Unable to install packages looks like certificate error

zdevlor

Updating pfSense-core repository catalogue...
pkg: Repository pfSense-core load error: access repo file(/var/db/pkg/repo-pfSense-core.sqlite) failed: No such file or directory
Certificate verification failed for ....
pkg: https://pkg.pfsense.org/pfSense_v2_4_4_amd64-core/meta.txz: Authentication error
repository pfSense-core has no meta file, using default settings

BBcan177

@zdevlor

Make sure to run that command as the "root" user. Also try:

pkg update -f

zdevlor

every package update i try gets the same error. I have other pfsense instances in my enterprise and they are working but this one is not.

johnpoz

@zdevlor said in Unable to install packages looks like certificate error:

access repo file(/var/db/pkg/repo-pfSense-core.sqlite) failed: No such file or directory

Looks like you had some disk/file corruption if that file is not there?

[2.4.4-RELEASE][root@sg4860.local.lan]/var/db/pkg: ls -la
total 7400
drwxr-xr-x   2 root  wheel      512 Feb 26 10:44 .
drwxr-xr-x  20 root  wheel     1536 Feb 27 12:05 ..
-rw-r--r--   1 root  wheel  6135808 Feb 23 06:40 local.sqlite
-rw-r--r--   1 root  wheel      246 Jan  7 12:28 pfSense-core.meta
-rw-r--r--   1 root  wheel      246 Feb 26 07:16 pfSense.meta
-rw-r--r--   1 root  wheel   221184 Jan  7 12:28 repo-pfSense-core.sqlite
-rw-r--r--   1 root  wheel  1085440 Feb 26 07:16 repo-pfSense.sqlite
[2.4.4-RELEASE][root@sg4860.local.lan]/var/db/pkg:

jimp

Make sure your clock is OK, and also make sure the firewall is not behind a proxy that requires/forces authentication.

zdevlor

[2.4.4-RELEASE][root@xxxxxx]/var/db/pkg: ls -al
total 3952
drwxr-xr-x 2 root wheel 512 Feb 26 19:30 .
drwxr-xr-x 14 root wheel 1024 Feb 27 10:30 ..
-rw-r--r-- 1 root wheel 3989504 Feb 26 19:17 local.sqlite
-rw-r--r-- 1 root wheel 246 Jan 7 10:26 pfSense-core.meta
-rw-r--r-- 1 root wheel 246 Feb 26 14:28 pfSense.meta

zdevlor

Routing all works and time is correct as well

zdevlor

[2.4.4-RELEASE][root@xxxxx]/var/db/pkg: pfSense-upgrade -4

Updating repositories metadata...
Updating pfSense-core repository catalogue...
pkg-static: Repository pfSense-core load error: access repo file(/var/db/pkg/repo-pfSense-core.sqlite) failed: No such file or directory
Certificate verification failed for /C=US/ST=CA/L=xxxx
routines:ssl3_get_server_certificate:certificate verify failed:/usr/local/poudriere/jails/pfSense_v2_4_4_amd64/usr/src/crypto/openssl/ssl/s3_clnt.c:1269:
Certificate verification failed for /C=US/ST=CA/L=xxxx
12664020:error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed:/usr/local/poudriere/jails/pfSense_v2_4_4_amd64/usr/src/crypto/openssl/ssl/s3_clnt.c:1269:
pkg-static: https://pkg.pfsense.org/pfSense_v2_4_4_amd64-core/meta.txz: Authentication error
repository pfSense-core has no meta file, using default settings

jimp

Are you certain you don't have anything in front of that intercepting SSL? That looks nothing like the certificate subject you should be seeing from the package servers (files00.netgate.com and files01.netgate.com)

zdevlor

the big thing is i would like to install the open vm tools package onto these devices
how do i do that with no access to the repo

Gertjan

@zdevlor said in Unable to install packages looks like certificate error:

how do i do that with no access to the repo

With no access, this file

pkg: Repository pfSense-core load error: access repo file(/var/db/pkg/repo-pfSense-core.sqlite) failed: No such file or director

can't be loaded, so it can't be found.

A WAN connection need to exist to update/upgrade.