Errors when checking for package updates.

stephenw10 · Jun 1, 2023, 4:27 PM

Part of that is a known bug we're working on. The stored repo path in the config becomes invalid but it's not obvious because the gui only shows the current valid repos with the default selected when that happens. Switching repos or saving the current repo updates the config with a currently valid setting.

scuderia09 · Jun 17, 2023, 3:58 AM

@stephenw10

Same issue here with a 23.01 stuck upgrade on a 6100. Flipping around the stable/prev channels in the GUI don't make a difference.

[23.01-RELEASE][x@pfsense]/: pfSense-upgrade -cd
Messages:
Your Netgate device has pfSense+ as part of your device purchase.
ERROR: It was not possible to determine pkg remote version
>>> Updating repositories metadata... 
Updating pfSense-core repository catalogue...
pkg-static: https://pfsense-plus-pkg00.atx.netgate.com/pfSense_plus-v23_05_amd64-core/meta.txz: Bad Request
repository pfSense-core has no meta file, using default settings
pkg-static: https://pfsense-plus-pkg00.atx.netgate.com/pfSense_plus-v23_05_amd64-core/packagesite.pkg: Bad Request
pkg-static: https://pfsense-plus-pkg00.atx.netgate.com/pfSense_plus-v23_05_amd64-core/packagesite.txz: Bad Request
Unable to update repository pfSense-core
Updating pfSense repository catalogue...
pkg-static: https://pfsense-plus-pkg00.atx.netgate.com/pfSense_plus-v23_05_amd64-pfSense_plus_v23_05/meta.txz: Bad Request
repository pfSense has no meta file, using default settings
pkg-static: https://pfsense-plus-pkg00.atx.netgate.com/pfSense_plus-v23_05_amd64-pfSense_plus_v23_05/packagesite.pkg: Bad Request
pkg-static: https://pfsense-plus-pkg00.atx.netgate.com/pfSense_plus-v23_05_amd64-pfSense_plus_v23_05/packagesite.txz: Bad Request
Unable to update repository pfSense
Error updating repositories!
ERROR: It was not possible to determine pfSense remote version
ERROR: It was not possible to determine pfSense-base remote version
ERROR: It was not possible to determine pfSense-kernel-pfSense remote version
Your system is up to date

scuderia09 · Jun 17, 2023, 4:44 PM

@scuderia09

actually... giving up and letting it sit overnight after setting to 23.05 channel finally presented an upgrade option in GUI and that worked out.

johnpoz · Jun 18, 2023, 6:46 PM

@stephenw10 said in Errors when checking for package updates.:

Part of that is a known bug we're working on.

I ran into this yesterday, I just went in and hit save on the update page selecting 23.05 which I am on.. And then it worked.. I have been on 23.05 for a while now.. It was odd.

stephenw10 · Jun 19, 2023, 11:25 AM

Hmm, that is odd if it was already on 23.05. Same 'Bad Request' error?

johnpoz · Jun 19, 2023, 11:31 AM

@stephenw10 said in Errors when checking for package updates.:

Same 'Bad Request' error?

yup

here it was still in my ssh history, just had to scroll up

[23.05-RELEASE][admin@sg4860.local.lan]/root: pkg update
Updating pfSense-core repository catalogue...
pkg: https://pfsense-plus-pkg01.atx.netgate.com/pfSense_plus-v23_05_amd64-core/meta.txz: Bad Request
repository pfSense-core has no meta file, using default settings
pkg: https://pfsense-plus-pkg01.atx.netgate.com/pfSense_plus-v23_05_amd64-core/packagesite.pkg: Bad Request
pkg: https://pfsense-plus-pkg01.atx.netgate.com/pfSense_plus-v23_05_amd64-core/packagesite.txz: Bad Request
Unable to update repository pfSense-core
Updating pfSense repository catalogue...
pkg: https://pfsense-plus-pkg00.atx.netgate.com/pfSense_plus-v23_05_amd64-pfSense_plus_v23_05/meta.txz: Bad Request
repository pfSense has no meta file, using default settings
pkg: https://pfsense-plus-pkg00.atx.netgate.com/pfSense_plus-v23_05_amd64-pfSense_plus_v23_05/packagesite.pkg: Bad Request
pkg: https://pfsense-plus-pkg00.atx.netgate.com/pfSense_plus-v23_05_amd64-pfSense_plus_v23_05/packagesite.txz: Bad Request
Unable to update repository pfSense
Error updating repositories!
[23.05-RELEASE][admin@sg4860.local.lan]/root: pkg update
Updating pfSense-core repository catalogue...
pkg: https://pfsense-plus-pkg00.atx.netgate.com/pfSense_plus-v23_05_amd64-core/meta.txz: Bad Request
repository pfSense-core has no meta file, using default settings
pkg: https://pfsense-plus-pkg00.atx.netgate.com/pfSense_plus-v23_05_amd64-core/packagesite.pkg: Bad Request
pkg: https://pfsense-plus-pkg00.atx.netgate.com/pfSense_plus-v23_05_amd64-core/packagesite.txz: Bad Request
Unable to update repository pfSense-core
Updating pfSense repository catalogue...
pkg: https://pfsense-plus-pkg00.atx.netgate.com/pfSense_plus-v23_05_amd64-pfSense_plus_v23_05/meta.txz: Bad Request
repository pfSense has no meta file, using default settings
pkg: https://pfsense-plus-pkg00.atx.netgate.com/pfSense_plus-v23_05_amd64-pfSense_plus_v23_05/packagesite.pkg: Bad Request
pkg: https://pfsense-plus-pkg00.atx.netgate.com/pfSense_plus-v23_05_amd64-pfSense_plus_v23_05/packagesite.txz: Bad Request
Unable to update repository pfSense
Error updating repositories!
[23.05-RELEASE][admin@sg4860.local.lan]/root:

Then you can see where I logged into the gui, did the update save thing.. and then it worked

[23.05-RELEASE][admin@sg4860.local.lan]/root: 
Message from syslogd@sg4860 at Jun 17 16:40:31 ...
php-fpm[433]: /index.php: Successful login for user 'admin' from: 192.168.9.100 (Local Database)
https://pfsense-plus-pkg00.atx.netgate.croot: pkg update
Updating pfSense-core repository catalogue...
pfSense-core repository is up to date.
Updating pfSense repository catalogue...
pfSense repository is up to date.
All repositories are up to date.
[23.05-RELEASE][admin@sg4860.local.lan]/root:

SwissSteph · Jun 19, 2023, 11:40 AM

Same problem two days ago on my 8200 and Netgate support asked me to do "pfSense-upgrade -d -c" which solved the problem.
https://forum.netgate.com/topic/180888/solved-help-sudo-pkg-upgrade-in-netgate-8200-bad-request?_=1687174518657

By income since, I hope that it is indeed solved definitively

stephenw10 · Jun 19, 2023, 12:10 PM

Ah yes, if you are just checking directly at the CLI it's probably just that the user cert has expired. When you check in the gui it automatically pulls a new cert before checking. At the CLI you can pfSense-upgrade -c to do that.

SwissSteph · Jul 11, 2023, 6:07 AM

@stephenw10 said in Errors when checking for package updates.:

pfSense-upgrade -c

It's amazing, because I got the same error messages again and by running "pfSense-upgrade -c" (from the GUI) I fixed the problem again -> no more error message.

Would it be possible to give me an explanation of "why this phenomenon comes back" and how to prevent it?

I'd like to understand where I'm going wrong.

Thanks for your comments :-)

stephenw10 · Jul 11, 2023, 1:18 PM

In order to access the pkg repos clients must have a valid client cert. To get the cert clients reach out to the backend system, are validated and given a cert with a short lifetime.

If you login to the cli and try to access the pkg system directly it will fail with the 'bad request' if the client cert has expired. Usually you will not see that via the gui because any of the pkg functions accessed that way renew the cert before hand.

At the CLI you can run pfSense-upgrade or pfSense-repoc to update the cert.

Steve

SwissSteph · Jul 11, 2023, 1:23 PM

Hello Steve,

Thank you for your reply. My English is not at all OK, can you just tell me what the abbrevatioon "CLI" means?

Sorry for the stupid question, then I'll be able to understand your answer much better :-)
Steph

stephenw10 · Jul 11, 2023, 1:40 PM

Sorry it's Command Line Interface. So when working at the command line directly.

SwissSteph · Jul 11, 2023, 2:10 PM

Thanks for the clarification ;-)

I usually type the command "pkg update or pkg upgrade" in the GUI to see if there is anything to update.

And if the answer shows it, indiquand to press "Y", as I can't do it in the GUI (I don't know how it's possible) I launch an SSh and then answer with "Y" once "pkg upgrade" is launched.

That's why I saw (in the GUI) these error messages, then ran "pfSense-upgrade -c" and then "pkg upgrade" to check that I no longer had the error message.

In the end, what's the best method, because in the GUI I get the error message, but if I run the same command from SSh, will I also get these errors? That's what I'm having trouble understanding.

stephenw10 · Jul 11, 2023, 2:44 PM

The best method to check for updates from the gui?

Just refresh the system widget on the dashboard.

SwissSteph · Jul 12, 2023, 5:46 AM

Thanks for the tip ;-)

My "problem" is that I put the script that is suggested in https://forum.netgate.com/topic/179402/pfblockerng-3-2-0_4/10?_=1681407650676 and I no longer receive mail if my pfsense is in error as mentioned here.

So I'm going to have to deal with this "problem" and have my script work only once in a while.

Thanks again for your help and advice!

gonace · Oct 28, 2023, 11:10 AM

I've got the kind of the same issue but the GUI does not find any packages, both the "installed" and "available" list are empty and running the commend just throws these errors

[23.05.1-RELEASE][root@pfsense]/root: pfSense-upgrade -d -c
pfSense-repoc-static: invalid signature
failed to read the repo data.
failed to update the repository settings!!!
failed to update the repository settings!!!

I'm at a lost what to do.

stephenw10 · Nov 5, 2023, 5:52 PM

That implies it can't pull a new cert.

Send me your NDI in chat and I'll check it.

Steve

matdmiller · Nov 5, 2023, 5:52 PM

@stephenw10 I am having a similar issue. I have a sg-2440. I wanted to install the tailscale package but no packages were showing up in the available packages list. I did some research and found out that even though it had been saying my version of pfsense was up to date I was on 2.4.4. It kept saying no package updates were available until I switched it to the 2.4.5 branch. I was able to get get it to update to that but it will not update further either from the GUI or command line. When I run this command it says permission denied on the package pkg-1.18.4_5.pkg:

[2.4.5-RELEASE][admin@router.local]/root: pfSense-upgrade -d -c
>>> Updating repositories metadata...
pkg-static: Warning: Major OS version upgrade detected.  Running "pkg bootstrap -f" recommended
Updating pfSense-core repository catalogue...
pfSense-core repository is up to date.
Updating pfSense repository catalogue...
pfSense repository is up to date.
All repositories are up to date.
>>> Upgrading pfSense-repo...
pkg-static: Warning: Major OS version upgrade detected.  Running "pkg bootstrap -f" recommended
Updating pfSense-core repository catalogue...
pfSense-core repository is up to date.
Updating pfSense repository catalogue...
pfSense repository is up to date.
All repositories are up to date.
New version of pkg detected; it needs to be installed first.
The following 1 package(s) will be affected (of 0 checked):

Installed packages to be UPGRADED:
	pkg: 1.17.5_3 -> 1.18.4_5 [pfSense]

Number of packages to be upgraded: 1

The process will require 20 MiB more space.
9 MiB to be downloaded.
[1/1] Fetching pkg-1.18.4_5.pkg: .........^[[B^[[B. done
pkg-static: https://firmware.netgate.com/pkg/pfSense_plus-v23_01_amd64-pfSense_plus_v23_01/All/pkg-1.18.4_5.pkg: Permission denied

I ran this command prior to the upgrade that I added to the chat:
pkg-static clean -ya
and it had a long list of packages that were cleaned.

I have manually removed (via GUI) all extra packages that I had installed.

When I try and update via the GUI it just sits on this message and never proceeds with anything:
Please wait while the update system initializes

I have rebooted the router numerous times and also switched the branches between 23.01 and what it is saying is the previous branch of 22.05. When I try and update when on 22.05 it says that my current version is up to date.

When I try and run this command in the CLI I get the following Authentication error:
pkg bootstrap -f
[2.4.5-RELEASE][admin@router.local]/root: pkg bootstrap -f
The package management tool is not yet installed on your system.
Do you want to fetch and install it now? [y/N]: y
Bootstrapping pkg from pkg+https://firmware.netgate.com/pkg/pfSense_plus-v23_01_amd64-pfSense_plus_v23_01, please wait...
pkg: Error fetching https://firmware.netgate.com/pkg/pfSense_plus-v23_01_amd64-pfSense_plus_v23_01/Latest/pkg.txz: Authentication error
A pre-built version of pkg could not be found for your system.
Consider changing PACKAGESITE or installing it from ports: 'ports-mgmt/pkg'.

The GUI seems to be somewhat unresponsive and the internet traffic through the router seems to occasionally drop out now.

Could you please help me out?

SteveITS · Nov 5, 2023, 6:38 PM

@matdmiller Since it’s several years old you might be better reinstalling and restoring your backup: https://docs.netgate.com/pfsense/en/latest/solutions/sg-2440/reinstall-pfsense.html

stephenw10 · Nov 5, 2023, 10:36 PM

Yes, from 2.4.5 I would just reinstall clean to be sure. Especially if you're having pkg issues already.

Steve