Community to Plus upgrade failure

TSE 0

Hi folks,

Last night I unsuccessfully applied a Plus upgrade to my self-rolled community installation. After reinstalling and restoring, I'm ready to try again (its probably one of the packages ... maybe ...) but I'm now unable to do so.

I expected to need to register my token once more, but cannot; instead I see:

*Thank you for choosing Netgate pfSense

Your device does not require registration, we recognize it already. You may have already registered, or it may be a pre-registered Netgate appliance.*

Assuming that the device ID is already registered, I expected to be able to apply the Plus upgrade via the GUI, but instead see:

Unable to check for updates

and a manual attempt seems to indicate an cert/auth error (below). Any help greatly appreciated.

Shell Output - pkg-static install -fy pkg pfSense-repo
pkg-static: Warning: Major OS version upgrade detected. Running "pkg bootstrap -f" recommended
Updating pfSense-core repository catalogue...
Could not load client certificate /etc/ssl/pfSense-repo-custom.cert
Could not load client certificate /etc/ssl/pfSense-repo-custom.cert
Could not load client certificate /etc/ssl/pfSense-repo-custom.cert
Could not load client certificate /etc/ssl/pfSense-repo-custom.cert
Could not load client certificate /etc/ssl/pfSense-repo-custom.cert
Could not load client certificate /etc/ssl/pfSense-repo-custom.cert
pkg-static: https://pfsense-plus-pkg00.atx.netgate.com/pfSense_plus-v22_01_amd64-core/meta.txz: Authentication error
repository pfSense-core has no meta file, using default settings
Could not load client certificate /etc/ssl/pfSense-repo-custom.cert
Could not load client certificate /etc/ssl/pfSense-repo-custom.cert
Could not load client certificate /etc/ssl/pfSense-repo-custom.cert
pkg-static: https://pfsense-plus-pkg00.atx.netgate.com/pfSense_plus-v22_01_amd64-core/packagesite.pkg: Authentication error
Could not load client certificate /etc/ssl/pfSense-repo-custom.cert
Could not load client certificate /etc/ssl/pfSense-repo-custom.cert
Could not load client certificate /etc/ssl/pfSense-repo-custom.cert
pkg-static: https://pfsense-plus-pkg00.atx.netgate.com/pfSense_plus-v22_01_amd64-core/packagesite.txz: Authentication error
Unable to update repository pfSense-core
Updating pfSense repository catalogue...
Could not load client certificate /etc/ssl/pfSense-repo-custom.cert
Could not load client certificate /etc/ssl/pfSense-repo-custom.cert
Could not load client certificate /etc/ssl/pfSense-repo-custom.cert
Could not load client certificate /etc/ssl/pfSense-repo-custom.cert
Could not load client certificate /etc/ssl/pfSense-repo-custom.cert
Could not load client certificate /etc/ssl/pfSense-repo-custom.cert
pkg-static: https://pfsense-plus-pkg01.atx.netgate.com/pfSense_plus-v22_01_amd64-pfSense_plus_v22_01//meta.txz: Authentication error
repository pfSense has no meta file, using default settings
Could not load client certificate /etc/ssl/pfSense-repo-custom.cert
Could not load client certificate /etc/ssl/pfSense-repo-custom.cert
Could not load client certificate /etc/ssl/pfSense-repo-custom.cert
pkg-static: https://pfsense-plus-pkg01.atx.netgate.com/pfSense_plus-v22_01_amd64-pfSense_plus_v22_01//packagesite.pkg: Authentication error
Could not load client certificate /etc/ssl/pfSense-repo-custom.cert
Could not load client certificate /etc/ssl/pfSense-repo-custom.cert
Could not load client certificate /etc/ssl/pfSense-repo-custom.cert
pkg-static: https://pfsense-plus-pkg01.atx.netgate.com/pfSense_plus-v22_01_amd64-pfSense_plus_v22_01//packagesite.txz: Authentication error
Unable to update repository pfSense
Error updating repositories!

fway

Same exact problem here right now....since yesterday. I've been puling my hair out as this is my first CE to Plus attempt.

TSE 0

@fway FYI - I posted a request to the support guys, and they reset my NDI eligibility within minutes....

After a reboot, I'm now back up and going... attempting upgrade once more!

EDIT: FWIW, I'm gonna do a config backup after the initial upgrade before proceeding to do the full version upgrade... hopefully this'll capture anything in the cert / auth updates so I can restore successfully if the same issue occurs... I'll update later with more info.

Cheers.

TSE 0

@fway One more snippit just in from the support team ... you could also wait for the mentioned timeout ... (1 day?). I asked if there was anything more I could do on my end if it failed again, and I needed to loop back to a base install/upgrade rather than leave my packages in place (which may well be interfering)...

There's nothing I can suggest to do on your end at the moment. A migration "timeout" exists which you'd need to wait for, or have us reset. Normally the timeout ends the next day.

fway

@tse-0 Where did you do it? Where did you ask them to get a fast response?

TSE 0

@fway I took a punt and opened a ticket here… (TAC Lite). I didn’t a expect a response as I am not TAC Lite enabled, but to their credit, they responded. Cheers!

TSE 0

I’ve now successfully upgraded. Cheers to Netgate support for the help.

fway

@tse-0 I'm all good now too! Thanks!

reggie14

What did you do to fix the problem? I just tried to upgrade from 2.6 to Plus. It seemed like the 2.6 -> 22.01 upgrade went OK. But then the 22.01-> 23.01 upgrade failed upon reboot.

Specifically I got a fatal error in the console:

Fatal error: Uncaught Error: Call to undefined function gettext() in /etc/inc/certs.inc:48

Further, the WebGUI made it look like it couldn't even do the upgrade. I was getting the Unable to check for updates message, but it was actually already doing the upgrade in the background. After the reboot is when I got the fatal error in the console.

This happened twice. I tried it once, restored from backup, and tried it again. Same result.

TSE 0

@reggie14 not 100% sure why it worked the second time, BUT I did shut down all packages before the second attempt… didn’t uninstall… just shut them down.