Errors when checking for package updates.
-
Ah yes, if you are just checking directly at the CLI it's probably just that the user cert has expired. When you check in the gui it automatically pulls a new cert before checking. At the CLI you can
pfSense-upgrade -cto do that. -
@stephenw10 said in Errors when checking for package updates.:
pfSense-upgrade -c
It's amazing, because I got the same error messages again and by running "pfSense-upgrade -c" (from the GUI) I fixed the problem again -> no more error message.
Would it be possible to give me an explanation of "why this phenomenon comes back" and how to prevent it?
I'd like to understand where I'm going wrong.
Thanks for your comments :-)
-
In order to access the pkg repos clients must have a valid client cert. To get the cert clients reach out to the backend system, are validated and given a cert with a short lifetime.
If you login to the cli and try to access the pkg system directly it will fail with the 'bad request' if the client cert has expired. Usually you will not see that via the gui because any of the pkg functions accessed that way renew the cert before hand.
At the CLI you can run pfSense-upgrade or pfSense-repoc to update the cert.
Steve
-
Hello Steve,
Thank you for your reply. My English is not at all OK, can you just tell me what the abbrevatioon "CLI" means?
Sorry for the stupid question, then I'll be able to understand your answer much better :-)
Steph -
Sorry it's Command Line Interface. So when working at the command line directly.
-
Thanks for the clarification ;-)
I usually type the command "pkg update or pkg upgrade" in the GUI to see if there is anything to update.
And if the answer shows it, indiquand to press "Y", as I can't do it in the GUI (I don't know how it's possible) I launch an SSh and then answer with "Y" once "pkg upgrade" is launched.
That's why I saw (in the GUI) these error messages, then ran "pfSense-upgrade -c" and then "pkg upgrade" to check that I no longer had the error message.
In the end, what's the best method, because in the GUI I get the error message, but if I run the same command from SSh, will I also get these errors? That's what I'm having trouble understanding.
-
The best method to check for updates from the gui?
Just refresh the system widget on the dashboard.
-
Thanks for the tip ;-)
My "problem" is that I put the script that is suggested in https://forum.netgate.com/topic/179402/pfblockerng-3-2-0_4/10?_=1681407650676 and I no longer receive mail if my pfsense is in error as mentioned here.
So I'm going to have to deal with this "problem" and have my script work only once in a while.
Thanks again for your help and advice!
-
I've got the kind of the same issue but the GUI does not find any packages, both the "installed" and "available" list are empty and running the commend just throws these errors
[23.05.1-RELEASE][root@pfsense]/root: pfSense-upgrade -d -c pfSense-repoc-static: invalid signature failed to read the repo data. failed to update the repository settings!!! failed to update the repository settings!!!I'm at a lost what to do.
-
That implies it can't pull a new cert.
Send me your NDI in chat and I'll check it.
Steve
-
@stephenw10 I am having a similar issue. I have a sg-2440. I wanted to install the tailscale package but no packages were showing up in the available packages list. I did some research and found out that even though it had been saying my version of pfsense was up to date I was on 2.4.4. It kept saying no package updates were available until I switched it to the 2.4.5 branch. I was able to get get it to update to that but it will not update further either from the GUI or command line. When I run this command it says permission denied on the package pkg-1.18.4_5.pkg:
[2.4.5-RELEASE][admin@router.local]/root: pfSense-upgrade -d -c >>> Updating repositories metadata... pkg-static: Warning: Major OS version upgrade detected. Running "pkg bootstrap -f" recommended Updating pfSense-core repository catalogue... pfSense-core repository is up to date. Updating pfSense repository catalogue... pfSense repository is up to date. All repositories are up to date. >>> Upgrading pfSense-repo... pkg-static: Warning: Major OS version upgrade detected. Running "pkg bootstrap -f" recommended Updating pfSense-core repository catalogue... pfSense-core repository is up to date. Updating pfSense repository catalogue... pfSense repository is up to date. All repositories are up to date. New version of pkg detected; it needs to be installed first. The following 1 package(s) will be affected (of 0 checked): Installed packages to be UPGRADED: pkg: 1.17.5_3 -> 1.18.4_5 [pfSense] Number of packages to be upgraded: 1 The process will require 20 MiB more space. 9 MiB to be downloaded. [1/1] Fetching pkg-1.18.4_5.pkg: .........^[[B^[[B. done pkg-static: https://firmware.netgate.com/pkg/pfSense_plus-v23_01_amd64-pfSense_plus_v23_01/All/pkg-1.18.4_5.pkg: Permission deniedI ran this command prior to the upgrade that I added to the chat:
pkg-static clean -ya
and it had a long list of packages that were cleaned.I have manually removed (via GUI) all extra packages that I had installed.
When I try and update via the GUI it just sits on this message and never proceeds with anything:
Please wait while the update system initializesI have rebooted the router numerous times and also switched the branches between 23.01 and what it is saying is the previous branch of 22.05. When I try and update when on 22.05 it says that my current version is up to date.
When I try and run this command in the CLI I get the following Authentication error:
pkg bootstrap -f
[2.4.5-RELEASE][admin@router.local]/root: pkg bootstrap -f
The package management tool is not yet installed on your system.
Do you want to fetch and install it now? [y/N]: y
Bootstrapping pkg from pkg+https://firmware.netgate.com/pkg/pfSense_plus-v23_01_amd64-pfSense_plus_v23_01, please wait...
pkg: Error fetching https://firmware.netgate.com/pkg/pfSense_plus-v23_01_amd64-pfSense_plus_v23_01/Latest/pkg.txz: Authentication error
A pre-built version of pkg could not be found for your system.
Consider changing PACKAGESITE or installing it from ports: 'ports-mgmt/pkg'.The GUI seems to be somewhat unresponsive and the internet traffic through the router seems to occasionally drop out now.
Could you please help me out?
-
@matdmiller Since it’s several years old you might be better reinstalling and restoring your backup: https://docs.netgate.com/pfsense/en/latest/solutions/sg-2440/reinstall-pfsense.html
-
Yes, from 2.4.5 I would just reinstall clean to be sure. Especially if you're having pkg issues already.
Steve
-
I did a clean install and am back up and running now. Thanks for your quick responses!
