Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Error updating repositories / error:1416F086:SSL routines

    Scheduled Pinned Locked Moved Problems Installing or Upgrading pfSense Software
    4 Posts 2 Posters 925 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • jpgpi250J
      jpgpi250
      last edited by

      upgraded to pfsenses 2.5.0 a while ago.

      tried to run (cli) pkg update: result:

      Updating pfSense-core repository catalogue...
Certificate verification failed for /CN=*.netgate.com
34375704576:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/build/ce-crossbuild-250/sources/FreeBSD-src/crypto/openssl/ssl/statem/statem_clnt.c:1915:
Certificate verification failed for /CN=*.netgate.com
34375704576:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/build/ce-crossbuild-250/sources/FreeBSD-src/crypto/openssl/ssl/statem/statem_clnt.c:1915:
Certificate verification failed for /CN=*.netgate.com
34375704576:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/build/ce-crossbuild-250/sources/FreeBSD-src/crypto/openssl/ssl/statem/statem_clnt.c:1915:
Certificate verification failed for /CN=*.netgate.com
34375704576:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/build/ce-crossbuild-250/sources/FreeBSD-src/crypto/openssl/ssl/statem/statem_clnt.c:1915:
Certificate verification failed for /CN=*.netgate.com
34375704576:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/build/ce-crossbuild-250/sources/FreeBSD-src/crypto/openssl/ssl/statem/statem_clnt.c:1915:
Certificate verification failed for /CN=*.netgate.com
34375704576:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/build/ce-crossbuild-250/sources/FreeBSD-src/crypto/openssl/ssl/statem/statem_clnt.c:1915:
pkg: https://files00.netgate.com/pfSense_v2_5_0_amd64-core/meta.txz: Authentication error
repository pfSense-core has no meta file, using default settings
Certificate verification failed for /CN=*.netgate.com
34375704576:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/build/ce-crossbuild-250/sources/FreeBSD-src/crypto/openssl/ssl/statem/statem_clnt.c:1915:
Certificate verification failed for /CN=*.netgate.com
34375704576:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/build/ce-crossbuild-250/sources/FreeBSD-src/crypto/openssl/ssl/statem/statem_clnt.c:1915:
Certificate verification failed for /CN=*.netgate.com
34375704576:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/build/ce-crossbuild-250/sources/FreeBSD-src/crypto/openssl/ssl/statem/statem_clnt.c:1915:
pkg: https://files00.netgate.com/pfSense_v2_5_0_amd64-core/packagesite.txz: Authentication error
Unable to update repository pfSense-core
Updating pfSense repository catalogue...
Certificate verification failed for /CN=*.netgate.com
34375704576:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/build/ce-crossbuild-250/sources/FreeBSD-src/crypto/openssl/ssl/statem/statem_clnt.c:1915:
Certificate verification failed for /CN=*.netgate.com
34375704576:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/build/ce-crossbuild-250/sources/FreeBSD-src/crypto/openssl/ssl/statem/statem_clnt.c:1915:
Certificate verification failed for /CN=*.netgate.com
34375704576:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/build/ce-crossbuild-250/sources/FreeBSD-src/crypto/openssl/ssl/statem/statem_clnt.c:1915:
Certificate verification failed for /CN=*.netgate.com
34375704576:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/build/ce-crossbuild-250/sources/FreeBSD-src/crypto/openssl/ssl/statem/statem_clnt.c:1915:
Certificate verification failed for /CN=*.netgate.com
34375704576:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/build/ce-crossbuild-250/sources/FreeBSD-src/crypto/openssl/ssl/statem/statem_clnt.c:1915:
Certificate verification failed for /CN=*.netgate.com
34375704576:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/build/ce-crossbuild-250/sources/FreeBSD-src/crypto/openssl/ssl/statem/statem_clnt.c:1915:
pkg: https://files00.netgate.com/pfSense_v2_5_0_amd64-pfSense_v2_5_0/meta.txz: Authentication error
repository pfSense has no meta file, using default settings
Certificate verification failed for /CN=*.netgate.com
34375704576:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/build/ce-crossbuild-250/sources/FreeBSD-src/crypto/openssl/ssl/statem/statem_clnt.c:1915:
Certificate verification failed for /CN=*.netgate.com
34375704576:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/build/ce-crossbuild-250/sources/FreeBSD-src/crypto/openssl/ssl/statem/statem_clnt.c:1915:
Certificate verification failed for /CN=*.netgate.com
34375704576:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/build/ce-crossbuild-250/sources/FreeBSD-src/crypto/openssl/ssl/statem/statem_clnt.c:1915:
pkg: https://files00.netgate.com/pfSense_v2_5_0_amd64-pfSense_v2_5_0/packagesite.txz: Authentication error
Unable to update repository pfSense
Error updating repositories!

      tried update from web interface, result:

      Unable to check for updates

      also System/Package Manager/Available Packages is empty

      ran the tests, as recommended in this document (Troubleshooting Upgrades), specifically "packages.netgate.com Has no A/AAAA Record", all tests but the last produce the expected result, the last test (curl) reports value 60 (expected 0), however, I don't know what this value means, andwhat actions are required to fix the problem...

      using DNS servers 208.67.222.222, 208.67.220.220 and the IPv6 of a local maintained pihole. I never see any requests from the pfsense in the pihole query log, so I assume the pfsense is always using the OpenDNS resolvers.

      GertjanG 1 Reply Last reply Reply Quote 0
      • GertjanG
        Gertjan @jpgpi250
        last edited by

        @jpgpi250 Like https://forum.netgate.com/topic/162339/unable-to-check-for-updates/2?_=1616479426002 ?

        No "help me" PM's please. Use the forum, the community will thank you.
        Edit : and where are the logs ??

        jpgpi250J 1 Reply Last reply Reply Quote 0
        • jpgpi250J
          jpgpi250 @Gertjan
          last edited by

          @gertjan

          Looks like the same problem

          Meanwhile I tried:

          • disabling suricata
          • reboot

          no result...

          GertjanG 1 Reply Last reply Reply Quote 0
          • GertjanG
            Gertjan @jpgpi250
            last edited by

            @jpgpi250

            Some patience then.

            No "help me" PM's please. Use the forum, the community will thank you.
            Edit : and where are the logs ??

            1 Reply Last reply Reply Quote 0
            • First post
              Last post
            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.