• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

Netgate 1100 dns stops

Scheduled Pinned Locked Moved General pfSense Questions
50 Posts 6 Posters 6.4k Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • F
    Freek_Box
    last edited by Oct 12, 2022, 12:23 PM

    @stephenw10

    So maybe a stupid question but how would I install 22.05? Do I have to create a bootable USB or something?

    S 1 Reply Last reply Oct 12, 2022, 12:43 PM Reply Quote 0
    • S
      stephenw10 Netgate Administrator
      last edited by Oct 12, 2022, 12:43 PM

      If you want to reinstall cleanly then yes. Open a ticket with us to get the recovery image:
      https://www.netgate.com/tac-support-request

      Assuming this is still for an 1100 instructions are here:
      https://docs.netgate.com/pfsense/en/latest/solutions/sg-1100/reinstall-pfsense.html

      Steve

      1 Reply Last reply Reply Quote 0
      • S
        SteveITS Galactic Empire @Freek_Box
        last edited by Oct 12, 2022, 12:43 PM

        @freek_box https://docs.netgate.com/pfsense/en/latest/solutions/sg-1100/reinstall-pfsense.html

        Pre-2.7.2/23.09: Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
        When upgrading, allow 10-15 minutes to restart, or more depending on packages and device speed.
        Upvote 👍 helpful posts!

        1 Reply Last reply Reply Quote 0
        • F
          Freek_Box
          last edited by Oct 12, 2022, 1:24 PM

          No this is not for the 1100 but for the other machine,
          I got it upgraded to 2.4.5:

          Schermafbeelding 2022-10-12 om 15.21.38.png

          But know I'm getting more php erros:

          Warning: PHP Startup: Unable to load dynamic library 'curl.so' (tried: /usr/local/lib/php/20170718/curl.so (Shared object "libcurl.so.4" not found, required by "curl.so"), /usr/local/lib/php/20170718/curl.so.so (/usr/local/lib/php/20170718/curl.so.so: invalid file format)) in Unknown on line 0

          Warning: PHP Startup: Unable to load dynamic library 'mbstring.so' (tried: /usr/local/lib/php/20170718/mbstring.so (Shared object "libonig.so.5" not found, required by "mbstring.so"), /usr/local/lib/php/20170718/mbstring.so.so (/usr/local/lib/php/20170718/mbstring.so.so: invalid file format)) in Unknown on line 0

          Warning: PHP Startup: Unable to load dynamic library 'rrd.so' (tried: /usr/local/lib/php/20170718/rrd.so (Shared object "librrd.so.8" not found, required by "rrd.so"), /usr/local/lib/php/20170718/rrd.so.so (/usr/local/lib/php/20170718/rrd.so.so: invalid file format)) in Unknown on line 0

          I can connect from my computer to it but can't go on the internet for some reason that is not working

          When I do:
          pkg-static clean -ay; pkg-static install -fy pkg pfSense-repo pfSense-upgrade

          I get the error:

          Updating pfSense-core repository catalogue...
          Certificate verification failed for /C=GB/ST=Greater Manchester/L=Salford/O=Comodo CA Limited/CN=AAA Certificate Services
          12835124:error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed:/usr/local/poudriere/jails/pfSense_v2_4_5_amd64/usr/src/crypto/openssl/ssl/s3_clnt.c:1269:

          S 1 Reply Last reply Oct 12, 2022, 2:03 PM Reply Quote 0
          • F
            Freek_Box
            last edited by Oct 12, 2022, 1:31 PM

            Ah the DNS resolver is not starting:
            Schermafbeelding 2022-10-12 om 15.28.49.png

            1 Reply Last reply Reply Quote 0
            • S
              SteveITS Galactic Empire @Freek_Box
              last edited by Oct 12, 2022, 2:03 PM

              @freek_box said in Netgate 1100 dns stops:

              No this is not for the 1100

              That's why it's confusing to post multiple questions in one thread. :)

              There are manuals online with instructions for other Netgate devices. Otherwise this is for CE, for your own hardware:
              https://docs.netgate.com/pfsense/en/latest/install/index.html

              Pre-2.7.2/23.09: Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
              When upgrading, allow 10-15 minutes to restart, or more depending on packages and device speed.
              Upvote 👍 helpful posts!

              F 1 Reply Last reply Oct 12, 2022, 2:15 PM Reply Quote 1
              • F
                Freek_Box @SteveITS
                last edited by Oct 12, 2022, 2:15 PM

                @steveits

                Yeah your right maybe start a new post, only I have a question if I install the new version will the certificat problem be solved or does it indeed have to do with my hardware?

                G 1 Reply Last reply Oct 12, 2022, 2:27 PM Reply Quote 0
                • G
                  Gertjan @Freek_Box
                  last edited by Oct 12, 2022, 2:27 PM

                  @freek_box said in Netgate 1100 dns stops:

                  will the certificat problem be solved or does it indeed have to do with my hardware?

                  You mean the "crypto chip reset procedure" ?
                  As said : shut down pfSense with the GUI or SSH/console command.
                  Wait for it too shut down.
                  Remove the power xx seconds.
                  Power up.
                  .....
                  Install a recent version - that is 2.6.0 on non Netgate devices, and contact TAC for 22.05. Brunr the USB drives. Install and call it a day.

                  No "help me" PM's please. Use the forum, the community will thank you.
                  Edit : and where are the logs ??

                  F 1 Reply Last reply Oct 12, 2022, 2:28 PM Reply Quote 0
                  • F
                    Freek_Box @Gertjan
                    last edited by Oct 12, 2022, 2:28 PM

                    @gertjan

                    No I mean that this error that I"m now getting on the Deciso pfsense firewall:

                    Certificate verification failed for /C=GB/ST=Greater Manchester/L=Salford/O=Comodo CA Limited/CN=AAA Certificate Services
                    12835124:error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed:/usr/local/poudriere/jails/pfSense_v2_4_5_amd64/usr/src/crypto/openssl/ssl/s3_clnt.c:1269:

                    R 1 Reply Last reply Oct 12, 2022, 2:49 PM Reply Quote 0
                    • R
                      rcoleman-netgate Netgate @Freek_Box
                      last edited by Oct 12, 2022, 2:49 PM

                      @freek_box Backup your config.

                      If it is a Netgate box (non-APU or MinnowBoard) open a ticket at https://go.netgate.com/ for the firmware
                      Other: download from https://pfsense.org/download/

                      Install
                      Restore config
                      Use system
                      .....
                      Profit?

                      Ryan
                      Repeat, after me: MESH IS THE DEVIL! MESH IS THE DEVIL!
                      Requesting firmware for your Netgate device? https://go.netgate.com
                      Switching: Mikrotik, Netgear, Extreme
                      Wireless: Aruba, Ubiquiti

                      G 1 Reply Last reply Oct 12, 2022, 2:53 PM Reply Quote 0
                      • G
                        Gertjan @rcoleman-netgate
                        last edited by Oct 12, 2022, 2:53 PM

                        @rcoleman-netgate said in Netgate 1100 dns stops:

                        Profit?

                        Profit !

                        No "help me" PM's please. Use the forum, the community will thank you.
                        Edit : and where are the logs ??

                        1 Reply Last reply Reply Quote 0
                        • S
                          stephenw10 Netgate Administrator
                          last edited by Oct 12, 2022, 2:54 PM

                          Check the system clock.

                          But after lib errors like that I would just install 2.6 clean and restore the config.

                          Steve

                          1 Reply Last reply Reply Quote 0
                          • F
                            Freek_Box
                            last edited by Oct 12, 2022, 2:54 PM

                            If it doesnt work I already orderd a 1100 so then I will put the Deciso with the trash and do a fresh install on the 1100

                            1 Reply Last reply Reply Quote 0
                            • F
                              Freek_Box
                              last edited by Oct 13, 2022, 6:59 AM

                              I did the new install pretty proud of myself haha!
                              The problem is indeed fixed thanks for all your help!

                              1 Reply Last reply Reply Quote 1
                              • L
                                leres @stephenw10
                                last edited by leres Oct 13, 2022, 4:39 PM Oct 13, 2022, 4:39 PM

                                @stephenw10 said in Netgate 1100 dns stops:

                                The segfault like that indicates the crypto chip is in an unreachable state. You need to completely power cycle the device to reset it. So halt the device then remove the power for 10s or so. It should update correctly when rebooted.
                                https://docs.netgate.com/pfsense/en/latest/troubleshooting/upgrades.html#segmentation-fault-in-pkg

                                I've been seeing this error, intermittently, since August. I power cycled yesterday but still saw an error early this morning:

                                Subject: XXX - Arpwatch Notification : Cron <root@pylon> /usr/local/bin/php -q /root/pkg_check.php
                                
                                X-Cron-Env: <SHELL=/bin/sh>
                                X-Cron-Env: <PATH=/sbin:/bin:/usr/sbin:/usr/bin:/usr/local/sbin:/usr/local/bin>
                                X-Cron-Env: <HOME=/root>
                                X-Cron-Env: <LOGNAME=root>
                                X-Cron-Env: <USER=root>
                                
                                1078734848:error:1409441A:SSL routines:ssl3_read_bytes:tlsv1 alert decode error:/var/jenkins/workspace/pfSense-img-build/BUILD_NODE/aarch64/OS_MAJOR_VERSION/freebsd12/PLATFORM/aws/sources/FreeBSD-src-plus-RELENG_22_05/crypto/openssl/ssl/record/rec_layer_s3.c:1544:SSL alert number 50
                                

                                When I hit this interactively, retrying always succeeds. (Maybe I'm encountering a different crypto hardware issue?)

                                1 Reply Last reply Reply Quote 0
                                • S
                                  stephenw10 Netgate Administrator
                                  last edited by Oct 13, 2022, 8:20 PM

                                  Also on an 1100?

                                  That's not the same error, no segfault there. It's not the crypto chip stuck in a bad state.

                                  Steve

                                  1 Reply Last reply Reply Quote 0
                                  50 out of 50
                                  • First post
                                    50/50
                                    Last post
                                  Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
                                    This community forum collects and processes your personal information.
                                    consent.not_received