Certificate error when installing packages on 21.05.1

jurijc

Hi all

I've been having issues with installing any packages on pfsense 21.05.1, I'm getting a certificate error:

[21.05.1-RELEASE][admin@pfSense.mangal.local]/root: pkg update
Updating pfSense-core repository catalogue...
1078788096:error:141F0006:SSL routines:tls_construct_cert_verify:EVP lib:/build/plus-crossbuild-2105_1-aarch64/sources/FreeBSD-src/crypto/openssl/ssl/statem/statem_lib.c:283:
Certificate verification failed for /C=US/ST=Texas/L=Austin/O=Rubicon Communications, LLC (Netgate)/CN=repo01.netgate.com
1078788096:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/build/plus-crossbuild-2105_1-aarch64/sources/FreeBSD-src/crypto/openssl/ssl/statem/statem_clnt.c:1915:
Child process pid=44037 terminated abnormally: Segmentation fault

If I run the ssllabs.org server check against repo01.netgate.com it gives me that the certificate has a name mismatch because it is issued to *.pfsense.org and not *.netgate.com.

Any ideas how to fix this or just wait for Netgate to fix the certificate? It's like this for at least a week...

BR, Jurij

jimp

That isn't a server problem.

Child process pid=44037 terminated abnormally: Segmentation fault

That is something typically seen on an SG-1100 if the crypto chip ends up in a problematic state. To get around that you need a full power cycle (shut down, then remove power, then plug power back in).

jurijc

@jimp
Thanks, it is indeed a SG-1100 appliance and a soft restart didn’t help. I will try a complete power cycle as instructed tomorrow when I have phisical access to the site. I’ll let you know!

jurijc

@jimp
It worked, many thanks!