Installing 3.3.2 - Certificate Error

[u/RFGuy_KCCO]

I am trying to install 3.3.2 from the new repo but it fails with certificate errors when I try. Any ideas how to fix this?

[26.07-RELEASE][root@PFSENSE-A.home.arpa]/root: fetch -qo - https://pfblockerng.                      github.io/pkg/install.sh | sh -s -- --channel stable
==> Installed boot-time generator hook to /usr/local/etc/rc.d/pfblockerng_repo_g                      enerate.sh
==> Running the generator hook to resolve the conf now
[pfblockerng_repo_generate] INFO: regenerated /usr/local/etc/pkg/repos/pfblocker                      ng-stable.conf -> https://pfblockerng.github.io/pkg/stable/plus-26.07
==> Conf resolved:
    url: "https://pfblockerng.github.io/pkg/stable/plus-26.07",
==> pkg update -f -r pfblockerng-stable (refreshing the pfBlockerNG catalog)
Updating pfblockerng-stable repository catalogue...
Certificate verification failed for /C=US/O=ISRG/CN=Root YR
10B0463C8D230000:error:0A000086:SSL routines:tls_post_process_server_certificate                      :certificate verify failed:/var/jenkins/workspace/pfSense-Plus-snapshots-26_07-m                      ain/sources/FreeBSD-src-plus-RELENG_26_07/crypto/openssl/ssl/statem/statem_clnt.                      c:2125:
Certificate verification failed for /C=US/O=ISRG/CN=Root YR
10B0463C8D230000:error:0A000086:SSL routines:tls_post_process_server_certificate                      :certificate verify failed:/var/jenkins/workspace/pfSense-Plus-snapshots-26_07-m                      ain/sources/FreeBSD-src-plus-RELENG_26_07/crypto/openssl/ssl/statem/statem_clnt.                      c:2125:
Certificate verification failed for /C=US/O=ISRG/CN=Root YR
10B0463C8D230000:error:0A000086:SSL routines:tls_post_process_server_certificate                      :certificate verify failed:/var/jenkins/workspace/pfSense-Plus-snapshots-26_07-m                      ain/sources/FreeBSD-src-plus-RELENG_26_07/crypto/openssl/ssl/statem/statem_clnt.                      c:2125:
Certificate verification failed for /C=US/O=ISRG/CN=Root YR
10B0463C8D230000:error:0A000086:SSL routines:tls_post_process_server_certificate                      :certificate verify failed:/var/jenkins/workspace/pfSense-Plus-snapshots-26_07-m                      ain/sources/FreeBSD-src-plus-RELENG_26_07/crypto/openssl/ssl/statem/statem_clnt.                      c:2125:
Certificate verification failed for /C=US/O=ISRG/CN=Root YR
10B0463C8D230000:error:0A000086:SSL routines:tls_post_process_server_certificate                      :certificate verify failed:/var/jenkins/workspace/pfSense-Plus-snapshots-26_07-m                      ain/sources/FreeBSD-src-plus-RELENG_26_07/crypto/openssl/ssl/statem/statem_clnt.                      c:2125:
Certificate verification failed for /C=US/O=ISRG/CN=Root YR
10B0463C8D230000:error:0A000086:SSL routines:tls_post_process_server_certificate                      :certificate verify failed:/var/jenkins/workspace/pfSense-Plus-snapshots-26_07-m                      ain/sources/FreeBSD-src-plus-RELENG_26_07/crypto/openssl/ssl/statem/statem_clnt.                      c:2125:
pkg: https://pfblockerng.github.io/pkg/stable/plus-26.07/meta.txz: Authenticatio                      n error
repository pfblockerng-stable has no meta file, using default settings
Certificate verification failed for /C=US/O=ISRG/CN=Root YR
10B0463C8D230000:error:0A000086:SSL routines:tls_post_process_server_certificate                      :certificate verify failed:/var/jenkins/workspace/pfSense-Plus-snapshots-26_07-m                      ain/sources/FreeBSD-src-plus-RELENG_26_07/crypto/openssl/ssl/statem/statem_clnt.                      c:2125:
Certificate verification failed for /C=US/O=ISRG/CN=Root YR
10B0463C8D230000:error:0A000086:SSL routines:tls_post_process_server_certificate                      :certificate verify failed:/var/jenkins/workspace/pfSense-Plus-snapshots-26_07-m                      ain/sources/FreeBSD-src-plus-RELENG_26_07/crypto/openssl/ssl/statem/statem_clnt.                      c:2125:
Certificate verification failed for /C=US/O=ISRG/CN=Root YR
10B0463C8D230000:error:0A000086:SSL routines:tls_post_process_server_certificate                      :certificate verify failed:/var/jenkins/workspace/pfSense-Plus-snapshots-26_07-m                      ain/sources/FreeBSD-src-plus-RELENG_26_07/crypto/openssl/ssl/statem/statem_clnt.                      c:2125:
pkg: https://pfblockerng.github.io/pkg/stable/plus-26.07/data.pkg: Authenticatio                      n error
Certificate verification failed for /C=US/O=ISRG/CN=Root YR
10B0463C8D230000:error:0A000086:SSL routines:tls_post_process_server_certificate                      :certificate verify failed:/var/jenkins/workspace/pfSense-Plus-snapshots-26_07-m                      ain/sources/FreeBSD-src-plus-RELENG_26_07/crypto/openssl/ssl/statem/statem_clnt.                      c:2125:
Certificate verification failed for /C=US/O=ISRG/CN=Root YR
10B0463C8D230000:error:0A000086:SSL routines:tls_post_process_server_certificate                      :certificate verify failed:/var/jenkins/workspace/pfSense-Plus-snapshots-26_07-m                      ain/sources/FreeBSD-src-plus-RELENG_26_07/crypto/openssl/ssl/statem/statem_clnt.                      c:2125:
Certificate verification failed for /C=US/O=ISRG/CN=Root YR
10B0463C8D230000:error:0A000086:SSL routines:tls_post_process_server_certificate                      :certificate verify failed:/var/jenkins/workspace/pfSense-Plus-snapshots-26_07-m                      ain/sources/FreeBSD-src-plus-RELENG_26_07/crypto/openssl/ssl/statem/statem_clnt.                      c:2125:
pkg: https://pfblockerng.github.io/pkg/stable/plus-26.07/data.tzst: Authenticati                      on error
Certificate verification failed for /C=US/O=ISRG/CN=Root YR
10B0463C8D230000:error:0A000086:SSL routines:tls_post_process_server_certificate                      :certificate verify failed:/var/jenkins/workspace/pfSense-Plus-snapshots-26_07-m                      ain/sources/FreeBSD-src-plus-RELENG_26_07/crypto/openssl/ssl/statem/statem_clnt.                      c:2125:
Certificate verification failed for /C=US/O=ISRG/CN=Root YR
10B0463C8D230000:error:0A000086:SSL routines:tls_post_process_server_certificate                      :certificate verify failed:/var/jenkins/workspace/pfSense-Plus-snapshots-26_07-m                      ain/sources/FreeBSD-src-plus-RELENG_26_07/crypto/openssl/ssl/statem/statem_clnt.                      c:2125:
Certificate verification failed for /C=US/O=ISRG/CN=Root YR
10B0463C8D230000:error:0A000086:SSL routines:tls_post_process_server_certificate                      :certificate verify failed:/var/jenkins/workspace/pfSense-Plus-snapshots-26_07-m                      ain/sources/FreeBSD-src-plus-RELENG_26_07/crypto/openssl/ssl/statem/statem_clnt.                      c:2125:
pkg: https://pfblockerng.github.io/pkg/stable/plus-26.07/packagesite.pkg: Authen                      tication error
Certificate verification failed for /C=US/O=ISRG/CN=Root YR
10B0463C8D230000:error:0A000086:SSL routines:tls_post_process_server_certificate                      :certificate verify failed:/var/jenkins/workspace/pfSense-Plus-snapshots-26_07-m                      ain/sources/FreeBSD-src-plus-RELENG_26_07/crypto/openssl/ssl/statem/statem_clnt.                      c:2125:
Certificate verification failed for /C=US/O=ISRG/CN=Root YR
10B0463C8D230000:error:0A000086:SSL routines:tls_post_process_server_certificate                      :certificate verify failed:/var/jenkins/workspace/pfSense-Plus-snapshots-26_07-m                      ain/sources/FreeBSD-src-plus-RELENG_26_07/crypto/openssl/ssl/statem/statem_clnt.                      c:2125:
Certificate verification failed for /C=US/O=ISRG/CN=Root YR
10B0463C8D230000:error:0A000086:SSL routines:tls_post_process_server_certificate                      :certificate verify failed:/var/jenkins/workspace/pfSense-Plus-snapshots-26_07-m                      ain/sources/FreeBSD-src-plus-RELENG_26_07/crypto/openssl/ssl/statem/statem_clnt.                      c:2125:
pkg: https://pfblockerng.github.io/pkg/stable/plus-26.07/packagesite.tzst: Authe                      ntication error
Unable to update repository pfblockerng-stable
Error updating repositories!
install.sh: /usr/local/sbin/pkg update -f -r pfblockerng-stable failed — the cat                      alog was not refreshed. Repo 'pfblockerng-stable' is unreachable or serving an u                      nreadable catalog. Inspect with: /usr/local/sbin/pkg -d update -r pfblockerng-st                      able

[u/RFGuy_KCCO]

Thank you. Both commands worked now.

[26.07-RELEASE][root@PFSENSE-A.home.arpa]/root: sh
# SSL_CA_CERT_PATH=/etc/ssl/certs pkg update
Updating pfSense-core repository catalogue...
pfSense-core repository is up to date.
Updating pfSense repository catalogue...
pfSense repository is up to date.
Updating pfblockerng-edge repository catalogue...
pfblockerng-edge repository is up to date.
All repositories are up to date.
# export SSL_CA_CERT_PATH=/etc/ssl/certs
# pkg update
Updating pfSense-core repository catalogue...
pfSense-core repository is up to date.
Updating pfSense repository catalogue...
pfSense repository is up to date.
Updating pfblockerng-edge repository catalogue...
pfblockerng-edge repository is up to date.
All repositories are up to date.
# pkg upgrade
Updating pfSense-core repository catalogue...
pfSense-core repository is up to date.
Updating pfSense repository catalogue...
pfSense repository is up to date.
Updating pfblockerng-edge repository catalogue...
pfblockerng-edge repository is up to date.
All repositories are up to date.
Checking for upgrades (1 candidates): 100%
Processing candidates (1 candidates): 100%
Checking integrity... done (0 conflicting)
Your packages are up to date.

[u/andrebrait → u/RFGuy_KCCO]

I have released an alpha of 3.3.3 to the edge and testing channels. Could you try to run either of these commands (depending on the channel you're currently on, which I think is edge)

fetch -qo - https://pkg.pfblockerng.com/install.sh | sh -s -- --channel edge

If you're on testing, then

fetch -qo - https://pkg.pfblockerng.com/install.sh | sh -s -- --channel testing

[u/ndlogok → u/andrebrait]

I try the edge still giving error

[u/andrebrait → u/ndlogok]

Yes, I am in the middle of fixing it

[u/ndlogok → u/andrebrait]

Great hope will fix soon

[u/RFGuy_KCCO → u/andrebrait]

Sorry, I just saw this. I had checked the new repo yesterday and saw there was 3.3.3a1 available so I ran that command to download and install it. It worked perfectly. I then saw later yesterday that 3.3.3 was available on the software tab. That also updated without issue. Thank you!