pfSense Plus 26.03 Release Now Available!

[pfGeorge]

Today, Netgate is pleased to announce the release of pfSense Plus software version 26.03. This regularly scheduled update brings over 40 improvements, bug fixes, and enhancements. We strongly encourage all pfSense Plus customers to upgrade to the latest version.

Some new features include:

• WebGUI Optimizations - The WebGUI code has been optimized. Users may experience a dramatic increase in GUI performance.
• System Patches Package - All installations now include it by default.
• SSH Algorithms - Increase security by including post-quantum key exchange algorithms and by removing older and weaker algorithms.
• TLS Certificate Strength - Weak (<2048 bits) TLS Server Certificates have been deprecated. This version checks the GUI certificate during the upgrade process and will re-generate a new GUI certificate if the current certificate is invalid, expired, or weak.
• TLS Certificate Auto-Renew - This version automatically renews TLS server certificates, whether self-signed or signed by an internal CA configured in pfSense Plus.

Note: There is a special message about the exciting future of pfSense software development in the official blog post.

Blog Post:
https://www.netgate.com/blog/netgate-releases-pfsense-plus-software-version-26.03

Release Notes:
https://docs.netgate.com/pfsense/en/latest/releases/26-03.html

[Bob.Dig]

It never gets old.

[slu]

@pfGeorge said in pfSense Plus 26.03 Release Now Available!:

Note: There is a special message about the exciting future of pfSense software development in the official blog post.

So cool with nativ Linux support

[tinfoilmatt]

Jim droppin' hints on Reddit of October. No pressure, dev team!

[johnpoz]

I might pull the trigger early on this one - normally I wait til my standing change window of when I wake up (early) and network is not being used.. Wife still a sleep and nobody streaming plex.

I updated my + VM test install and seems to be significantly faster in calling up the first page.. Want to see how does on my main install with many more widgets, etc.

[drewsaur]

My update seems to have worked, but man oh man were there a lot of errors in the update process - is this expected?

[140/176] Extracting php85-pear-Auth_RADIUS-1.1.0_5: ....... done

MULTIPLE OF THESE:
Warning: foreach() argument must be of type array|object, null given in Command.php on line 249
Warning: Trying to access array offset on null in Role.php on line 250
Warning: Trying to access array offset on null in Role.php on line 251
Warning: Undefined array key "honorsbaseinstall" in Role.php on line 173
Warning: Undefined array key "installable" in Role.php on line 139
Warning: Undefined array key "phpfile" in Role.php on line 204
Warning: Undefined array key "config_vars" in Role.php on line 46
XML Extension not found

[AndyRH]

@johnpoz said in pfSense Plus 26.03 Release Now Available!:

my standing change window of when I wake up (early) and network is not being used.. Wife still a sleep and nobody streaming plex

I have the same maintenance window. The family is more fussy than the users at work...

[markster]

Updated sg-5100 without issues.

[SteveITS]

@AndyRH said in pfSense Plus 26.03 Release Now Available!:

more fussy than the users at work

I dunno about "more fussy," but the users at work go home. The users at home just keep scrolling...

[keyser]

Sorry for cross posting, but I thought this might be more relevant here:

Installed 25.11.1 from scratch on my 6100 two weeks ago. Running pfBlockerNG, Wireguard, TFTPD, LLDPD and notes.
Upgrade to 26.03 took more than 10 minutes offline (thought it was dead actually), and upon login a banner with programming errors and a PHP crash notice. Error log is here: PHP_errors.txt

The System_Patches package has not been installed during the upgrade as release notes suggest would happen.

So something is probably off….. The Firewall seems to running as intended.

[johnpoz]

Ok just updated my sg-4860 from 25.11.1 to 26.03 - sure look to go smooth.. Total time was about 18min something, with down time of only 6 minutes. Note to self, disable outside monitor alerts or phone makes horrific alert sounds ;) Which not good at 6am in the morning when wife is sleeping..

My wg and he net tunnels came up.. VPN server came up and phone could connect from cell.. Tailscale did not recover, but I didn't think it would.

Seems the display of status page with all the widget load time was cut in about half at least. About 6 seconds to display which is nice improvement. I have a lot of widgets.

Can reconnect tailscale and can close this change ;)

edit: tailscale back up, and works as exit node and can access my networks/hosts. Change closed ;)

[mcury]

SG-4100 also successfully updated from 25.11.1 to 26.03.

Nice to see the auto-apply option in System Patches.
Ticked that, and rebooted after the update, now all patches are going to be applied automatically.

[Gertjan]

@pfGeorge

26.03 installed on a 4100.
As I came from the 26.03 RC, the upgrade was fast.

Looks like '26.03' has already has a patch :

[mcury]

@Gertjan said in pfSense Plus 26.03 Release Now Available!:

Looks like '26.03' has already has a patch :

Two patches

[Gertjan]

@mcury
The second one, afaik, concerns DHCP-ISC (right ?).
I wasn’t using ISC anymore.

[mcury]

@Gertjan said in pfSense Plus 26.03 Release Now Available!:

The second one, afaik, concerns DHCP-ISC (right ?).

Yeap, correct.
I just ticked auto-apply, very nice quality of life improvement.

[Ramosel]

I don't like to start an update unless I have the new version on a thumbdrive, in my hand.

I just went to put in a TAC ticket to get the new image and it does not show the v26.03 in the version list.

Is there another way to get the new image or do you have an ETA on fixing the TAC ticket request page?

[johnpoz]

@Ramosel hmm I thought they discontinued that.. You should just download the installer from the store was the method going forward.. I know when they first moved to the installer you could still request image from tac... Maybe that has finally gone away?

That use to be my process in the past as well - but have not done that last few updates. Just make sure I have a backup of my config and copy of the installer handy.

[Ramosel]

@johnpoz said in pfSense Plus 26.03 Release Now Available!:

@Ramosel hmm I thought they discontinued that.. You should just download the installer from the store was the method going forward..

I thought that was the process too. But when I try to get the $0 update the email takes me to an installer for version 1.1.1

And of course, now that they use offsite goolgleapis.com, it gets rejected by pfBlockerNG/PhishTank.

The TAC ticket entry shows latest versions... but to 25.11.1, not 26.03.

Ah, the good old days when someone in TAC responded in less than 12 minutes and sent you a link that worked.

Automation is not always our friend.
"The more they overtake the plumbing, the easier it is to stop up the drain" ~Scotty

[johnpoz]

@Ramosel yeah I don't think the installer version matches up with pfsense version, thought I had read somewhere 1.2 installer was coming out - but not sure on the date, etc.

12 mintues - haha that was when they were swamped.. I recall getting responses in just couple of minutes. ;)