PHP Crash Report after 2.6.0 to 2.7.0 upgrade

[lk777]

amd64
14.0-CURRENT
FreeBSD 14.0-CURRENT #1 RELENG_2_7_0-n255866-686c8d3c1f0: Wed Jun 28 04:21:19 UTC 2023 root@freebsd:/var/jenkins/workspace/pfSense-CE-snapshots-2_7_0-main/obj/amd64/LwYAddCr/var/jenkins/workspace/pfSense-CE-snapshots-2_7_0-main/sources/FreeBSD-src-REL

Crash Report:

PHP Errors:
[26-Feb-2025 16:43:00 UTC] PHP Warning:  PHP Startup: Unable to load dynamic library 'ftp.so' (tried: /usr/local/lib/php/20220829/ftp.so (Shared object "libssl.so.30" not found, required by "ftp.so"), /usr/local/lib/php/20220829/ftp.so.so (Cannot open "/usr/local/lib/php/20220829/ftp.so.so")) in Unknown on line 0

What could be the reason for this error message?

Thanks.

[stephenw10]

Potentially it could have been generated during the upgrade.

If you remove it does it re-appear?

Can you upgrade to 2.7.2? (the current version)

[lk777]

@stephenw10 ,
It does reappear.

I have spent hours on 2.6.0 to 2.7.0 upgrade and fill very uncomfortable with the future ones. I do not know what caused my installation issues, but packages fetching was very-very slow. It could be something with pkg01-atx.netgate.com and pkg00-atx.netgate.com servers (DNS resolution, IPV6 ...).

[stephenw10]

If you have any doubts about the state of the install I would just install 2.7.2 clean and restore your config into it.

[lk777]

@stephenw10,
I found that the 'acme' package depends on php82-ftp-8.2.11. Reinstalled the 'acme' package and those messages stopped appearing. But after restart the router became completely unresponsive.
Reinstalled pfSense CE from USB 2.7.2. Restored the configuration and now the packages are not being installed.
Just the following message " Packages are currently being reinstalled in the background.
Do not make changes in the GUI until this is complete. "
But in reality nothing is happening.
It keeps shooting "Unresolvable source alias 'pfB_PS_v4' for rule 'pfB_PS_v4 auto rule' "

2025-02-26 15:30:06.462734-05:00	php-cgi	31829	rc.package_reinstall_all: Waiting for Internet connection to update pkg metadata and finish package reinstallation
2025-02-26 15:30:06.462483-05:00	php-cgi	31829	rc.package_reinstall_all: Attempt #2 to reinstall packages FAILED.
2025-02-26 15:14:43.156918-05:00	php-cgi	31829	rc.package_reinstall_all: Waiting for Internet connection to update pkg metadata and finish package reinstallation
2025-02-26 15:14:43.156664-05:00	php-cgi	31829	rc.package_reinstall_all: Attempt #1 to reinstall packages FAILED.

The router is connected to the Internet and it works. Those messages are weird.

What a pain.

[stephenw10]

Had it updated the pkg list before you restored the config?

If you are using that alias to allow out traffic you may need to add an allow rule before it's populated. But that would be an unusual setup. You may only need to update pfBlocker lists.

Can you ping out from the firewall directly?

[lk777]

@stephenw10
That was the DNS resolver configuration issue.
Outgoing Network Interfaces was set to "ALL".
I have changed it to "Localhost"
Decided not to use DNS Query Forwarding in the resolver.
Enabled DNSSEC Support.
Enabled Prefetch Support and Prefetch DNS Key Support.

All packages restored successfully.
Now I understand why my upgrade 2.6.0 to 2.7.0 was painfully slow.

[MagnoliaCarmichael]

This post is deleted!

[Gertjan]

@MagnoliaCarmichael

Most probably, no.

The default Resolver settings, as defined by Netgate : are :

🔒 Log in to view

Until proven otherwise, these are perfect.

Btw : here, where I live, "All" includes "localhost" ^^

Changing anything could introduce minor issues, up until major issues, and that can explain why @Ik777 didn't post back = no more connection ?

Maybe he is just happy with the T-shirt ? ?

[MagnoliaCarmichael]

@Gertjan Thank you so much for the info.