Update failure
-
This morning upgrading 23.01 the following is produced at the console.
Enter an option: 13
Updating repositories metadata...
Updating pfSense-core repository catalogue...
Certificate verification failed for /C=GB/ST=Greater Manchester/L=Salford/O=Comodo CA Limited/CN=AAA Certificate Services
34948116480:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/var/jenkins/workspace/pfSense-Plus-snapshots-master-main/sources/FreeBSD-src-plus-devel-main/crypto/openssl/ssl/statem/statem_clnt.c:1921:and similar repeated several times then
Unable to update repository pfSense
Error updating repositories!Upgrading pfSense-upgrade... failed.
Ted Quade
-
@tedquade i had the same issue earlier. Rebooted the box and the problem was gone. Give it a go.
-
@gabacho4 Reboot didn't resolve the issue for me.
Ted Quade
-
@tedquade odd. Maybe Netgate is having some intermittent issues and I timed it just right? I updated via the console.
-
@gabacho4 What's interesting is the dashboard indicates it's up to date but "System / Update / System Update" shows yesterdays iteration and that it is up to date.
Ted Quade
-
@tedquade yeah something is messed up. There’s a build from this morning that I updated to earlier. Guess waiting might be the name of the game. Bummer.
-
@tedquade said in Update failure:
@gabacho4 Reboot didn't resolve the issue for me.
Ted Quade
For me neither. Rebooted, even cut power off in case it was a hardware error of the quick assist adapter.
Getting the same certificate validation error.
-
@jjstecchino it’s so strange. Maybe toggle your update repo to 22.05 and then back to DEV? When I check on a production SG5100 is is able to see the newest dev update. I won’t update it of course so no way to say if the update would go through or not. But my lab 5100 did work.
-
@gabacho4 Good thinking and worth a try. Still no go but a different error.
Now getting bad request!
-
Enter an option: 13 >>> Updating repositories metadata... Updating pfSense-core repository catalogue... pkg-static: https://pfsense-plus-pkg-beta00.atx.netgate.com/pfSense_plus-master_amd64-core/meta.txz: Bad Request repository pfSense-core has no meta file, using default settings pkg-static: https://pfsense-plus-pkg-beta00.atx.netgate.com/pfSense_plus-master_amd64-core/packagesite.pkg: Bad Request pkg-static: https://pfsense-plus-pkg-beta00.atx.netgate.com/pfSense_plus-master_amd64-core/packagesite.txz: Bad Request Unable to update repository pfSense-core Updating pfSense repository catalogue... pkg-static: https://pfsense-plus-pkg-beta01.atx.netgate.com/pfSense_plus-master_amd64-pfSense_plus_devel/meta.txz: Bad Request repository pfSense has no meta file, using default settings pkg-static: https://pfsense-plus-pkg-beta01.atx.netgate.com/pfSense_plus-master_amd64-pfSense_plus_devel/packagesite.pkg: Bad Request pkg-static: https://pfsense-plus-pkg-beta01.atx.netgate.com/pfSense_plus-master_amd64-pfSense_plus_devel/packagesite.txz: Bad Request Unable to update repository pfSense Error updating repositories! >>> Upgrading pfSense-upgrade... failed.
-
@jjstecchino well there’s nothing left to do than attach an old Nintendo controller and try the forever famous ️️️️️️B A combination.
-
@gabacho4 said in Update failure:
@jjstecchino well there’s nothing left to do than attach an old Nintendo controller and try the forever famous ️️️️️️B A combination.
lol!
-
Wanted to flag this for Netgate as it seems you all are having cert issues. Aside from what has been discussed in the thread, here is what I just got on a box running the latest development build while trying to check for updates via ssh/console:
>>> Updating repositories metadata... Updating pfSense-core repository catalogue... Certificate verification failed for /C=US/ST=Texas/L=Austin/O=Rubicon Communications, LLC (Netgate)/CN=repo01.atx.netgate.com 34960412672:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/var/jenkins/workspace/pfSense-Plus-snapshots-master-main/sources/FreeBSD-src-plus-devel-main/crypto/openssl/ssl/statem/statem_clnt.c:1921: Certificate verification failed for /C=US/ST=Texas/L=Austin/O=Rubicon Communications, LLC (Netgate)/CN=repo01.atx.netgate.com 34960412672:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/var/jenkins/workspace/pfSense-Plus-snapshots-master-main/sources/FreeBSD-src-plus-devel-main/crypto/openssl/ssl/statem/statem_clnt.c:1921: Certificate verification failed for /C=US/ST=Texas/L=Austin/O=Rubicon Communications, LLC (Netgate)/CN=repo01.atx.netgate.com 34960412672:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/var/jenkins/workspace/pfSense-Plus-snapshots-master-main/sources/FreeBSD-src-plus-devel-main/crypto/openssl/ssl/statem/statem_clnt.c:1921: Certificate verification failed for /C=US/ST=Texas/L=Austin/O=Rubicon Communications, LLC (Netgate)/CN=repo01.atx.netgate.com 34960412672:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/var/jenkins/workspace/pfSense-Plus-snapshots-master-main/sources/FreeBSD-src-plus-devel-main/crypto/openssl/ssl/statem/statem_clnt.c:1921: pkg-static: https://repo01.atx.netgate.com/beta/packages/pfSense_plus-master_amd64-core/meta.txz: Authentication error repository pfSense-core has no meta file, using default settings Certificate verification failed for /C=US/ST=Texas/L=Austin/O=Rubicon Communications, LLC (Netgate)/CN=repo01.atx.netgate.com 34960412672:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/var/jenkins/workspace/pfSense-Plus-snapshots-master-main/sources/FreeBSD-src-plus-devel-main/crypto/openssl/ssl/statem/statem_clnt.c:1921: Certificate verification failed for /C=US/ST=Texas/L=Austin/O=Rubicon Communications, LLC (Netgate)/CN=repo01.atx.netgate.com 34960412672:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/var/jenkins/workspace/pfSense-Plus-snapshots-master-main/sources/FreeBSD-src-plus-devel-main/crypto/openssl/ssl/statem/statem_clnt.c:1921: pkg-static: https://repo01.atx.netgate.com/beta/packages/pfSense_plus-master_amd64-core/packagesite.pkg: Authentication error Certificate verification failed for /C=US/ST=Texas/L=Austin/O=Rubicon Communications, LLC (Netgate)/CN=repo01.atx.netgate.com 34960412672:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/var/jenkins/workspace/pfSense-Plus-snapshots-master-main/sources/FreeBSD-src-plus-devel-main/crypto/openssl/ssl/statem/statem_clnt.c:1921: Certificate verification failed for /C=US/ST=Texas/L=Austin/O=Rubicon Communications, LLC (Netgate)/CN=repo01.atx.netgate.com 34960412672:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/var/jenkins/workspace/pfSense-Plus-snapshots-master-main/sources/FreeBSD-src-plus-devel-main/crypto/openssl/ssl/statem/statem_clnt.c:1921: pkg-static: https://repo01.atx.netgate.com/beta/packages/pfSense_plus-master_amd64-core/packagesite.txz: Authentication error Unable to update repository pfSense-core Updating pfSense repository catalogue... Certificate verification failed for /C=US/ST=Texas/L=Austin/O=Rubicon Communications, LLC (Netgate)/CN=repo01.atx.netgate.com 34960412672:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/var/jenkins/workspace/pfSense-Plus-snapshots-master-main/sources/FreeBSD-src-plus-devel-main/crypto/openssl/ssl/statem/statem_clnt.c:1921: Certificate verification failed for /C=US/ST=Texas/L=Austin/O=Rubicon Communications, LLC (Netgate)/CN=repo01.atx.netgate.com 34960412672:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/var/jenkins/workspace/pfSense-Plus-snapshots-master-main/sources/FreeBSD-src-plus-devel-main/crypto/openssl/ssl/statem/statem_clnt.c:1921: Certificate verification failed for /C=US/ST=Texas/L=Austin/O=Rubicon Communications, LLC (Netgate)/CN=repo01.atx.netgate.com 34960412672:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/var/jenkins/workspace/pfSense-Plus-snapshots-master-main/sources/FreeBSD-src-plus-devel-main/crypto/openssl/ssl/statem/statem_clnt.c:1921: Certificate verification failed for /C=US/ST=Texas/L=Austin/O=Rubicon Communications, LLC (Netgate)/CN=repo01.atx.netgate.com 34960412672:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/var/jenkins/workspace/pfSense-Plus-snapshots-master-main/sources/FreeBSD-src-plus-devel-main/crypto/openssl/ssl/statem/statem_clnt.c:1921: pkg-static: https://repo01.atx.netgate.com/beta/packages/pfSense_plus-master_amd64-pfSense_plus_devel/meta.txz: Authentication error repository pfSense has no meta file, using default settings Certificate verification failed for /C=US/ST=Texas/L=Austin/O=Rubicon Communications, LLC (Netgate)/CN=repo01.atx.netgate.com 34960412672:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/var/jenkins/workspace/pfSense-Plus-snapshots-master-main/sources/FreeBSD-src-plus-devel-main/crypto/openssl/ssl/statem/statem_clnt.c:1921: Certificate verification failed for /C=US/ST=Texas/L=Austin/O=Rubicon Communications, LLC (Netgate)/CN=repo01.atx.netgate.com 34960412672:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/var/jenkins/workspace/pfSense-Plus-snapshots-master-main/sources/FreeBSD-src-plus-devel-main/crypto/openssl/ssl/statem/statem_clnt.c:1921: pkg-static: https://repo01.atx.netgate.com/beta/packages/pfSense_plus-master_amd64-pfSense_plus_devel/packagesite.pkg: Authentication error Certificate verification failed for /C=US/ST=Texas/L=Austin/O=Rubicon Communications, LLC (Netgate)/CN=repo01.atx.netgate.com 34960412672:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/var/jenkins/workspace/pfSense-Plus-snapshots-master-main/sources/FreeBSD-src-plus-devel-main/crypto/openssl/ssl/statem/statem_clnt.c:1921: Certificate verification failed for /C=US/ST=Texas/L=Austin/O=Rubicon Communications, LLC (Netgate)/CN=repo01.atx.netgate.com 34960412672:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/var/jenkins/workspace/pfSense-Plus-snapshots-master-main/sources/FreeBSD-src-plus-devel-main/crypto/openssl/ssl/statem/statem_clnt.c:1921: pkg-static: https://repo01.atx.netgate.com/beta/packages/pfSense_plus-master_amd64-pfSense_plus_devel/packagesite.txz: Authentication error Unable to update repository pfSense Error updating repositories! >>> Upgrading pfSense-upgrade... failed.
-
@gabacho4 same error I am getting.
-
@jjstecchino Me to.
Ted Quade
-
@tedquade it may be a problem with their server.it will be fixed soon.
-
Started working for me now
-
@jjstecchino Still problem for me.
Ted Quade
-
@tedquade said in Update failure:
@jjstecchino Still problem for me.
Ted Quade
If I remember correctly from some old posts on a similar issue, the server need to send a certificate and there is a limit on how many certificates it will send within a given time. After a while it will reset and will start working again. If it doesn't by tomorrow you may want to send an email to negate support with your Netgate Device Id and they will reset the NDI on the server for you
-
@jjstecchino Just completed update. Thanks for your guidance.
Ted Quade
-
-