<![CDATA[SSL errors when attempting to upgrade from 2.3.2-RELEASE to 2.3.3_1]]>I'm having problems upgrading pfSense, both from the Web interface, and using the command line.

I've listed the output from the command line.

*** Welcome to pfSense 2.3.2-RELEASE (amd64 full-install) on prior-fw ***

WAN (wan)      -> bge0      -> v4: 192.168.254.1/24
LAN (lan)      -> em1        -> v4: 192.168.11.1/24
DMZ (opt1)      -> em0        -> v4: 192.168.66.1/24
WIFI (opt2)    -> sk0        -> v4: 192.168.99.1/24

  1. Logout (SSH only)                  9) pfTop
  2. Assign Interfaces                10) Filter Logs
  3. Set interface(s) IP address      11) Restart webConfigurator
  4. Reset webConfigurator password    12) PHP shell + pfSense tools
  5. Reset to factory defaults        13) Update from console
  6. Reboot system                    14) Disable Secure Shell (sshd)
  7. Halt system                      15) Restore recent configuration
  8. Ping host                        16) Restart PHP-FPM
  9. Shell

Enter an option: 13

Updating repositories metadata…
Updating pfSense-core repository catalogue...
pfSense-core repository is up-to-date.
Updating pfSense repository catalogue...
34401135112:error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad record mac:/builder/pfsense-232/tmp/FreeBSD-src/secure/lib/libssl/../../../crypto/openssl/ssl/s3_pkt.c:518:
pfSense repository is up-to-date.
All repositories are up-to-date.
34401135112:error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad record mac:/builder/pfsense-232/tmp/FreeBSD-src/secure/lib/libssl/../../../crypto/openssl/ssl/s3_pkt.c:518:
Upgrading pkg... failed.
*** Welcome to pfSense 2.3.2-RELEASE (amd64 full-install) on prior-fw ***

After reading other posts, I tried this:

[2.3.2-RELEASE][admin@whateverhostname]/root: pkg update; pkg upgrade pkg
Updating pfSense-core repository catalogue…
pfSense-core repository is up-to-date.
Updating pfSense repository catalogue...
pfSense repository is up-to-date.
All repositories are up-to-date.
Updating pfSense-core repository catalogue...
pfSense-core repository is up-to-date.
Updating pfSense repository catalogue...
pfSense repository is up-to-date.
All repositories are up-to-date.
New version of pkg detected; it needs to be installed first.
The following 1 package(s) will be affected (of 0 checked):

Installed packages to be UPGRADED:
pkg: 1.8.7 -> 1.9.4_1 [pfSense]

Number of packages to be upgraded: 1

2 MiB to be downloaded.

Proceed with this action? [y/N]: y
Fetching pkg-1.9.4_1.txz:  0%34401135112:error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad record mac:/builder/pfsense-232/tmp/FreeBSD-src/secure/lib/libssl/../../../crypto/openssl/ssl/s3_pkt.c:518:
34401135112:error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad record mac:/builder/pfsense-232/tmp/FreeBSD-src/secure/lib/libssl/../../../crypto/openssl/ssl/s3_pkt.c:518:
34401135112:error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad record mac:/builder/pfsense-232/tmp/FreeBSD-src/secure/lib/libssl/../../../crypto/openssl/ssl/s3_pkt.c:518:
34401135112:error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad record mac:/builder/pfsense-232/tmp/FreeBSD-src/secure/lib/libssl/../../../crypto/openssl/ssl/s3_pkt.c:518:
34401135112:error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad record mac:/builder/pfsense-232/tmp/FreeBSD-src/secure/lib/libssl/../../../crypto/openssl/ssl/s3_pkt.c:518:
34401135112:error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad record mac:/builder/pfsense-232/tmp/FreeBSD-src/secure/lib/libssl/../../../crypto/openssl/ssl/s3_pkt.c:518:
34401135112:error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad record mac:/builder/pfsense-232/tmp/FreeBSD-src/secure/lib/libssl/../../../crypto/openssl/ssl/s3_pkt.c:518:
34401135112:error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad record mac:/builder/pfsense-232/tmp/FreeBSD-src/secure/lib/libssl/../../../crypto/openssl/ssl/s3_pkt.c:518:
34401135112:error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad record mac:/builder/pfsense-232/tmp/FreeBSD-src/secure/lib/libssl/../../../crypto/openssl/ssl/s3_pkt.c:518:
34401135112:error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad record mac:/builder/pfsense-232/tmp/FreeBSD-src/secure/lib/libssl/../../../crypto/openssl/ssl/s3_pkt.c:518:
34401135112:error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad record mac:/builder/pfsense-232/tmp/FreeBSD-src/secure/lib/libssl/../../../crypto/openssl/ssl/s3_pkt.c:518:
Fetching pkg-1.9.4_1.txz:  31%  788 KiB 806.9kB/s    00:02 ETA34401135112:error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad record mac:/builder/pfsense-232/tmp/FreeBSD-src/secure/lib/libssl/../../../crypto/openssl/ssl/s3_pkt.c:518:
34401135112:error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad record mac:/builder/pfsense-232/tmp/FreeBSD-src/secure/lib/libssl/../../../crypto/openssl/ssl/s3_pkt.c:518:
34401135112:error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad record mac:/builder/pfsense-232/tmp/FreeBSD-src/secure/lib/libssl/../../../crypto/openssl/ssl/s3_pkt.c:518:
34401135112:error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad record mac:/builder/pfsense-232/tmp/FreeBSD-src/secure/lib/libssl/../../../crypto/openssl/ssl/s3_pkt.c:518:
34401135112:error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad record mac:/builder/pfsense-232/tmp/FreeBSD-src/secure/lib/libssl/../../../crypto/openssl/ssl/s3_pkt.c:518:
34401135112:error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad record mac:/builder/pfsense-232/tmp/FreeBSD-src/secure/lib/libssl/../../../crypto/openssl/ssl/s3_pkt.c:518:
34401135112:error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad record mac:/builder/pfsense-232/tmp/FreeBSD-src/secure/lib/libssl/../../../crypto/openssl/ssl/s3_pkt.c:518:
34401135112:error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad record mac:/builder/pfsense-232/tmp/FreeBSD-src/secure/lib/libssl/../../../crypto/openssl/ssl/s3_pkt.c:518:
34401135112:error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad record mac:/builder/pfsense-232/tmp/FreeBSD-src/secure/lib/libssl/../../../crypto/openssl/ssl/s3_pkt.c:518:
34401135112:error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad record mac:/builder/pfsense-232/tmp/FreeBSD-src/secure/lib/libssl/../../../crypto/openssl/ssl/s3_pkt.c:518:
34401135112:error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad record mac:/builder/pfsense-232/tmp/FreeBSD-src/secure/lib/libssl/../../../crypto/openssl/ssl/s3_pkt.c:518:
34401135112:error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad record mac:/builder/pfsense-232/tmp/FreeBSD-src/secure/lib/libssl/../../../crypto/openssl/ssl/s3_pkt.c:518:
34401135112:error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad record mac:/builder/pfsense-232/tmp/FreeBSD-src/secure/lib/libssl/../../../crypto/openssl/ssl/s3_pkt.c:518:
34401135112:error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad record mac:/builder/pfsense-232/tmp/FreeBSD-src/secure/lib/libssl/../../../crypto/openssl/ssl/s3_pkt.c:518:
34401135112:error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad record mac:/builder/pfsense-232/tmp/FreeBSD-src/secure/lib/libssl/../../../crypto/openssl/ssl/s3_pkt.c:518:
34401135112:error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad record mac:/builder/pfsense-232/tmp/FreeBSD-src/secure/lib/libssl/../../../crypto/openssl/ssl/s3_pkt.c:518:
Fetching pkg-1.9.4_1.txz: 100%    2 MiB  1.1MB/s    00:02
pkg: https://pkg.pfsense.org/pfSense_v2_3_2_amd64-pfSense_v2_3_2/All/pkg-1.9.4_1.txz: Connection reset by peer
[2.3.2-RELEASE][admin@ whateverhostname]/root: exit

Any ideas of where I can start looking?

]]>https://forum.netgate.com/topic/113652/ssl-errors-when-attempting-to-upgrade-from-2-3-2-release-to-2-3-3_1RSS for NodeMon, 16 Mar 2026 02:44:32 GMTMon, 27 Mar 2017 20:38:26 GMT60<![CDATA[Reply to SSL errors when attempting to upgrade from 2.3.2-RELEASE to 2.3.3_1 on Fri, 31 Mar 2017 14:32:19 GMT]]>Is this still happening today?

If so, first check the time/date on the firewall (and NTP).

Is there a proxy or some other device in front of the firewall (your WAN is private, so there must be something there…) which could be interfering with SSL connections?

]]>https://forum.netgate.com/post/690355https://forum.netgate.com/post/690355Fri, 31 Mar 2017 14:32:19 GMT