pfSense 23.01: updating fails after upgrade from 22.01

markus.enderlein

I updated my pfSense to version 23.01 a few weeks ago. Since then, installing additional packages no longer works. I found out that it is probably due to an incorrect update of the repository.

I have used the update command from the cli to get more information about the error: pkg -4 -d4 update

DBG(1)[92551]> pkg initialized
Updating pfSense-core repository catalogue...
DBG(1)[92551]> PkgRepo: verifying update for pfSense-core
DBG(1)[92551]> PkgRepo: need forced update of pfSense-core
DBG(1)[92551]> Pkgrepo, begin update of '/var/db/pkg/repo-pfSense-core.sqlite'
DBG(1)[92551]> Request to fetch pkg+https://pfsense-plus-pkg.netgate.com/pfSense_plus-v23_01_amd64-core/meta.conf
DBG(1)[92551]> opening libfetch fetcher
DBG(1)[92551]> Fetch > libfetch: connecting
DBG(1)[92551]> Fetch: fetching from: https://pfsense-plus-pkg00.atx.netgate.com/pfSense_plus-v23_01_amd64-core/meta.conf with opts "i4"
DBG(1)[92551]> Fetch: fetching from: https://pfsense-plus-pkg01.atx.netgate.com/pfSense_plus-v23_01_amd64-pfSense_plus_v23_01/packagesite.pkg with opts "i4"
Certificate verification failed for /C=US/ST=Texas/L=Austin/O=Rubicon Communications, LLC (Netgate)/OU=pfSense Plus/CN=pfsense-plus-pkg01.atx.netgate.com
35120828416:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/var/jenkins/workspace/pfSense-Plus-snapshots-23_01-main/sources/FreeBSD-src-plus-RELENG_23_01/crypto/openssl/ssl/statem/statem_clnt.c:1921:
pkg: https://pfsense-plus-pkg01.atx.netgate.com/pfSense_plus-v23_01_amd64-pfSense_plus_v23_01/packagesite.pkg: Authentication error
Unable to update repository pfSense
Error updating repositories!

I have already tried some things that I found here in the forum. Among them also a complete reboot, which could solve the problem for others, but unfortunately not for me.

I am using the Netgate 7100 applicance with pfSense plus 23.01-RELEASE.
Does anyone know how to fix this?

Dobby_

Hello,

I updated my pfSense to version 23.01 a few weeks ago.

If you go to the following menue;
System - Update > Update Settings

Make sure you are on branch 23.01
Do nothing, only "hit" (click) safe (red arrow)
and then go to the packages system and have
a look once more again there, it should be now
showing you the packages for installing.

Since then, installing additional packages no
longer works.

Here and there where some problems due to the entire
2.6 to 2.7 and 23.01 to 23.05 RC process, I am pretty sure
this will be gone in the near future. Mostly it depends on
certification mismatch, lease time of that certs and PHP
code mismatching.

Summer

@Dobby_ thanks but web gui isn't staring in any way.

Now I've sent a request to Netgate to get a media installation, but they may answer in next 48 hours.

I'm trying to restore by shell and followed https://docs.netgate.com/pfsense/en/latest/troubleshooting/pkg-broken-database.html

I'vre restored internet without dns with:

ifconfig waninterfacename oldip netmask 255.255.255.0
route add default mygateway

then tried:

usr/local/sbin/pkg-static update -f

Updating pfSense-core repository catalogue...
Fetching meta.conf: 100%    163 B   0.2kB/s    00:01    
Fetching packagesite.pkg: 100%    2 KiB   1.8kB/s    00:01    
Processing entries: 100%
pfSense-core repository update completed. 7 packages processed.
Updating pfSense repository catalogue...
Fetching meta.conf: 100%    163 B   0.2kB/s    00:01    
Fetching packagesite.pkg: 100%  150 KiB 153.5kB/s    00:01    
Processing entries:   0%
Newer FreeBSD version for package uchardet:
To ignore this error set IGNORE_OSVERSION=yes
- package: 1400085
- running kernel: 1400073
Ignore the mismatch and continue? [y/N]: y
Processing entries: 100%
pfSense repository update completed. 516 packages processed.
All repositories are up to date.

But no progress at all, so I've tried with:

[23.01-RELEASE][admin@]/root: /usr/local/sbin/pfSense-upgrade

gettextgettextgettextgettextgettextgettextgettext
Fatal error: Uncaught Error: Failed opening required 'Net/IPv6.php' (include_path='.:/etc/inc:/usr/local/pfSense/include:/usr/local/pfSense/include/www:/usr/local/www:/usr/local/captiveportal:/usr/local/pkg:/usr/local/www/classes:/usr/local/www/classes/Form:/usr/local/share/pear:/usr/local/share/openssl_x509_crl/') in /etc/inc/config.gui.inc:41
Stack trace:
#0 /etc/inc/auth.inc(34): require_once()
#1 /etc/inc/openvpn.inc(36): require_once('/etc/inc/auth.i...')
#2 /etc/inc/filter.inc(30): require_once('/etc/inc/openvp...')
#3 /etc/inc/ipsec.inc(25): require_once('/etc/inc/filter...')
#4 /etc/inc/gwlb.inc(27): require_once('/etc/inc/ipsec....')
#5 /etc/inc/functions.inc(35): require_once('/etc/inc/gwlb.i...')
#6 /etc/inc/notices.inc(26): require_once('/etc/inc/functi...')
#7 /etc/inc/config.inc(51): require_once('/etc/inc/notice...')
#8 /usr/local/sbin/pfSense-update-repos.php(23): require_once('/etc/inc/config...')
#9 {main}
  thrown in /etc/inc/config.gui.inc on line 41
PHP ERROR: Type: 1, File: /etc/inc/config.gui.inc, Line: 41, Message: Uncaught Error: Failed opening required 'Net/IPv6.php' (include_path='.:/etc/inc:/usr/local/pfSense/include:/usr/local/pfSense/include/www:/usr/local/www:/usr/local/captiveportal:/usr/local/pkg:/usr/local/www/classes:/usr/local/www/classes/Form:/usr/local/share/pear:/usr/local/share/openssl_x509_crl/') in /etc/inc/config.gui.inc:41
Stack trace:
#0 /etc/inc/auth.inc(34): require_once()
#1 /etc/inc/openvpn.inc(36): require_once('/etc/inc/auth.i...')
#2 /etc/inc/filter.inc(30): require_once('/etc/inc/openvp...')
#3 /etc/inc/ipsec.inc(25): require_once('/etc/inc/filter...')
#4 /etc/inc/gwlb.inc(27): require_once('/etc/inc/ipsec....')
#5 /etc/inc/functions.inc(35): require_once('/etc/inc/gwlb.i...')
#6 /etc/inc/notices.inc(26): require_once('/etc/inc/functi...')
#7 /etc/inc/config.inc(51): require_once('/etc/inc/notice...')
#8 /usr/local/sbin/pfSense-update-repos.php(23): require_once('/etc/inc/config...')
#9 {main}
  thrown
Fatal error: Uncaught ValueError: Path cannot be empty in /etc/inc/notices.inc:101
Stack trace:
#0 /etc/inc/notices.inc(101): fopen('', 'w')
#1 /etc/inc/config.lib.inc(1162): file_notice('phperror', 'PHP ERROR: Type...', 'PHP errors')
#2 [internal function]: pfSense_clear_globals()
#3 {main}
  thrown in /etc/inc/notices.inc on line 101
failed to update the repository settings!!!

[23.01-RELEASE][admin@]/root: date
Fri Aug 11 11:17:44 CEST 2023
[23.01-RELEASE][admin@]/root: freebsd-version -kr
14.0-CURRENT
14.0-CURRENT
[23.01-RELEASE][admin@]/root:  uname -a
FreeBSD  14.0-CURRENT FreeBSD 14.0-CURRENT #0 plus-RELENG_23_01-n256037-6e914874a5e: Fri Feb 10 20:27:02 UTC 2023     root@freebsd:/var/jenkins/workspace/pfSense-Plus-snapshots-23_01-main/obj/armv7/W6AbNMMs/var/jenkins/workspace/pfSense-Plus-snapshots-23_01-main/sources/FreeBSD-src-plus-RELENG_23_01/arm.armv7/sys/pfSense-3100 arm