2022, 12:43 PM

        If you want to reinstall cleanly then yes. Open a ticket with us to get the recovery image:
        https://www.netgate.com/tac-support-request

        Assuming this is still for an 1100 instructions are here:
        https://docs.netgate.com/pfsense/en/latest/solutions/sg-1100/reinstall-pfsense.html

        Steve

        1 Reply Last reply Reply Quote 0
        • S
          SteveITS Galactic Empire @Freek_Box
          last edited by Oct 12, 2022, 12:43 PM

          @freek_box https://docs.netgate.com/pfsense/en/latest/solutions/sg-1100/reinstall-pfsense.html

          Pre-2.7.2/23.09: Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
          When upgrading, allow 10-15 minutes to restart, or more depending on packages and device speed.
          Upvote 👍 helpful posts!

          1 Reply Last reply Reply Quote 0
          • F
            Freek_Box
            last edited by Oct 12, 2022, 1:24 PM

            No this is not for the 1100 but for the other machine,
            I got it upgraded to 2.4.5:

            Schermafbeelding 2022-10-12 om 15.21.38.png

            But know I'm getting more php erros:

            Warning: PHP Startup: Unable to load dynamic library 'curl.so' (tried: /usr/local/lib/php/20170718/curl.so (Shared object "libcurl.so.4" not found, required by "curl.so"), /usr/local/lib/php/20170718/curl.so.so (/usr/local/lib/php/20170718/curl.so.so: invalid file format)) in Unknown on line 0

            Warning: PHP Startup: Unable to load dynamic library 'mbstring.so' (tried: /usr/local/lib/php/20170718/mbstring.so (Shared object "libonig.so.5" not found, required by "mbstring.so"), /usr/local/lib/php/20170718/mbstring.so.so (/usr/local/lib/php/20170718/mbstring.so.so: invalid file format)) in Unknown on line 0

            Warning: PHP Startup: Unable to load dynamic library 'rrd.so' (tried: /usr/local/lib/php/20170718/rrd.so (Shared object "librrd.so.8" not found, required by "rrd.so"), /usr/local/lib/php/20170718/rrd.so.so (/usr/local/lib/php/20170718/rrd.so.so: invalid file format)) in Unknown on line 0

            I can connect from my computer to it but can't go on the internet for some reason that is not working

            When I do:
            pkg-static clean -ay; pkg-static install -fy pkg pfSense-repo pfSense-upgrade

            I get the error:

            Updating pfSense-core repository catalogue...
            Certificate verification failed for /C=GB/ST=Greater Manchester/L=Salford/O=Comodo CA Limited/CN=AAA Certificate Services
            12835124:error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed:/usr/local/poudriere/jails/pfSense_v2_4_5_amd64/usr/src/crypto/openssl/ssl/s3_clnt.c:1269:

            S 1 Reply Last reply Oct 12, 2022, 2:03 PM Reply Quote 0
            • F
              Freek_Box
              last edited by Oct 12, 2022, 1:31 PM

              Ah the DNS resolver is not starting:
              Schermafbeelding 2022-10-12 om 15.28.49.png

              1 Reply Last reply Reply Quote 0
              • S
                SteveITS Galactic Empire @Freek_Box
                last edited by Oct 12, 2022, 2:03 PM

                @freek_box said in Netgate 1100 dns stops:

                No this is not for the 1100

                That's why it's confusing to post multiple questions in one thread. :)

                There are manuals online with instructions for other Netgate devices. Otherwise this is for CE, for your own hardware:
                https://docs.netgate.com/pfsense/en/latest/install/index.html

                Pre-2.7.2/23.09: Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
                When upgrading, allow 10-15 minutes to restart, or more depending on packages and device speed.
                Upvote 👍 helpful posts!

                F 1 Reply Last reply Oct 12, 2022, 2:15 PM Reply Quote 1
                • F
                  Freek_Box @SteveITS
                  last edited by Oct 12, 2022, 2:15 PM

                  @steveits

                  Yeah your right maybe start a new post, only I have a question if I install the new version will the certificat problem be solved or does it indeed have to do with my hardware?

                  G 1 Reply Last reply Oct 12, 2022, 2:27 PM Reply Quote 0
                  • G
                    Gertjan @Freek_Box
                    last edited by Oct 12, 2022, 2:27 PM

                    @freek_box said in Netgate 1100 dns stops:

                    will the certificat problem be solved or does it indeed have to do with my hardware?

                    You mean the "crypto chip reset procedure" ?
                    As said : shut down pfSense with the GUI or SSH/console command.
                    Wait for it too shut down.
                    Remove the power xx seconds.
                    Power up.
                    .....
                    Install a recent version - that is 2.6.0 on non Netgate devices, and contact TAC for 22.05. Brunr the USB drives. Install and call it a day.

                    No "help me" PM's please. Use the forum, the community will thank you.
                    Edit : and where are the logs ??

                    F 1 Reply Last reply Oct 12, 2022, 2:28 PM Reply Quote 0
                    • F
                      Freek_Box @Gertjan
                      last edited by Oct 12, 2022, 2:28 PM

                      @gertjan

                      No I mean that this error that I"m now getting on the Deciso pfsense firewall:

                      Certificate verification failed for /C=GB/ST=Greater Manchester/L=Salford/O=Comodo CA Limited/CN=AAA Certificate Services
                      12835124:error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed:/usr/local/poudriere/jails/pfSense_v2_4_5_amd64/usr/src/crypto/openssl/ssl/s3_clnt.c:1269:

                      R 1 Reply Last reply Oct 12, 2022, 2:49 PM Reply Quote 0
                      • R
                        rcoleman-netgate Netgate @Freek_Box
                        last edited by Oct 12, 2022, 2:49 PM

                        @freek_box Backup your config.

                        If it is a Netgate box (non-APU or MinnowBoard) open a ticket at https://go.netgate.com/ for the firmware
                        Other: download from https://pfsense.org/download/

                        Install
                        Restore config
                        Use system
                        .....
                        Profit?

                        Ryan
                        Repeat, after me: MESH IS THE DEVIL! MESH IS THE DEVIL!
                        Requesting firmware for your Netgate device? https://go.netgate.com
                        Switching: Mikrotik, Netgear, Extreme
                        Wireless: Aruba, Ubiquiti

                        G 1 Reply Last reply Oct 12, 2022, 2:53 PM Reply Quote 0
                        • G
                          Gertjan @rcoleman-netgate
                          last edited by Oct 12, 2022, 2:53 PM

                          @rcoleman-netgate said in Netgate 1100 dns stops:

                          Profit?

                          Profit !

                          No "help me" PM's please. Use the forum, the community will thank you.
                          Edit : and where are the logs ??

                          1 Reply Last reply Reply Quote 0
                          • S
                            stephenw10 Netgate Administrator
                            last edited by Oct 12, 2022, 2:54 PM

                            Check the system clock.

                            But after lib errors like that I would just install 2.6 clean and restore the config.

                            Steve

                            1 Reply Last reply Reply Quote 0
                            • F
                              Freek_Box
                              last edited by Oct 12, 2022, 2:54 PM

                              If it doesnt work I already orderd a 1100 so then I will put the Deciso with the trash and do a fresh install on the 1100

                              1 Reply Last reply Reply Quote 0
                              • F
                                Freek_Box
                                last edited by Oct 13, 2022, 6:59 AM

                                I did the new install pretty proud of myself haha!
                                The problem is indeed fixed thanks for all your help!

                                1 Reply Last reply Reply Quote 1
                                • leresL
                                  leres @stephenw10
                                  last edited by leres Oct 13, 2022, 4:39 PM Oct 13, 2022, 4:39 PM

                                  @stephenw10 said in Netgate 1100 dns stops:

                                  The segfault like that indicates the crypto chip is in an unreachable state. You need to completely power cycle the device to reset it. So halt the device then remove the power for 10s or so. It should update correctly when rebooted.
                                  https://docs.netgate.com/pfsense/en/latest/troubleshooting/upgrades.html#segmentation-fault-in-pkg

                                  I've been seeing this error, intermittently, since August. I power cycled yesterday but still saw an error early this morning:

                                  Subject: XXX - Arpwatch Notification : Cron <root@pylon> /usr/local/bin/php -q /root/pkg_check.php
                                  
                                  X-Cron-Env: <SHELL=/bin/sh>
                                  X-Cron-Env: <PATH=/sbin:/bin:/usr/sbin:/usr/bin:/usr/local/sbin:/usr/local/bin>
                                  X-Cron-Env: <HOME=/root>
                                  X-Cron-Env: <LOGNAME=root>
                                  X-Cron-Env: <USER=root>
                                  
                                  1078734848:error:1409441A:SSL routines:ssl3_read_bytes:tlsv1 alert decode error:/var/jenkins/workspace/pfSense-img-build/BUILD_NODE/aarch64/OS_MAJOR_VERSION/freebsd12/PLATFORM/aws/sources/FreeBSD-src-plus-RELENG_22_05/crypto/openssl/ssl/record/rec_layer_s3.c:1544:SSL alert number 50
                                  

                                  When I hit this interactively, retrying always succeeds. (Maybe I'm encountering a different crypto hardware issue?)

                                  1 Reply Last reply Reply Quote 0
                                  • S
                                    stephenw10 Netgate Administrator
                                    last edited by Oct 13, 2022, 8:20 PM

                                    Also on an 1100?

                                    That's not the same error, no segfault there. It's not the crypto chip stuck in a bad state.

                                    Steve

                                    1 Reply Last reply Reply Quote 0
                                    • First post
                                      Last post
                                    Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
                                      This community forum collects and processes your personal information.
                                      consent.not_received