Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Patching/Upgrading OpenSSL

    Scheduled Pinned Locked Moved Problems Installing or Upgrading pfSense Software
    150 Posts 50 Posters 78.1k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • jimpJ
      jimp Rebel Alliance Developer Netgate
      last edited by

      It's not that simple or easy, but may get better in the future after 2.2. Back seat driving is easy, actual solutions not so much. Still off topic for this thread.

      Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

      Need help fast? Netgate Global Support!

      Do not Chat/PM for help!

      1 Reply Last reply Reply Quote 0
      • B
        Bravissimo594
        last edited by

        @jimp:

        Packages should be OK now

        What is the easiest way to verify that the version of 2.1.1 that we get from mirror sites contains the updates?

        @jimp:

        make sure to uninstall and then reinstall (not update) to ensure that it obtains the latest binaries.

        "Uninstall"? Is that best done by wiping out the pfSense partition? (…after backing up the configuration, of course...)

        1 Reply Last reply Reply Quote 0
        • D
          doktornotor Banned
          last edited by

          Well, that "back seat driving" is with some 10+ years of hands-on experience with source-based distros, such as Gentoo. Meanwhile, to get back on topic - so what's up with the upgrade/reinstall? So, the ports version has not changed, so the package manager just ignores the changed PBI even though you bump the version in the XML?  ??? :o

          @Bravissimo594:

          What is the easiest way to verify that the version of 2.1.1 that we get from mirror sites contains the updates?
          "Uninstall"? Is that best done by wiping out the pfSense partition? (…after backing up the configuration, of course...)

          A total misunderstanding - you need (the not yet available) 2.1.2 to get the OS itself fixed! We've been just debating the optional packages.

          1 Reply Last reply Reply Quote 0
          • jimpJ
            jimp Rebel Alliance Developer Netgate
            last edited by

            @Bravissimo594:

            @jimp:

            Packages should be OK now

            What is the easiest way to verify that the version of 2.1.1 that we get from mirror sites contains the updates?

            @jimp:

            make sure to uninstall and then reinstall (not update) to ensure that it obtains the latest binaries.

            "Uninstall"? Is that best done by wiping out the pfSense partition? (…after backing up the configuration, of course...)

            That is for packages, not the base system. The base system requires an update to 2.1.2 (coming momentarily)

            Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

            Need help fast? Netgate Global Support!

            Do not Chat/PM for help!

            1 Reply Last reply Reply Quote 0
            • jimpJ
              jimp Rebel Alliance Developer Netgate
              last edited by

              @doktornotor:

              Well, that "back seat driving" is with some 10+ years of hands-on experience with source-based distros, such as Gentoo. Meanwhile, to get back on topic - so what's up with the upgrade/reinstall? So, the ports version has not changed, so the package manager just ignores the changed PBI even though you bump the version in the XML?  ??? :o

              I don't recall the specific logic of the reinstall but the safest way to always ensure you have the correct version is to uninstall/reinstall the package. It's not worth splitting hairs over for something this important.

              Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

              Need help fast? Netgate Global Support!

              Do not Chat/PM for help!

              1 Reply Last reply Reply Quote 0
              • G
                goofytux
                last edited by

                @jimp:

                I don't recall the specific logic of the reinstall but the safest way to always ensure you have the correct version is to uninstall/reinstall the package. It's not worth splitting hairs over for something this important.

                Just to be sure: If an update for the package is offered, I can install this directly. Or do I need to uninstall every package first?

                1 Reply Last reply Reply Quote 0
                • D
                  doktornotor Banned
                  last edited by

                  @goofytux:

                  Just to be sure: If an update for the package is offered, I can install this directly. Or do I need to uninstall every package first?

                  Apparently the former is not safe (as in, it produces completely invalid results, like here).

                  1 Reply Last reply Reply Quote 0
                  • jimpJ
                    jimp Rebel Alliance Developer Netgate
                    last edited by

                    @goofytux:

                    Just to be sure: If an update for the package is offered, I can install this directly. Or do I need to uninstall every package first?

                    You need only uninstall the affected package and reinstall that one affected package. No need to reinstall all. Or just do a firmware upgrade in a bit when 2.1.2 rolls out and the packages will reinstall themselves.

                    @doktornotor:

                    Apparently the former is not safe (as in, it produces completely invalid results, like here).

                    That guy's invalid results aren't the fault of anything but his broken "testing" methodology.

                    Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

                    Need help fast? Netgate Global Support!

                    Do not Chat/PM for help!

                    1 Reply Last reply Reply Quote 0
                    • A
                      athurdent
                      last edited by

                      Maybe the "Reinstall all Packages" Button should move to the Packages Section. So one can easily find it, push it if advised to and go for a beverage of choice afterwards…

                      1 Reply Last reply Reply Quote 0
                      • B
                        Bravissimo594
                        last edited by

                        @jimp:

                        That is for packages, not the base system. The base system requires an update to 2.1.2 (coming momentarily)

                        Oops. Sorry to waste time with that question. I know everyone there must be busy.

                        1 Reply Last reply Reply Quote 0
                        • D
                          doktornotor Banned
                          last edited by

                          @athurdent:

                          Maybe the "Reinstall all Packages" Button should move to the Packages Section. So one can easily find it, push it if advised to and go for a beverage of choice afterwards…

                          I'm not even sure whether the reinstall does really reinstall or what it does ATM and how that differs from uninstall/install and/or upgrade… Altogether, feeling highly uncomfortable with a package manager that seems to produce totally unpredictable results.

                          (The placement of the button goes totally beyond me and makes simply no sense.)

                          1 Reply Last reply Reply Quote 0
                          • stephenw10S
                            stephenw10 Netgate Administrator
                            last edited by

                            Hmm, am I missing something? The button is right there in the installed packages screen next to the package listing.

                            Steve

                            1 Reply Last reply Reply Quote 0
                            • D
                              doktornotor Banned
                              last edited by

                              @stephenw10:

                              Hmm, am I missing something?

                              Talking about the Reinstall Packages button in Diagnostics - Backup/Restore

                              Click this button to reinstall all system packages. This may take a while.

                              1 Reply Last reply Reply Quote 0
                              • stephenw10S
                                stephenw10 Netgate Administrator
                                last edited by

                                Ah, I am missing something.  ::)

                                Steve

                                1 Reply Last reply Reply Quote 0
                                • F
                                  fragged
                                  last edited by

                                  Diagnostics: Backup/restore has a button to reinstall all installed packages.

                                  1 Reply Last reply Reply Quote 0
                                  • CNLiberalC
                                    CNLiberal
                                    last edited by

                                    Looks like 2.1.2 is up?

                                    pfSense 2.7.2-RELEASE

                                    Dell R210 II
                                    Intel E3-1340 v2
                                    8GB RAM
                                    SSD ZFS Mirror
                                    Intel X520-DA2, RJ45 SFP+ (WAN) and 10Gb SFP+ DAC (LAN)
                                    1 x Cisco 3850 12XS-S (Core Switch)
                                    2 x Cisco 3750X PoE Gig Switch (Access Stack)
                                    3 x Cisco 2802i APs (Mobility Express)

                                    1 Reply Last reply Reply Quote 0
                                    • D
                                      drees
                                      last edited by

                                      @joltman:

                                      Looks like 2.1.2 is up?

                                      Yep:
                                      https://www.pfsense.org/download/

                                      1 Reply Last reply Reply Quote 0
                                      • CNLiberalC
                                        CNLiberal
                                        last edited by

                                        I just saw some people in the forum are getting an error when they're editing their rules.  I'm going to hold off for now.

                                        pfSense 2.7.2-RELEASE

                                        Dell R210 II
                                        Intel E3-1340 v2
                                        8GB RAM
                                        SSD ZFS Mirror
                                        Intel X520-DA2, RJ45 SFP+ (WAN) and 10Gb SFP+ DAC (LAN)
                                        1 x Cisco 3850 12XS-S (Core Switch)
                                        2 x Cisco 3750X PoE Gig Switch (Access Stack)
                                        3 x Cisco 2802i APs (Mobility Express)

                                        1 Reply Last reply Reply Quote 0
                                        • C
                                          Criggie
                                          last edited by

                                          @joltman:

                                          I just saw some people in the forum are getting an error when they're editing their rules.  I'm going to hold off for now.

                                          2.1.2 installed, working for me.  Joltman: what's your IP address? …..

                                          1 Reply Last reply Reply Quote 0
                                          • CNLiberalC
                                            CNLiberal
                                            last edited by

                                            ??

                                            pfSense 2.7.2-RELEASE

                                            Dell R210 II
                                            Intel E3-1340 v2
                                            8GB RAM
                                            SSD ZFS Mirror
                                            Intel X520-DA2, RJ45 SFP+ (WAN) and 10Gb SFP+ DAC (LAN)
                                            1 x Cisco 3850 12XS-S (Core Switch)
                                            2 x Cisco 3750X PoE Gig Switch (Access Stack)
                                            3 x Cisco 2802i APs (Mobility Express)

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.