• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

Unable to check for updates

Problems Installing or Upgrading pfSense Software
updates
3
15
908
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • D
    dw-help
    last edited by Mar 28, 2024, 9:40 AM

    Good afternoon,

    I am currently unable to install packages and/or install updates.

    Netgate 2100
    Version: 22.05-RELEASE (arm64)
    FreeBSD 12.3-STABLE

    I have implemented the solution suggested here but does not help.
    https://forum.netgate.com/topic/174768/unable-to-check-for-updates-solved?lang=nl

    Result of this command:
    pkg-static -d update

    DBG(1)[7448]> pkg initialized
    Updating pfSense-core repository catalogue...
    DBG(1)[7448]> PkgRepo: verifying update for pfSense-core
    DBG(1)[7448]> PkgRepo: need forced update of pfSense-core
    DBG(1)[7448]> Pkgrepo, begin update of '/var/db/pkg/repo-pfSense-core.sqlite'
    DBG(1)[7448]> Request to fetch pkg+https://firmware.netgate.com/beta/packages/pfSense_plus-master_aarch64-core/meta.conf
    DBG(1)[7448]> opening libfetch fetcher
    DBG(1)[7448]> Fetch > libfetch: connecting
    DBG(1)[7448]> Fetch: fetching from: https://pkg01-atx.netgate.com/beta/packages/pfSense_plus-master_aarch64-core/meta.conf with opts "i"
    Certificate verification failed for /C=GB/ST=Greater Manchester/L=Salford/O=Comodo CA Limited/CN=AAA Certificate Services
    1086423040:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/var/jenkins/workspace/pfSense-Plus-snapshots-23_01-main/sources/FreeBSD-src-plus-RELENG_23_01/crypto/openssl/ssl/statem/statem_clnt.c:1921:
    DBG(1)[7448]> Fetch: fetching from: https://pkg01-atx.netgate.com/beta/packages/pfSense_plus-master_aarch64-core/meta.conf with opts "i"
    ...
    ...
    1086423040:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/var/jenkins/workspace/pfSense-Plus-snapshots-23_01-main/sources/FreeBSD-src-plus-RELENG_23_01/crypto/openssl/ssl/statem/statem_clnt.c:1921:
    pkg-static: https://pkg01-atx.netgate.com/beta/packages/pfSense_plus-master_aarch64-pfSense_plus_devel/packagesite.txz: Authentication error
    Unable to update repository pfSense
    Error updating repositories!

    Kind Regards,

    G 1 Reply Last reply Mar 28, 2024, 12:17 PM Reply Quote 0
    • G
      Gertjan @dw-help
      last edited by Mar 28, 2024, 12:17 PM

      @dw-help said in Unable to check for updates:

      https://forum.netgate.com/topic/174768/unable-to-check-for-updates-solved?lang=nl

      If after all that your still unable to upgrade, after 'many' years (22.05 == old) you might want to take the short cut.
      And if you haven't the ZFS file system, and you want it / can use it, you have to re install anyway.
      Contact Netgate support, they send you very quickly the actual version (23.09.1), burn in to a key, and install.
      When done, you can import the backup of the config that you've kept in a secure place, and 10, maybe 15 you'll be up to date and online.

      No "help me" PM's please. Use the forum, the community will thank you.
      Edit : and where are the logs ??

      D 1 Reply Last reply Mar 28, 2024, 12:38 PM Reply Quote 0
      • D
        dw-help @Gertjan
        last edited by Mar 28, 2024, 12:38 PM

        @Gertjan
        ZFS is already being used.
        Bit of a shame that one cannot just update and have to go through all this procedure....

        G 1 Reply Last reply Mar 28, 2024, 1:03 PM Reply Quote 0
        • G
          Gertjan @dw-help
          last edited by Gertjan Mar 28, 2024, 1:04 PM Mar 28, 2024, 1:03 PM

          @dw-help said in Unable to check for updates:

          Bit of a shame that one cannot just update

          I'm not saying it isn't possible to make the upgrade work.
          An solution for you is probably avaible here : Home >
          pfSense® Software >Problems Installing or Upgrading pfSense Software          . For ols stuff you have to dig deep ^^

          The thing is, knowledge that you might need for upgrading from 22.05 to a newer version is more then a year old.
          Maybe @stephenw10 has the magic command for you ...

          No "help me" PM's please. Use the forum, the community will thank you.
          Edit : and where are the logs ??

          D 1 Reply Last reply Apr 2, 2024, 7:46 AM Reply Quote 0
          • S
            stephenw10 Netgate Administrator
            last edited by Mar 28, 2024, 1:24 PM

            Try running certctl rehash and retesting.

            That said it's a bit odd that it's trying to pull pkgs from a beta branch for 23.01. So nother thing you could try is setting the branch back to 22.05 then running:
            pkg-static clean -ay; pkg-static install -fy pkg pfSense-repo pfSense-upgrade

            Then trying to upgrade to 23.01 again.

            However you will have at least two further upgrade steps after that. Installing 23.09.1 clean and restoring the config will probably be quicker.

            D 1 Reply Last reply Apr 2, 2024, 8:26 AM Reply Quote 0
            • D
              dw-help @Gertjan
              last edited by Apr 2, 2024, 7:46 AM

              @Gertjan said in Unable to check for updates:

              @dw-help said in Unable to check for updates:

              Bit of a shame that one cannot just update

              I'm not saying it isn't possible to make the upgrade work.
              An solution for you is probably avaible here : Home >
              pfSense® Software >Problems Installing or Upgrading pfSense Software              . For ols stuff you have to dig deep ^^

              The thing is, knowledge that you might need for upgrading from 22.05 to a newer version is more then a year old.
              Maybe @stephenw10 has the magic command for you ...

              pkg-static: Warning: Major OS version upgrade detected.  Running "pkg bootstrap -f" recommended
Updating pfSense-core repository catalogue...
Certificate verification failed for /C=GB/ST=Greater Manchester/L=Salford/O=Comodo CA Limited/CN=AAA Certificate Services
1086423040:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/var/jenkins/workspace/pfSense-Plus-snapshots-23_01-main/sources/FreeBSD-src-plus-RELENG_23_01/crypto/openssl/ssl/statem/statem_clnt.c:1921:
Certificate verification failed for /C=GB/ST=Greater Manchester/L=Salford/O=Comodo CA Limited/CN=AAA Certificate Services
1086423040:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/var/jenkins/workspace/pfSense-Plus-snapshots-23_01-main/sources/FreeBSD-src-plus-RELENG_23_01/crypto/openssl/ssl/statem/statem_clnt.c:1921:
Certificate verification failed for /C=GB/ST=Greater Manchester/L=Salford/O=Comodo CA Limited/CN=AAA Certificate Services
1086423040:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/var/jenkins/workspace/pfSense-Plus-snapshots-23_01-main/sources/FreeBSD-src-plus-RELENG_23_01/crypto/openssl/ssl/statem/statem_clnt.c:1921:
Certificate verification failed for /C=GB/ST=Greater Manchester/L=Salford/O=Comodo CA Limited/CN=AAA Certificate Services
...
...
...
Certificate verification failed for /C=GB/ST=Greater Manchester/L=Salford/O=Comodo CA Limited/CN=AAA Certificate Services
1086423040:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/var/jenkins/workspace/pfSense-Plus-snapshots-23_01-main/sources/FreeBSD-src-plus-RELENG_23_01/crypto/openssl/ssl/statem/statem_clnt.c:1921:
Certificate verification failed for /C=GB/ST=Greater Manchester/L=Salford/O=Comodo CA Limited/CN=AAA Certificate Services
1086423040:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/var/jenkins/workspace/pfSense-Plus-snapshots-23_01-main/sources/FreeBSD-src-plus-RELENG_23_01/crypto/openssl/ssl/statem/statem_clnt.c:1921:
pkg-static: https://pkg01-atx.netgate.com/pkg/pfSense_plus-v22_05_aarch64-pfSense_plus_v22_05/packagesite.txz: Authentication error
Unable to update repository pfSense
Error updating repositories!
              G 1 Reply Last reply Apr 2, 2024, 8:20 AM Reply Quote 0
              • G
                Gertjan @dw-help
                last edited by Gertjan Apr 2, 2024, 8:23 AM Apr 2, 2024, 8:20 AM

                @dw-help

                Can you show what happens when you execute the command proposed ?

                No "help me" PM's please. Use the forum, the community will thank you.
                Edit : and where are the logs ??

                D 1 Reply Last reply Apr 2, 2024, 8:24 AM Reply Quote 0
                • D
                  dw-help @Gertjan
                  last edited by dw-help Apr 2, 2024, 8:26 AM Apr 2, 2024, 8:24 AM

                  @Gertjan said in Unable to check for updates:

                  @dw-help

                  Ok executed what command ?

                  Can you show what happens when you execute the command proposed ?

                  First this one (success):
                  certctl rehash

                  This One (resulted in the logging):
                  pkg-static clean -ay; pkg-static install -fy pkg pfSense-repo pfSense-upgrade

                  Edit:

                  Ohw, i did quoted the wrong user. 🐶

                  1 Reply Last reply Reply Quote 0
                  • D
                    dw-help @stephenw10
                    last edited by Apr 2, 2024, 8:26 AM

                    @stephenw10 said in Unable to check for updates:

                    Try running certctl rehash and retesting.

                    That said it's a bit odd that it's trying to pull pkgs from a beta branch for 23.01. So nother thing you could try is setting the branch back to 22.05 then running:
                    pkg-static clean -ay; pkg-static install -fy pkg pfSense-repo pfSense-upgrade

                    Then trying to upgrade to 23.01 again.

                    However you will have at least two further upgrade steps after that. Installing 23.09.1 clean and restoring the config will probably be quicker.

                    pkg-static: Warning: Major OS version upgrade detected. Running "pkg bootstrap -f" recommended
                    Updating pfSense-core repository catalogue...
                    Certificate verification failed for /C=GB/ST=Greater Manchester/L=Salford/O=Comodo CA Limited/CN=AAA Certificate Services
                    1086423040:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/var/jenkins/workspace/pfSense-Plus-snapshots-23_01-main/sources/FreeBSD-src-plus-RELENG_23_01/crypto/openssl/ssl/statem/statem_clnt.c:1921:
                    Certificate verification failed for /C=GB/ST=Greater Manchester/L=Salford/O=Comodo CA Limited/CN=AAA Certificate Services
                    1086423040:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/var/jenkins/workspace/pfSense-Plus-snapshots-23_01-main/sources/FreeBSD-src-plus-RELENG_23_01/crypto/openssl/ssl/statem/statem_clnt.c:1921:
                    Certificate verification failed for /C=GB/ST=Greater Manchester/L=Salford/O=Comodo CA Limited/CN=AAA Certificate Services
                    1086423040:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/var/jenkins/workspace/pfSense-Plus-snapshots-23_01-main/sources/FreeBSD-src-plus-RELENG_23_01/crypto/openssl/ssl/statem/statem_clnt.c:1921:
                    Certificate verification failed for /C=GB/ST=Greater Manchester/L=Salford/O=Comodo CA Limited/CN=AAA Certificate Services
                    ...
                    ...
                    ...
                    Certificate verification failed for /C=GB/ST=Greater Manchester/L=Salford/O=Comodo CA Limited/CN=AAA Certificate Services
                    1086423040:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/var/jenkins/workspace/pfSense-Plus-snapshots-23_01-main/sources/FreeBSD-src-plus-RELENG_23_01/crypto/openssl/ssl/statem/statem_clnt.c:1921:
                    Certificate verification failed for /C=GB/ST=Greater Manchester/L=Salford/O=Comodo CA Limited/CN=AAA Certificate Services
                    1086423040:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/var/jenkins/workspace/pfSense-Plus-snapshots-23_01-main/sources/FreeBSD-src-plus-RELENG_23_01/crypto/openssl/ssl/statem/statem_clnt.c:1921:
                    pkg-static: https://pkg01-atx.netgate.com/pkg/pfSense_plus-v22_05_aarch64-pfSense_plus_v22_05/packagesite.txz: Authentication error
                    Unable to update repository pfSense
                    Error updating repositories!

                    G 1 Reply Last reply Apr 2, 2024, 8:30 AM Reply Quote 0
                    • G
                      Gertjan @dw-help
                      last edited by Apr 2, 2024, 8:30 AM

                      You saw :
                      @dw-help said in Unable to check for updates:

                      Running "pkg bootstrap -f" recommended

                      No "help me" PM's please. Use the forum, the community will thank you.
                      Edit : and where are the logs ??

                      D 1 Reply Last reply Apr 2, 2024, 8:41 AM Reply Quote 0
                      • D
                        dw-help @Gertjan
                        last edited by Apr 2, 2024, 8:41 AM

                        @Gertjan said in Unable to check for updates:

                        pkg bootstrap -f

                        pkg-static: Warning: Major OS version upgrade detected. Running "pkg bootstrap -f" recommended
                        pkg(8) is already installed. Forcing reinstallation through pkg(7).
                        Certificate verification failed for /C=GB/ST=Greater Manchester/L=Salford/O=Comodo CA Limited/CN=AAA Certificate Services
                        1076281344:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/var/jenkins/workspace/pfSense-img-build/BUILD_NODE/aarch64/OS_MAJOR_VERSION/freebsd12/PLATFORM/aws/sources/FreeBSD-src-plus-RELENG_22_05/crypto/openssl/ssl/statem/statem_clnt.c:1916:
                        Certificate verification failed for /C=GB/ST=Greater Manchester/L=Salford/O=Comodo CA Limited/CN=AAA Certificate Services
                        1076281344:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/var/jenkins/workspace/pfSense-img-build/BUILD_NODE/aarch64/OS_MAJOR_VERSION/freebsd12/PLATFORM/aws/sources/FreeBSD-src-plus-RELENG_22_05/crypto/openssl/ssl/statem/statem_clnt.c:1916:
                        Certificate verification failed for /C=GB/ST=Greater Manchester/L=Salford/O=Comodo CA Limited/CN=AAA Certificate Services
                        1076281344:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/var/jenkins/workspace/pfSense-img-build/BUILD_NODE/aarch64/OS_MAJOR_VERSION/freebsd12/PLATFORM/aws/sources/FreeBSD-src-plus-RELENG_22_05/crypto/openssl/ssl/statem/statem_clnt.c:1916:
                        Certificate verification failed for /C=GB/ST=Greater Manchester/L=Salford/O=Comodo CA Limited/CN=AAA Certificate Services
                        1076281344:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/var/jenkins/workspace/pfSense-img-build/BUILD_NODE/aarch64/OS_MAJOR_VERSION/freebsd12/PLATFORM/aws/sources/FreeBSD-src-plus-RELENG_22_05/crypto/openssl/ssl/statem/statem_clnt.c:1916:
                        Certificate verification failed for /C=GB/ST=Greater Manchester/L=Salford/O=Comodo CA Limited/CN=AAA Certificate Services
                        1076281344:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/var/jenkins/workspace/pfSense-img-build/BUILD_NODE/aarch64/OS_MAJOR_VERSION/freebsd12/PLATFORM/aws/sources/FreeBSD-src-plus-RELENG_22_05/crypto/openssl/ssl/statem/statem_clnt.c:1916:
                        Certificate verification failed for /C=GB/ST=Greater Manchester/L=Salford/O=Comodo CA Limited/CN=AAA Certificate Services
                        1076281344:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/var/jenkins/workspace/pfSense-img-build/BUILD_NODE/aarch64/OS_MAJOR_VERSION/freebsd12/PLATFORM/aws/sources/FreeBSD-src-plus-RELENG_22_05/crypto/openssl/ssl/statem/statem_clnt.c:1916:
                        pkg: Error fetching https://firmware.netgate.com/pkg/pfSense_plus-v22_05_aarch64-pfSense_plus_v22_05/Latest/pkg.txz: Authentication error
                        A pre-built version of pkg could not be found for your system.
                        Consider changing PACKAGESITE or installing it from ports: 'ports-mgmt/pkg'.
                        Bootstrapping pkg from pkg+https://firmware.netgate.com/pkg/pfSense_plus-v22_05_aarch64-pfSense_plus_v22_05, please wait...

                        1 Reply Last reply Reply Quote 0
                        • S
                          stephenw10 Netgate Administrator
                          last edited by Apr 2, 2024, 12:15 PM

                          @dw-help said in Unable to check for updates:

                          1086423040:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/var/jenkins/workspace/pfSense-Plus-snapshots-23_01-main/sources/FreeBSD-src-plus-RELENG_23_01/crypto/openssl/ssl/statem/statem_clnt.c:1921:
                          pkg-static: https://pkg01-atx.netgate.com/pkg/pfSense_plus-v22_05_aarch64-pfSense_plus_v22_05/packagesite.txz: Authentication error

                          That's with the branch set to 22.05?

                          It looks like it's trying to use the wrong cert.

                          D 1 Reply Last reply Apr 2, 2024, 12:17 PM Reply Quote 0
                          • D
                            dw-help @stephenw10
                            last edited by Apr 2, 2024, 12:17 PM

                            @stephenw10 said in Unable to check for updates:

                            @dw-help said in Unable to check for updates:

                            1086423040:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/var/jenkins/workspace/pfSense-Plus-snapshots-23_01-main/sources/FreeBSD-src-plus-RELENG_23_01/crypto/openssl/ssl/statem/statem_clnt.c:1921:
                            pkg-static: https://pkg01-atx.netgate.com/pkg/pfSense_plus-v22_05_aarch64-pfSense_plus_v22_05/packagesite.txz: Authentication error

                            That's with the branch set to 22.05?

                            It looks like it's trying to use the wrong cert.

                            Yes, indeed!
                            We are reinstalling the firewall. :)

                            1 Reply Last reply Reply Quote 0
                            • S
                              stephenw10 Netgate Administrator
                              last edited by Apr 2, 2024, 12:22 PM

                              Probably the fastest way forward at this point.

                              1 Reply Last reply Reply Quote 0
                              • D
                                dw-help
                                last edited by Apr 2, 2024, 1:56 PM

                                @stephenw10 @Gertjan
                                Reinstall succeeded, thanks for troubleshooting with me!
                                alt text

                                1 Reply Last reply Reply Quote 2
                                4 out of 15
                                • First post
                                  4/15
                                  Last post
                                Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.