Netgate 1100 dns stops
-
You likely can't upgrade to 2.4.5 because there is no branch existing for that. The 'previous stable' branch is 2.5.2 at this point.
The only way to get to 2.4.5 would be to reinstall to it.That particular PHP error is known during upgrade and is not normally an issue. However it looks like it attempted and failed to upgrade to 2.4.5 so the current state is unknown.
You may be able to recover it as shown here:
https://docs.netgate.com/pfsense/en/latest/troubleshooting/upgrades.html#upgrade-not-offered-library-errorsIf you have the option though I would just install 22.05 clean and restore your config.
Steve
-
So maybe a stupid question but how would I install 22.05? Do I have to create a bootable USB or something?
-
If you want to reinstall cleanly then yes. Open a ticket with us to get the recovery image:
https://www.netgate.com/tac-support-requestAssuming this is still for an 1100 instructions are here:
https://docs.netgate.com/pfsense/en/latest/solutions/sg-1100/reinstall-pfsense.htmlSteve
-
-
No this is not for the 1100 but for the other machine,
I got it upgraded to 2.4.5:
But know I'm getting more php erros:
Warning: PHP Startup: Unable to load dynamic library 'curl.so' (tried: /usr/local/lib/php/20170718/curl.so (Shared object "libcurl.so.4" not found, required by "curl.so"), /usr/local/lib/php/20170718/curl.so.so (/usr/local/lib/php/20170718/curl.so.so: invalid file format)) in Unknown on line 0
Warning: PHP Startup: Unable to load dynamic library 'mbstring.so' (tried: /usr/local/lib/php/20170718/mbstring.so (Shared object "libonig.so.5" not found, required by "mbstring.so"), /usr/local/lib/php/20170718/mbstring.so.so (/usr/local/lib/php/20170718/mbstring.so.so: invalid file format)) in Unknown on line 0
Warning: PHP Startup: Unable to load dynamic library 'rrd.so' (tried: /usr/local/lib/php/20170718/rrd.so (Shared object "librrd.so.8" not found, required by "rrd.so"), /usr/local/lib/php/20170718/rrd.so.so (/usr/local/lib/php/20170718/rrd.so.so: invalid file format)) in Unknown on line 0
I can connect from my computer to it but can't go on the internet for some reason that is not working
When I do:
pkg-static clean -ay; pkg-static install -fy pkg pfSense-repo pfSense-upgradeI get the error:
Updating pfSense-core repository catalogue...
Certificate verification failed for /C=GB/ST=Greater Manchester/L=Salford/O=Comodo CA Limited/CN=AAA Certificate Services
12835124:error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed:/usr/local/poudriere/jails/pfSense_v2_4_5_amd64/usr/src/crypto/openssl/ssl/s3_clnt.c:1269: -
Ah the DNS resolver is not starting:
-
@freek_box said in Netgate 1100 dns stops:
No this is not for the 1100
That's why it's confusing to post multiple questions in one thread. :)
There are manuals online with instructions for other Netgate devices. Otherwise this is for CE, for your own hardware:
https://docs.netgate.com/pfsense/en/latest/install/index.html -
Yeah your right maybe start a new post, only I have a question if I install the new version will the certificat problem be solved or does it indeed have to do with my hardware?
-
@freek_box said in Netgate 1100 dns stops:
will the certificat problem be solved or does it indeed have to do with my hardware?
You mean the "crypto chip reset procedure" ?
As said : shut down pfSense with the GUI or SSH/console command.
Wait for it too shut down.
Remove the power xx seconds.
Power up.
.....
Install a recent version - that is 2.6.0 on non Netgate devices, and contact TAC for 22.05. Brunr the USB drives. Install and call it a day. -
No I mean that this error that I"m now getting on the Deciso pfsense firewall:
Certificate verification failed for /C=GB/ST=Greater Manchester/L=Salford/O=Comodo CA Limited/CN=AAA Certificate Services
12835124:error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed:/usr/local/poudriere/jails/pfSense_v2_4_5_amd64/usr/src/crypto/openssl/ssl/s3_clnt.c:1269: -
@freek_box Backup your config.
If it is a Netgate box (non-APU or MinnowBoard) open a ticket at https://go.netgate.com/ for the firmware
Other: download from https://pfsense.org/download/Install
Restore config
Use system
.....
Profit?Ryan
Repeat, after me: MESH IS THE DEVIL! MESH IS THE DEVIL!
Requesting firmware for your Netgate device? https://go.netgate.com
Switching: Mikrotik, Netgear, Extreme
Wireless: Aruba, Ubiquiti -
-
Check the system clock.
But after lib errors like that I would just install 2.6 clean and restore the config.
Steve
-
If it doesnt work I already orderd a 1100 so then I will put the Deciso with the trash and do a fresh install on the 1100
-
I did the new install pretty proud of myself haha!
The problem is indeed fixed thanks for all your help! -
@stephenw10 said in Netgate 1100 dns stops:
The segfault like that indicates the crypto chip is in an unreachable state. You need to completely power cycle the device to reset it. So halt the device then remove the power for 10s or so. It should update correctly when rebooted.
https://docs.netgate.com/pfsense/en/latest/troubleshooting/upgrades.html#segmentation-fault-in-pkgI've been seeing this error, intermittently, since August. I power cycled yesterday but still saw an error early this morning:
Subject: XXX - Arpwatch Notification : Cron <root@pylon> /usr/local/bin/php -q /root/pkg_check.php X-Cron-Env: <SHELL=/bin/sh> X-Cron-Env: <PATH=/sbin:/bin:/usr/sbin:/usr/bin:/usr/local/sbin:/usr/local/bin> X-Cron-Env: <HOME=/root> X-Cron-Env: <LOGNAME=root> X-Cron-Env: <USER=root> 1078734848:error:1409441A:SSL routines:ssl3_read_bytes:tlsv1 alert decode error:/var/jenkins/workspace/pfSense-img-build/BUILD_NODE/aarch64/OS_MAJOR_VERSION/freebsd12/PLATFORM/aws/sources/FreeBSD-src-plus-RELENG_22_05/crypto/openssl/ssl/record/rec_layer_s3.c:1544:SSL alert number 50When I hit this interactively, retrying always succeeds. (Maybe I'm encountering a different crypto hardware issue?)
-
Also on an 1100?
That's not the same error, no segfault there. It's not the crypto chip stuck in a bad state.
Steve
