Problema para actualizar e instalar paquetes

[santiagoVS]

Buen dia,

Hace unas semanas se compro un Netgate 4200 MAX pfSense, llevo unos dias tratando de instalar paquetes sin éxito.

al intentar actualizar obtengo esta salida:

[24.03-RELEASE][admin@firewall.firewall.gps.com.co]/etc: pkg-static update
Updating pfSense-core repository catalogue...
pkg-static: An error occured while fetching package
pkg-static: An error occured while fetching package
repository pfSense-core has no meta file, using default settings
pkg-static: An error occured while fetching package
pkg-static: An error occured while fetching package
pkg-static: An error occured while fetching package
pkg-static: An error occured while fetching package
Unable to update repository pfSense-core
Updating pfSense repository catalogue...
pkg-static: An error occured while fetching package
pkg-static: An error occured while fetching package
repository pfSense has no meta file, using default settings
pkg-static: An error occured while fetching package
pkg-static: An error occured while fetching package
pkg-static: An error occured while fetching package
pkg-static: An error occured while fetching package
Unable to update repository pfSense
Error updating repositories!
[24.03-RELEASE][admin@firewall.firewall.gps.com.co]/etc: 

La salida de update con -d

[24.03-RELEASE][admin@firewall.firewall.gps.com.co]/etc: pkg-static -d4 update
DBG(1)[3573]> pkg initialized
Updating pfSense-core repository catalogue...
DBG(1)[3573]> PkgRepo: verifying update for pfSense-core
DBG(1)[3573]> Pkgrepo, begin update of '/var/db/pkg/repos/pfSense-core/db'
DBG(1)[3573]> Request to fetch pkg+https://pfsense-plus-pkg.netgate.com/pfSense_plus-v24_11_amd64-core/meta.conf
DBG(1)[3573]> curl_open
DBG(1)[3573]> Fetch: fetcher used: pkg+https
DBG(1)[3573]> curl> fetching https://pfsense-plus-pkg.netgate.com/pfSense_plus-v24_11_amd64-core/meta.conf

DBG(1)[3573]> CURL> attempting to fetch from , left retry 3

* Couldn't find host pfsense-plus-pkg01.atx.netgate.com in the .netrc file; using defaults
* Host pfsense-plus-pkg01.atx.netgate.com:443 was resolved.
* IPv6: (none)
* IPv4: 208.123.73.209
*   Trying 208.123.73.209:443...
* Connected to pfsense-plus-pkg01.atx.netgate.com (208.123.73.209) port 443
* ALPN: curl offers http/1.1
*  CAfile: /etc/ssl/netgate-ca.pem
*  CApath: /etc/ssl/certs/
* SSL connection using TLSv1.2 / ECDHE-RSA-AES256-GCM-SHA384 / X25519 / RSASSA-PSS
* ALPN: server accepted http/1.1
* Server certificate:
*  subject: C=US; ST=Texas; L=Austin; O=Rubicon Communications, LLC (Netgate); OU=pfSense Plus; CN=pfsense-plus-pkg01.atx.netgate.com
*  start date: Mar 15 20:23:37 2022 GMT
*  expire date: Feb 19 20:23:37 2122 GMT
*  common name: pfsense-plus-pkg01.atx.netgate.com (matched)
*  issuer: C=US; ST=Texas; L=Austin; O=Rubicon Communications, LLC (Netgate); OU=Netgate CA; CN=Netgate CA
*  SSL certificate verify ok.
*   Certificate level 0: Public key type RSA (4096/152 Bits/secBits), signed using sha256WithRSAEncryption
*   Certificate level 1: Public key type RSA (4096/152 Bits/secBits), signed using sha256WithRSAEncryption
* using HTTP/1.x
> GET /pfSense_plus-v24_11_amd64-core/meta.conf HTTP/1.1
Host: pfsense-plus-pkg01.atx.netgate.com
User-Agent: pkg/1.21.3
Accept: */*
If-Modified-Since: Fri, 22 Nov 2024 06:31:23 GMT

* Request completely sent off
< HTTP/1.1 400 Bad Request
< Server: nginx
< Date: Fri, 21 Feb 2025 17:29:23 GMT
< Content-Type: text/html
< Content-Length: 208
< Connection: close
< 
* Closing connection
DBG(1)[3573]> CURL> attempting to fetch from , left retry 2

...

ya intente el comando rehash, pero el problema continua.

certctl rehash

Ya reinicie el firewall ( esto no es algo que se puede hacer muy seguido porque el servidor de produccion esta conectado al firewall)

intente tambien con el comando pfSense-upgrade

[24.03-RELEASE][admin@firewall.firewall.gps.com.co]/etc: pfSense-upgrade
Certificate verification failed for /O=Netgate pfSense Plus GUI default Self-Signed Certificate/CN=pfSense-**************
00**********0000:error:0A000086:SSL routines:tls_post_process_server_certificate:certificate verify failed:/var/jenkins/workspace/pfSense-Plus-snapshots-24_03-main/sources/FreeBSD-src-plus-RELENG_24_03/crypto/openssl/ssl/statem/statem_clnt.c:1890:
pfSense-repoc-static: failed to fetch the repo data
failed to read the repo data.
failed to update the repository settings!!!
failed to update the repository settings!!!

alguien podría darme una ayuda sobre como logar hacer un update y e instalar un paquete?

[periko]

@santiagoVS Hola ese equipo tienen 1 año de soporte, te recomendaria usarlo :-), yo lo haria.