Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login
    Introducing Netgate Nexus: Multi-Instance Management at Your Fingertips.

    ld-elf.so.1: Shared object "libssl.so.30" not found, required by "pkg"

    Scheduled Pinned Locked Moved Problems Installing or Upgrading pfSense Software
    19 Posts 3 Posters 6.5k Views 3 Watching
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • H Offline
      hack3rcon
      last edited by

      Hello,
      I am using pfSense 2.7.0 and I got the following error when installing a calligraphic package:

      [2.7.0-RELEASE][admin@Tor.home.arpa]/root: pkg install nano
      ld-elf.so.1: Shared object "libssl.so.30" not found, required by "pkg"
      

      I tried to fix the problem:

      [2.7.0-RELEASE][admin@Tor.home.arpa]/root: certctl rehash
      Scanning /usr/share/certs/untrusted for certificates...
      Scanning /usr/share/certs/trusted for certificates...
      Scanning /usr/local/share/certs for certificates...
      [2.7.0-RELEASE][admin@Tor.home.arpa]/root: pkg-static bootstrap -f
      pkg(8) is already installed. Forcing reinstallation through pkg(7).
      The package management tool is not yet installed on your system.
      Do you want to fetch and install it now? [y/N]: Y
      Bootstrapping pkg from pkg+https://pkg.pfsense.org/pfSense_v2_7_2_amd64-pfSense_v2_7_2, please wait...
      Verifying signature with trusted certificate pkg.pfsense.org.20160406... done
      Installing pkg-1.20.8_3...
      Newer FreeBSD version for package pkg:
      To ignore this error set IGNORE_OSVERSION=yes
      - package: 1400094
      - running kernel: 1400085
      Ignore the mismatch and continue? [y/N]: Y
      package pkg is already installed, forced install
      Extracting pkg-1.20.8_3: 100%
      Scanning /usr/share/certs/untrusted for certificates...
      Scanning /usr/share/certs/trusted for certificates...
      Scanning /usr/local/share/certs for certificates...
      [2.7.0-RELEASE][admin@Tor.home.arpa]/root: pkg-static update -f
      Updating pfSense-core repository catalogue...
      Fetching meta.conf: 100%    163 B   0.2kB/s    00:01    
      Fetching packagesite.pkg: 100%    1 KiB   1.5kB/s    00:01    
      Processing entries: 100%
      pfSense-core repository update completed. 4 packages processed.
      Updating pfSense repository catalogue...
      Fetching meta.conf: 100%    179 B   0.2kB/s    00:01    
      Fetching packagesite.pkg: 100%  192 KiB 196.2kB/s    00:01    
      Processing entries:   0%
      Newer FreeBSD version for package xmlcatmgr:
      To ignore this error set IGNORE_OSVERSION=yes
      - package: 1400094
      - running kernel: 1400085
      Ignore the mismatch and continue? [y/N]: Y
      Processing entries: 100%
      pfSense repository update completed. 550 packages processed.
      All repositories are up to date.
      

      I got the same error!!!

      Thank you.

      GertjanG 1 Reply Last reply Reply Quote 0
      • GertjanG Offline
        Gertjan @hack3rcon
        last edited by

        @hack3rcon said in ld-elf.so.1: Shared object "libssl.so.30" not found, required by "pkg":

        I am using pfSense 2.7.0 and

        You and your pfSense disagree.

        9dd69ce2-bdf8-41f9-9e45-a51aa9e00a82-image.png

        I see this like this : parts of pfSense is 2.7.2, and parts are 2.7.0.
        That's not good.

        Imho, the fastest, easy way out :
        Back up the pfSense config file on your PC.
        Download the pfSense 2.8.1 installer.
        Write it to an USB key (see pfSense documentation how to do that).
        Stick in in your pfSense, and boot from it : the installer kicks in.
        Install pfSense - you've already done this ones, things will go way faster now (see pfSense documentation how to do that).
        Make WAN + LAN work.
        From now on, you have GUI access : import the backed up pfSense config file, and you're asked to reboot. If not, reboot.
        All settings, package and package settings will get restored.
        Do some tests.
        Done.

        Time needed : 20 minutes or so ?

        No "help me" PM's please. Use the forum, the community will thank you.

        H 1 Reply Last reply Reply Quote 0
        • H Offline
          hack3rcon @Gertjan
          last edited by

          Hello @Gertjan,
          I did:

          # vi /usr/local/etc/pkg/repos/FreeBSD.conf
          
          FreeBSD: { enabled: yes }
          
          # vi /usr/local/etc/pkg/repos/pfSense.conf
          
          FreeBSD: { enabled: yes }
          
          # pkg-static upgrade -f pkg
          

          The problem seems to have been fixed.

          GertjanG 1 Reply Last reply Reply Quote 0
          • GertjanG Offline
            Gertjan @hack3rcon
            last edited by

            @hack3rcon

            Editing that file, changing 'no' to 'yes' can creates issues, as the vast majority of the "native FreeBSD packages" are not "packet compatible" with pfSense.

            I advice you to read all of Using Software from FreeBSD.

            Particularly this one :

            8b0a85c2-7a2f-4227-9fe0-16aa96fc1a12-image.png

            No "help me" PM's please. Use the forum, the community will thank you.

            H 1 Reply Last reply Reply Quote 0
            • H Offline
              hack3rcon @Gertjan
              last edited by

              Hello @Gertjan,
              I want to install Tor and nano packages.

              GertjanG 1 Reply Last reply Reply Quote 0
              • GertjanG Offline
                Gertjan @hack3rcon
                last edited by

                @hack3rcon

                Then the link I mentioned "Using Software from FreeBSD" is definitely for you.

                pfSense is a firewall.
                Not a mail or database or game or whatever server.
                What you want is more something for a private desktop device where you can add 'whatever you want'. Or a VM you spin off in your PC.

                pfSense uses a 'special' version of FreeBSD as it doesn't need the entire list of capabilities. It uses the 'router/firewall' part, and that's it. This also helps to make the device more secure, as less code == less bugs == more security.

                No "help me" PM's please. Use the forum, the community will thank you.

                H 1 Reply Last reply Reply Quote 1
                • H Offline
                  hack3rcon @Gertjan
                  last edited by

                  @Gertjan I did that spteps:

                  [2.7.2-RELEASE][admin@Tor.home.arpa]/root: pkg info
                  ld-elf.so.1: Shared object "libssl.so.35" not found, required by "pkg"
                  
                  GertjanG 1 Reply Last reply Reply Quote 0
                  • stephenw10S Offline
                    stephenw10 Netgate Administrator
                    last edited by

                    Because you're still on a mismatched version. You could be running a number of mismatched things after enabling the FreeBSD repos.

                    After running certctl rehash you should have been able to run pfSense-upgrade to reach 2.7.2. And from there upgrade to 2.8.1.

                    It looks like you probably pulled in a newer version of pkg from FreeBSD though which is why you see the library mismatch error. That shouldn't actually be a problem as long as pkg-static still works as expected.

                    Nano is available from out pkg repo. But ee is included by default anyway and it does almost everything Nano does.

                    H 1 Reply Last reply Reply Quote 0
                    • GertjanG Offline
                      Gertjan @hack3rcon
                      last edited by Gertjan

                      @hack3rcon

                      Example :
                      This command shows the 'system' libraries the 'pkg' executable needs :

                      [26.03-RELEASE][root@pfSense.bhf.tld]/root: ldd /usr/local/sbin/pkg
                      /usr/local/sbin/pkg:
                              libelf.so.2 => /lib/libelf.so.2 (0xf118645a000)
                              libjail.so.1 => /lib/libjail.so.1 (0xf11871d7000)
                              libm.so.5 => /lib/libm.so.5 (0xf11874cb000)
                              libarchive.so.7 => /usr/lib/libarchive.so.7 (0xf1187fef000)
                              libz.so.6 => /lib/libz.so.6 (0xf1188b08000)
                              libutil.so.10 => /lib/libutil.so.10 (0xf11892fc000)
                              libssl.so.35 => /usr/lib/libssl.so.35 (0xf118ad4c000)
                              libcrypto.so.35 => /lib/libcrypto.so.35 (0xf118c000000)
                              libthr.so.3 => /lib/libthr.so.3 (0xf118b1cf000)
                              libc.so.7 => /lib/libc.so.7 (0xf118d1e6000)
                              libbz2.so.4 => /usr/lib/libbz2.so.4 (0xf118d64e000)
                              liblzma.so.5 => /usr/lib/liblzma.so.5 (0xf118e47f000)
                              libbsdxml.so.4 => /lib/libbsdxml.so.4 (0xf118ef5b000)
                              libprivatezstd.so.5 => /usr/lib/libprivatezstd.so.5 (0xf118a868000)
                              libsys.so.7 => /lib/libsys.so.7 (0xf118fd65000)
                              libmd.so.7 => /lib/libmd.so.7 (0xf1190887000)
                              [vdso] (0xf1186170000)
                      

                      The file name and file exact version are important.
                      My 'pkg' also uses "libssl.so.35".
                      Every OS or system version is different, as the 'kernel' is different etc.
                      When you install something from the FreeBSD, the kernel info doesn't (most probably) not match, as pfSense (Netgate) made it's own kernel.
                      The 'pkg' is smart (and very dumb), and installs all the needed libraries, overwriting your system (pfSense) libraries.
                      Now your pfSense is full with

                      ld-elf.so.Q: Shared object "libxxx.so.30" not found, required by yyyyy
                      

                      and it will come crashing down.

                      No "help me" PM's please. Use the forum, the community will thank you.

                      1 Reply Last reply Reply Quote 0
                      • H Offline
                        hack3rcon @stephenw10
                        last edited by

                        Hello @stephenw10,
                        Are these commands correct?

                        $ pkg-static clean -ay
                        $ pkg-static install -fy pkg pfSense-repo
                        $ certctl rehash
                        $ pfSense-upgrade
                        
                        1 Reply Last reply Reply Quote 0
                        • stephenw10S Offline
                          stephenw10 Netgate Administrator
                          last edited by

                          There's no need to clear the pkg cache or install the repo pkg.

                          Just run cert rehash, if you're still on 2.7.0, then run pfSense upgrade.

                          H 1 Reply Last reply Reply Quote 0
                          • H Offline
                            hack3rcon @stephenw10
                            last edited by

                            Hello @stephenw10,
                            No, I moved to 2.8.1.

                            1 Reply Last reply Reply Quote 0
                            • stephenw10S Offline
                              stephenw10 Netgate Administrator
                              last edited by

                              And you're still seeing the same library error?

                              What does pkg-static info pkg show?

                              H 1 Reply Last reply Reply Quote 0
                              • H Offline
                                hack3rcon
                                last edited by

                                I got the same error on pfSense 2.8.1:

                                vi /usr/local/etc/pkg/repos/FreeBSD.conf
                                
                                Change:
                                FreeBSD: { enabled: no }
                                
                                To:
                                FreeBSD: { enabled: yes }
                                
                                Then you need to:
                                vi /usr/local/etc/pkg/repos/pfSense.conf
                                
                                and again change:
                                FreeBSD: { enabled: no }
                                
                                To:
                                FreeBSD: { enabled: yes }
                                
                                This will allow us to install the Tor package, to do this use the following command:
                                : pkg install tor
                                
                                1 Reply Last reply Reply Quote 0
                                • H Offline
                                  hack3rcon @stephenw10
                                  last edited by hack3rcon

                                  @stephenw10
                                  Lib.png
                                  Kernel.png

                                  1 Reply Last reply Reply Quote 0
                                  • stephenw10S Offline
                                    stephenw10 Netgate Administrator
                                    last edited by

                                    Ok whatever it's pulling in from the FreeBSD repo has broken pkg. Check the logs to see exactly what got installed when you tried to install tor. Likely that cannot be done from that repo.

                                    H 1 Reply Last reply Reply Quote 0
                                    • H Offline
                                      hack3rcon @stephenw10
                                      last edited by

                                      Hello @stephenw10,
                                      How to check?

                                      1 Reply Last reply Reply Quote 0
                                      • stephenw10S Offline
                                        stephenw10 Netgate Administrator
                                        last edited by

                                        In the pfSense System logs you will see the pkg process show upgrades. Here it will have upgraded pkg itself to an incompatible version from the FreeBSD repo.

                                        H 1 Reply Last reply Reply Quote 0
                                        • H Offline
                                          hack3rcon @stephenw10
                                          last edited by

                                          Hello @stephenw10,
                                          How do you install Tor on pfSense 2.8.1?

                                          1 Reply Last reply Reply Quote 0
                                          • First post
                                            Last post
                                          Copyright 2026 Rubicon Communications LLC (Netgate). All rights reserved.
                                          Privacy Policy · Cookie Policy