certificate error while running pkg update
-
Same, joined to post a question to get help, will get fixed when it's fixed.
-
Had the issue all morning, but it's back up and working for me now.
-
Yap, I can confirm it's working for me too now.
-
Fixed!
-
-
Working for me now as well, but I had to manually force an update via the cmd line:
/usr/local/sbin/pkg-static update -f -
I'm now having this issue, I was able to update the day before.
pkg update
pkg: Warning: Major OS version upgrade detected. Running "pkg bootstrap -f" recommended
Updating pfSense-core repository catalogue...
Certificate verification failed for /C=US/ST=Texas/L=Austin/O=Rubicon Communications, LLC (Netgate)/CN=repo01.netgate.com
1086972976:error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed:/build/factory-crossbuild-245-aarch64/sources/FreeBSD-src/crypto/openssl/ssl/s3_clnt.c:1269:[truncated]
Unable to update repository pfSense
Error updating repositories! -
@zitstif looks like a very different issue.
Certificate verification failed for /C=SE/O=AddTrust AB/OU=AddTrust External TTP Network/CN=AddTrust External CA Root
Is what we were experiencing before.
-
I'm getting an issue in 23.05 doing a pkg update.
my browser shows the cert expires in 2122 which is likely the cause of the problem.
Not sure how negate create a 99 year cert.
any work arounds?
sample site to check cert
https://pfsense-plus-pkg01.atx.netgate.com/pfSense_plus-v23_05_amd64-core/packagesite.pkg -
The cert error you see when updating against 23.05 is not related to this ancient thread. It's probably because the pkg repo is using data for the wrong branch. The first thing to try here is to go to Sys > Update > Update Settings and resave 23.05 as the elected branch. That will copy in the correct certs and keys for 23.05.
Steve