Errors trying to install package

clarknova

26.03-RELEASE

While trying to install the pfblockerNG package I get the following:
Installing pfSense-pkg-pfBlockerNG...
Updating pfSense-core repository catalogue...
repository pfSense-core has no meta file, using default settings
Unable to update repository pfSense-core
Updating pfSense repository catalogue...
repository pfSense has no meta file, using default settings
Unable to update repository pfSense
Error updating repositories!

If I try option 13 from the shell I get this:

Updating repositories metadata...
Updating pfSense-core repository catalogue...
pkg-static: Failed to fetch https://pfsense-plus-pkg.netgate.com/pfSense_plus-v26_03_amd64-core/meta.conf: Problem with the local SSL certificate
pkg-static: Failed to fetch https://pfsense-plus-pkg.netgate.com/pfSense_plus-v26_03_amd64-core/meta.txz: Problem with the local SSL certificate
repository pfSense-core has no meta file, using default settings
pkg-static: Failed to fetch https://pfsense-plus-pkg.netgate.com/pfSense_plus-v26_03_amd64-core/data.pkg: Problem with the local SSL certificate
pkg-static: Failed to fetch https://pfsense-plus-pkg.netgate.com/pfSense_plus-v26_03_amd64-core/data.tzst: Problem with the local SSL certificate
pkg-static: Failed to fetch https://pfsense-plus-pkg.netgate.com/pfSense_plus-v26_03_amd64-core/packagesite.pkg: Problem with the local SSL certificate
pkg-static: Failed to fetch https://pfsense-plus-pkg.netgate.com/pfSense_plus-v26_03_amd64-core/packagesite.tzst: Problem with the local SSL certificate
Unable to update repository pfSense-core
Updating pfSense repository catalogue...
pkg-static: Failed to fetch https://pfsense-plus-pkg.netgate.com/pfSense_plus-v26_03_amd64-pfSense_plus_v26_03/meta.conf: Problem with the local SSL certificate
pkg-static: Failed to fetch https://pfsense-plus-pkg.netgate.com/pfSense_plus-v26_03_amd64-pfSense_plus_v26_03/meta.txz: Problem with the local SSL certificate
repository pfSense has no meta file, using default settings
pkg-static: Failed to fetch https://pfsense-plus-pkg.netgate.com/pfSense_plus-v26_03_amd64-pfSense_plus_v26_03/data.pkg: Problem with the local SSL certificate
pkg-static: Failed to fetch https://pfsense-plus-pkg.netgate.com/pfSense_plus-v26_03_amd64-pfSense_plus_v26_03/data.tzst: Problem with the local SSL certificate
pkg-static: Failed to fetch https://pfsense-plus-pkg.netgate.com/pfSense_plus-v26_03_amd64-pfSense_plus_v26_03/packagesite.pkg: Problem with the local SSL certificate
pkg-static: Failed to fetch https://pfsense-plus-pkg.netgate.com/pfSense_plus-v26_03_amd64-pfSense_plus_v26_03/packagesite.tzst: Problem with the local SSL certificate
Unable to update repository pfSense
Error updating repositories!

I've read the package error can result from a DNS problem. I'm using external DNS and I'm able to resolve many names from the shell, so my DNS isn't broken.

Where should I be looking to resolve this?

patient0

@clarknova can you run pkg-static -d update and show the output?

And on a side note: if you mark console output as 'code' (the </> button) in your post(s) then it's more readable, like

Updating repositories metadata...
Updating pfSense-core repository catalogue...
pkg-static: Failed to fetch https://pfsense-plus-pkg.netgate.com/pfSense_plus-v26_03_amd64-core/meta.conf: Problem with the local SSL certificate
pkg-static: Failed to fetch https://pfsense-plus-pkg.netgate.com/pfSense_plus-v26_03_amd64-core/meta.txz: Problem with the local SSL certificate
repository pfSense-core has no meta file, using default settings

in contrast to

Updating repositories metadata...
Updating pfSense-core repository catalogue...
pkg-static: Failed to fetch https://pfsense-plus-pkg.netgate.com/pfSense_plus-v26_03_amd64-core/meta.conf: Problem with the local SSL certificate
pkg-static: Failed to fetch https://pfsense-plus-pkg.netgate.com/pfSense_plus-v26_03_amd64-core/meta.txz: Problem with the local SSL certificate
repository pfSense-core has no meta file, using default settings

clarknova

@patient0 said in Errors trying to install package:

pkg-static -d update

Thanks for the formatting tip. I tried the Grouped Code tag in my original post but couldn't make it work.

I've attached the output of the command here as a text file because it was flagged as spam when I pasted it in directly as code.

output.txt

patient0

@clarknova see https://forum.netgate.com/post/1242520

In forum thread Unable to update repository pfSense (26.03) stephenw10 provided a solution for it.

Gertjan

@clarknova said in Errors trying to install package:

I've attached the output of the command here as a text file because it was flagged as spam when I pasted it in directly as code.

output.txt

Have a look at the file in /usr/local/etc/pfSense/pkg/repos/
This is what I have :

Look at the time stamp of all these certificate files : very recent, just a couple of hours old.
From what I make of it : when pfSense does a pkg update/upgrade, it syncs these files first.
Your issue - I presume : that didn't work out, hence the "Problem with the local SSL certificate" messages as the files are not there, or truncated, or something like that.

clarknova

@patient0 said in Errors trying to install package:

https://forum.netgate.com/post/1242520

This was the fix. Thanks to everyone for the input.