Can't upgrade from 2.4.5-release-p1

rafi1975

Hi,

From GUI it always says the version is up-to-date and doesn't give any option to upgrade. When doing upgrade from cli, loads of errors e.g. pkg-static authentication error, Unable to update repository pfSense. Error updating repositories.
Any ideas apart from installing from scratch?

Thanks,

Raf

jimp

Do you have an upstream proxy between you and the update servers? CSU.Local isn't something that would be in any of the Netgate server certificate chains.

johnpoz

@rafi1975 I would look here

https://docs.netgate.com/pfsense/en/latest/troubleshooting/upgrades.html

There is section specific about upgrade not being offered.

rafi1975

Yup, I went through that document. Nothing worked. Still those authentication errors. The strange thing is that I have other pfSense instances across the board with the same OS version and they offer upgrade to 2.6.0 straight away. Re that CSU.local cert, I can't see it in GUI at all. That domain is local to my network.

rafi1975

Absolutely the weirdest system in the world. I just tried on another location with the same OS version and now other results:

image001 (1).png

Why is it so unpredictable?

Regards,

Raf

jimp

That second one is a different issue, it would probably work if done through pfSense-upgrade at a real shell prompt (not the GUI command page).

For the original one you posted about, check System > Advanced, Miscellaneous tab and see if you have any proxy information filled in. If you do, remove it.

If there isn't anything there, then it may be something between that firewall and its upstream gateway intercepting its traffic and acting like a transparent proxy.

Something like a proxy or portal is getting those requests and changing that certificate.

rafi1975

image001 (2).png

I just tried again from cli using pfSense-upgrade -4 and got the same error.