Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Now Available: pfSense® CE 2.8.0-RELEASE

    Scheduled Pinned Locked Moved Messages from the pfSense Team
    112 Posts 24 Posters 18.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • stephenw10S
      stephenw10 Netgate Administrator
      last edited by

      Seems more like you have no upstream access to pull the repo branches on either version for some reason.

      In 2.8 try running: pfSense-repoc -ND see what errors it returns.

      J 1 Reply Last reply Reply Quote 0
      • J
        jiri.zemanek @stephenw10
        last edited by

        @stephenw10 No error, just printed some system info (OS, platform, etc.). The last line some POST data.

        1 Reply Last reply Reply Quote 0
        • stephenw10S
          stephenw10 Netgate Administrator
          last edited by

          Hmm, yet you still see no branches? If you run pfSense-repoc -NDJ it ll show you the branch JSON data you are passed.

          What hardware are you running on? What was the driver you needed to build?

          J 1 Reply Last reply Reply Quote 0
          • stephenw10S
            stephenw10 Netgate Administrator
            last edited by

            Ah, are you trying to run in Azure by any chance? Because that is not supported if so.

            1 Reply Last reply Reply Quote 0
            • P
              pfFog29
              last edited by

              I don't see the CE 2.8.0 version at all, even after a reboot. Under System/Update only "Previous Stable Version (2.7.2)" or older versions show. What am I missing?

              1 Reply Last reply Reply Quote 0
              • stephenw10S
                stephenw10 Netgate Administrator
                last edited by

                You are trying to upgrade to 2.8?

                Do you see any errors if you run: pfSense-repoc -D?

                P 1 Reply Last reply Reply Quote 0
                • P
                  pfFog29 @stephenw10
                  last edited by stephenw10

                  @stephenw10 said in Now Available: pfSense® CE 2.8.0-RELEASE:

                  You are trying to upgrade to 2.8?

                  Yes.
                  Result of requested command "pfSense-repoc -D"
                  OS: FreeBSD
                  OS Version: 14.0-CURRENT
                  Platform: amd64
                  Product: pfSense
                  Version: 2.7.0-RELEASE
                  FS type: ufs
                  Language: en_US
                  Model: unknown hardware
                  NDI: <redacted>
                  Package prefix: pfSense-pkg-
                  Serial: (null)
                  Repo path: /usr/local/etc/pfSense
                  Request query: {"platform":"unknown hardware","os":"FreeBSD","osver":"14.0-CURRE NT","fstype":"ufs","prod":"pfSense","ver":"2.7.0-RELEASE","ed":"Community","pkgs ":"[{"name":"Avahi","ver":"2.2_4"}]"}
                  POST data: uid=9f6a16c2dfe390fc56bf&language=en_US&serial=&version=%7B%22platfor m%22%3A%22unknown+hardware%22%2C%22os%22%3A%22FreeBSD%22%2C%22osver%22%3A%2214.0 -CURRENT%22%2C%22fstype%22%3A%22ufs%22%2C%22prod%22%3A%22pfSense%22%2C%22ver%22% 3A%222.7.0-RELEASE%22%2C%22ed%22%3A%22Community%22%2C%22pkgs%22%3A%22%5B%7B%5C%2 2name%5C%22%3A%5C%22Avahi%5C%22%2C%5C%22ver%5C%22%3A%5C%222.2_4%5C%22%7D%5D%22%7 D&arch=amd64
                  failed to read the repo data.

                  1 Reply Last reply Reply Quote 0
                  • stephenw10S
                    stephenw10 Netgate Administrator
                    last edited by

                    Oh you're on 2.7.0. You'll need to upgrade to 2.7.2 first. In general upgrades are only supported from two previous versions.

                    P 1 Reply Last reply Reply Quote 0
                    • P
                      pfFog29 @stephenw10
                      last edited by

                      @stephenw10
                      I don't understand. If I go to System/Update there is nothing newer to update to. The version showing in pic is the latest version in the drop down.
                      pfSense_System_Update_System Update.jpg

                      How to update?

                      S 1 Reply Last reply Reply Quote 0
                      • S
                        SteveITS Galactic Empire @pfFog29
                        last edited by

                        @pfFog29 You might try https://docs.netgate.com/pfsense/en/latest/troubleshooting/upgrades.html#upgrade-not-offered-library-errors

                        Pre-2.7.2/23.09: Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
                        When upgrading, allow 10-15 minutes to restart, or more depending on packages and device speed.
                        Upvote 👍 helpful posts!

                        1 Reply Last reply Reply Quote 0
                        • stephenw10S
                          stephenw10 Netgate Administrator
                          last edited by

                          It will be the missing cert issue. Run: certctl rehash then recheck.

                          P 1 Reply Last reply Reply Quote 0
                          • P
                            pfFog29 @stephenw10
                            last edited by

                            @stephenw10 said in Now Available: pfSense® CE 2.8.0-RELEASE:

                            Run: certctl rehash then recheck.

                            I ran this and and it came back permission denied.

                            Here is a pic of Certificates.
                            pfSense Certs.jpg
                            I'm no expert, but aren't these good? What do I need to do?

                            1 Reply Last reply Reply Quote 0
                            • stephenw10S
                              stephenw10 Netgate Administrator
                              last edited by

                              How did you run it? It should look something like:

                              [2.8.0-RELEASE][admin@t70.stevew.lan]/root: certctl rehash
certctl: Skipping untrusted certificate 66445960 (/etc/ssl/untrusted/66445960.0)
certctl: Skipping untrusted certificate 5e98733a (/etc/ssl/untrusted/5e98733a.0)
certctl: Skipping untrusted certificate 5d3033c5 (/etc/ssl/untrusted/5d3033c5.0)
certctl: Skipping untrusted certificate 7aaf71c0 (/etc/ssl/untrusted/7aaf71c0.0)
certctl: Skipping untrusted certificate 57bcb2da (/etc/ssl/untrusted/57bcb2da.0)
certctl: Skipping untrusted certificate 76cb8f92 (/etc/ssl/untrusted/76cb8f92.0)
certctl: Skipping untrusted certificate 5a7722fb (/etc/ssl/untrusted/5a7722fb.0)
certctl: Skipping untrusted certificate 4304c5e5 (/etc/ssl/untrusted/4304c5e5.0)
certctl: Skipping untrusted certificate 1636090b (/etc/ssl/untrusted/1636090b.0)
certctl: Skipping untrusted certificate 18856ac4 (/etc/ssl/untrusted/18856ac4.0)
certctl: Skipping untrusted certificate 08063a00 (/etc/ssl/untrusted/08063a00.0)
certctl: Skipping untrusted certificate 4a6481c9 (/etc/ssl/untrusted/4a6481c9.0)
certctl: Skipping untrusted certificate 03179a64 (/etc/ssl/untrusted/03179a64.0)
certctl: Skipping untrusted certificate 2e5ac55d (/etc/ssl/untrusted/2e5ac55d.0)
certctl: Skipping untrusted certificate 3e44d2f7 (/etc/ssl/untrusted/3e44d2f7.0)
certctl: Skipping untrusted certificate 18856ac4 (/etc/ssl/untrusted/18856ac4.0)
certctl: Skipping untrusted certificate 08063a00 (/etc/ssl/untrusted/08063a00.0)
certctl: Skipping untrusted certificate 57bcb2da (/etc/ssl/untrusted/57bcb2da.0)
certctl: Skipping untrusted certificate 5e98733a (/etc/ssl/untrusted/5e98733a.0)

                              And can take a while to complete, like ~1min.

                              P 2 Replies Last reply Reply Quote 0
                              • P
                                pfFog29 @stephenw10
                                last edited by

                                @stephenw10 said in Now Available: pfSense® CE 2.8.0-RELEASE:

                                How did you run it?

                                I used PuTTY.

                                S 1 Reply Last reply Reply Quote 0
                                • S
                                  SteveITS Galactic Empire @pfFog29
                                  last edited by

                                  @pfFog29 logged in as “admin?”

                                  Pre-2.7.2/23.09: Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
                                  When upgrading, allow 10-15 minutes to restart, or more depending on packages and device speed.
                                  Upvote 👍 helpful posts!

                                  P 1 Reply Last reply Reply Quote 0
                                  • P
                                    pfFog29 @stephenw10
                                    last edited by

                                    @stephenw10 said in Now Available: pfSense® CE 2.8.0-RELEASE:

                                    It should look something like:

                                    Here are some snippets...

                                    find: -delete: unlink(/etc/ssl/certs/cd8c0d63.1): Permission denied
find: -delete: unlink(/etc/ssl/untrusted/157753a5.0): Permission denied
find: -delete: unlink(/etc/ssl/untrusted/861a399d.0): Permission denied
find: -delete: unlink(/etc/ssl/untrusted/f90208f7.0): Permission denied
find: -delete: unlink(/etc/ssl/untrusted/cb59f961.0): Permission denied
find: -delete: unlink(/etc/ssl/untrusted/442adcac.0): Permission denied
find: -delete: unlink(/etc/ssl/untrusted/c47d9980.0): Permission denied
find: -delete: unlink(/etc/ssl/untrusted/0b7c536a.0): Permission denied
find: -delete: unlink(/etc/ssl/untrusted/349f2832.0): Permission denied

                                    ...

                                    install: symlink ../../../usr/share/certs/trusted/emSign_ECC_Root_CA_-_G3.pem -> /etc/ssl/certs/14bc7599.0: Permission denied
install: symlink ../../../usr/share/certs/trusted/emSign_Root_CA_-_C1.pem -> /etc/ssl/certs/406c9bb1.0: Permission denied
install: symlink ../../../usr/share/certs/trusted/emSign_Root_CA_-_G1.pem -> /etc/ssl/certs/2923b3f9.0: Permission denied
Scanning /usr/local/share/certs for certificates...
install: symlink ../../../usr/local/share/certs/ca-root-nss.crt -> /etc/ssl/certs/cd8c0d63.0: Permission denied
                                    1 Reply Last reply Reply Quote 0
                                    • P
                                      pfFog29 @SteveITS
                                      last edited by

                                      @SteveITS said in Now Available: pfSense® CE 2.8.0-RELEASE:

                                      logged in as “admin?

                                      Yes.

                                      1 Reply Last reply Reply Quote 0
                                      • stephenw10S
                                        stephenw10 Netgate Administrator
                                        last edited by

                                        Hmm. Try running it from Diag > Command Prompt in the gui. That should always have the right permissions.

                                        If it still fails try to create any file in the filesystem. Make sure the filesystem is not read-only.

                                        P 3 Replies Last reply Reply Quote 0
                                        • P
                                          pfFog29 @stephenw10
                                          last edited by

                                          @stephenw10 said in Now Available: pfSense® CE 2.8.0-RELEASE:

                                          Try running it from Diag > Command Prompt in the gui.

                                          Running command seems to fail when running "certctl rehash".
                                          pfSense_Command Prompt.jpg

                                          @stephenw10 said in Now Available: pfSense® CE 2.8.0-RELEASE:

                                          If it still fails try to create any file in the filesystem. Make sure the filesystem is not read-only.

                                          Sorry, I do not have any idea what your talking about. What filesystem? Where? How would I create?

                                          stephenw10S 1 Reply Last reply Reply Quote 0
                                          • P
                                            pfFog29 @stephenw10
                                            last edited by

                                            @stephenw10
                                            I think I figured out part of what you were saying. I uploaded a text file titled "test1.txt". It didn't complain.
                                            "Uploaded file to /tmp/test1.txt."

                                            I have no idea how to check if filesystem is read-only. But I would guess it is not if I was able to upload a file.

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.