Upgrade 1.3 to 2.3
-
Hi to you all
I did an upgrade from 1.3 to the latest release from the auto updater (Web GUI)
the process was seem to be stack so after approximately 2H i did manually reboot.
the system booted ok and all the rules and traffic seem to work fine
but the GUI is not accessible, i can see on "netstat -na" that there is nothing listening on port 433 or 80
I try to run lighttpd manual but it was missing some files, i reinstall lighttpd using packages (install manager) but now it is missing the lighttpd configuration file
is there any way to create it or copy it from an other system?
dose any one has any idea how to fix this? -
2.3 does not use lightppd for webgui. It uses nginx.
I would console/ssh in and run options 16 and 11.
-
Thanks for reply
I run option 11 & 16 but still nothing listening on 433 or 80 -
Maybe your upgrade didn't really go. Difficult to say with such little information.
What's the output of tail -100 /cf/conf/upgrade_log.txt
i386 or amd64?
I'd probably reinstall fresh from the 2.3.1 img or iso and upload the old config.
https://www.pfsense.org/download/
-
i'm Runing i386
this is my upgrade_log
>>> Updating repositories metadata... Updating pfSense-core repository catalogue... Fetching meta.txz: . done Fetching packagesite.txz: . done Processing entries: .. done pfSense-core repository update completed. 13 packages processed. Updating pfSense repository catalogue... Fetching meta.txz: . done Fetching packagesite.txz: .......... done Processing entries: .......... done pfSense repository update completed. 385 packages processed. >>> Upgrading pfSense-repo... done. >>> Unlocking package pfSense-kernel-pfSense... done. The following 41 package(s) will be affected (of 0 checked): Installed packages to be UPGRADED: php56-zlib: 5.6.21 -> 5.6.22 [pfSense] php56-xmlwriter: 5.6.21 -> 5.6.22 [pfSense] php56-xmlreader: 5.6.21 -> 5.6.22 [pfSense] php56-xml: 5.6.21 -> 5.6.22 [pfSense] php56-tokenizer: 5.6.21 -> 5.6.22 [pfSense] php56-sysvshm: 5.6.21 -> 5.6.22 [pfSense] php56-sysvsem: 5.6.21 -> 5.6.22 [pfSense] php56-sysvmsg: 5.6.21 -> 5.6.22 [pfSense] php56-sqlite3: 5.6.21 -> 5.6.22 [pfSense] php56-sockets: 5.6.21 -> 5.6.22 [pfSense] php56-simplexml: 5.6.21 -> 5.6.22 [pfSense] php56-shmop: 5.6.21 -> 5.6.22 [pfSense] php56-session: 5.6.21 -> 5.6.22 [pfSense] php56-readline: 5.6.21 -> 5.6.22 [pfSense] php56-posix: 5.6.21 -> 5.6.22 [pfSense] php56-pdo_sqlite: 5.6.21 -> 5.6.22 [pfSense] php56-pdo: 5.6.21 -> 5.6.22 [pfSense] php56-pcntl: 5.6.21 -> 5.6.22 [pfSense] php56-openssl: 5.6.21 -> 5.6.22 [pfSense] php56-opcache: 5.6.21 -> 5.6.22 [pfSense] php56-mcrypt: 5.6.21 -> 5.6.22 [pfSense] php56-mbstring: 5.6.21 -> 5.6.22 [pfSense] php56-ldap: 5.6.21 -> 5.6.22 [pfSense] php56-json: 5.6.21 -> 5.6.22 [pfSense] php56-hash: 5.6.21 -> 5.6.22 [pfSense] php56-gettext: 5.6.21 -> 5.6.22 [pfSense] php56-filter: 5.6.21 -> 5.6.22 [pfSense] php56-dom: 5.6.21 -> 5.6.22 [pfSense] php56-curl: 5.6.21 -> 5.6.22 [pfSense] php56-ctype: 5.6.21 -> 5.6.22 [pfSense] php56-bz2: 5.6.21 -> 5.6.22 [pfSense] php56-bcmath: 5.6.21 -> 5.6.22 [pfSense] php56: 5.6.21 -> 5.6.22 [pfSense] pfSense-rc: 2.3.1 -> 2.3.1_5 [pfSense-core] pfSense-kernel-pfSense: 2.3.1 -> 2.3.1_5 [pfSense-core] pfSense-default-config: 2.3.1 -> 2.3.1_5 [pfSense-core] pfSense-base: 2.3.1 -> 2.3.1_5 [pfSense-core] pfSense-Status_Monitoring: 1.3_1 -> 1.4.2_1 [pfSense] pfSense: 2.3.1 -> 2.3.1_5 [pfSense] ntp: 4.2.8p7 -> 4.2.8p8 [pfSense] expat: 2.1.0_3 -> 2.1.1_1 [pfSense] 42 MiB to be downloaded. **** WARNING **** Reboot will be required!! Proceed with upgrade? (y/N) >>> Downloading upgrade packages... Updating pfSense-core repository catalogue... pfSense-core repository is up-to-date. Updating pfSense repository catalogue... pfSense repository is up-to-date. All repositories are up-to-date. Checking for upgrades (42 candidates): .......... done Processing candidates (42 candidates): .......... done The following 41 package(s) will be affected (of 0 checked): Installed packages to be UPGRADED: php56-zlib: 5.6.21 -> 5.6.22 [pfSense] php56-xmlwriter: 5.6.21 -> 5.6.22 [pfSense] php56-xmlreader: 5.6.21 -> 5.6.22 [pfSense] php56-xml: 5.6.21 -> 5.6.22 [pfSense] php56-tokenizer: 5.6.21 -> 5.6.22 [pfSense] php56-sysvshm: 5.6.21 -> 5.6.22 [pfSense] php56-sysvsem: 5.6.21 -> 5.6.22 [pfSense] php56-sysvmsg: 5.6.21 -> 5.6.22 [pfSense] php56-sqlite3: 5.6.21 -> 5.6.22 [pfSense] php56-sockets: 5.6.21 -> 5.6.22 [pfSense] php56-simplexml: 5.6.21 -> 5.6.22 [pfSense] php56-shmop: 5.6.21 -> 5.6.22 [pfSense] php56-session: 5.6.21 -> 5.6.22 [pfSense] php56-readline: 5.6.21 -> 5.6.22 [pfSense] php56-posix: 5.6.21 -> 5.6.22 [pfSense] php56-pdo_sqlite: 5.6.21 -> 5.6.22 [pfSense] php56-pdo: 5.6.21 -> 5.6.22 [pfSense] php56-pcntl: 5.6.21 -> 5.6.22 [pfSense] php56-openssl: 5.6.21 -> 5.6.22 [pfSense] php56-opcache: 5.6.21 -> 5.6.22 [pfSense] php56-mcrypt: 5.6.21 -> 5.6.22 [pfSense] php56-mbstring: 5.6.21 -> 5.6.22 [pfSense] php56-ldap: 5.6.21 -> 5.6.22 [pfSense] php56-json: 5.6.21 -> 5.6.22 [pfSense] php56-hash: 5.6.21 -> 5.6.22 [pfSense] php56-gettext: 5.6.21 -> 5.6.22 [pfSense] php56-filter: 5.6.21 -> 5.6.22 [pfSense] php56-dom: 5.6.21 -> 5.6.22 [pfSense] php56-curl: 5.6.21 -> 5.6.22 [pfSense] php56-ctype: 5.6.21 -> 5.6.22 [pfSense] php56-bz2: 5.6.21 -> 5.6.22 [pfSense] php56-bcmath: 5.6.21 -> 5.6.22 [pfSense] php56: 5.6.21 -> 5.6.22 [pfSense] pfSense-rc: 2.3.1 -> 2.3.1_5 [pfSense-core] pfSense-kernel-pfSense: 2.3.1 -> 2.3.1_5 [pfSense-core] pfSense-default-config: 2.3.1 -> 2.3.1_5 [pfSense-core] pfSense-base: 2.3.1 -> 2.3.1_5 [pfSense-core] pfSense-Status_Monitoring: 1.3_1 -> 1.4.2_1 [pfSense] pfSense: 2.3.1 -> 2.3.1_5 [pfSense] ntp: 4.2.8p7 -> 4.2.8p8 [pfSense] expat: 2.1.0_3 -> 2.1.1_1 [pfSense] 42 MiB to be downloaded. Fetching php56-zlib-5.6.22.txz: .. done Fetching php56-xmlwriter-5.6.22.txz: .. done Fetching php56-xmlreader-5.6.22.txz: .. done Fetching php56-xml-5.6.22.txz: .. done Fetching php56-tokenizer-5.6.22.txz: . done Fetching php56-sysvshm-5.6.22.txz: . done Fetching php56-sysvsem-5.6.22.txz: . done Fetching php56-sysvmsg-5.6.22.txz: . done Fetching php56-sqlite3-5.6.22.txz: .. done Fetching php56-sockets-5.6.22.txz: .... done Fetching php56-simplexml-5.6.22.txz: ... done Fetching php56-shmop-5.6.22.txz: . done Fetching php56-session-5.6.22.txz: ... done Fetching php56-readline-5.6.22.txz: .. done Fetching php56-posix-5.6.22.txz: . done Fetching php56-pdo_sqlite-5.6.22.txz: .. done Fetching php56-pdo-5.6.22.txz: ..... done Fetching php56-pcntl-5.6.22.txz: .. done Fetching php56-openssl-5.6.22.txz: ..... done Fetching php56-opcache-5.6.22.txz: ...... done Fetching php56-mcrypt-5.6.22.txz: .. done Fetching php56-mbstring-5.6.22.txz: .......... done Fetching php56-ldap-5.6.22.txz: .. done Fetching php56-json-5.6.22.txz: .. done Fetching php56-hash-5.6.22.txz: .......... done Fetching php56-gettext-5.6.22.txz: . done Fetching php56-filter-5.6.22.txz: .. done Fetching php56-dom-5.6.22.txz: ..... done Fetching php56-curl-5.6.22.txz: ... done Fetching php56-ctype-5.6.22.txz: . done Fetching php56-bz2-5.6.22.txz: .. done Fetching php56-bcmath-5.6.22.txz: .. done Fetching php56-5.6.22.txz: .......... done Fetching pfSense-rc-2.3.1_5.txz: . done Fetching pfSense-kernel-pfSense-2.3.1_5.txz: .......... done Fetching pfSense-default-config-2.3.1_5.txz: . done Fetching pfSense-base-2.3.1_5.txz: .......... done Fetching pfSense-Status_Monitoring-1.4.2_1.txz: .. done Fetching pfSense-2.3.1_5.txz: . done Fetching ntp-4.2.8p8.txz: .......... done Fetching expat-2.1.1_1.txz: .......... done Checking integrity... done (0 conflicting) >>> Upgrading pfSense kernel... Updating pfSense-core repository catalogue... pfSense-core repository is up-to-date. Updating pfSense repository catalogue... pfSense repository is up-to-date. All repositories are up-to-date. Checking integrity... done (0 conflicting) The following 2 package(s) will be affected (of 0 checked): Installed packages to be UPGRADED: pfSense-kernel-pfSense: 2.3.1 -> 2.3.1_5 [pfSense-core] pfSense-rc: 2.3.1 -> 2.3.1_5 [pfSense-core] [1/2] Upgrading pfSense-rc from 2.3.1 to 2.3.1_5... [1/2] Extracting pfSense-rc-2.3.1_5: .... done [2/2] Upgrading pfSense-kernel-pfSense from 2.3.1 to 2.3.1_5... ===> Keeping a copy of current kernel in /boot/kernel.old [2/2] Extracting pfSense-kernel-pfSense-2.3.1_5: .......... done Upgrade is complete. Rebooting in 10 seconds. >>> Locking package pfSense-kernel-pfSense... done. >>> Upgrading necessary packages... Checking for upgrades (40 candidates): .......... done Processing candidates (40 candidates): ........ pfSense-kernel-pfSense-2.3.1_5 is locked and may not be modified Processing candidates (40 candidates)..... done Checking integrity... done (0 conflicting) The following 39 package(s) will be affected (of 0 checked): Installed packages to be UPGRADED: php56-zlib: 5.6.21 -> 5.6.22 [pfSense] php56-xmlwriter: 5.6.21 -> 5.6.22 [pfSense] php56-xmlreader: 5.6.21 -> 5.6.22 [pfSense] php56-xml: 5.6.21 -> 5.6.22 [pfSense] php56-tokenizer: 5.6.21 -> 5.6.22 [pfSense] php56-sysvshm: 5.6.21 -> 5.6.22 [pfSense] php56-sysvsem: 5.6.21 -> 5.6.22 [pfSense] php56-sysvmsg: 5.6.21 -> 5.6.22 [pfSense] php56-sqlite3: 5.6.21 -> 5.6.22 [pfSense] php56-sockets: 5.6.21 -> 5.6.22 [pfSense] php56-simplexml: 5.6.21 -> 5.6.22 [pfSense] php56-shmop: 5.6.21 -> 5.6.22 [pfSense] php56-session: 5.6.21 -> 5.6.22 [pfSense] php56-readline: 5.6.21 -> 5.6.22 [pfSense] php56-posix: 5.6.21 -> 5.6.22 [pfSense] php56-pdo_sqlite: 5.6.21 -> 5.6.22 [pfSense] php56-pdo: 5.6.21 -> 5.6.22 [pfSense] php56-pcntl: 5.6.21 -> 5.6.22 [pfSense] php56-openssl: 5.6.21 -> 5.6.22 [pfSense] php56-opcache: 5.6.21 -> 5.6.22 [pfSense] php56-mcrypt: 5.6.21 -> 5.6.22 [pfSense] php56-mbstring: 5.6.21 -> 5.6.22 [pfSense] php56-ldap: 5.6.21 -> 5.6.22 [pfSense] php56-json: 5.6.21 -> 5.6.22 [pfSense] php56-hash: 5.6.21 -> 5.6.22 [pfSense] php56-gettext: 5.6.21 -> 5.6.22 [pfSense] php56-filter: 5.6.21 -> 5.6.22 [pfSense] php56-dom: 5.6.21 -> 5.6.22 [pfSense] php56-curl: 5.6.21 -> 5.6.22 [pfSense] php56-ctype: 5.6.21 -> 5.6.22 [pfSense] php56-bz2: 5.6.21 -> 5.6.22 [pfSense] php56-bcmath: 5.6.21 -> 5.6.22 [pfSense] php56: 5.6.21 -> 5.6.22 [pfSense] pfSense-default-config: 2.3.1 -> 2.3.1_5 [pfSense-core] pfSense-base: 2.3.1 -> 2.3.1_5 [pfSense-core] pfSense-Status_Monitoring: 1.3_1 -> 1.4.2_1 [pfSense] pfSense: 2.3.1 -> 2.3.1_5 [pfSense] ntp: 4.2.8p7 -> 4.2.8p8 [pfSense] expat: 2.1.0_3 -> 2.1.1_1 [pfSense] [1/39] Upgrading expat from 2.1.0_3 to 2.1.1_1... [1/39] Extracting expat-2.1.1_1: .......... done [2/39] Upgrading php56 from 5.6.21 to 5.6.22... [2/39] Extracting php56-5.6.22: .......... done [3/39] Upgrading php56-session from 5.6.21 to 5.6.22... [3/39] Extracting php56-session-5.6.22: ......... done [4/39] Upgrading php56-pdo from 5.6.21 to 5.6.22... [4/39] Extracting php56-pdo-5.6.22: ......... done [5/39] Upgrading php56-dom from 5.6.21 to 5.6.22... [5/39] Extracting php56-dom-5.6.22: .......... done [6/39] Upgrading php56-zlib from 5.6.21 to 5.6.22... [6/39] Extracting php56-zlib-5.6.22: ...... done [7/39] Upgrading php56-xmlwriter from 5.6.21 to 5.6.22... [7/39] Extracting php56-xmlwriter-5.6.22: ...... done [8/39] Upgrading php56-xmlreader from 5.6.21 to 5.6.22... [8/39] Extracting php56-xmlreader-5.6.22: ...... done [9/39] Upgrading php56-xml from 5.6.21 to 5.6.22... [9/39] Extracting php56-xml-5.6.22: ....... done [10/39] Upgrading php56-tokenizer from 5.6.21 to 5.6.22... [10/39] Extracting php56-tokenizer-5.6.22: ...... done [11/39] Upgrading php56-sysvshm from 5.6.21 to 5.6.22... [11/39] Extracting php56-sysvshm-5.6.22: ...... done [12/39] Upgrading php56-sysvsem from 5.6.21 to 5.6.22... [12/39] Extracting php56-sysvsem-5.6.22: ...... done [13/39] Upgrading php56-sysvmsg from 5.6.21 to 5.6.22... [13/39] Extracting php56-sysvmsg-5.6.22: ...... done [14/39] Upgrading php56-sqlite3 from 5.6.21 to 5.6.22... [14/39] Extracting php56-sqlite3-5.6.22: ....... done [15/39] Upgrading php56-sockets from 5.6.21 to 5.6.22... [15/39] Extracting php56-sockets-5.6.22: .......... done [16/39] Upgrading php56-simplexml from 5.6.21 to 5.6.22... [16/39] Extracting php56-simplexml-5.6.22: ........ done [17/39] Upgrading php56-shmop from 5.6.21 to 5.6.22... [17/39] Extracting php56-shmop-5.6.22: ...... done [18/39] Upgrading php56-readline from 5.6.21 to 5.6.22... [18/39] Extracting php56-readline-5.6.22: ....... done [19/39] Upgrading php56-posix from 5.6.21 to 5.6.22... [19/39] Extracting php56-posix-5.6.22: ...... done [20/39] Upgrading php56-pdo_sqlite from 5.6.21 to 5.6.22... [20/39] Extracting php56-pdo_sqlite-5.6.22: ....... done [21/39] Upgrading php56-pcntl from 5.6.21 to 5.6.22... [21/39] Extracting php56-pcntl-5.6.22: ....... done [22/39] Upgrading php56-openssl from 5.6.21 to 5.6.22... [22/39] Extracting php56-openssl-5.6.22: ...... done [23/39] Upgrading php56-opcache from 5.6.21 to 5.6.22... [23/39] Extracting php56-opcache-5.6.22: .......... done [24/39] Upgrading php56-mcrypt from 5.6.21 to 5.6.22... [24/39] Extracting php56-mcrypt-5.6.22: ....... done [25/39] Upgrading php56-mbstring from 5.6.21 to 5.6.22... [25/39] Extracting php56-mbstring-5.6.22: .......... done [26/39] Upgrading php56-ldap from 5.6.21 to 5.6.22... [26/39] Extracting php56-ldap-5.6.22: ...... done [27/39] Upgrading php56-json from 5.6.21 to 5.6.22... [27/39] Extracting php56-json-5.6.22: ....... done [28/39] Upgrading php56-hash from 5.6.21 to 5.6.22... [28/39] Extracting php56-hash-5.6.22: .......... done [29/39] Upgrading php56-gettext from 5.6.21 to 5.6.22... [29/39] Extracting php56-gettext-5.6.22: ...... done [30/39] Upgrading php56-filter from 5.6.21 to 5.6.22... [30/39] Extracting php56-filter-5.6.22: ....... done [31/39] Upgrading php56-curl from 5.6.21 to 5.6.22... [31/39] Extracting php56-curl-5.6.22: ...... done [32/39] Upgrading php56-ctype from 5.6.21 to 5.6.22... [32/39] Extracting php56-ctype-5.6.22: ...... done [33/39] Upgrading php56-bz2 from 5.6.21 to 5.6.22... [33/39] Extracting php56-bz2-5.6.22: ...... done [34/39] Upgrading php56-bcmath from 5.6.21 to 5.6.22... [34/39] Extracting php56-bcmath-5.6.22: .......... done [35/39] Upgrading pfSense-Status_Monitoring from 1.3_1 to 1.4.2_1... [35/39] Extracting pfSense-Status_Monitoring-1.4.2_1: ....... done [36/39] Upgrading ntp from 4.2.8p7 to 4.2.8p8... [36/39] Extracting ntp-4.2.8p8: .......... done [37/39] Upgrading pfSense-default-config from 2.3.1 to 2.3.1_5... [37/39] Extracting pfSense-default-config-2.3.1_5: .... done [38/39] Upgrading pfSense-base from 2.3.1 to 2.3.1_5... ===> Keeping a copy of current version mtree [38/39] Extracting pfSense-base-2.3.1_5: ..... done ===> Removing schg flag from base files ===> Extracting new base tarball ===> Removing static obsoleted files [39/39] Upgrading pfSense from 2.3.1 to 2.3.1_5... [39/39] Extracting pfSense-2.3.1_5: .... done >>> Removing unnecessary packages... done. >>> Cleanup pkg cache... done. -
I found this log on /var/log/nginx-error.log
2016/07/10 13:35:56 [emerg] 17921#0: BIO_new_file("/etc/dh-parameters.4096") failed (SSL: error:02001002:system library:fopen:No such file or directory:fopen('/etc/dh-parameters.4096','r') error:2006D080:BIO routines:BIO_new_file:no such file) 2016/07/10 14:32:05 [emerg] 13612#0: BIO_new_file("/etc/dh-parameters.4096") failed (SSL: error:02001002:system library:fopen:No such file or directory:fopen('/etc/dh-parameters.4096','r') error:2006D080:BIO routines:BIO_new_file:no such file) 2016/07/10 15:10:29 [emerg] 15870#0: BIO_new_file("/etc/dh-parameters.4096") failed (SSL: error:02001002:system library:fopen:No such file or directory:fopen('/etc/dh-parameters.4096','r') error:2006D080:BIO routines:BIO_new_file:no such file) 2016/07/10 16:36:41 [emerg] 16135#0: BIO_new_file("/etc/dh-parameters.4096") failed (SSL: error:02001002:system library:fopen:No such file or directory:fopen('/etc/dh-parameters.4096','r') error:2006D080:BIO routines:BIO_new_file:no such file) 2016/07/10 20:47:17 [emerg] 56459#0: BIO_new_file("/etc/dh-parameters.4096") failed (SSL: error:02001002:system library:fopen:No such file or directory:fopen('/etc/dh-parameters.4096','r') error:2006D080:BIO routines:BIO_new_file:no such file)any idea how to fix it?
-
Yeah. Try this:
/usr/bin/openssl dhparam 1024 > /etc/dh-parameters.1024
/usr/bin/openssl dhparam 2048 > /etc/dh-parameters.2048
/usr/bin/openssl dhparam 4096 > /etc/dh-parameters.4096After that you might want to regenerate a new certificate for the webGUI just to make sure it's current:
Console option 11, Developer shell
then: playback generateguicert
then: exitIf that gets you back into the webgui you probably want to go to System > Certificate manager, Certificates tab and delete the old webConfigurator default certificate.
1.2.3 was a while ago. I am not sure of the exact actions taken in the upgrade from that but there has been considerable movement in openssl, etc since then.
-
Amazing!!! it work
I can now access the GUI
Thank you :)
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.