updated package, php error when accessing certificates tab

Burn3r

Tried updating certificate via acme and it failed. So I updated the package and then I started getting crash reports so I updated the OS to 25.07.01 and still getting crash reports whenever I attempt to open "certificates" under system on the GUI.

Crash report begins. Anonymous machine information:

arm64
15.0-CURRENT
FreeBSD 15.0-CURRENT #1 plus-RELENG_25_07_1-n256513-49844af35a5d: Fri Aug 15 19:23:38 UTC 2025 root@freebsd:/var/jenkins/workspace/pfSense-Plus-snapshots-25_07_1-main/obj/aarch64/1qUIUnwj/var/jenkins/workspace/pfSense-Plus-snapshots-25_07_1-main/sourc

Crash report details:

PHP Errors:
PHP Fatal error: Uncaught TypeError: Cannot access offset of type string on string in /usr/local/www/system_camanager.php:443
Stack trace:
#0 {main}
thrown in /usr/local/www/system_camanager.php on line 443

No FreeBSD crash data found.

Gertjan

@Burn3r

First, make a 'manual' backup of your config, here : Diagnostics > Backup & Restore

Then : a precaution : Go here : /tmp/acme/[your-cert-name] and get a copy of the file named "acme_issuecert.log" as this file contains what happened when - thus telling you what went wrong and why if the issue was acme related. Something I doubt.
You have get a copy of this log file, as a reboot will clean out the /tmp/ folder.

Then, Diagnostics > Configuration History, and restore a save backup from just before the issue started.
pfSense will most probably restart, and you'll be good.

What for "what happened" part.

Can you confirm that this https://github.com/pfsense/pfsense/blob/7a44ce9bb635699139f9ee04c2b8c9bf978f17dd/src/usr/local/www/system_camanager.php#L443 is the same line as your file /usr/local/www/system_camanager.php line 443 ?
I guess it is, as, like me, you use pfSense 25.07.1.

Open the config.xml file you've backed up. Use a editor like Notepad++.
Look for the first occurrence of

<cert>

which has only one tab in front of it.
Like here :

Check that every <cert> ... </cert> block has a <refid>xxxxxxxxx</refid>.
There are as many <cert> ... </cert> as you have Certificates (this page : System > Certificates > Certificates )
Your issue was : one of them is missing this <refid> ?

Btw : you can also check the <ca> ... </ca> section, these also have to have a <refid> also.

If doubt, paste them all here - you can remove the <cert> ...</cert> and <prv> ... </prv> lines.

Btw : I use the pfSense acme.sh package 1.0 also, no issues what so ever.

Burn3r

@Gertjan so I did a restore to backup and was able to get everything working from there. OpenVPN tab was also throwing errors. Not really sure what happened but seems like something didn't upgrade properly.

Gertjan

@Burn3r said in updated package, php error when accessing certificates tab:

but seems like something didn't upgrade properly.

Which means your system is in an undefined state (?!). That means : get the installer, and re install completely.
I don't think this is the case, because :

@Burn3r said in updated package, php error when accessing certificates tab:

OpenVPN tab was also throwing errors

And guess what : OpenVPN also uses certificates - you've created & assigned some of them when setting up OpenVPN.
If they aren't there anymore, or somewhat hosed, then yeah, that means troubles.

Burn3r

@Gertjan oh. It's all working fine now. Once I did restore to previous, everything worked. I was able to request new certs via ACME and the OpenVPN service came up and I was able to navigate all the tabs. With my certs down (and just expired) it broke a lot of things. Lol.