pfSense+ 23.01 - Unable to use package manager

abtekk

Suddenly my package manager won't list any available packages, and I get the following error when trying to update existing packages:

WARNING: Current pkg repository has a new PHP major
         version. pfSense should be upgraded before
         installing any new package.

I have tried the usual workaround of removing any custom repo's (there were none...), and reapplying the update branch settings.

Is there anything else I can try?

phm_pfsense

There's something odd with the pfsense servers this Easter Sunday morning:

[23.01-RELEASE][root@[REDACTED].lan]/root: pkg update
Updating pfSense-core repository catalogue...
pkg: https://pfsense-plus-pkg00.atx.netgate.com/pfSense_plus-v23_01_armv7-core/meta.txz: Bad Request
repository pfSense-core has no meta file, using default settings
pkg: https://pfsense-plus-pkg00.atx.netgate.com/pfSense_plus-v23_01_armv7-core/packagesite.pkg: Bad Request
pkg: https://pfsense-plus-pkg00.atx.netgate.com/pfSense_plus-v23_01_armv7-core/packagesite.txz: Bad Request
Unable to update repository pfSense-core
Updating pfSense repository catalogue...
pkg: https://pfsense-plus-pkg00.atx.netgate.com/pfSense_plus-v23_01_armv7-pfSense_plus_v23_01/meta.txz: Bad Request
repository pfSense has no meta file, using default settings
pkg: https://pfsense-plus-pkg00.atx.netgate.com/pfSense_plus-v23_01_armv7-pfSense_plus_v23_01/packagesite.pkg: Bad Request
pkg: https://pfsense-plus-pkg00.atx.netgate.com/pfSense_plus-v23_01_armv7-pfSense_plus_v23_01/packagesite.txz: Bad Request
Unable to update repository pfSense
Error updating repositories!

Seems there's an SSL cert problem:

[23.01-RELEASE][root@[REDACTED].lan]/root: openssl s_client --connect pfsense-plus-pkg00.atx.netgate.com:443
CONNECTED(00000004)
depth=0 C = US, ST = Texas, L = Austin, O = "Rubicon Communications, LLC (Netgate)", OU = pfSense Plus, CN = pfsense-plus-pkg00.atx.netgate.com
verify error:num=20:unable to get local issuer certificate
verify return:1
depth=0 C = US, ST = Texas, L = Austin, O = "Rubicon Communications, LLC (Netgate)", OU = pfSense Plus, CN = pfsense-plus-pkg00.atx.netgate.com
verify error:num=21:unable to verify the first certificate
verify return:1
depth=0 C = US, ST = Texas, L = Austin, O = "Rubicon Communications, LLC (Netgate)", OU = pfSense Plus, CN = pfsense-plus-pkg00.atx.netgate.com
verify return:1

stephenw10

It's an authenticated server. A 'Bad Request' error there means the client is sending an invalid cert. So it may have not pulled a current cert. Try running pfSense-upgrade -dc first.

drchanas

Nope...

[23.01-RELEASE][root@pfsense.terra.lan]/root:  pkg update
Updating pfSense-core repository catalogue...
pkg: https://pfsense-plus-pkg00.atx.netgate.com/pfSense_plus-v23_01_amd64-core/meta.txz: Bad Request
repository pfSense-core has no meta file, using default settings
pkg: https://pfsense-plus-pkg00.atx.netgate.com/pfSense_plus-v23_01_amd64-core/packagesite.pkg: Bad Request
pkg: https://pfsense-plus-pkg00.atx.netgate.com/pfSense_plus-v23_01_amd64-core/packagesite.txz: Bad Request
Unable to update repository pfSense-core
Updating pfSense repository catalogue...
pkg: https://pfsense-plus-pkg01.atx.netgate.com/pfSense_plus-v23_01_amd64-pfSense_plus_v23_01/meta.txz: Bad Request
repository pfSense has no meta file, using default settings
pkg: https://pfsense-plus-pkg01.atx.netgate.com/pfSense_plus-v23_01_amd64-pfSense_plus_v23_01/packagesite.pkg: Bad Request
pkg: https://pfsense-plus-pkg01.atx.netgate.com/pfSense_plus-v23_01_amd64-pfSense_plus_v23_01/packagesite.txz: Bad Request
Unable to update repository pfSense
Error updating repositories!
[23.01-RELEASE][root@pfsense.terra.lan]/root: pfSense-upgrade -dc
ERROR: It was not possible to determine pkg remote version
>>> Updating repositories metadata... 
Updating pfSense-core repository catalogue...
pkg-static: https://pfsense-plus-pkg01.atx.netgate.com/pfSense_plus-v23_01_amd64-core/meta.txz: Bad Request
repository pfSense-core has no meta file, using default settings
pkg-static: https://pfsense-plus-pkg01.atx.netgate.com/pfSense_plus-v23_01_amd64-core/packagesite.pkg: Bad Request
pkg-static: https://pfsense-plus-pkg01.atx.netgate.com/pfSense_plus-v23_01_amd64-core/packagesite.txz: Bad Request
Unable to update repository pfSense-core
Updating pfSense repository catalogue...
pkg-static: https://pfsense-plus-pkg00.atx.netgate.com/pfSense_plus-v23_01_amd64-pfSense_plus_v23_01/meta.txz: Bad Request
repository pfSense has no meta file, using default settings
pkg-static: https://pfsense-plus-pkg00.atx.netgate.com/pfSense_plus-v23_01_amd64-pfSense_plus_v23_01/packagesite.pkg: Bad Request
pkg-static: https://pfsense-plus-pkg00.atx.netgate.com/pfSense_plus-v23_01_amd64-pfSense_plus_v23_01/packagesite.txz: Bad Request
Unable to update repository pfSense
Error updating repositories!
ERROR: It was not possible to determine pfSense remote version
ERROR: It was not possible to determine pfSense-base remote version
ERROR: It was not possible to determine pfSense-kernel-pfSense remote version
Your system is up to date

abtekk

@drchanas Yes mine is doing the same thing now. Worked for a little while last night.

stephenw10

@drchanas You have also resaved the update repo branch first?

drchanas

If you mean going to /system_update_settings.php and clicking save since there is only one choice there, yes I did.
Nothing changed.
I tried it again now and it worked though....

[23.01-RELEASE][root@pfsense.terra.lan]/root: pfSense-upgrade -dc
>>> Updating repositories metadata... 
Updating pfSense-core repository catalogue...
pfSense-core repository is up to date.
Updating pfSense repository catalogue...
pfSense repository is up to date.
All repositories are up to date.
Your system is up to date

stephenw10

Yes, that's what I meant.

If you're using the CLI and have not recently opened the dashboard you might need to run pfSense-upgrade to pull a current cert before running pkg update.

Steve