Package List Empty
-
@stephenw10 said in Package List Empty:
running pfSense-upgrade -c will pull a new cert.
Is that instant / real-time ? Because I see this on a working box:
mv /etc/ssl/pfSense-repo-custom.cert /etc/ssl/pfSense-repo-custom.cert.TESTING pfSense-upgrade -c >>> Updating repositories metadata... done. Your system is up to date
It seemingly completed fine. But now there is no /etc/ssl/pfSense-repo-custom.cert
-
That's the cert for the CE > Plus upgrade repo. The dynamic repo cert is passed with the repo details and, yes, it's updated close to instantly:
[23.05-DEVELOPMENT][admin@plusdev.stevew.lan]/root: ls -ls /usr/local/etc/pfSense/pkg/repos total 29 1 -rw-r--r-- 1 root wheel 16 Mar 12 01:08 pfSense-repo-23.05-Devel.abi 1 -rw-r--r-- 1 root wheel 17 Mar 12 01:08 pfSense-repo-23.05-Devel.altabi 5 -rw-r--r-- 1 root wheel 547 Mar 12 01:08 pfSense-repo-23.05-Devel.conf 1 -rw-r--r-- 1 root wheel 36 Mar 12 01:08 pfSense-repo-23.05-Devel.descr 1 -rw-r--r-- 1 root wheel 11 Mar 12 01:08 pfSense-repo-23.05-Devel.name 1 -rw-r--r-- 1 root wheel 16 Mar 12 01:08 pfSense-repo-prev.abi 1 -rw-r--r-- 1 root wheel 17 Mar 12 01:08 pfSense-repo-prev.altabi 5 -rw-r--r-- 1 root wheel 498 Mar 12 01:08 pfSense-repo-prev.conf 1 -rw-r--r-- 1 root wheel 31 Mar 12 01:08 pfSense-repo-prev.descr 1 -rw-r--r-- 1 root wheel 4 Mar 12 01:08 pfSense-repo-prev.name 5 -rw-r--r-- 1 root wheel 2053 Mar 12 01:08 pfSense-repo-stable-cert.pem 5 -rw------- 1 root wheel 3243 Mar 12 01:08 pfSense-repo-stable-key.pem 1 -rw-r--r-- 1 root wheel 16 Mar 12 01:08 pfSense-repo-stable.abi 1 -rw-r--r-- 1 root wheel 17 Mar 12 01:08 pfSense-repo-stable.altabi 5 -rw-r--r-- 1 root wheel 506 Mar 12 01:08 pfSense-repo-stable.conf 1 -rw-r--r-- 1 root wheel 1 Mar 12 01:08 pfSense-repo-stable.default 1 -rw-r--r-- 1 root wheel 29 Mar 12 01:08 pfSense-repo-stable.descr 1 -rw-r--r-- 1 root wheel 6 Mar 12 01:08 pfSense-repo-stable.name [23.05-DEVELOPMENT][admin@plusdev.stevew.lan]/root: pfSense-upgrade -c >>> Updating repositories metadata... done. Your system is up to date [23.05-DEVELOPMENT][admin@plusdev.stevew.lan]/root: ls -ls /usr/local/etc/pfSense/pkg/repos total 29 1 -rw-r--r-- 1 root wheel 16 Mar 12 02:09 pfSense-repo-23.05-Devel.abi 1 -rw-r--r-- 1 root wheel 17 Mar 12 02:09 pfSense-repo-23.05-Devel.altabi 5 -rw-r--r-- 1 root wheel 547 Mar 12 02:09 pfSense-repo-23.05-Devel.conf 1 -rw-r--r-- 1 root wheel 36 Mar 12 02:09 pfSense-repo-23.05-Devel.descr 1 -rw-r--r-- 1 root wheel 11 Mar 12 02:09 pfSense-repo-23.05-Devel.name 1 -rw-r--r-- 1 root wheel 16 Mar 12 02:09 pfSense-repo-prev.abi 1 -rw-r--r-- 1 root wheel 17 Mar 12 02:09 pfSense-repo-prev.altabi 5 -rw-r--r-- 1 root wheel 498 Mar 12 02:09 pfSense-repo-prev.conf 1 -rw-r--r-- 1 root wheel 31 Mar 12 02:09 pfSense-repo-prev.descr 1 -rw-r--r-- 1 root wheel 4 Mar 12 02:09 pfSense-repo-prev.name 5 -rw-r--r-- 1 root wheel 2053 Mar 12 02:09 pfSense-repo-stable-cert.pem 5 -rw------- 1 root wheel 3243 Mar 12 02:09 pfSense-repo-stable-key.pem 1 -rw-r--r-- 1 root wheel 16 Mar 12 02:09 pfSense-repo-stable.abi 1 -rw-r--r-- 1 root wheel 17 Mar 12 02:09 pfSense-repo-stable.altabi 5 -rw-r--r-- 1 root wheel 506 Mar 12 02:09 pfSense-repo-stable.conf 1 -rw-r--r-- 1 root wheel 1 Mar 12 02:09 pfSense-repo-stable.default 1 -rw-r--r-- 1 root wheel 29 Mar 12 02:09 pfSense-repo-stable.descr 1 -rw-r--r-- 1 root wheel 6 Mar 12 02:09 pfSense-repo-stable.name
Steve
-
@stephenw10 said in Package List Empty:
That's the cert for the CE > Plus upgrade repo. The dynamic repo cert is passed with the repo details and, yes, it's updated close to instantly:
Weird.
pfSense-upgrade -d -c ......ERROR: It was not possible to determine pkg remote version >>> Updating repositories metadata... Updating pfSense-core repository catalogue... Certificate verification failed for /C=US/ST=Texas/L=Austin/O=Rubicon Communications, LLC (Netgate)/OU=pfSense Plus/CN=pfsense-plus-pkg00.atx.netgate.com 34937565184:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/var/jenkins/workspace/pfSense-Plus-snapshots-23_01-main/sources/FreeBSD-src-plus-RELENG_23_01/crypto/openssl/ssl/statem/statem_clnt.c:1921: Certificate verification failed for /C=US/ST=Texas/L=Austin/O=Rubicon Communications, LLC (Netgate)/OU=pfSense Plus/CN=pfsense-plus-pkg00.atx.netgate.com 34937565184:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/var/jenkins/workspace/pfSense-Plus-snapshots-23_01-main/sources/FreeBSD-src-plus-RELENG_23_01/crypto/openssl/ssl/statem/statem_clnt.c:1921: Certificate verification failed for /C=US/ST=Texas/L=Austin/O=Rubicon Communications, LLC (Netgate)/OU=pfSense Plus/CN=pfsense-plus-pkg00.atx.netgate.com 34937565184:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/var/jenkins/workspace/pfSense-Plus-snapshots-23_01-main/sources/FreeBSD-src-plus-RELENG_23_01/crypto/openssl/ssl/statem/statem_clnt.c:1921: Certificate verification failed for /C=US/ST=Texas/L=Austin/O=Rubicon Communications, LLC (Netgate)/OU=pfSense Plus/CN=pfsense-plus-pkg00.atx.netgate.com 34937565184:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/var/jenkins/workspace/pfSense-Plus-snapshots-23_01-main/sources/FreeBSD-src-plus-RELENG_23_01/crypto/openssl/ssl/statem/statem_clnt.c:1921: pkg-static: https://pfsense-plus-pkg00.atx.netgate.com/pfSense_plus-v23_01_amd64-core/meta.txz: Authentication error repository pfSense-core has no meta file, using default settings Certificate verification failed for /C=US/ST=Texas/L=Austin/O=Rubicon Communications, LLC (Netgate)/OU=pfSense Plus/CN=pfsense-plus-pkg00.atx.netgate.com 34937565184:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/var/jenkins/workspace/pfSense-Plus-snapshots-23_01-main/sources/FreeBSD-src-plus-RELENG_23_01/crypto/openssl/ssl/statem/statem_clnt.c:1921: Certificate verification failed for /C=US/ST=Texas/L=Austin/O=Rubicon Communications, LLC (Netgate)/OU=pfSense Plus/CN=pfsense-plus-pkg00.atx.netgate.com 34937565184:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/var/jenkins/workspace/pfSense-Plus-snapshots-23_01-main/sources/FreeBSD-src-plus-RELENG_23_01/crypto/openssl/ssl/statem/statem_clnt.c:1921: pkg-static: https://pfsense-plus-pkg00.atx.netgate.com/pfSense_plus-v23_01_amd64-core/packagesite.pkg: Authentication error Certificate verification failed for /C=US/ST=Texas/L=Austin/O=Rubicon Communications, LLC (Netgate)/OU=pfSense Plus/CN=pfsense-plus-pkg00.atx.netgate.com 34937565184:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/var/jenkins/workspace/pfSense-Plus-snapshots-23_01-main/sources/FreeBSD-src-plus-RELENG_23_01/crypto/openssl/ssl/statem/statem_clnt.c:1921: Certificate verification failed for /C=US/ST=Texas/L=Austin/O=Rubicon Communications, LLC (Netgate)/OU=pfSense Plus/CN=pfsense-plus-pkg00.atx.netgate.com 34937565184:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/var/jenkins/workspace/pfSense-Plus-snapshots-23_01-main/sources/FreeBSD-src-plus-RELENG_23_01/crypto/openssl/ssl/statem/statem_clnt.c:1921: pkg-static: https://pfsense-plus-pkg00.atx.netgate.com/pfSense_plus-v23_01_amd64-core/packagesite.txz: Authentication error Unable to update repository pfSense-core Updating pfSense repository catalogue... Certificate verification failed for /C=US/ST=Texas/L=Austin/O=Rubicon Communications, LLC (Netgate)/OU=pfSense Plus/CN=pfsense-plus-pkg00.atx.netgate.com 34937565184:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/var/jenkins/workspace/pfSense-Plus-snapshots-23_01-main/sources/FreeBSD-src-plus-RELENG_23_01/crypto/openssl/ssl/statem/statem_clnt.c:1921: Certificate verification failed for /C=US/ST=Texas/L=Austin/O=Rubicon Communications, LLC (Netgate)/OU=pfSense Plus/CN=pfsense-plus-pkg00.atx.netgate.com 34937565184:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/var/jenkins/workspace/pfSense-Plus-snapshots-23_01-main/sources/FreeBSD-src-plus-RELENG_23_01/crypto/openssl/ssl/statem/statem_clnt.c:1921: Certificate verification failed for /C=US/ST=Texas/L=Austin/O=Rubicon Communications, LLC (Netgate)/OU=pfSense Plus/CN=pfsense-plus-pkg00.atx.netgate.com 34937565184:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/var/jenkins/workspace/pfSense-Plus-snapshots-23_01-main/sources/FreeBSD-src-plus-RELENG_23_01/crypto/openssl/ssl/statem/statem_clnt.c:1921: Certificate verification failed for /C=US/ST=Texas/L=Austin/O=Rubicon Communications, LLC (Netgate)/OU=pfSense Plus/CN=pfsense-plus-pkg00.atx.netgate.com 34937565184:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/var/jenkins/workspace/pfSense-Plus-snapshots-23_01-main/sources/FreeBSD-src-plus-RELENG_23_01/crypto/openssl/ssl/statem/statem_clnt.c:1921: pkg-static: https://pfsense-plus-pkg00.atx.netgate.com/pfSense_plus-v23_01_amd64-pfSense_plus_v23_01/meta.txz: Authentication error repository pfSense has no meta file, using default settings Certificate verification failed for /C=US/ST=Texas/L=Austin/O=Rubicon Communications, LLC (Netgate)/OU=pfSense Plus/CN=pfsense-plus-pkg00.atx.netgate.com 34937565184:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/var/jenkins/workspace/pfSense-Plus-snapshots-23_01-main/sources/FreeBSD-src-plus-RELENG_23_01/crypto/openssl/ssl/statem/statem_clnt.c:1921: Certificate verification failed for /C=US/ST=Texas/L=Austin/O=Rubicon Communications, LLC (Netgate)/OU=pfSense Plus/CN=pfsense-plus-pkg00.atx.netgate.com 34937565184:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/var/jenkins/workspace/pfSense-Plus-snapshots-23_01-main/sources/FreeBSD-src-plus-RELENG_23_01/crypto/openssl/ssl/statem/statem_clnt.c:1921: pkg-static: https://pfsense-plus-pkg00.atx.netgate.com/pfSense_plus-v23_01_amd64-pfSense_plus_v23_01/packagesite.pkg: Authentication error Certificate verification failed for /C=US/ST=Texas/L=Austin/O=Rubicon Communications, LLC (Netgate)/OU=pfSense Plus/CN=pfsense-plus-pkg00.atx.netgate.com 34937565184:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/var/jenkins/workspace/pfSense-Plus-snapshots-23_01-main/sources/FreeBSD-src-plus-RELENG_23_01/crypto/openssl/ssl/statem/statem_clnt.c:1921: Certificate verification failed for /C=US/ST=Texas/L=Austin/O=Rubicon Communications, LLC (Netgate)/OU=pfSense Plus/CN=pfsense-plus-pkg00.atx.netgate.com 34937565184:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/var/jenkins/workspace/pfSense-Plus-snapshots-23_01-main/sources/FreeBSD-src-plus-RELENG_23_01/crypto/openssl/ssl/statem/statem_clnt.c:1921: pkg-static: https://pfsense-plus-pkg00.atx.netgate.com/pfSense_plus-v23_01_amd64-pfSense_plus_v23_01/packagesite.txz: Authentication error Unable to update repository pfSense Error updating repositories! ERROR: It was not possible to determine pfSense remote version ERROR: It was not possible to determine pfSense-base remote version ERROR: It was not possible to determine pfSense-kernel-pfSense remote version Your system is up to date
But the time stamps of those certs DID update!
ls -ls /usr/local/etc/pfSense/pkg/repos total 16 5 -rw-r--r-- 1 root wheel 2057 Mar 12 14:52 pfSense-repo-stable-cert.pem 5 -rw------- 1 root wheel 3243 Mar 12 14:52 pfSense-repo-stable-key.pem 1 -rw-r--r-- 1 root wheel 16 Mar 12 14:52 pfSense-repo-stable.abi 1 -rw-r--r-- 1 root wheel 17 Mar 12 14:52 pfSense-repo-stable.altabi 5 -rw-r--r-- 1 root wheel 506 Mar 12 14:52 pfSense-repo-stable.conf 1 -rw-r--r-- 1 root wheel 1 Mar 12 14:52 pfSense-repo-stable.default 1 -rw-r--r-- 1 root wheel 29 Mar 12 14:52 pfSense-repo-stable.descr 1 -rw-r--r-- 1 root wheel 6 Mar 12 14:52 pfSense-repo-stable.name
Will DM you the NDI
-
-
-
Went nuclear after nothing worked.
mkdir /root/backup && cp -r /usr/local/etc/pfSense/pkg/repos /root/backup/ && rm -rf /usr/local/etc/pfSense/pkg/repos && pfSense-upgrade -c -d
Resolved it on that instance.
-
I'm having this same issue as I mistakenly acquired a new token thinking I would need one after changing out the OS Drive. the system automatically activates itself with the old token and then drops the SSL certs after about a week. the registration option is grayed out so I have no means of fixing it
-
This post is like I posted in, look at link below: https://forum.netgate.com/post/1097286
-
@bavcon22 , not quite. mine is automatically registered for PFsense+ and will install the PFsense+ upgrade after being reinstalled from disk, but after about a week it loses access to the PFsense+ package repo until I reinstall the entire thing again. additionally, because it thinks it's registered already it wont let me input a new activation key.
Thank you though!
-
What error are you actually seeing when this happens?
If you send me your NDI in chat I can check it.
-
Try this
mkdir /root/backup && cp -r /usr/local/etc/pfSense/pkg/repos /root/backup/ && rm -rf /usr/local/etc/pfSense/pkg/repos && pfSense-upgrade -c -d
-
-
@stephenw10 was able to help me resolve it but i'm pretty sure this would have fixed it also.
Many thanks! -
I am having this same issue. I'm building out a new pfSense setup, started on CE and installed a few packages. Applied my Plus configuration and upgraded to 23.01. Now I can no longer see any available packages. It's is resolving, but the certificate is apparently not being passed as I'm getting a 400 Bad Request error. Has this been resolved yet? Is there something I should be doing differently?
-
try the above post from @mfld or the instructions on this page. https://redmine.pfsense.org/issues/14137
-
Yup try the instructions on that bug report first, resave the update repo path. If you just upgraded that's probably the cause.
Steve
-
-
-
@stephenw10 said in Package List Empty:
What device do you have? If you send me your NDI in chat I can check it.
Experiencing same issue, will send NDI via chat as well if you could please help and check. Thank you. -
Hey everyone, this was fixed for me by going to System / Update / Update Settings and clicking the Save button without making any changes. Once I did that, the package list came up (I may have forced a refresh too).
-
@jasongreb it works!!!!
-
@jasongreb Works like a charm, thank you!
-
@jasongreb
This also fixed it for me! Thank you! -
Hello guys,
Nothing helped. But in the end, I went to Diagnostics-Backup & Restore and at the bottom is Reinstall all packages. Suddenly everything started to work properly.
-
@jasongreb Same over here in 4 different installs on different customers plus my homelab, went from pfsense CE to pfsense Plus a few days ago, empty "Avaliable packages" list, tried other options (at least the ones that didn't seem too drastic) but this one is the one that worked. Thanks!