Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Patching/Upgrading OpenSSL

    Problems Installing or Upgrading pfSense Software
    50
    150
    72.6k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • D
      doktornotor Banned
      last edited by

      Well, that "back seat driving" is with some 10+ years of hands-on experience with source-based distros, such as Gentoo. Meanwhile, to get back on topic - so what's up with the upgrade/reinstall? So, the ports version has not changed, so the package manager just ignores the changed PBI even though you bump the version in the XML?  ??? :o

      @Bravissimo594:

      What is the easiest way to verify that the version of 2.1.1 that we get from mirror sites contains the updates?
      "Uninstall"? Is that best done by wiping out the pfSense partition? (…after backing up the configuration, of course...)

      A total misunderstanding - you need (the not yet available) 2.1.2 to get the OS itself fixed! We've been just debating the optional packages.

      1 Reply Last reply Reply Quote 0
      • jimpJ
        jimp Rebel Alliance Developer Netgate
        last edited by

        @Bravissimo594:

        @jimp:

        Packages should be OK now

        What is the easiest way to verify that the version of 2.1.1 that we get from mirror sites contains the updates?

        @jimp:

        make sure to uninstall and then reinstall (not update) to ensure that it obtains the latest binaries.

        "Uninstall"? Is that best done by wiping out the pfSense partition? (…after backing up the configuration, of course...)

        That is for packages, not the base system. The base system requires an update to 2.1.2 (coming momentarily)

        Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

        Need help fast? Netgate Global Support!

        Do not Chat/PM for help!

        1 Reply Last reply Reply Quote 0
        • jimpJ
          jimp Rebel Alliance Developer Netgate
          last edited by

          @doktornotor:

          Well, that "back seat driving" is with some 10+ years of hands-on experience with source-based distros, such as Gentoo. Meanwhile, to get back on topic - so what's up with the upgrade/reinstall? So, the ports version has not changed, so the package manager just ignores the changed PBI even though you bump the version in the XML?  ??? :o

          I don't recall the specific logic of the reinstall but the safest way to always ensure you have the correct version is to uninstall/reinstall the package. It's not worth splitting hairs over for something this important.

          Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

          Need help fast? Netgate Global Support!

          Do not Chat/PM for help!

          1 Reply Last reply Reply Quote 0
          • G
            goofytux
            last edited by

            @jimp:

            I don't recall the specific logic of the reinstall but the safest way to always ensure you have the correct version is to uninstall/reinstall the package. It's not worth splitting hairs over for something this important.

            Just to be sure: If an update for the package is offered, I can install this directly. Or do I need to uninstall every package first?

            1 Reply Last reply Reply Quote 0
            • D
              doktornotor Banned
              last edited by

              @goofytux:

              Just to be sure: If an update for the package is offered, I can install this directly. Or do I need to uninstall every package first?

              Apparently the former is not safe (as in, it produces completely invalid results, like here).

              1 Reply Last reply Reply Quote 0
              • jimpJ
                jimp Rebel Alliance Developer Netgate
                last edited by

                @goofytux:

                Just to be sure: If an update for the package is offered, I can install this directly. Or do I need to uninstall every package first?

                You need only uninstall the affected package and reinstall that one affected package. No need to reinstall all. Or just do a firmware upgrade in a bit when 2.1.2 rolls out and the packages will reinstall themselves.

                @doktornotor:

                Apparently the former is not safe (as in, it produces completely invalid results, like here).

                That guy's invalid results aren't the fault of anything but his broken "testing" methodology.

                Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

                Need help fast? Netgate Global Support!

                Do not Chat/PM for help!

                1 Reply Last reply Reply Quote 0
                • A
                  athurdent
                  last edited by

                  Maybe the "Reinstall all Packages" Button should move to the Packages Section. So one can easily find it, push it if advised to and go for a beverage of choice afterwards…

                  1 Reply Last reply Reply Quote 0
                  • B
                    Bravissimo594
                    last edited by

                    @jimp:

                    That is for packages, not the base system. The base system requires an update to 2.1.2 (coming momentarily)

                    Oops. Sorry to waste time with that question. I know everyone there must be busy.

                    1 Reply Last reply Reply Quote 0
                    • D
                      doktornotor Banned
                      last edited by

                      @athurdent:

                      Maybe the "Reinstall all Packages" Button should move to the Packages Section. So one can easily find it, push it if advised to and go for a beverage of choice afterwards…

                      I'm not even sure whether the reinstall does really reinstall or what it does ATM and how that differs from uninstall/install and/or upgrade… Altogether, feeling highly uncomfortable with a package manager that seems to produce totally unpredictable results.

                      (The placement of the button goes totally beyond me and makes simply no sense.)

                      1 Reply Last reply Reply Quote 0
                      • stephenw10S
                        stephenw10 Netgate Administrator
                        last edited by

                        Hmm, am I missing something? The button is right there in the installed packages screen next to the package listing.

                        Steve

                        1 Reply Last reply Reply Quote 0
                        • D
                          doktornotor Banned
                          last edited by

                          @stephenw10:

                          Hmm, am I missing something?

                          Talking about the Reinstall Packages button in Diagnostics - Backup/Restore

                          Click this button to reinstall all system packages. This may take a while.

                          1 Reply Last reply Reply Quote 0
                          • stephenw10S
                            stephenw10 Netgate Administrator
                            last edited by

                            Ah, I am missing something.  ::)

                            Steve

                            1 Reply Last reply Reply Quote 0
                            • F
                              fragged
                              last edited by

                              Diagnostics: Backup/restore has a button to reinstall all installed packages.

                              1 Reply Last reply Reply Quote 0
                              • CNLiberalC
                                CNLiberal
                                last edited by

                                Looks like 2.1.2 is up?

                                pfSense 2.7.2-RELEASE

                                Dell R210 II
                                Intel E3-1340 v2
                                8GB RAM
                                SSD ZFS Mirror
                                Intel X520-DA2, RJ45 SFP+ (WAN) and 10Gb SFP+ DAC (LAN)
                                1 x Cisco 3850 12XS-S (Core Switch)
                                2 x Cisco 3750X PoE Gig Switch (Access Stack)
                                3 x Cisco 2802i APs (Mobility Express)

                                1 Reply Last reply Reply Quote 0
                                • D
                                  drees
                                  last edited by

                                  @joltman:

                                  Looks like 2.1.2 is up?

                                  Yep:
                                  https://www.pfsense.org/download/

                                  1 Reply Last reply Reply Quote 0
                                  • CNLiberalC
                                    CNLiberal
                                    last edited by

                                    I just saw some people in the forum are getting an error when they're editing their rules.  I'm going to hold off for now.

                                    pfSense 2.7.2-RELEASE

                                    Dell R210 II
                                    Intel E3-1340 v2
                                    8GB RAM
                                    SSD ZFS Mirror
                                    Intel X520-DA2, RJ45 SFP+ (WAN) and 10Gb SFP+ DAC (LAN)
                                    1 x Cisco 3850 12XS-S (Core Switch)
                                    2 x Cisco 3750X PoE Gig Switch (Access Stack)
                                    3 x Cisco 2802i APs (Mobility Express)

                                    1 Reply Last reply Reply Quote 0
                                    • C
                                      Criggie
                                      last edited by

                                      @joltman:

                                      I just saw some people in the forum are getting an error when they're editing their rules.  I'm going to hold off for now.

                                      2.1.2 installed, working for me.  Joltman: what's your IP address? …..

                                      1 Reply Last reply Reply Quote 0
                                      • CNLiberalC
                                        CNLiberal
                                        last edited by

                                        ??

                                        pfSense 2.7.2-RELEASE

                                        Dell R210 II
                                        Intel E3-1340 v2
                                        8GB RAM
                                        SSD ZFS Mirror
                                        Intel X520-DA2, RJ45 SFP+ (WAN) and 10Gb SFP+ DAC (LAN)
                                        1 x Cisco 3850 12XS-S (Core Switch)
                                        2 x Cisco 3750X PoE Gig Switch (Access Stack)
                                        3 x Cisco 2802i APs (Mobility Express)

                                        1 Reply Last reply Reply Quote 0
                                        • A
                                          adam65535
                                          last edited by

                                          jimp posted that it is fixed…  problem with autoconfigbackup package which was just updated to fix it...

                                          https://forum.pfsense.org/index.php?topic=75060.msg409582#msg409582

                                          The github commit to the package...

                                          https://github.com/pfsense/pfsense-packages/commit/8869c3d78abf2bf7e72fe079ed457c28f3f8edab

                                          1 Reply Last reply Reply Quote 0
                                          • JeGrJ
                                            JeGr LAYER 8 Moderator
                                            last edited by

                                            @joltman: As I was reporting this, I agree to adams statement. Getting rid of autoconfbackup package before upgrading should completely avoid this. Afterwards it can be installed to it's new version (1.22) again without hiccups. Problem was completely related to the package, not the main distro.

                                            Greets Jens

                                            Don't forget to upvote 👍 those who kindly offered their time and brainpower to help you!

                                            If you're interested, I'm available to discuss details of German-speaking paid support (for companies) if needed.

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.