check_upgrade: "Updating repositories metadata" returned error code 1

[stephenw10]

Just for reference do you have DNS set to local only or can it fall back to external?

[PnoT]

I'm experiencing this as well since installing a fresh copy of 2.8.1 and restoring a configuration backup from 2.7.2.

[stephenw10]

Only at boot?

[PnoT]

@stephenw10 The error is showing up continuously throughout the day.

[alnico]

I am facing this error too after I reboot. Noticed it in the last two days.

My version is 25.07.1

[stephenw10]

Ok if you see it only at boot then it's a harmless ordering error we are looking into.

If you see it continuously then you probably have a connectivity issue. Try running: pfSense-repoc -ND and pkg -d update. See what errors are shown.

[PnoT]

@stephenw10 said in check_upgrade: "Updating repositories metadata" returned error code 1:

Ok if you see it only at boot then it's a harmless ordering error we are looking into.

If you see it continuously then you probably have a connectivity issue. Try running: pfSense-repoc -ND and pkg -d update. See what errors are shown.

No errors on -repoc that I can see and a few bits towards the end of the second command:

• The requested document is not new enough
• Simulate an HTTP 304 response
• Closing connection

pfSense-core repository is up to date.
Updating pfSense repository catalogue...
DBG(1)[65728]> PkgRepo: verifying update for pfSense
Waiting for another process to update repository pfSense
All repositories are up to date.

[stephenw10]

Those are normal output from pkg update.

Try: pfSense-upgrade -dc

That's what's actually run that generates that error.

If that completes without error then it must be something intermittent. In which case I would check the system logs for errors when that alert is triggered.

[PnoT]

@stephenw10

[2.8.1-RELEASE][root@pfSense.lab.local]/root: pfSense-upgrade -dc
>>> Updating repositories metadata...
Updating pfSense-core repository catalogue...
pkg-static: An error occured while fetching package
pkg-static: An error occured while fetching package
repository pfSense-core has no meta file, using default settings
pkg-static: An error occured while fetching package
pkg-static: An error occured while fetching package
pkg-static: An error occured while fetching package
pkg-static: An error occured while fetching package
Unable to update repository pfSense-core
Updating pfSense repository catalogue...
pkg-static: An error occured while fetching package
pkg-static: An error occured while fetching package
repository pfSense has no meta file, using default settings
pkg-static: An error occured while fetching package
pkg-static: An error occured while fetching package
pkg-static: An error occured while fetching package
pkg-static: An error occured while fetching package
Unable to update repository pfSense
Error updating repositories!
Your system is up to date

[stephenw10]

OK what's the full output you see from: pkg-static -d update?

[PnoT]

@stephenw10

[2.8.1-RELEASE][root@pfSense.lab.local]/root: pkg-static -d update
DBG(1)[27296]> pkg initialized
Updating pfSense-core repository catalogue...
DBG(1)[27296]> PkgRepo: verifying update for pfSense-core
DBG(1)[27296]> Pkgrepo, begin update of '/var/db/pkg/repos/pfSense-core/db'
DBG(1)[27296]> Request to fetch pkg+https://pkg.pfsense.org/pfSense_v2_8_1_amd64-core/meta.conf
DBG(1)[27296]> curl_open
DBG(1)[27296]> Fetch: fetcher used: pkg+https
DBG(1)[27296]> curl> fetching https://pkg.pfsense.org/pfSense_v2_8_1_amd64-core/meta.conf

DBG(1)[27296]> CURL> attempting to fetch from , left retry 3

* Couldn't find host pkg00-atx.netgate.com in the .netrc file; using defaults
* Host pkg00-atx.netgate.com:443 was resolved.
* IPv6: 2610:160:11:18::207
* IPv4: 208.123.73.207
*   Trying 208.123.73.207:443...
*   Trying [2610:160:11:18::207]:443...
* Immediate connect fail for 2610:160:11:18::207: No route to host
* ipv4 connect timeout after 19808ms, move on!
* Failed to connect to pkg00-atx.netgate.com port 443 after 30009 ms: Timeout was reached
* Closing connection
DBG(1)[27296]> CURL> attempting to fetch from , left retry 2

* Couldn't find host pkg01-atx.netgate.com in the .netrc file; using defaults
* Host pkg01-atx.netgate.com:443 was resolved.
* IPv6: 2610:160:11:18::209
* IPv4: 208.123.73.209
*   Trying 208.123.73.209:443...
* Connected to pkg01-atx.netgate.com (208.123.73.209) port 443
* ALPN: curl offers http/1.1
*  CAfile: none
*  CApath: /etc/ssl/certs/
* SSL connection using TLSv1.2 / ECDHE-RSA-AES256-GCM-SHA384 / X25519 / RSASSA-PSS
* ALPN: server accepted http/1.1
* Server certificate:
*  subject: CN=*.netgate.com
*  start date: Apr 10 00:00:00 2025 GMT
*  expire date: May 11 23:59:59 2026 GMT
*  subjectAltName: host "pkg01-atx.netgate.com" matched cert's "*.netgate.com"
*  issuer: C=GB; ST=Greater Manchester; L=Salford; O=Sectigo Limited; CN=Sectigo RSA Domain Validation Secure Server CA
*  SSL certificate verify ok.
*   Certificate level 0: Public key type RSA (2048/112 Bits/secBits), signed using sha256WithRSAEncryption
*   Certificate level 1: Public key type RSA (2048/112 Bits/secBits), signed using sha384WithRSAEncryption
*   Certificate level 2: Public key type RSA (4096/152 Bits/secBits), signed using sha384WithRSAEncryption
* using HTTP/1.x
> GET /pfSense_v2_8_1_amd64-core/meta.conf HTTP/1.1
Host: pkg01-atx.netgate.com
User-Agent: pkg/1.21.3
Accept: */*
If-Modified-Since: Thu, 28 Aug 2025 16:50:33 GMT

* Request completely sent off
< HTTP/1.1 200 OK
Fetching meta.conf:   0%< Server: nginx
< Date: Wed, 15 Oct 2025 16:06:28 GMT
< Content-Type: application/octet-stream
< Content-Length: 179
< Last-Modified: Thu, 28 Aug 2025 16:50:33 GMT
< Connection: keep-alive
< ETag: "68b088d9-b3"
< Strict-Transport-Security: max-age=31536000; preload
< X-Content-Type-Options: nosniff
< X-XSS-Protection: 1; mode=block
< X-Robots-Tag: all
< X-Download-Options: noopen
< X-Permitted-Cross-Domain-Policies: none
< Accept-Ranges: bytes
<
* The requested document is not new enough
* Simulate an HTTP 304 response
* Closing connection

DBG(1)[27296]> Request to fetch pkg+https://pkg.pfsense.org/pfSense_v2_8_1_amd64-core/data.pkg
DBG(1)[27296]> curl_open
DBG(1)[27296]> Fetch: fetcher used: pkg+https
DBG(1)[27296]> curl> fetching https://pkg.pfsense.org/pfSense_v2_8_1_amd64-core/data.pkg

DBG(1)[27296]> CURL> attempting to fetch from , left retry 3

* Couldn't find host pkg00-atx.netgate.com in the .netrc file; using defaults
* Hostname pkg00-atx.netgate.com was found in DNS cache
*   Trying 208.123.73.207:443...
* Connected to pkg00-atx.netgate.com (208.123.73.207) port 443
* ALPN: curl offers http/1.1
*  CAfile: none
*  CApath: /etc/ssl/certs/
* SSL connection using TLSv1.2 / ECDHE-RSA-AES256-GCM-SHA384 / X25519 / RSASSA-PSS
* ALPN: server accepted http/1.1
* Server certificate:
*  subject: CN=*.netgate.com
*  start date: Apr 10 00:00:00 2025 GMT
*  expire date: May 11 23:59:59 2026 GMT
*  subjectAltName: host "pkg00-atx.netgate.com" matched cert's "*.netgate.com"
*  issuer: C=GB; ST=Greater Manchester; L=Salford; O=Sectigo Limited; CN=Sectigo RSA Domain Validation Secure Server CA
*  SSL certificate verify ok.
*   Certificate level 0: Public key type RSA (2048/112 Bits/secBits), signed using sha256WithRSAEncryption
*   Certificate level 1: Public key type RSA (2048/112 Bits/secBits), signed using sha384WithRSAEncryption
*   Certificate level 2: Public key type RSA (4096/152 Bits/secBits), signed using sha384WithRSAEncryption
* using HTTP/1.x
> GET /pfSense_v2_8_1_amd64-core/data.pkg HTTP/1.1
Host: pkg00-atx.netgate.com
User-Agent: pkg/1.21.3
Accept: */*
If-Modified-Since: Thu, 28 Aug 2025 16:50:33 GMT

* Request completely sent off
< HTTP/1.1 200 OK
Fetching data.pkg:   0%< Server: nginx
< Date: Wed, 15 Oct 2025 16:06:29 GMT
< Content-Type: application/octet-stream
< Content-Length: 1632
< Last-Modified: Thu, 28 Aug 2025 16:50:33 GMT
< Connection: keep-alive
< ETag: "68b088d9-660"
< Strict-Transport-Security: max-age=31536000; preload
< X-Content-Type-Options: nosniff
< X-XSS-Protection: 1; mode=block
< X-Robots-Tag: all
< X-Download-Options: noopen
< X-Permitted-Cross-Domain-Policies: none
< Accept-Ranges: bytes
<
* The requested document is not new enough
* Simulate an HTTP 304 response
* Closing connection

pfSense-core repository is up to date.
Updating pfSense repository catalogue...
DBG(1)[27296]> PkgRepo: verifying update for pfSense
DBG(1)[27296]> Pkgrepo, begin update of '/var/db/pkg/repos/pfSense/db'
DBG(1)[27296]> Request to fetch pkg+https://pkg.pfsense.org/pfSense_v2_8_1_amd64-pfSense_v2_8_1/meta.conf
DBG(1)[27296]> curl_open
DBG(1)[27296]> Fetch: fetcher used: pkg+https
DBG(1)[27296]> curl> fetching https://pkg.pfsense.org/pfSense_v2_8_1_amd64-pfSense_v2_8_1/meta.conf

DBG(1)[27296]> CURL> attempting to fetch from , left retry 3

* Couldn't find host pkg00-atx.netgate.com in the .netrc file; using defaults
* Host pkg00-atx.netgate.com:443 was resolved.
* IPv6: 2610:160:11:18::207
* IPv4: 208.123.73.207
*   Trying 208.123.73.207:443...
* Connected to pkg00-atx.netgate.com (208.123.73.207) port 443
* ALPN: curl offers http/1.1
*  CAfile: none
*  CApath: /etc/ssl/certs/
* SSL connection using TLSv1.2 / ECDHE-RSA-AES256-GCM-SHA384 / X25519 / RSASSA-PSS
* ALPN: server accepted http/1.1
* Server certificate:
*  subject: CN=*.netgate.com
*  start date: Apr 10 00:00:00 2025 GMT
*  expire date: May 11 23:59:59 2026 GMT
*  subjectAltName: host "pkg00-atx.netgate.com" matched cert's "*.netgate.com"
*  issuer: C=GB; ST=Greater Manchester; L=Salford; O=Sectigo Limited; CN=Sectigo RSA Domain Validation Secure Server CA
*  SSL certificate verify ok.
*   Certificate level 0: Public key type RSA (2048/112 Bits/secBits), signed using sha256WithRSAEncryption
*   Certificate level 1: Public key type RSA (2048/112 Bits/secBits), signed using sha384WithRSAEncryption
*   Certificate level 2: Public key type RSA (4096/152 Bits/secBits), signed using sha384WithRSAEncryption
* using HTTP/1.x
> GET /pfSense_v2_8_1_amd64-pfSense_v2_8_1/meta.conf HTTP/1.1
Host: pkg00-atx.netgate.com
User-Agent: pkg/1.21.3
Accept: */*
If-Modified-Since: Tue, 30 Sep 2025 15:49:19 GMT

* Request completely sent off
< HTTP/1.1 200 OK
Fetching meta.conf:   0%< Server: nginx
< Date: Wed, 15 Oct 2025 16:06:45 GMT
< Content-Type: application/octet-stream
< Content-Length: 179
< Last-Modified: Tue, 30 Sep 2025 15:49:19 GMT
< Connection: keep-alive
< ETag: "68dbfbff-b3"
< Strict-Transport-Security: max-age=31536000; preload
< X-Content-Type-Options: nosniff
< X-XSS-Protection: 1; mode=block
< X-Robots-Tag: all
< X-Download-Options: noopen
< X-Permitted-Cross-Domain-Policies: none
< Accept-Ranges: bytes
<
* The requested document is not new enough
* Simulate an HTTP 304 response
* Closing connection

DBG(1)[27296]> Request to fetch pkg+https://pkg.pfsense.org/pfSense_v2_8_1_amd64-pfSense_v2_8_1/data.pkg
DBG(1)[27296]> curl_open
DBG(1)[27296]> Fetch: fetcher used: pkg+https
DBG(1)[27296]> curl> fetching https://pkg.pfsense.org/pfSense_v2_8_1_amd64-pfSense_v2_8_1/data.pkg

DBG(1)[27296]> CURL> attempting to fetch from , left retry 3

* Couldn't find host pkg00-atx.netgate.com in the .netrc file; using defaults
* Hostname pkg00-atx.netgate.com was found in DNS cache
*   Trying 208.123.73.207:443...
* Connected to pkg00-atx.netgate.com (208.123.73.207) port 443
* ALPN: curl offers http/1.1
*  CAfile: none
*  CApath: /etc/ssl/certs/
* SSL connection using TLSv1.2 / ECDHE-RSA-AES256-GCM-SHA384 / X25519 / RSASSA-PSS
* ALPN: server accepted http/1.1
* Server certificate:
*  subject: CN=*.netgate.com
*  start date: Apr 10 00:00:00 2025 GMT
*  expire date: May 11 23:59:59 2026 GMT
*  subjectAltName: host "pkg00-atx.netgate.com" matched cert's "*.netgate.com"
*  issuer: C=GB; ST=Greater Manchester; L=Salford; O=Sectigo Limited; CN=Sectigo RSA Domain Validation Secure Server CA
*  SSL certificate verify ok.
*   Certificate level 0: Public key type RSA (2048/112 Bits/secBits), signed using sha256WithRSAEncryption
*   Certificate level 1: Public key type RSA (2048/112 Bits/secBits), signed using sha384WithRSAEncryption
*   Certificate level 2: Public key type RSA (4096/152 Bits/secBits), signed using sha384WithRSAEncryption
* using HTTP/1.x
> GET /pfSense_v2_8_1_amd64-pfSense_v2_8_1/data.pkg HTTP/1.1
Host: pkg00-atx.netgate.com
User-Agent: pkg/1.21.3
Accept: */*
If-Modified-Since: Tue, 30 Sep 2025 15:49:19 GMT

* Request completely sent off
< HTTP/1.1 200 OK
Fetching data.pkg:   0%< Server: nginx
< Date: Wed, 15 Oct 2025 16:06:45 GMT
< Content-Type: application/octet-stream
< Content-Length: 189818
< Last-Modified: Tue, 30 Sep 2025 15:49:19 GMT
< Connection: keep-alive
< ETag: "68dbfbff-2e57a"
< Strict-Transport-Security: max-age=31536000; preload
< X-Content-Type-Options: nosniff
< X-XSS-Protection: 1; mode=block
< X-Robots-Tag: all
< X-Download-Options: noopen
< X-Permitted-Cross-Domain-Policies: none
< Accept-Ranges: bytes
<
* The requested document is not new enough
* Simulate an HTTP 304 response
* Closing connection

pfSense repository is up to date.
All repositories are up to date.

[Gertjan]

@PnoT said in check_upgrade: "Updating repositories metadata" returned error code 1:

The requested document is not new enough

... The requested document is not new enough ... Like here ?

[stephenw10]

The document not new enough message is not an error. It just means it's already up to date.

The only actual error there is:

* ipv4 connect timeout after 19808ms, move on!
* Failed to connect to pkg00-atx.netgate.com port 443 after 30009 ms: Timeout was reached
* Closing connection

That's a problem, it should be able to connect there. But it does successfully connect to the other pkg server. And then later is able to connect to pkg00.

So there could be an intermittent connection issue.

[PnoT]

@stephenw10
I was finally able to reboot the pfSense box late last night, and since it's back up, I'm not getting the error messages anymore. I'll report back if it pops up again.

[bra1nfreez]

I know this is months later but I just had this same problem and this guide helped me fix it: https://github.com/pfsense/docs/blob/master/source/install/upgrade-troubleshooting.rst

[Arnavisca]

@bra1nfreez What exactly did you do?

[timecode]

Getting a stack of these messages all of a sudden also.

Whats interesting is this and other weirdness only seemed to start when I created a failover WAN setup - prior to that nothing seemed out of place.

I seem to be getting all sorts of strange messages that all seem to 'start' when the main WAN drops and fails over to the secondary WAN. It fails back to primary correctly but then these messages?

[ghc88]

I've been getting these errors intermittently since upgrading to 2.8 but they were so infrequent they didn't bother me too much. When I ran pkg-static -d update it would work fine. However, over the past couple of days I'm getting a huge amount of these errors. I just ran the command again and got this:

[2.8.1-RELEASE][admin@pfsense.home.arpa]/root: pkg-static -d update
DBG(1)[99186]> pkg initialized
Updating pfSense-core repository catalogue...
DBG(1)[99186]> PkgRepo: verifying update for pfSense-core
pkg-static: Repository pfSense-core has a wrong packagesite, need to re-create d                                                                                                                                                                                                                                             atabase
DBG(1)[99186]> PkgRepo: need forced update of pfSense-core
DBG(1)[99186]> Pkgrepo, begin update of '/var/db/pkg/repos/pfSense-core/db'
DBG(1)[99186]> Request to fetch pkg+https://pkg.pfsense.org/pfSense_v2_8_1_amd64                                                                                                                                                                                                                                             -core/meta.conf
DBG(1)[99186]> curl_open
DBG(1)[99186]> Fetch: fetcher used: pkg+https
DBG(1)[99186]> curl> fetching https://pkg.pfsense.org/pfSense_v2_8_1_amd64-core/                                                                                                                                                                                                                                             meta.conf

DBG(1)[99186]> CURL> attempting to fetch from , left retry 3

* Couldn't find host pkg01-atx.netgate.com in the .netrc file; using defaults
* Host pkg01-atx.netgate.com:443 was resolved.
* IPv6: 2610:160:11:18::209
* IPv4: 208.123.73.209
*   Trying [2610:160:11:18::209]:443...
* Connected to pkg01-atx.netgate.com (2610:160:11:18::209) port 443
* ALPN: curl offers http/1.1
* could not load PEM client certificate from /usr/local/etc/pfSense/pkg/repos/pf                                                                                                                                                                                                                                             Sense-repo-0000-cert.pem, OpenSSL error error:80000002:system library::No such f                                                                                                                                                                                                                                             ile or directory, (no key found, wrong pass phrase, or wrong file format?)
* Closing connection
DBG(1)[99186]> CURL> attempting to fetch from , left retry 2

* Couldn't find host pkg00-atx.netgate.com in the .netrc file; using defaults
* Host pkg00-atx.netgate.com:443 was resolved.
* IPv6: 2610:160:11:18::207
* IPv4: 208.123.73.207
*   Trying [2610:160:11:18::207]:443...
* Connected to pkg00-atx.netgate.com (2610:160:11:18::207) port 443
* ALPN: curl offers http/1.1
* could not load PEM client certificate from /usr/local/etc/pfSense/pkg/repos/pf                                                                                                                                                                                                                                             Sense-repo-0000-cert.pem, OpenSSL error error:80000002:system library::No such f                                                                                                                                                                                                                                             ile or directory, (no key found, wrong pass phrase, or wrong file format?)
* Closing connection
DBG(1)[99186]> CURL> attempting to fetch from , left retry 1

* Couldn't find host pkg01-atx.netgate.com in the .netrc file; using defaults
* Hostname pkg01-atx.netgate.com was found in DNS cache
*   Trying [2610:160:11:18::209]:443...
* Connected to pkg01-atx.netgate.com (2610:160:11:18::209) port 443
* ALPN: curl offers http/1.1
* could not load PEM client certificate from /usr/local/etc/pfSense/pkg/repos/pf                                                                                                                                                                                                                                             Sense-repo-0000-cert.pem, OpenSSL error error:80000002:system library::No such f                                                                                                                                                                                                                                             ile or directory, (no key found, wrong pass phrase, or wrong file format?)
* Closing connection
pkg-static: An error occured while fetching package
DBG(1)[99186]> Request to fetch pkg+https://pkg.pfsense.org/pfSense_v2_8_1_amd64                                                                                                                                                                                                                                             -core/meta.txz
DBG(1)[99186]> curl_open
DBG(1)[99186]> Fetch: fetcher used: pkg+https
DBG(1)[99186]> curl> fetching https://pkg.pfsense.org/pfSense_v2_8_1_amd64-core/                                                                                                                                                                                                                                             meta.txz

DBG(1)[99186]> CURL> attempting to fetch from , left retry 3

* Couldn't find host pkg01-atx.netgate.com in the .netrc file; using defaults
* Hostname pkg01-atx.netgate.com was found in DNS cache
*   Trying [2610:160:11:18::209]:443...
* Connected to pkg01-atx.netgate.com (2610:160:11:18::209) port 443
* ALPN: curl offers http/1.1
* could not load PEM client certificate from /usr/local/etc/pfSense/pkg/repos/pf                                                                                                                                                                                                                                             Sense-repo-0000-cert.pem, OpenSSL error error:80000002:system library::No such f                                                                                                                                                                                                                                             ile or directory, (no key found, wrong pass phrase, or wrong file format?)
* Closing connection
DBG(1)[99186]> CURL> attempting to fetch from , left retry 2

* Couldn't find host pkg00-atx.netgate.com in the .netrc file; using defaults
* Hostname pkg00-atx.netgate.com was found in DNS cache
*   Trying [2610:160:11:18::207]:443...
* Connected to pkg00-atx.netgate.com (2610:160:11:18::207) port 443
* ALPN: curl offers http/1.1
* could not load PEM client certificate from /usr/local/etc/pfSense/pkg/repos/pf                                                                                                                                                                                                                                             Sense-repo-0000-cert.pem, OpenSSL error error:80000002:system library::No such f                                                                                                                                                                                                                                             ile or directory, (no key found, wrong pass phrase, or wrong file format?)
* Closing connection
DBG(1)[99186]> CURL> attempting to fetch from , left retry 1

****[REMOVED REPEATED FAILURES DUE TO MAX SIZE OF POST]****

* Couldn't find host pkg01-atx.netgate.com in the .netrc file; using defaults
* Hostname pkg01-atx.netgate.com was found in DNS cache
*   Trying [2610:160:11:18::209]:443...
* Connected to pkg01-atx.netgate.com (2610:160:11:18::209) port 443
* ALPN: curl offers http/1.1
* could not load PEM client certificate from /usr/local/etc/pfSense/pkg/repos/pf                                                                                                                                                                                                                                             Sense-repo-0000-cert.pem, OpenSSL error error:80000002:system library::No such f                                                                                                                                                                                                                                             ile or directory, (no key found, wrong pass phrase, or wrong file format?)
* Closing connection
pkg-static: An error occured while fetching package
Unable to update repository pfSense
Error updating repositories!

What's really strange is that last night when I looked at /usr/local/etc/pkg/repos/pfSense.conf it was pointing at pfSense plus repos, then I looked at it again a few moments later and it had changed to CE repos! I've never used pfSense plus, so I have no idea what is going on. This was previously a super intermittent problem (sometimes once a day, sometimes once a week), now it's happening very frequently.

[ghc88]

I'm now getting this when I run pkg-static -d update:

[2.8.1-RELEASE][admin@pfsense.home.arpa]/root: pkg-static -d update
DBG(1)[31694]> pkg initialized
Updating pfSense-core repository catalogue...
DBG(1)[31694]> PkgRepo: verifying update for pfSense-core
pkg-static: Repository pfSense-core has a wrong packagesite, need to re-create database
DBG(1)[31694]> PkgRepo: need forced update of pfSense-core
DBG(1)[31694]> Pkgrepo, begin update of '/var/db/pkg/repos/pfSense-core/db'
DBG(1)[31694]> Request to fetch pkg+https://pfsense-plus-pkg.netgate.com/pfSense_plus-v25_07_1_amd64-core/meta.conf
DBG(1)[31694]> curl_open
DBG(1)[31694]> Fetch: fetcher used: pkg+https
DBG(1)[31694]> curl> fetching https://pfsense-plus-pkg.netgate.com/pfSense_plus-v25_07_1_amd64-core/meta.conf

DBG(1)[31694]> CURL> attempting to fetch from , left retry 3

* Couldn't find host pfsense-plus-pkg00.atx.netgate.com in the .netrc file; using defaults
* Host pfsense-plus-pkg00.atx.netgate.com:443 was resolved.
* IPv6: 2610:160:11:18::207
* IPv4: 208.123.73.207
*   Trying [2610:160:11:18::207]:443...
*   Trying 208.123.73.207:443...
* Connected to pfsense-plus-pkg00.atx.netgate.com (208.123.73.207) port 443
* ALPN: curl offers http/1.1
*  CAfile: /etc/ssl/netgate-ca.pem
*  CApath: /etc/ssl/certs/
* SSL connection using TLSv1.2 / ECDHE-RSA-AES256-GCM-SHA384 / X25519 / RSASSA-PSS
* ALPN: server accepted http/1.1
* Server certificate:
*  subject: C=US; ST=Texas; L=Austin; O=Rubicon Communications, LLC (Netgate); OU=pfSense Plus; CN=pfsense-plus-pkg00.atx.netgate.com
*  start date: Mar 15 20:23:11 2022 GMT
*  expire date: Feb 19 20:23:11 2122 GMT
*  common name: pfsense-plus-pkg00.atx.netgate.com (matched)
*  issuer: C=US; ST=Texas; L=Austin; O=Rubicon Communications, LLC (Netgate); OU=Netgate CA; CN=Netgate CA
*  SSL certificate verify ok.
*   Certificate level 0: Public key type RSA (4096/152 Bits/secBits), signed using sha256WithRSAEncryption
*   Certificate level 1: Public key type RSA (4096/152 Bits/secBits), signed using sha256WithRSAEncryption
* using HTTP/1.x
> GET /pfSense_plus-v25_07_1_amd64-core/meta.conf HTTP/1.1
Host: pfsense-plus-pkg00.atx.netgate.com
User-Agent: pkg/1.21.3
Accept: */*
If-Modified-Since: Thu, 01 Jan 1970 00:00:00 GMT

* Request completely sent off
< HTTP/1.1 200 OK
Fetching meta.conf:   0%< Server: nginx
< Date: Fri, 07 Nov 2025 18:36:07 GMT
< Content-Type: application/octet-stream
< Content-Length: 179
< Last-Modified: Fri, 15 Aug 2025 21:11:56 GMT
< Connection: keep-alive
< ETag: "689fa29c-b3"
< Accept-Ranges: bytes
<
Fetching meta.conf: 100%    179 B   0.2kB/s    00:01
* Connection #0 to host pfsense-plus-pkg00.atx.netgate.com left intact
DBG(1)[31694]> Request to fetch pkg+https://pfsense-plus-pkg.netgate.com/pfSense_plus-v25_07_1_amd64-core/data.pkg
DBG(1)[31694]> curl_open
DBG(1)[31694]> Fetch: fetcher used: pkg+https
DBG(1)[31694]> curl> fetching https://pfsense-plus-pkg.netgate.com/pfSense_plus-v25_07_1_amd64-core/data.pkg

DBG(1)[31694]> CURL> attempting to fetch from , left retry 3

* Couldn't find host pfsense-plus-pkg00.atx.netgate.com in the .netrc file; using defaults
* Found bundle for host: 0x49882a25870 [serially]
* Re-using existing connection with host pfsense-plus-pkg00.atx.netgate.com
> GET /pfSense_plus-v25_07_1_amd64-core/data.pkg HTTP/1.1
Host: pfsense-plus-pkg00.atx.netgate.com
User-Agent: pkg/1.21.3
Accept: */*
If-Modified-Since: Thu, 01 Jan 1970 00:00:00 GMT

* Request completely sent off
< HTTP/1.1 200 OK
Fetching data.pkg:   0%< Server: nginx
< Date: Fri, 07 Nov 2025 18:36:07 GMT
< Content-Type: application/octet-stream
< Content-Length: 1726
< Last-Modified: Fri, 15 Aug 2025 21:11:56 GMT
< Connection: keep-alive
< ETag: "689fa29c-6be"
< Accept-Ranges: bytes
<
Fetching data.pkg: 100%    2 KiB   1.7kB/s    00:01
* Connection #0 to host pfsense-plus-pkg00.atx.netgate.com left intact
DBG(1)[31694]> PkgRepo: extracting data of repo pfSense-core
DBG(1)[31836]> PkgRepo: extracting signature of repo in a sandbox
DBG(1)[31694]> Pkgrepo, reading new metadata
Processing entries: 100%
pfSense-core repository update completed. 5 packages processed.
Updating pfSense repository catalogue...
DBG(1)[31694]> PkgRepo: verifying update for pfSense
DBG(1)[31694]> Pkgrepo, begin update of '/var/db/pkg/repos/pfSense/db'
DBG(1)[31694]> Request to fetch pkg+https://pfsense-plus-pkg.netgate.com/pfSense_plus-v25_07_1_amd64-pfSense_plus_v25_07_1/meta.conf
DBG(1)[31694]> curl_open
DBG(1)[31694]> Fetch: fetcher used: pkg+https
DBG(1)[31694]> curl> fetching https://pfsense-plus-pkg.netgate.com/pfSense_plus-v25_07_1_amd64-pfSense_plus_v25_07_1/meta.conf

DBG(1)[31694]> CURL> attempting to fetch from , left retry 3

* Couldn't find host pfsense-plus-pkg01.atx.netgate.com in the .netrc file; using defaults
* Host pfsense-plus-pkg01.atx.netgate.com:443 was resolved.
* IPv6: 2610:160:11:18::209
* IPv4: 208.123.73.209
*   Trying [2610:160:11:18::209]:443...
*   Trying 208.123.73.209:443...
* Connected to pfsense-plus-pkg01.atx.netgate.com (208.123.73.209) port 443
* ALPN: curl offers http/1.1
*  CAfile: /etc/ssl/netgate-ca.pem
*  CApath: /etc/ssl/certs/
* SSL connection using TLSv1.2 / ECDHE-RSA-AES256-GCM-SHA384 / X25519 / RSASSA-PSS
* ALPN: server accepted http/1.1
* Server certificate:
*  subject: C=US; ST=Texas; L=Austin; O=Rubicon Communications, LLC (Netgate); OU=pfSense Plus; CN=pfsense-plus-pkg01.atx.netgate.com
*  start date: Mar 15 20:23:37 2022 GMT
*  expire date: Feb 19 20:23:37 2122 GMT
*  common name: pfsense-plus-pkg01.atx.netgate.com (matched)
*  issuer: C=US; ST=Texas; L=Austin; O=Rubicon Communications, LLC (Netgate); OU=Netgate CA; CN=Netgate CA
*  SSL certificate verify ok.
*   Certificate level 0: Public key type RSA (4096/152 Bits/secBits), signed using sha256WithRSAEncryption
*   Certificate level 1: Public key type RSA (4096/152 Bits/secBits), signed using sha256WithRSAEncryption
* using HTTP/1.x
> GET /pfSense_plus-v25_07_1_amd64-pfSense_plus_v25_07_1/meta.conf HTTP/1.1
Host: pfsense-plus-pkg01.atx.netgate.com
User-Agent: pkg/1.21.3
Accept: */*
If-Modified-Since: Fri, 24 Oct 2025 14:38:28 GMT

* Request completely sent off
< HTTP/1.1 304 Not Modified
< Server: nginx
< Date: Fri, 07 Nov 2025 18:36:08 GMT
< Last-Modified: Fri, 24 Oct 2025 14:38:28 GMT
< Connection: keep-alive
< ETag: "68fb8f64-b3"
<
* Connection #0 to host pfsense-plus-pkg01.atx.netgate.com left intact
DBG(1)[31694]> Request to fetch pkg+https://pfsense-plus-pkg.netgate.com/pfSense_plus-v25_07_1_amd64-pfSense_plus_v25_07_1/data.pkg
DBG(1)[31694]> curl_open
DBG(1)[31694]> Fetch: fetcher used: pkg+https
DBG(1)[31694]> curl> fetching https://pfsense-plus-pkg.netgate.com/pfSense_plus-v25_07_1_amd64-pfSense_plus_v25_07_1/data.pkg

DBG(1)[31694]> CURL> attempting to fetch from , left retry 3

* Couldn't find host pfsense-plus-pkg01.atx.netgate.com in the .netrc file; using defaults
* Found bundle for host: 0x49882b10ad0 [serially]
* Re-using existing connection with host pfsense-plus-pkg01.atx.netgate.com
> GET /pfSense_plus-v25_07_1_amd64-pfSense_plus_v25_07_1/data.pkg HTTP/1.1
Host: pfsense-plus-pkg01.atx.netgate.com
User-Agent: pkg/1.21.3
Accept: */*
If-Modified-Since: Fri, 24 Oct 2025 14:38:28 GMT

* Request completely sent off
< HTTP/1.1 304 Not Modified
< Server: nginx
< Date: Fri, 07 Nov 2025 18:36:08 GMT
< Last-Modified: Fri, 24 Oct 2025 14:38:28 GMT
< Connection: keep-alive
< ETag: "68fb8f64-3b14f"
<
* Connection #0 to host pfsense-plus-pkg01.atx.netgate.com left intact
pfSense repository is up to date.
All repositories are up to date.

Why is it pointing at pfsense-plus packages? My /usr/local/etc/pkg/repos/pfSense.conf file is currently:

FreeBSD: { enabled: no }

pfSense-core: {
    url: "pkg+https://pkg.pfsense.org/pfSense_v2_8_1_amd64-core",
    mirror_type: "srv",
    signature_type: "fingerprints",
    fingerprints: "/usr/local/share/pfSense/keys/pkg",
    enabled: yes
}

pfSense: {
    url: "pkg+https://pkg.pfsense.org/pfSense_v2_8_1_amd64-pfSense_v2_8_1",
    mirror_type: "srv",
    signature_type: "fingerprints",
    fingerprints: "/usr/local/share/pfSense/keys/pkg",
    enabled: yes
}

[ghc88]

One more: something very strange is going on, you can see here that it is changing the config file from CE to Plus all by itself:

[2.8.1-RELEASE][admin@pfsense.home.arpa]/root: cat /usr/local/etc/pkg/repos/pfSense.conf
FreeBSD: { enabled: no }

pfSense-core: {
    url: "pkg+https://pkg.pfsense.org/pfSense_v2_8_1_amd64-core",
    mirror_type: "srv",
    signature_type: "fingerprints",
    fingerprints: "/usr/local/share/pfSense/keys/pkg",
    enabled: yes
}

pfSense: {
    url: "pkg+https://pkg.pfsense.org/pfSense_v2_8_1_amd64-pfSense_v2_8_1",
    mirror_type: "srv",
    signature_type: "fingerprints",
    fingerprints: "/usr/local/share/pfSense/keys/pkg",
    enabled: yes
}

[2.8.1-RELEASE][admin@pfsense.home.arpa]/root: cat /usr/local/etc/pkg/repos/pfSense.conf
FreeBSD { endabled: no }

pfSense-core: {
    url: "pkg+https://pfsense-plus-pkg.netgate.com/pfSense_plus-v25_07_1_amd64-core"
    mirror_type: "srv",
    signature_type: "fingerprints",
    fingerprints: "/usr/local/share/pfSense/keys/pkg",
    enabled: yes
}

pfSense: {
    url: "pkg+https://pfsense-plus-pkg.netgate.com/pfSense_plus-v25_07_1_amd64-pfSense_plus_v25_07_1",
    mirror_type: "srv",
    signature_type: "fingerprints",
    fingerprints: "/usr/local/share/pfSense/keys/pkg",
    enabled: yes
}