<![CDATA[SG-2100 Update fom 22.01 to 22.05 fails: SSL certificate subject doesn't match host]]>Yesterday i updated a SG-1100 from 22.01 to 22.05. Update went fine via serial console.

Today i wanted to update a SG-2100, see the output at the end of the post.

What i have tried so far:
Reboot 😀

Any help would be appreciated. I saw some recent threads about this problem, but they were all resolved by something Netgate did in the background.

Enter an option: 13

>>> Updating repositories metadata... 
Updating pfSense-core repository catalogue...
SSL certificate subject doesn't match host repo01.atx.netgate.com
SSL certificate subject doesn't match host repo01.atx.netgate.com
SSL certificate subject doesn't match host repo01.atx.netgate.com
SSL certificate subject doesn't match host repo01.atx.netgate.com
pkg-static: https://repo01.atx.netgate.com/pkg/pfSense_plus-v22_05_aarch64-core/meta.txz: Authentication error
repository pfSense-core has no meta file, using default settings
SSL certificate subject doesn't match host repo01.atx.netgate.com
SSL certificate subject doesn't match host repo01.atx.netgate.com
pkg-static: https://repo01.atx.netgate.com/pkg/pfSense_plus-v22_05_aarch64-core/packagesite.pkg: Authentication error
SSL certificate subject doesn't match host repo01.atx.netgate.com
SSL certificate subject doesn't match host repo01.atx.netgate.com
pkg-static: https://repo01.atx.netgate.com/pkg/pfSense_plus-v22_05_aarch64-core/packagesite.txz: Authentication error
Unable to update repository pfSense-core
Updating pfSense repository catalogue...
Fetching meta.conf: . done
Fetching packagesite.pkg: .......... done
Processing entries: 
Processing entries............. done
pfSense repository update completed. 509 packages processed.
Error updating repositories!
ERROR: Unable to compare version of pfSense-repo
Netgate 2100                             Netgate Device ID: xxx
Serial: xxx	                         Netgate Crypto ID: xxx
]]>https://forum.netgate.com/topic/173712/sg-2100-update-fom-22-01-to-22-05-fails-ssl-certificate-subject-doesn-t-match-hostRSS for NodeSun, 12 Jul 2026 17:46:46 GMTWed, 27 Jul 2022 13:09:11 GMT60<![CDATA[Reply to SG-2100 Update fom 22.01 to 22.05 fails: SSL certificate subject doesn't match host on Wed, 27 Jul 2022 15:22:39 GMT]]>Probably why :
http://repo00.atx.netgate.com/pkg/pfSense_plus-v22_05_aarch64-pfSense_plus_v22_05/
404 Not Found
nginx

]]>https://forum.netgate.com/post/1053898https://forum.netgate.com/post/1053898Wed, 27 Jul 2022 15:22:39 GMT<![CDATA[Reply to SG-2100 Update fom 22.01 to 22.05 fails: SSL certificate subject doesn't match host on Wed, 27 Jul 2022 15:17:18 GMT]]>I had the exact same issue (Netgate 1100, though), managed to "fix it" (I think???) with "pkg-static clean -ay; pkg-static install -fy pkg pfSense-repo pfSense-upgrade" via the command prompt. I still get issues attempting to install packages though, but at least it's able to see that it's up to date now.

Might just be on their end, and that they need to fix their certs.

]]>https://forum.netgate.com/post/1053884https://forum.netgate.com/post/1053884Wed, 27 Jul 2022 15:17:18 GMT<![CDATA[Reply to SG-2100 Update fom 22.01 to 22.05 fails: SSL certificate subject doesn't match host on Wed, 27 Jul 2022 13:45:10 GMT]]>Hi,

Same for me after trying to upgrade from two different device : 22.01 and 21.05.
Happened only on PFSense plus.

]]>https://forum.netgate.com/post/1053847https://forum.netgate.com/post/1053847Wed, 27 Jul 2022 13:45:10 GMT<![CDATA[Reply to SG-2100 Update fom 22.01 to 22.05 fails: SSL certificate subject doesn't match host on Wed, 27 Jul 2022 13:37:55 GMT]]>Today i have exactly the same problem with a Netgate 1100 Appliance.

]]>https://forum.netgate.com/post/1053844https://forum.netgate.com/post/1053844Wed, 27 Jul 2022 13:37:55 GMT