Update 2.6.0 CE > 2.7.0 CE: Unable to check for updates
-
Hi all
Hi @jimpToday i was going to update a 2.6.0 CE installation to 2.7.0 CE.
The dashboard only showed: Unable to check for updates. The same at System > Update > System Update.
The CLI displayed following:
[2.6.0-RELEASE][admin@my.firewall.local]/root: pkg-static update Updating pfSense-core repository catalogue... pkg-static: An error occured while fetching package pkg-static: An error occured while fetching package repository pfSense-core has no meta file, using default settings pkg-static: An error occured while fetching package pkg-static: An error occured while fetching package Unable to update repository pfSense-core Updating pfSense repository catalogue... pkg-static: An error occured while fetching package pkg-static: An error occured while fetching package repository pfSense has no meta file, using default settings pkg-static: An error occured while fetching package pkg-static: An error occured while fetching package Unable to update repository pfSense Error updating repositories!Issues was solvable by rehash all certs.
[2.6.0-RELEASE][admin@my.firewall.local]/root: certctl rehash Scanning /usr/share/certs/blacklisted for certificates... Scanning /usr/share/certs/trusted for certificates... Skipping blacklisted certificate /usr/share/certs/trusted/Camerfirma_Chambers_of_Commerce_Root.pem (/etc/ssl/blacklisted/f90208f7.0) Skipping blacklisted certificate /usr/share/certs/trusted/Camerfirma_Global_Chambersign_Root.pem (/etc/ssl/blacklisted/cb59f961.0) Skipping blacklisted certificate /usr/share/certs/trusted/Certum_Root_CA.pem (/etc/ssl/blacklisted/442adcac.0) Skipping blacklisted certificate /usr/share/certs/trusted/Chambers_of_Commerce_Root_-_2008.pem (/etc/ssl/blacklisted/c47d9980.0) Skipping blacklisted certificate /usr/share/certs/trusted/D-TRUST_Root_CA_3_2013.pem (/etc/ssl/blacklisted/0b7c536a.0) Skipping blacklisted certificate /usr/share/certs/trusted/EC-ACC.pem (/etc/ssl/blacklisted/349f2832.0) Skipping blacklisted certificate /usr/share/certs/trusted/GeoTrust_Primary_Certification_Authority_-_G2.pem (/etc/ssl/blacklisted/116bf586.0) Skipping blacklisted certificate /usr/share/certs/trusted/Global_Chambersign_Root_-_2008.pem (/etc/ssl/blacklisted/0c4c9b6c.0) Skipping blacklisted certificate /usr/share/certs/trusted/OISTE_WISeKey_Global_Root_GA_CA.pem (/etc/ssl/blacklisted/b1b8a7f3.0) Skipping blacklisted certificate /usr/share/certs/trusted/QuoVadis_Root_CA.pem (/etc/ssl/blacklisted/080911ac.0) Skipping blacklisted certificate /usr/share/certs/trusted/Sonera_Class_2_Root_CA.pem (/etc/ssl/blacklisted/9c2e7d30.0) Skipping blacklisted certificate /usr/share/certs/trusted/Staat_der_Nederlanden_Root_CA_-_G3.pem (/etc/ssl/blacklisted/5a4d6896.0) Skipping blacklisted certificate /usr/share/certs/trusted/SwissSign_Platinum_CA_-_G2.pem (/etc/ssl/blacklisted/a8dee976.0) Skipping blacklisted certificate /usr/share/certs/trusted/Symantec_Class_1_Public_Primary_Certification_Authority_-_G6.pem (/etc/ssl/blacklisted/26312675.0) Skipping blacklisted certificate /usr/share/certs/trusted/Symantec_Class_2_Public_Primary_Certification_Authority_-_G6.pem (/etc/ssl/blacklisted/1320b215.0) Skipping blacklisted certificate /usr/share/certs/trusted/Trustis_FPS_Root_CA.pem (/etc/ssl/blacklisted/d853d49e.0) Skipping blacklisted certificate /usr/share/certs/trusted/VeriSign_Universal_Root_Certification_Authority.pem (/etc/ssl/blacklisted/c01cdfa2.0) Skipping blacklisted certificate /usr/share/certs/trusted/Verisign_Class_1_Public_Primary_Certification_Authority_-_G3.pem (/etc/ssl/blacklisted/ee1365c0.0) Skipping blacklisted certificate /usr/share/certs/trusted/Verisign_Class_2_Public_Primary_Certification_Authority_-_G3.pem (/etc/ssl/blacklisted/dc45b0bd.0) Scanning /usr/local/share/certs for certificates...I found the solution here:
https://forums.freebsd.org/threads/problem-updating-packages.89687/Maybe this is a information that can be added to the Troubleshooting Upgrades guide.
Happy pfsensing...
Regards
Tom -
Hmm, interesting. That shouldn't be required and I'd be hesitant to recommend it until I fully understood exactly what that did or why it was needed.
