Package update/reinstall issues after update to 2.4.4_p2

joshjeffries

I have 4 pfSense boxes all upgraded to 2.2.4_2 at the start of this week. I noticed on 3 of the firewalls Snort wasn't starting the barnyard2 service so decided to reinstall the package. I am getting errors connecting to the package soure

Two firewalls comes up with:

pkg-static: https://firmware.netgate.com/pkg/pfSense_factory-v2_4_4_amd64-core/packagesite.txz: Operation timed out

The 3rd hangs on:

Please wait while the update system initializes

And the one the system with snort working fine, it does the lighsquid package needs update and gives me this

Upgrading pfSense-pkg-Lightsquid...
Updating pfSense-core repository catalogue...
pkg-static: https://firmware.netgate.com/pkg/pfSense_factory-v2_4_4_amd64-core/packagesite.txz: Authentication error
Unable to update repository pfSense-core
Updating pfSense repository catalogue...
12684260:error:140940E5:SSL routines:ssl3_read_bytes:ssl handshake failure:/usr/local/poudriere/jails/pfSense_factory-v2_4_4_amd64/usr/src/crypto/openssl/ssl/s3_pkt.c:1216:
12684260:error:140940E5:SSL routines:ssl3_read_bytes:ssl handshake failure:/usr/local/poudriere/jails/pfSense_factory-v2_4_4_amd64/usr/src/crypto/openssl/ssl/s3_pkt.c:1216:
pfSense repository is up to date.
Error updating repositories!
pkg-static: Repository pfSense-core load error: access repo file(/var/db/pkg/repo-pfSense-core.sqlite) failed: No such file or directory
pkg-static: Repository pfSense-core cannot be opened. 'pkg update' required
The following 1 package(s) will be affected (of 0 checked):

Installed packages to be UPGRADED:
pfSense-pkg-Lightsquid: 3.0.6_4 -> 3.0.6_5 [pfSense]

Number of packages to be upgraded: 1

31 KiB to be downloaded.
12684260:error:140940E5:SSL routines:ssl3_read_bytes:ssl handshake failure:/usr/local/poudriere/jails/pfSense_factory-v2_4_4_amd64/usr/src/crypto/openssl/ssl/s3_pkt.c:1216:
Failed

Additionally When checking for available packages nothing is showing up, and initially when going on to the installed package section it hangs.

Finally if you do go to system update, it also hangs on retrieving the update status (but shows i am on latest package on home screen)

Rico

Looks like some issue with the update/package Server today.
I've not tried updating, but the 'pkg-static update' process is eating one of my cores (100%) since I logged into the GUI and the automatic update check was performed.

-Rico

joshjeffries

would make sense + ties in with https://forum.netgate.com/topic/139890/can-t-update-2-4-4p2-doesn-t-seem-to-exist

no_jah

My issue at the moment is that I can't list available packages, but if the package server is down that would be expected?

joshjeffries

Looks like its working again. I can now list avalible packages and reinstall etc as needed.

Although it hasn't solved my barnyard2 issue - One for another thread

no_jah

@joshjeffries

I still can't list avalible packages, maybe just wait for a bit.

joshjeffries

Re the snort/barnyard issue, appears it needed a reinstall of mysql as per: https://forum.netgate.com/topic/138663/snort-borked-again-barnyard2/3

from cmd

pkg install -fy mysql56-client

Works fine now

rfanch3r

This is still not resolved.

0_1548331560535_73845d55-a739-46ef-8799-ac09c504ddcc-image.png

pkg -d upgrade Service_Watchdog
DBG(1)[97561]> pkg initialized
Updating pfSense-core repository catalogue...
DBG(1)[97561]> PkgRepo: verifying update for pfSense-core
DBG(1)[97561]> Pkgrepo, begin update of '/var/db/pkg/repo-pfSense-core.sqlite'
DBG(1)[97561]> Fetch: fetching from: https://files00.netgate.com/pfSense_v2_4_4_amd64-core/meta.txz with opts "i"
34405284920:error:140940E5:SSL routines:ssl3_read_bytes:ssl handshake failure:/build/ce-crossbuild-244/pfSense/tmp/FreeBSD-src/crypto/openssl/ssl/s3_pkt.c:1216:
DBG(1)[97561]> Fetch: fetching from: https://files00.netgate.com/pfSense_v2_4_4_amd64-core/packagesite.txz with opts "i"
DBG(1)[97561]> Fetch: fetching from: https://files01.netgate.com/pfSense_v2_4_4_amd64-core/packagesite.txz with opts "i"
^C

I had to break out of it after 20+ mins of it just sitting there.

joshjeffries

My UK Firewalls seems to be working ok now, however the one i have in singapore is still not

chrismacmahon

We are working on an issue right now impacting the packages server.

bepo

@chrismacmahon said in Package update/reinstall issues after update to 2.2.4_2:

We are working on an issue right now impacting the packages server.

Is there any official news on this? Could be helpful :-)

no_jah

@bepo said in Package update/reinstall issues after update to 2.2.4_2:

@chrismacmahon said in Package update/reinstall issues after update to 2.2.4_2:

We are working on an issue right now impacting the packages server.

Is there any official news on this? Could be helpful :-)

Not as far as I know, but I agree. In this sutuation it would be very helpful with som kind of service status page.

chpalmer

Assuming you mean 2.4.4-p2 Anything 2.2 would be quite old and unsupported.

joshjeffries

@chpalmer said in Package update/reinstall issues after update to 2.2.4_2:

Assuming you mean 2.4.4-p2 Anything 2.2 would be quite old and unsupported.

yes! oops