Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Unable to check for updates

    Scheduled Pinned Locked Moved Problems Installing or Upgrading pfSense Software
    updates
    15 Posts 3 Posters 986 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • D
      dw-help @Gertjan
      last edited by

      @Gertjan
      ZFS is already being used.
      Bit of a shame that one cannot just update and have to go through all this procedure....

      GertjanG 1 Reply Last reply Reply Quote 0
      • GertjanG
        Gertjan @dw-help
        last edited by Gertjan

        @dw-help said in Unable to check for updates:

        Bit of a shame that one cannot just update

        I'm not saying it isn't possible to make the upgrade work.
        An solution for you is probably avaible here : Home >
        pfSense® Software >Problems Installing or Upgrading pfSense Software        . For ols stuff you have to dig deep ^^

        The thing is, knowledge that you might need for upgrading from 22.05 to a newer version is more then a year old.
        Maybe @stephenw10 has the magic command for you ...

        No "help me" PM's please. Use the forum, the community will thank you.
        Edit : and where are the logs ??

        D 1 Reply Last reply Reply Quote 0
        • stephenw10S
          stephenw10 Netgate Administrator
          last edited by

          Try running certctl rehash and retesting.

          That said it's a bit odd that it's trying to pull pkgs from a beta branch for 23.01. So nother thing you could try is setting the branch back to 22.05 then running:
          pkg-static clean -ay; pkg-static install -fy pkg pfSense-repo pfSense-upgrade

          Then trying to upgrade to 23.01 again.

          However you will have at least two further upgrade steps after that. Installing 23.09.1 clean and restoring the config will probably be quicker.

          D 1 Reply Last reply Reply Quote 0
          • D
            dw-help @Gertjan
            last edited by

            @Gertjan said in Unable to check for updates:

            @dw-help said in Unable to check for updates:

            Bit of a shame that one cannot just update

            I'm not saying it isn't possible to make the upgrade work.
            An solution for you is probably avaible here : Home >
            pfSense® Software >Problems Installing or Upgrading pfSense Software            . For ols stuff you have to dig deep ^^

            The thing is, knowledge that you might need for upgrading from 22.05 to a newer version is more then a year old.
            Maybe @stephenw10 has the magic command for you ...

            pkg-static: Warning: Major OS version upgrade detected.  Running "pkg bootstrap -f" recommended
Updating pfSense-core repository catalogue...
Certificate verification failed for /C=GB/ST=Greater Manchester/L=Salford/O=Comodo CA Limited/CN=AAA Certificate Services
1086423040:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/var/jenkins/workspace/pfSense-Plus-snapshots-23_01-main/sources/FreeBSD-src-plus-RELENG_23_01/crypto/openssl/ssl/statem/statem_clnt.c:1921:
Certificate verification failed for /C=GB/ST=Greater Manchester/L=Salford/O=Comodo CA Limited/CN=AAA Certificate Services
1086423040:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/var/jenkins/workspace/pfSense-Plus-snapshots-23_01-main/sources/FreeBSD-src-plus-RELENG_23_01/crypto/openssl/ssl/statem/statem_clnt.c:1921:
Certificate verification failed for /C=GB/ST=Greater Manchester/L=Salford/O=Comodo CA Limited/CN=AAA Certificate Services
1086423040:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/var/jenkins/workspace/pfSense-Plus-snapshots-23_01-main/sources/FreeBSD-src-plus-RELENG_23_01/crypto/openssl/ssl/statem/statem_clnt.c:1921:
Certificate verification failed for /C=GB/ST=Greater Manchester/L=Salford/O=Comodo CA Limited/CN=AAA Certificate Services
...
...
...
Certificate verification failed for /C=GB/ST=Greater Manchester/L=Salford/O=Comodo CA Limited/CN=AAA Certificate Services
1086423040:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/var/jenkins/workspace/pfSense-Plus-snapshots-23_01-main/sources/FreeBSD-src-plus-RELENG_23_01/crypto/openssl/ssl/statem/statem_clnt.c:1921:
Certificate verification failed for /C=GB/ST=Greater Manchester/L=Salford/O=Comodo CA Limited/CN=AAA Certificate Services
1086423040:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/var/jenkins/workspace/pfSense-Plus-snapshots-23_01-main/sources/FreeBSD-src-plus-RELENG_23_01/crypto/openssl/ssl/statem/statem_clnt.c:1921:
pkg-static: https://pkg01-atx.netgate.com/pkg/pfSense_plus-v22_05_aarch64-pfSense_plus_v22_05/packagesite.txz: Authentication error
Unable to update repository pfSense
Error updating repositories!
            GertjanG 1 Reply Last reply Reply Quote 0
            • GertjanG
              Gertjan @dw-help
              last edited by Gertjan

              @dw-help

              Can you show what happens when you execute the command proposed ?

              No "help me" PM's please. Use the forum, the community will thank you.
              Edit : and where are the logs ??

              D 1 Reply Last reply Reply Quote 0
              • D
                dw-help @Gertjan
                last edited by dw-help

                @Gertjan said in Unable to check for updates:

                @dw-help

                Ok executed what command ?

                Can you show what happens when you execute the command proposed ?

                First this one (success):
                certctl rehash

                This One (resulted in the logging):
                pkg-static clean -ay; pkg-static install -fy pkg pfSense-repo pfSense-upgrade

                Edit:

                Ohw, i did quoted the wrong user. 🐶

                1 Reply Last reply Reply Quote 0
                • D
                  dw-help @stephenw10
                  last edited by

                  @stephenw10 said in Unable to check for updates:

                  Try running certctl rehash and retesting.

                  That said it's a bit odd that it's trying to pull pkgs from a beta branch for 23.01. So nother thing you could try is setting the branch back to 22.05 then running:
                  pkg-static clean -ay; pkg-static install -fy pkg pfSense-repo pfSense-upgrade

                  Then trying to upgrade to 23.01 again.

                  However you will have at least two further upgrade steps after that. Installing 23.09.1 clean and restoring the config will probably be quicker.

                  pkg-static: Warning: Major OS version upgrade detected. Running "pkg bootstrap -f" recommended
                  Updating pfSense-core repository catalogue...
                  Certificate verification failed for /C=GB/ST=Greater Manchester/L=Salford/O=Comodo CA Limited/CN=AAA Certificate Services
                  1086423040:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/var/jenkins/workspace/pfSense-Plus-snapshots-23_01-main/sources/FreeBSD-src-plus-RELENG_23_01/crypto/openssl/ssl/statem/statem_clnt.c:1921:
                  Certificate verification failed for /C=GB/ST=Greater Manchester/L=Salford/O=Comodo CA Limited/CN=AAA Certificate Services
                  1086423040:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/var/jenkins/workspace/pfSense-Plus-snapshots-23_01-main/sources/FreeBSD-src-plus-RELENG_23_01/crypto/openssl/ssl/statem/statem_clnt.c:1921:
                  Certificate verification failed for /C=GB/ST=Greater Manchester/L=Salford/O=Comodo CA Limited/CN=AAA Certificate Services
                  1086423040:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/var/jenkins/workspace/pfSense-Plus-snapshots-23_01-main/sources/FreeBSD-src-plus-RELENG_23_01/crypto/openssl/ssl/statem/statem_clnt.c:1921:
                  Certificate verification failed for /C=GB/ST=Greater Manchester/L=Salford/O=Comodo CA Limited/CN=AAA Certificate Services
                  ...
                  ...
                  ...
                  Certificate verification failed for /C=GB/ST=Greater Manchester/L=Salford/O=Comodo CA Limited/CN=AAA Certificate Services
                  1086423040:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/var/jenkins/workspace/pfSense-Plus-snapshots-23_01-main/sources/FreeBSD-src-plus-RELENG_23_01/crypto/openssl/ssl/statem/statem_clnt.c:1921:
                  Certificate verification failed for /C=GB/ST=Greater Manchester/L=Salford/O=Comodo CA Limited/CN=AAA Certificate Services
                  1086423040:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/var/jenkins/workspace/pfSense-Plus-snapshots-23_01-main/sources/FreeBSD-src-plus-RELENG_23_01/crypto/openssl/ssl/statem/statem_clnt.c:1921:
                  pkg-static: https://pkg01-atx.netgate.com/pkg/pfSense_plus-v22_05_aarch64-pfSense_plus_v22_05/packagesite.txz: Authentication error
                  Unable to update repository pfSense
                  Error updating repositories!

                  GertjanG 1 Reply Last reply Reply Quote 0
                  • GertjanG
                    Gertjan @dw-help
                    last edited by

                    You saw :
                    @dw-help said in Unable to check for updates:

                    Running "pkg bootstrap -f" recommended

                    No "help me" PM's please. Use the forum, the community will thank you.
                    Edit : and where are the logs ??

                    D 1 Reply Last reply Reply Quote 0
                    • D
                      dw-help @Gertjan
                      last edited by

                      @Gertjan said in Unable to check for updates:

                      pkg bootstrap -f

                      pkg-static: Warning: Major OS version upgrade detected. Running "pkg bootstrap -f" recommended
                      pkg(8) is already installed. Forcing reinstallation through pkg(7).
                      Certificate verification failed for /C=GB/ST=Greater Manchester/L=Salford/O=Comodo CA Limited/CN=AAA Certificate Services
                      1076281344:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/var/jenkins/workspace/pfSense-img-build/BUILD_NODE/aarch64/OS_MAJOR_VERSION/freebsd12/PLATFORM/aws/sources/FreeBSD-src-plus-RELENG_22_05/crypto/openssl/ssl/statem/statem_clnt.c:1916:
                      Certificate verification failed for /C=GB/ST=Greater Manchester/L=Salford/O=Comodo CA Limited/CN=AAA Certificate Services
                      1076281344:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/var/jenkins/workspace/pfSense-img-build/BUILD_NODE/aarch64/OS_MAJOR_VERSION/freebsd12/PLATFORM/aws/sources/FreeBSD-src-plus-RELENG_22_05/crypto/openssl/ssl/statem/statem_clnt.c:1916:
                      Certificate verification failed for /C=GB/ST=Greater Manchester/L=Salford/O=Comodo CA Limited/CN=AAA Certificate Services
                      1076281344:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/var/jenkins/workspace/pfSense-img-build/BUILD_NODE/aarch64/OS_MAJOR_VERSION/freebsd12/PLATFORM/aws/sources/FreeBSD-src-plus-RELENG_22_05/crypto/openssl/ssl/statem/statem_clnt.c:1916:
                      Certificate verification failed for /C=GB/ST=Greater Manchester/L=Salford/O=Comodo CA Limited/CN=AAA Certificate Services
                      1076281344:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/var/jenkins/workspace/pfSense-img-build/BUILD_NODE/aarch64/OS_MAJOR_VERSION/freebsd12/PLATFORM/aws/sources/FreeBSD-src-plus-RELENG_22_05/crypto/openssl/ssl/statem/statem_clnt.c:1916:
                      Certificate verification failed for /C=GB/ST=Greater Manchester/L=Salford/O=Comodo CA Limited/CN=AAA Certificate Services
                      1076281344:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/var/jenkins/workspace/pfSense-img-build/BUILD_NODE/aarch64/OS_MAJOR_VERSION/freebsd12/PLATFORM/aws/sources/FreeBSD-src-plus-RELENG_22_05/crypto/openssl/ssl/statem/statem_clnt.c:1916:
                      Certificate verification failed for /C=GB/ST=Greater Manchester/L=Salford/O=Comodo CA Limited/CN=AAA Certificate Services
                      1076281344:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/var/jenkins/workspace/pfSense-img-build/BUILD_NODE/aarch64/OS_MAJOR_VERSION/freebsd12/PLATFORM/aws/sources/FreeBSD-src-plus-RELENG_22_05/crypto/openssl/ssl/statem/statem_clnt.c:1916:
                      pkg: Error fetching https://firmware.netgate.com/pkg/pfSense_plus-v22_05_aarch64-pfSense_plus_v22_05/Latest/pkg.txz: Authentication error
                      A pre-built version of pkg could not be found for your system.
                      Consider changing PACKAGESITE or installing it from ports: 'ports-mgmt/pkg'.
                      Bootstrapping pkg from pkg+https://firmware.netgate.com/pkg/pfSense_plus-v22_05_aarch64-pfSense_plus_v22_05, please wait...

                      1 Reply Last reply Reply Quote 0
                      • stephenw10S
                        stephenw10 Netgate Administrator
                        last edited by

                        @dw-help said in Unable to check for updates:

                        1086423040:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/var/jenkins/workspace/pfSense-Plus-snapshots-23_01-main/sources/FreeBSD-src-plus-RELENG_23_01/crypto/openssl/ssl/statem/statem_clnt.c:1921:
                        pkg-static: https://pkg01-atx.netgate.com/pkg/pfSense_plus-v22_05_aarch64-pfSense_plus_v22_05/packagesite.txz: Authentication error

                        That's with the branch set to 22.05?

                        It looks like it's trying to use the wrong cert.

                        D 1 Reply Last reply Reply Quote 0
                        • D
                          dw-help @stephenw10
                          last edited by

                          @stephenw10 said in Unable to check for updates:

                          @dw-help said in Unable to check for updates:

                          1086423040:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/var/jenkins/workspace/pfSense-Plus-snapshots-23_01-main/sources/FreeBSD-src-plus-RELENG_23_01/crypto/openssl/ssl/statem/statem_clnt.c:1921:
                          pkg-static: https://pkg01-atx.netgate.com/pkg/pfSense_plus-v22_05_aarch64-pfSense_plus_v22_05/packagesite.txz: Authentication error

                          That's with the branch set to 22.05?

                          It looks like it's trying to use the wrong cert.

                          Yes, indeed!
                          We are reinstalling the firewall. :)

                          1 Reply Last reply Reply Quote 0
                          • stephenw10S
                            stephenw10 Netgate Administrator
                            last edited by

                            Probably the fastest way forward at this point.

                            1 Reply Last reply Reply Quote 0
                            • D
                              dw-help
                              last edited by

                              @stephenw10 @Gertjan
                              Reinstall succeeded, thanks for troubleshooting with me!
                              alt text

                              1 Reply Last reply Reply Quote 2
                              • First post
                                Last post
                              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.