check_upgrade: "Updating repositories metadata" returned error code 1

Cyntech

On Netgate 4200 running on 26.03. I cannot upgrade the software, the logs are filled with this message.

pkg -d update gives the following error

DBG(1)[45142]> (fetch) == Info: could not load PEM client certificate from /usr/local/etc/pfSense/pkg/repos/pfSense-repo-0000-cert.pem, OpenSSL error error:0480006C:PEM routines::no start line, (no key found, wrong pass phrase, or wrong file format?)

stephenw10

Try re-pulling the repo data with: pfSense-repoc -NZD

What error does that show (if any)?

Cyntech

pfSense-repoc: repoc_zuul: Failed to read the repository data (1).
pfSense-repoc: pfSense-repoc: exec: failed to run /usr/local/sbin/licctl: No such file or directory

OS: FreeBSD
OS Version: 16.0-CURRENT
Platform: amd64
Product: Netgate pfSense Plus
Version: 26.03-RELEASE
FS type: zfs
Language: en_US
Model: Netgate 4200
NDI:
Package prefix: pfSense-pkg-
Serial:
Repo path: /usr/local/etc/pfSense

stephenw10

Ah, sorry try: pfSense-repoc -ND

Cyntech

@stephenw10 said in check_upgrade: "Updating repositories metadata" returned error code 1:

pfSense-repoc -ND

This does not give an error. It gives the same data readout as before with the following at the bottom:

Messages:
Your Netgate device has pfSense+ as part of your device purchase.

No change when trying to check upgrades.

stephenw10

Hmm, try running pfSense-upgrade -dc after the repoc command. That should replace the missing cert there.

Cyntech

@stephenw10 This gets the same result as well. No change in behavior after running it.

Messages:
Your Netgate device has pfSense+ as part of your device purchase.
ERROR: It was not possible to determine pkg remote version
>>> Updating repositories metadata...
Updating pfSense-core repository catalogue...
pkg-static: Repository pfSense-core has a wrong packagesite, need to re-create database
pkg-static: Failed to fetch https://pfsense-plus-pkg.netgate.com/pfSense_plus-v26_07_amd64-core/meta.conf: Problem with the local SSL certificate
pkg-static: Failed to fetch https://pfsense-plus-pkg.netgate.com/pfSense_plus-v26_07_amd64-core/meta.txz: Problem with the local SSL certificate
repository pfSense-core has no meta file, using default settings
pkg-static: Failed to fetch https://pfsense-plus-pkg.netgate.com/pfSense_plus-v26_07_amd64-core/data.pkg: Problem with the local SSL certificate
pkg-static: Failed to fetch https://pfsense-plus-pkg.netgate.com/pfSense_plus-v26_07_amd64-core/data.tzst: Problem with the local SSL certificate
pkg-static: Failed to fetch https://pfsense-plus-pkg.netgate.com/pfSense_plus-v26_07_amd64-core/packagesite.pkg: Problem with the local SSL certificate
pkg-static: Failed to fetch https://pfsense-plus-pkg.netgate.com/pfSense_plus-v26_07_amd64-core/packagesite.tzst: Problem with the local SSL certificate
Unable to update repository pfSense-core
Updating pfSense repository catalogue...
pkg-static: Repository pfSense has a wrong packagesite, need to re-create database
pkg-static: Failed to fetch https://pfsense-plus-pkg.netgate.com/pfSense_plus-v26_07_amd64-pfSense_plus_v26_07/meta.conf: Problem with the local SSL certificate
pkg-static: Failed to fetch https://pfsense-plus-pkg.netgate.com/pfSense_plus-v26_07_amd64-pfSense_plus_v26_07/meta.txz: Problem with the local SSL certificate
repository pfSense has no meta file, using default settings
pkg-static: Failed to fetch https://pfsense-plus-pkg.netgate.com/pfSense_plus-v26_07_amd64-pfSense_plus_v26_07/data.pkg: Problem with the local SSL certificate
pkg-static: Failed to fetch https://pfsense-plus-pkg.netgate.com/pfSense_plus-v26_07_amd64-pfSense_plus_v26_07/data.tzst: Problem with the local SSL certificate
pkg-static: Failed to fetch https://pfsense-plus-pkg.netgate.com/pfSense_plus-v26_07_amd64-pfSense_plus_v26_07/packagesite.pkg: Problem with the local SSL certificate
pkg-static: Failed to fetch https://pfsense-plus-pkg.netgate.com/pfSense_plus-v26_07_amd64-pfSense_plus_v26_07/packagesite.tzst: Problem with the local SSL certificate
Unable to update repository pfSense
Error updating repositories!
ERROR: It was not possible to determine pfSense-base remote version
ERROR: It was not possible to determine pfSense-kernel-pfSense remote version
ERROR: It was not possible to determine pfSense remote version
Your system is up to date

stephenw10

Ah, I wonder if you upgraded to 26.03 at an unfortunate moment.

What does this show?: pkg info -x pfSense-repoc

For a very short time there was a bad version published earlier in the year.

Cyntech

@stephenw10 Just my luck!

pfSense-repoc-20260508.174916

stephenw10

Mmm. that does look around the right time try running:

pfSense-repoc -N && sh -c 'for f in $(grep -L -m1 "^-----BEGIN CERTIFICATE-----" /usr/local/etc/pfSense/pkg/repos/pfSense-repo-*-cert.pem 2>/dev/null); do if [ -e "$f" ]; then sed -i "" "s/.\\{64\\}/&\n/g" "$f"; sed -i "" -e "1s/^/-----BEGIN CERTIFICATE-----\n/" -e "\$s/\$/\n-----END CERTIFICATE-----/" "$f"; fi; done' && pkg upgrade -y pfSense-repoc

Cyntech

Thanks, that fixed it.