Error updating repositories / error:1416F086:SSL routines
-
upgraded to pfsenses 2.5.0 a while ago.
tried to run (cli) pkg update: result:
Updating pfSense-core repository catalogue... Certificate verification failed for /CN=*.netgate.com 34375704576:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/build/ce-crossbuild-250/sources/FreeBSD-src/crypto/openssl/ssl/statem/statem_clnt.c:1915: Certificate verification failed for /CN=*.netgate.com 34375704576:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/build/ce-crossbuild-250/sources/FreeBSD-src/crypto/openssl/ssl/statem/statem_clnt.c:1915: Certificate verification failed for /CN=*.netgate.com 34375704576:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/build/ce-crossbuild-250/sources/FreeBSD-src/crypto/openssl/ssl/statem/statem_clnt.c:1915: Certificate verification failed for /CN=*.netgate.com 34375704576:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/build/ce-crossbuild-250/sources/FreeBSD-src/crypto/openssl/ssl/statem/statem_clnt.c:1915: Certificate verification failed for /CN=*.netgate.com 34375704576:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/build/ce-crossbuild-250/sources/FreeBSD-src/crypto/openssl/ssl/statem/statem_clnt.c:1915: Certificate verification failed for /CN=*.netgate.com 34375704576:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/build/ce-crossbuild-250/sources/FreeBSD-src/crypto/openssl/ssl/statem/statem_clnt.c:1915: pkg: https://files00.netgate.com/pfSense_v2_5_0_amd64-core/meta.txz: Authentication error repository pfSense-core has no meta file, using default settings Certificate verification failed for /CN=*.netgate.com 34375704576:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/build/ce-crossbuild-250/sources/FreeBSD-src/crypto/openssl/ssl/statem/statem_clnt.c:1915: Certificate verification failed for /CN=*.netgate.com 34375704576:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/build/ce-crossbuild-250/sources/FreeBSD-src/crypto/openssl/ssl/statem/statem_clnt.c:1915: Certificate verification failed for /CN=*.netgate.com 34375704576:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/build/ce-crossbuild-250/sources/FreeBSD-src/crypto/openssl/ssl/statem/statem_clnt.c:1915: pkg: https://files00.netgate.com/pfSense_v2_5_0_amd64-core/packagesite.txz: Authentication error Unable to update repository pfSense-core Updating pfSense repository catalogue... Certificate verification failed for /CN=*.netgate.com 34375704576:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/build/ce-crossbuild-250/sources/FreeBSD-src/crypto/openssl/ssl/statem/statem_clnt.c:1915: Certificate verification failed for /CN=*.netgate.com 34375704576:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/build/ce-crossbuild-250/sources/FreeBSD-src/crypto/openssl/ssl/statem/statem_clnt.c:1915: Certificate verification failed for /CN=*.netgate.com 34375704576:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/build/ce-crossbuild-250/sources/FreeBSD-src/crypto/openssl/ssl/statem/statem_clnt.c:1915: Certificate verification failed for /CN=*.netgate.com 34375704576:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/build/ce-crossbuild-250/sources/FreeBSD-src/crypto/openssl/ssl/statem/statem_clnt.c:1915: Certificate verification failed for /CN=*.netgate.com 34375704576:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/build/ce-crossbuild-250/sources/FreeBSD-src/crypto/openssl/ssl/statem/statem_clnt.c:1915: Certificate verification failed for /CN=*.netgate.com 34375704576:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/build/ce-crossbuild-250/sources/FreeBSD-src/crypto/openssl/ssl/statem/statem_clnt.c:1915: pkg: https://files00.netgate.com/pfSense_v2_5_0_amd64-pfSense_v2_5_0/meta.txz: Authentication error repository pfSense has no meta file, using default settings Certificate verification failed for /CN=*.netgate.com 34375704576:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/build/ce-crossbuild-250/sources/FreeBSD-src/crypto/openssl/ssl/statem/statem_clnt.c:1915: Certificate verification failed for /CN=*.netgate.com 34375704576:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/build/ce-crossbuild-250/sources/FreeBSD-src/crypto/openssl/ssl/statem/statem_clnt.c:1915: Certificate verification failed for /CN=*.netgate.com 34375704576:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/build/ce-crossbuild-250/sources/FreeBSD-src/crypto/openssl/ssl/statem/statem_clnt.c:1915: pkg: https://files00.netgate.com/pfSense_v2_5_0_amd64-pfSense_v2_5_0/packagesite.txz: Authentication error Unable to update repository pfSense Error updating repositories!tried update from web interface, result:
Unable to check for updatesalso System/Package Manager/Available Packages is empty
ran the tests, as recommended in this document (Troubleshooting Upgrades), specifically "packages.netgate.com Has no A/AAAA Record", all tests but the last produce the expected result, the last test (curl) reports value 60 (expected 0), however, I don't know what this value means, andwhat actions are required to fix the problem...
using DNS servers 208.67.222.222, 208.67.220.220 and the IPv6 of a local maintained pihole. I never see any requests from the pfsense in the pihole query log, so I assume the pfsense is always using the OpenDNS resolvers.
-
@jpgpi250 Like https://forum.netgate.com/topic/162339/unable-to-check-for-updates/2?_=1616479426002 ?
-
-
Some patience then.
