Unable to check for updates
-
Yes, My pfsense (2.5) couldn't be updated today!
-
@dn1353 I see the same but deleting blocks in Suricata makes it visible again.
-
Looks like a cert problem.
[2.5.0-RELEASE][root@fw.workgroup]/root: pkg upgrade Updating pfSense-core repository catalogue... Certificate verification failed for /CN=*.netgate.com 34375704576:error:1416F086:SSL routines:tls_process_server_certificate:certifica te verify failed:/build/ce-crossbuild-250/sources/FreeBSD-src/crypto/openssl/ssl /statem/statem_clnt.c:1915: Certificate verification failed for /CN=*.netgate.com 34375704576:error:1416F086:SSL routines:tls_process_server_certificate:certifica te verify failed:/build/ce-crossbuild-250/sources/FreeBSD-src/crypto/openssl/ssl /statem/statem_clnt.c:1915: Certificate verification failed for /CN=*.netgate.com 34375704576:error:1416F086:SSL routines:tls_process_server_certificate:certifica te verify failed:/build/ce-crossbuild-250/sources/FreeBSD-src/crypto/openssl/ssl /statem/statem_clnt.c:1915: Certificate verification failed for /CN=*.netgate.com 34375704576:error:1416F086:SSL routines:tls_process_server_certificate:certifica te verify failed:/build/ce-crossbuild-250/sources/FreeBSD-src/crypto/openssl/ssl /statem/statem_clnt.c:1915:
-
it happens sometimes, they probably need to restart the services after updating the certificate.?
maybe @stephenw10 or @jimp can take a look at this -
see also https://forum.netgate.com/topic/162340/error-updating-repositories-error-1416f086-ssl-routines/3
tried:
- pkg update (cli) -> failed
- web interface update -> failed
- this troubleshooting - curl result = 60 (what does this mean?)
- disable suricata -> failed (no alerts in suricata indicating a problem)
- reboot -> failed
- checked firewall logs for suspicious blocked IPs -> no result
edit
the curl error appears to be a certificate error, see here.
How do we fix this, if it's even the user that needs to fix it. To many users are having the same problem, Netgate problem???
/edit -
@jpgpi250
yes, you need to wait -
@cool_corona said in Unable to check for updates:
Suricata
Hi,
I have no Suricata package installed, But I still have a problem and pfsense can not to be updated! -
@dn1353 said in Unable to check for updates:
I have no Suricata package installed, But I still have a problem and pfsense can not to be updated!
But can you read?
-
@bob-dig
Hi, I think I have to wait! -
Fixed. Thanks, Netgate!
-
that was fast, working here again too, thanks!
-
@dn1353
Fixed , Thank you -
Didn't saw anything new ....
-
@gertjan
what did you expect?