Auth error on upgrade from 22.01 to 22.05

orangehand

Upgrade failed: 1082953728:error:1409441A:SSL routines:ssl3_read_bytes:tlsv1 alert decode error:/var/jenkins/workspace/pfSense-build-release-tarballs/BUILD_NODE/pkg-aarch64/OS_MAJOR_VERSION/freebsd12/PLATFORM/aws/crypto/openssl/ssl/record/rec_layer_s3.c:1544:SSL alert number 50
1082953728:error:141F0006:SSL routines:tls_construct_cert_verify:EVP lib:/var/jenkins/workspace/pfSense-build-release-tarballs/BUILD_NODE/pkg-aarch64/OS_MAJOR_VERSION/freebsd12/PLATFORM/aws/crypto/openssl/ssl/statem/statem_lib.c:283:
pkg-static: https://repo00.atx.netgate.com/pkg/pfSense_plus-v22_05_aarch64-pfSense_plus_v22_05/All/php74-libbe-0.1.4.pkg: Authentication error

Anyone know how I get past this please?

orangehand

It's a 2100 btw

bmeeks

Try this first:

If the box is up, then do a controlled shutdown using the option under the DIAGNOSTICS menu, or even better, using the CLI console menu option instead. You can access the console menu via an SSH session or by connecting with the USB serial console cable.
Wait for the box to completely finish the shutdown sequence. This is easier seen if you are monitoring the firewall console. The box will not "power off" on its own, but will let you know when OS shutdown is completed.
Once you have verified the box is ready for power off, remove the power source to totally shutdown the box. Wait about 30 seconds, and then apply the power again and let it boot.

The crypto chip inside some of the Netgate appliances can get "stuck" in condition that can cause the error you are seeing when trying to upgrade. A reboot does not clear the condition. Only a complete removal of power will reset the crypto chip.

If the above fails to clear the issue, then you can open a request with Netgate Support for a download link to a fresh copy of the 22.05 install image here: https://www.netgate.com/tac-support-request. You can install the update and import your existing configuration during the installation process.