Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Update 2.6.0 CE > 2.7.0 CE: Unable to check for updates

    Scheduled Pinned Locked Moved Problems Installing or Upgrading pfSense Software
    2 Posts 2 Posters 456 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • T
      TomTheOne
      last edited by TomTheOne

      Hi all
      Hi @jimp

      Today i was going to update a 2.6.0 CE installation to 2.7.0 CE.

      The dashboard only showed: Unable to check for updates. The same at System > Update > System Update.

      The CLI displayed following:

      [2.6.0-RELEASE][admin@my.firewall.local]/root: pkg-static update
      Updating pfSense-core repository catalogue...
      pkg-static: An error occured while fetching package
      pkg-static: An error occured while fetching package
      repository pfSense-core has no meta file, using default settings
      pkg-static: An error occured while fetching package
      pkg-static: An error occured while fetching package
      Unable to update repository pfSense-core
      Updating pfSense repository catalogue...
      pkg-static: An error occured while fetching package
      pkg-static: An error occured while fetching package
      repository pfSense has no meta file, using default settings
      pkg-static: An error occured while fetching package
      pkg-static: An error occured while fetching package
      Unable to update repository pfSense
      Error updating repositories!
      

      Issues was solvable by rehash all certs.

      [2.6.0-RELEASE][admin@my.firewall.local]/root: certctl rehash
      Scanning /usr/share/certs/blacklisted for certificates...
      Scanning /usr/share/certs/trusted for certificates...
      Skipping blacklisted certificate /usr/share/certs/trusted/Camerfirma_Chambers_of_Commerce_Root.pem (/etc/ssl/blacklisted/f90208f7.0)
      Skipping blacklisted certificate /usr/share/certs/trusted/Camerfirma_Global_Chambersign_Root.pem (/etc/ssl/blacklisted/cb59f961.0)
      Skipping blacklisted certificate /usr/share/certs/trusted/Certum_Root_CA.pem (/etc/ssl/blacklisted/442adcac.0)
      Skipping blacklisted certificate /usr/share/certs/trusted/Chambers_of_Commerce_Root_-_2008.pem (/etc/ssl/blacklisted/c47d9980.0)
      Skipping blacklisted certificate /usr/share/certs/trusted/D-TRUST_Root_CA_3_2013.pem (/etc/ssl/blacklisted/0b7c536a.0)
      Skipping blacklisted certificate /usr/share/certs/trusted/EC-ACC.pem (/etc/ssl/blacklisted/349f2832.0)
      Skipping blacklisted certificate /usr/share/certs/trusted/GeoTrust_Primary_Certification_Authority_-_G2.pem (/etc/ssl/blacklisted/116bf586.0)
      Skipping blacklisted certificate /usr/share/certs/trusted/Global_Chambersign_Root_-_2008.pem (/etc/ssl/blacklisted/0c4c9b6c.0)
      Skipping blacklisted certificate /usr/share/certs/trusted/OISTE_WISeKey_Global_Root_GA_CA.pem (/etc/ssl/blacklisted/b1b8a7f3.0)
      Skipping blacklisted certificate /usr/share/certs/trusted/QuoVadis_Root_CA.pem (/etc/ssl/blacklisted/080911ac.0)
      Skipping blacklisted certificate /usr/share/certs/trusted/Sonera_Class_2_Root_CA.pem (/etc/ssl/blacklisted/9c2e7d30.0)
      Skipping blacklisted certificate /usr/share/certs/trusted/Staat_der_Nederlanden_Root_CA_-_G3.pem (/etc/ssl/blacklisted/5a4d6896.0)
      Skipping blacklisted certificate /usr/share/certs/trusted/SwissSign_Platinum_CA_-_G2.pem (/etc/ssl/blacklisted/a8dee976.0)
      Skipping blacklisted certificate /usr/share/certs/trusted/Symantec_Class_1_Public_Primary_Certification_Authority_-_G6.pem (/etc/ssl/blacklisted/26312675.0)
      Skipping blacklisted certificate /usr/share/certs/trusted/Symantec_Class_2_Public_Primary_Certification_Authority_-_G6.pem (/etc/ssl/blacklisted/1320b215.0)
      Skipping blacklisted certificate /usr/share/certs/trusted/Trustis_FPS_Root_CA.pem (/etc/ssl/blacklisted/d853d49e.0)
      Skipping blacklisted certificate /usr/share/certs/trusted/VeriSign_Universal_Root_Certification_Authority.pem (/etc/ssl/blacklisted/c01cdfa2.0)
      Skipping blacklisted certificate /usr/share/certs/trusted/Verisign_Class_1_Public_Primary_Certification_Authority_-_G3.pem (/etc/ssl/blacklisted/ee1365c0.0)
      Skipping blacklisted certificate /usr/share/certs/trusted/Verisign_Class_2_Public_Primary_Certification_Authority_-_G3.pem (/etc/ssl/blacklisted/dc45b0bd.0)
      Scanning /usr/local/share/certs for certificates...
      

      I found the solution here:
      https://forums.freebsd.org/threads/problem-updating-packages.89687/

      Maybe this is a information that can be added to the Troubleshooting Upgrades guide.

      Happy pfsensing...

      Regards
      Tom

      1 Reply Last reply Reply Quote 1
      • stephenw10S
        stephenw10 Netgate Administrator
        last edited by

        Hmm, interesting. That shouldn't be required and I'd be hesitant to recommend it until I fully understood exactly what that did or why it was needed.

        1 Reply Last reply Reply Quote 0
        • First post
          Last post
        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.