Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    PfSense 2.3.2 manual update missing?

    Scheduled Pinned Locked Moved Problems Installing or Upgrading pfSense Software
    17 Posts 11 Posters 12.9k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • L
      laped
      last edited by

      @heper:

      2.3 was the last one you could update manually.

      Sounds like a dealbreaker to me

      1 Reply Last reply Reply Quote 0
      • G
        generious
        last edited by

        What a pain!

        2.3.1 had a problem here in the UK with pppoe connections and apinger.
        Which does not seem to be the case with 2.3.2 as this is working fine ( the exact same config )

        One of our remote sites can only be updated manual which now means going out onsite and re-installing it from scratch and restoring from backup.
        Why on earth was the manual update method removed????

        1 Reply Last reply Reply Quote 0
        • R
          robi
          last edited by

          This is a problem indeed.

          1 Reply Last reply Reply Quote 0
          • T
            timberwolf1
            last edited by

            ….same problem here. Hope this function will be reimplemented.....

            1 Reply Last reply Reply Quote 0
            • w0wW
              w0w
              last edited by

              Current online update system is not so bulletproof as offline upgrade can be, so we need it back or more reliable online update than current system that can be failed due server error or whatever it was. Argumentation that you can always install fresh and restore original config does not apply on remote appliance.

              1 Reply Last reply Reply Quote 0
              • jimpJ
                jimp Rebel Alliance Developer Netgate
                last edited by

                @w0w:

                Current online update system is not so bulletproof as offline upgrade can be, so we need it back or more reliable online update than current system that can be failed due server error or whatever it was. Argumentation that you can always install fresh and restore original config does not apply on remote appliance.

                If an appliance has connectivity, you can do an online upgrade. If the device is not remote, you can reinstall.

                There is no longer a "tarball" style single file that could possibly be used for an effective upgrade.

                If you have a complicated network with no external connectivity and multiple units, then perhaps you could look into setting up a local pkg mirror.

                There may yet be a way to make an offline upgrade by having a connected box fetch the updated pkg files and then copying them over to a new box and installing manually, but that is likely to result in problems until/unless we find a way to do that safely.

                Remember: Upvote with the đź‘Ť button for any user/post you find to be helpful, informative, or deserving of recognition!

                Need help fast? Netgate Global Support!

                Do not Chat/PM for help!

                1 Reply Last reply Reply Quote 0
                • R
                  robi
                  last edited by

                  @jimp:

                  If you have a complicated network with no external connectivity and multiple units, then perhaps you could look into setting up a local pkg mirror.

                  Any chance to get some instructions on how to do that? I'm really interested, because I maintain lots of pfSense instances which have limited internet access during installs/upgrades, or don't have internet access at all.

                  1 Reply Last reply Reply Quote 0
                  • J
                    Juve
                    last edited by

                    This is a huge step back.
                    pfSense is used into higly critical internal network with no Internet connectivity (at places where Internet even does not exists yet :))
                    The only mean of upgrade I see is full reinstall with backup import….

                    This is sad.

                    1 Reply Last reply Reply Quote 0
                    • J
                      jwt Netgate
                      last edited by

                      @Juve:

                      This is a huge step back.
                      pfSense is used into higly critical internal network with no Internet connectivity (at places where Internet even does not exists yet :))
                      The only mean of upgrade I see is full reinstall with backup import….

                      This is sad.

                      pfSense can not be all things to all people.  There is no formal list of requirements that the software has to meet.  Instead it is open source, so you could fork it to make it suit your needs.  (You just have to comply with the terms of the license.)

                      That all said, I don't see any reason why you couldn't figure out how to get the packages onto some media (USB key), move them into place, and update from there.  Seems like a day or two of hacking to build a tool.

                      1 Reply Last reply Reply Quote 0
                      • rbgargaR
                        rbgarga Developer Netgate Administrator
                        last edited by

                        @Juve:

                        This is a huge step back.
                        pfSense is used into higly critical internal network with no Internet connectivity (at places where Internet even does not exists yet :))
                        The only mean of upgrade I see is full reinstall with backup import….

                        This is sad.

                        Lets say you want to upgrade 2.3.2 from LAN, you would need to mirror 2 repositories configured on /usr/local/etc/pkg/repos/pfSense.conf:

                        http://pkg.pfsense.org/pfSense_v2_3_2_amd64-pfSense_v2_3_2/
                        http://pkg.pfsense.org/pfSense_v2_3_2_amd64-core/

                        To a local webserver, and then add a host override in 'DNS Resolver' pointing pkg.pfsense.org to the local address.

                        Renato Botelho

                        1 Reply Last reply Reply Quote 0
                        • J
                          Juve
                          last edited by

                          Thank you for your replies, especially that one : " Instead it is open source, so you could fork it to make it suit your needs." 
                          It makes me think you've been "offended" by the message, don't know why.
                          I've been here for a long time, and never thought making a fork would be useful for the project.Best is to share feedback and views…
                          By the way, to make things clear, I just find sad to remove something that has been working fine (at least for me, on hundreds of setups) for 11+ years, in an easy upgrade process of download/upload.
                          Have a great day.

                          1 Reply Last reply Reply Quote 0
                          • K
                            kjoe
                            last edited by

                            @Renato:

                            @Juve:

                            This is a huge step back.
                            pfSense is used into higly critical internal network with no Internet connectivity (at places where Internet even does not exists yet :))
                            The only mean of upgrade I see is full reinstall with backup import….

                            This is sad.

                            Lets say you want to upgrade 2.3.2 from LAN, you would need to mirror 2 repositories configured on /usr/local/etc/pkg/repos/pfSense.conf:

                            http://pkg.pfsense.org/pfSense_v2_3_2_amd64-pfSense_v2_3_2/
                            http://pkg.pfsense.org/pfSense_v2_3_2_amd64-core/

                            To a local webserver, and then add a host override in 'DNS Resolver' pointing pkg.pfsense.org to the local address.

                            is just a problems here to update how do you bypass certificate check

                            1 Reply Last reply Reply Quote 0
                            • rbgargaR
                              rbgarga Developer Netgate Administrator
                              last edited by

                              @kjoe:

                              @Renato:

                              @Juve:

                              This is a huge step back.
                              pfSense is used into higly critical internal network with no Internet connectivity (at places where Internet even does not exists yet :))
                              The only mean of upgrade I see is full reinstall with backup import….

                              This is sad.

                              Lets say you want to upgrade 2.3.2 from LAN, you would need to mirror 2 repositories configured on /usr/local/etc/pkg/repos/pfSense.conf:

                              http://pkg.pfsense.org/pfSense_v2_3_2_amd64-pfSense_v2_3_2/
                              http://pkg.pfsense.org/pfSense_v2_3_2_amd64-core/

                              To a local webserver, and then add a host override in 'DNS Resolver' pointing pkg.pfsense.org to the local address.

                              is just a problems here to update how do you bypass certificate check

                              Using http instead of https

                              Renato Botelho

                              1 Reply Last reply Reply Quote 0
                              • K
                                kjoe
                                last edited by

                                @Renato:

                                @kjoe:

                                @Renato:

                                @Juve:

                                This is a huge step back.
                                pfSense is used into higly critical internal network with no Internet connectivity (at places where Internet even does not exists yet :))
                                The only mean of upgrade I see is full reinstall with backup import….

                                This is sad.

                                Lets say you want to upgrade 2.3.2 from LAN, you would need to mirror 2 repositories configured on /usr/local/etc/pkg/repos/pfSense.conf:

                                http://pkg.pfsense.org/pfSense_v2_3_2_amd64-pfSense_v2_3_2/
                                http://pkg.pfsense.org/pfSense_v2_3_2_amd64-core/

                                To a local webserver, and then add a host override in 'DNS Resolver' pointing pkg.pfsense.org to the local address.

                                is just a problems here to update how do you bypass certificate check

                                Using http instead of https

                                that's the problem whe it check ssl certificate from server it thow a warning because the server certificate is another thing diferent from pkg.pfsense.org is my server name. that make a conflict with ssl check so you can not install update.
                                here the log from update

                                Upgrading pfSense-repo… done.
                                Updating repositories metadata...
                                Updating pfSense-core repository catalogue...
                                Repository pfSense-core has a wrong packagesite, need to re-create database
                                pkg: https://pkg.pfsense.org/pfSense_v2_3_2_amd64-core/meta.txz: Authentication error
                                repository pfSense-core has no meta file, using default settings
                                pkg: https://pkg.pfsense.org/pfSense_v2_3_2_amd64-core/packagesite.txz: Authentication error
                                Unable to update repository pfSense-core
                                Updating pfSense repository catalogue...
                                Repository pfSense has a wrong packagesite, need to re-create database
                                pkg: https://pkg.pfsense.org/pfSense_v2_3_2_amd64-pfSense_v2_3_2/meta.txz: Authentication error
                                repository pfSense has no meta file, using default settings
                                pkg: https://pkg.pfsense.org/pfSense_v2_3_2_amd64-pfSense_v2_3_2/packagesite.txz: Authentication error
                                Unable to update repository pfSense
                                Failed
                                the after that i got this in system update
                                The following input errors were detected:

                                ERROR: Error trying to get packages list. Aborting...
                                    pkg: Repository pfSense-core missing. 'pkg update' required pkg: https://pkg.pfsense.org/pfSense_v2_3_2_amd64-core/meta.txz: Authentication error pkg: https://pkg.pfsense.org/pfSense_v2_3_2_amd64-core/packagesite.txz: Authentication error pkg: https://pkg.pfsense.org/pfSense_v2_3_2_amd64-pfSense_v2_3_2/meta.txz: Authentication error pkg: https://pkg.pfsense.org/pfSense_v2_3_2_amd64-pfSense_v2_3_2/packagesite.txz: Authentication error pkg: Repository pfSense-core cannot be opened. 'pkg update' required pkg: Repository pfSense cannot be opened. 'pkg update' required
                                    ERROR: Error trying to get packages list. Aborting...
                                    pkg: Repository pfSense-core missing. 'pkg update' required pkg: https://pkg.pfsense.org/pfSense_v2_3_2_amd64-core/meta.txz: Authentication error pkg: https://pkg.pfsense.org/pfSense_v2_3_2_amd64-core/packagesite.txz: Authentication error pkg: https://pkg.pfsense.org/pfSense_v2_3_2_amd64-pfSense_v2_3_2/meta.txz: Authentication error pkg: https://pkg.pfsense.org/pfSense_v2_3_2_amd64-pfSense_v2_3_2/packagesite.txz: Authentication error pkg: Repository pfSense-core cannot be opened. 'pkg update' required pkg: Repository pfSense cannot be opened. 'pkg update' required

                                Updating repositories metadata...
                                Updating pfSense-core repository catalogue...
                                Certificate verification failed for /CN=sdc.conjusol.cu
                                34401135112:error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed:/builder/pfsense-230/tmp/FreeBSD-src/secure/lib/libssl/../../../crypto/openssl/ssl/s3_clnt.c:1185:
                                Certificate verification failed for /CN=sdc.conjusol.cu
                                34401135112:error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed:/builder/pfsense-230/tmp/FreeBSD-src/secure/lib/libssl/../../../crypto/openssl/ssl/s3_clnt.c:1185:
                                Certificate verification failed for /CN=sdc.conjusol.cu
                                34401135112:error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed:/builder/pfsense-230/tmp/FreeBSD-src/secure/lib/libssl/../../../crypto/openssl/ssl/s3_clnt.c:1185:
                                pkg: https://pkg.pfsense.org/pfSense_v2_3_2_amd64-core/meta.txz: Authentication error
                                repository pfSense-core has no meta file, using default settings
                                Certificate verification failed for /CN=sdc.conjusol.cu
                                34401135112:error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed:/builder/pfsense-230/tmp/FreeBSD-src/secure/lib/libssl/../../../crypto/openssl/ssl/s3_clnt.c:1185:
                                Certificate verification failed for /CN=sdc.conjusol.cu
                                34401135112:error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed:/builder/pfsense-230/tmp/FreeBSD-src/secure/lib/libssl/../../../crypto/openssl/ssl/s3_clnt.c:1185:
                                Certificate verification failed for /CN=sdc.conjusol.cu
                                34401135112:error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed:/builder/pfsense-230/tmp/FreeBSD-src/secure/lib/libssl/../../../crypto/openssl/ssl/s3_clnt.c:1185:
                                pkg: https://pkg.pfsense.org/pfSense_v2_3_2_amd64-core/packagesite.txz: Authentication error
                                Unable to update repository pfSense-core
                                Updating pfSense repository catalogue...
                                Certificate verification failed for /CN=sdc.conjusol.cu
                                34401135112:error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed:/builder/pfsense-230/tmp/FreeBSD-src/secure/lib/libssl/../../../crypto/openssl/ssl/s3_clnt.c:1185:
                                Certificate verification failed for /CN=sdc.conjusol.cu
                                34401135112:error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed:/builder/pfsense-230/tmp/FreeBSD-src/secure/lib/libssl/../../../crypto/openssl/ssl/s3_clnt.c:1185:
                                Certificate verification failed for /CN=sdc.conjusol.cu
                                34401135112:error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed:/builder/pfsense-230/tmp/FreeBSD-src/secure/lib/libssl/../../../crypto/openssl/ssl/s3_clnt.c:1185:
                                pkg: https://pkg.pfsense.org/pfSense_v2_3_2_amd64-pfSense_v2_3_2/meta.txz: Authentication error
                                repository pfSense has no meta file, using default settings
                                Certificate verification failed for /CN=sdc.conjusol.cu
                                34401135112:error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed:/builder/pfsense-230/tmp/FreeBSD-src/secure/lib/libssl/../../../crypto/openssl/ssl/s3_clnt.c:1185:
                                Certificate verification failed for /CN=sdc.conjusol.cu
                                34401135112:error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed:/builder/pfsense-230/tmp/FreeBSD-src/secure/lib/libssl/../../../crypto/openssl/ssl/s3_clnt.c:1185:
                                Certificate verification failed for /CN=sdc.conjusol.cu
                                34401135112:error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed:/builder/pfsense-230/tmp/FreeBSD-src/secure/lib/libssl/../../../crypto/openssl/ssl/s3_clnt.c:1185:
                                pkg: https://pkg.pfsense.org/pfSense_v2_3_2_amd64-pfSense_v2_3_2/packagesite.txz: Authentication error
                                here is the logs with certificate error

                                1 Reply Last reply Reply Quote 0
                                • K
                                  kjoe
                                  last edited by

                                  @kjoe:

                                  @Renato:

                                  @kjoe:

                                  @Renato:

                                  @Juve:

                                  This is a huge step back.
                                  pfSense is used into higly critical internal network with no Internet connectivity (at places where Internet even does not exists yet :))
                                  The only mean of upgrade I see is full reinstall with backup import….

                                  This is sad.

                                  Lets say you want to upgrade 2.3.2 from LAN, you would need to mirror 2 repositories configured on /usr/local/etc/pkg/repos/pfSense.conf:

                                  http://pkg.pfsense.org/pfSense_v2_3_2_amd64-pfSense_v2_3_2/
                                  http://pkg.pfsense.org/pfSense_v2_3_2_amd64-core/

                                  To a local webserver, and then add a host override in 'DNS Resolver' pointing pkg.pfsense.org to the local address.

                                  is just a problems here to update how do you bypass certificate check

                                  Using http instead of https

                                  that's the problem whe it check ssl certificate from server it thow a warning because the server certificate is another thing diferent from pkg.pfsense.org is my server name. that make a conflict with ssl check so you can not install update.
                                  here the log from update

                                  Upgrading pfSense-repo… done.
                                  Updating repositories metadata...
                                  Updating pfSense-core repository catalogue...
                                  Repository pfSense-core has a wrong packagesite, need to re-create database
                                  pkg: https://pkg.pfsense.org/pfSense_v2_3_2_amd64-core/meta.txz: Authentication error
                                  repository pfSense-core has no meta file, using default settings
                                  pkg: https://pkg.pfsense.org/pfSense_v2_3_2_amd64-core/packagesite.txz: Authentication error
                                  Unable to update repository pfSense-core
                                  Updating pfSense repository catalogue...
                                  Repository pfSense has a wrong packagesite, need to re-create database
                                  pkg: https://pkg.pfsense.org/pfSense_v2_3_2_amd64-pfSense_v2_3_2/meta.txz: Authentication error
                                  repository pfSense has no meta file, using default settings
                                  pkg: https://pkg.pfsense.org/pfSense_v2_3_2_amd64-pfSense_v2_3_2/packagesite.txz: Authentication error
                                  Unable to update repository pfSense
                                  Failed
                                  the after that i got this in system update
                                  The following input errors were detected:

                                  ERROR: Error trying to get packages list. Aborting...
                                      pkg: Repository pfSense-core missing. 'pkg update' required pkg: https://pkg.pfsense.org/pfSense_v2_3_2_amd64-core/meta.txz: Authentication error pkg: https://pkg.pfsense.org/pfSense_v2_3_2_amd64-core/packagesite.txz: Authentication error pkg: https://pkg.pfsense.org/pfSense_v2_3_2_amd64-pfSense_v2_3_2/meta.txz: Authentication error pkg: https://pkg.pfsense.org/pfSense_v2_3_2_amd64-pfSense_v2_3_2/packagesite.txz: Authentication error pkg: Repository pfSense-core cannot be opened. 'pkg update' required pkg: Repository pfSense cannot be opened. 'pkg update' required
                                      ERROR: Error trying to get packages list. Aborting...
                                      pkg: Repository pfSense-core missing. 'pkg update' required pkg: https://pkg.pfsense.org/pfSense_v2_3_2_amd64-core/meta.txz: Authentication error pkg: https://pkg.pfsense.org/pfSense_v2_3_2_amd64-core/packagesite.txz: Authentication error pkg: https://pkg.pfsense.org/pfSense_v2_3_2_amd64-pfSense_v2_3_2/meta.txz: Authentication error pkg: https://pkg.pfsense.org/pfSense_v2_3_2_amd64-pfSense_v2_3_2/packagesite.txz: Authentication error pkg: Repository pfSense-core cannot be opened. 'pkg update' required pkg: Repository pfSense cannot be opened. 'pkg update' required

                                  Updating repositories metadata...
                                  Updating pfSense-core repository catalogue...
                                  Certificate verification failed for /CN=sdc.conjusol.cu
                                  34401135112:error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed:/builder/pfsense-230/tmp/FreeBSD-src/secure/lib/libssl/../../../crypto/openssl/ssl/s3_clnt.c:1185:
                                  Certificate verification failed for /CN=sdc.conjusol.cu
                                  34401135112:error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed:/builder/pfsense-230/tmp/FreeBSD-src/secure/lib/libssl/../../../crypto/openssl/ssl/s3_clnt.c:1185:
                                  Certificate verification failed for /CN=sdc.conjusol.cu
                                  34401135112:error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed:/builder/pfsense-230/tmp/FreeBSD-src/secure/lib/libssl/../../../crypto/openssl/ssl/s3_clnt.c:1185:
                                  pkg: https://pkg.pfsense.org/pfSense_v2_3_2_amd64-core/meta.txz: Authentication error
                                  repository pfSense-core has no meta file, using default settings
                                  Certificate verification failed for /CN=sdc.conjusol.cu
                                  34401135112:error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed:/builder/pfsense-230/tmp/FreeBSD-src/secure/lib/libssl/../../../crypto/openssl/ssl/s3_clnt.c:1185:
                                  Certificate verification failed for /CN=sdc.conjusol.cu
                                  34401135112:error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed:/builder/pfsense-230/tmp/FreeBSD-src/secure/lib/libssl/../../../crypto/openssl/ssl/s3_clnt.c:1185:
                                  Certificate verification failed for /CN=sdc.conjusol.cu
                                  34401135112:error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed:/builder/pfsense-230/tmp/FreeBSD-src/secure/lib/libssl/../../../crypto/openssl/ssl/s3_clnt.c:1185:
                                  pkg: https://pkg.pfsense.org/pfSense_v2_3_2_amd64-core/packagesite.txz: Authentication error
                                  Unable to update repository pfSense-core
                                  Updating pfSense repository catalogue...
                                  Certificate verification failed for /CN=sdc.conjusol.cu
                                  34401135112:error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed:/builder/pfsense-230/tmp/FreeBSD-src/secure/lib/libssl/../../../crypto/openssl/ssl/s3_clnt.c:1185:
                                  Certificate verification failed for /CN=sdc.conjusol.cu
                                  34401135112:error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed:/builder/pfsense-230/tmp/FreeBSD-src/secure/lib/libssl/../../../crypto/openssl/ssl/s3_clnt.c:1185:
                                  Certificate verification failed for /CN=sdc.conjusol.cu
                                  34401135112:error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed:/builder/pfsense-230/tmp/FreeBSD-src/secure/lib/libssl/../../../crypto/openssl/ssl/s3_clnt.c:1185:
                                  pkg: https://pkg.pfsense.org/pfSense_v2_3_2_amd64-pfSense_v2_3_2/meta.txz: Authentication error
                                  repository pfSense has no meta file, using default settings
                                  Certificate verification failed for /CN=sdc.conjusol.cu
                                  34401135112:error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed:/builder/pfsense-230/tmp/FreeBSD-src/secure/lib/libssl/../../../crypto/openssl/ssl/s3_clnt.c:1185:
                                  Certificate verification failed for /CN=sdc.conjusol.cu
                                  34401135112:error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed:/builder/pfsense-230/tmp/FreeBSD-src/secure/lib/libssl/../../../crypto/openssl/ssl/s3_clnt.c:1185:
                                  Certificate verification failed for /CN=sdc.conjusol.cu
                                  34401135112:error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed:/builder/pfsense-230/tmp/FreeBSD-src/secure/lib/libssl/../../../crypto/openssl/ssl/s3_clnt.c:1185:
                                  pkg: https://pkg.pfsense.org/pfSense_v2_3_2_amd64-pfSense_v2_3_2/packagesite.txz: Authentication error
                                  here is the logs with certificate error

                                  solved all this editing pfsense.conf repo in /usr/local/etc/pkg/repos setting as http local repo and is done

                                  1 Reply Last reply Reply Quote 0
                                  • First post
                                    Last post
                                  Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.