Is 23.05 pulled or did I break my SG-3100?
-
Just tried to upgrade my SG-3100 from 23.01 to 23.05 but ran into weird certificate errors. Now when I check it says 23.01 is current version and no need to upgrade.
Upgrade pulled or did my install break?>>> Updating repositories metadata... Updating pfSense-core repository catalogue... Certificate verification failed for /C=US/ST=Texas/L=Austin/O=Rubicon Communications, LLC (Netgate)/OU=pfSense Plus/CN=pfsense-plus-pkg01.atx.netgate.com 544518144:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/var/jenkins/workspace/pfSense-Plus-snapshots-master-main/sources/FreeBSD-src-plus-devel-main/crypto/openssl/ssl/statem/statem_clnt.c:1921: Certificate verification failed for /C=US/ST=Texas/L=Austin/O=Rubicon Communications, LLC (Netgate)/OU=pfSense Plus/CN=pfsense-plus-pkg01.atx.netgate.com 544518144:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/var/jenkins/workspace/pfSense-Plus-snapshots-master-main/sources/FreeBSD-src-plus-devel-main/crypto/openssl/ssl/statem/statem_clnt.c:1921: Certificate verification failed for /C=US/ST=Texas/L=Austin/O=Rubicon Communications, LLC (Netgate)/OU=pfSense Plus/CN=pfsense-plus-pkg01.atx.netgate.com 544518144:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/var/jenkins/workspace/pfSense-Plus-snapshots-master-main/sources/FreeBSD-src-plus-devel-main/crypto/openssl/ssl/statem/statem_clnt.c:1921: Certificate verification failed for /C=US/ST=Texas/L=Austin/O=Rubicon Communications, LLC (Netgate)/OU=pfSense Plus/CN=pfsense-plus-pkg01.atx.netgate.com 544518144:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/var/jenkins/workspace/pfSense-Plus-snapshots-master-main/sources/FreeBSD-src-plus-devel-main/crypto/openssl/ssl/statem/statem_clnt.c:1921: pkg-static: https://pfsense-plus-pkg01.atx.netgate.com/pfSense_plus-v23_05_armv7-core/meta.txz: Authentication error repository pfSense-core has no meta file, using default settings ... Error updating repositories! ERROR: It was not possible to determine pfSense-upgrade remote version ERROR: It was not possible to determine pfSense-upgrade remote version >>> Upgrading pfSense-upgrade... failed.
-
It's still up.
Try changing the upgrade branch to 23.01 and letting it sit there a while, then change it back to 23.05 and see if the check succeeds. You might need to reboot and let it check again after that.
-
@matsan I was in the process of upgrading to 23.05 but it seems to have hung. Now I'm told 23.01 is "the latest" no matter what I try to do, even though I have the pulldown set to "Current Stable Version (23.05)". I tried toggling to 23.01 and back but that didn't change anything.
When I go to package manager I'm told there are updates for Netgate_Firmware_Upgrade and System_Patches but when I try to install them I'm told "Another instance of pfSense-upgrade is running. Try again later"
I don't see any upgrade processes in the process table and there's no relevant lock file in /tmp.
I appear to be stuck at 23.01.
(I just saw jimp's update, I'll try waiting on 23.01 for 15 minutes and then try again.)
-
Try restarting. There's a decently long thread about the "another instance" message in the last week or so but I'd restart first.
also:
@cdsJerry said in Upgrading from 23.01 to 23.05 Certificate verification failed:entering the command prompt seems to have fixed the certificate problem. It's updating now. Fingers and toes crossed.
pkg-static clean -ay; pkg-static install -fy pkg pfSense-repo pfSense-upgrade
(referenced from https://docs.netgate.com/pfsense/en/latest/troubleshooting/upgrades.html#upgrade-not-offered-library-errors)
-
@SteveITS I restarted before posting but I'll try again.
-
@jimp Got it working by following your instructions. Thanks.
-
@SteveITS well... I tried the quoted line and it said it was updating then rebooted (no intervention on my part). The base OS is ruining in that I can log in on the console but none of the pfSense-related processes are running. No networking is functional.
-
@nomad0 watching the reboot I'm seeing a bunch of XML parse errors. I'm thinking a reinstall is going to be necessary. I guess I get to go looking for instructions on how to do that.
-
@nomad0 That's unexpected. https://docs.netgate.com/pfsense/en/latest/solutions/sg-3100/reinstall-pfsense.html if you have to.
"ruining" is presumably a typo but in context...
-
@SteveITS thanks Steve. That's where I wound up.
Typo but yeah.
-
Yeap same issue here.
Too scared to try again.
Don't want to brick it.