Error upgrading jails after updating host system to 12.0-RELEASE

[iced_maggot]

Hello all, hoping for a bit of assistance with a problem I am having after updating from Freenas 11.3 to Truenas 12.0.

I have two jails, a Plex jail (manually created, not a plugin jail and Plex also installed manually if that matters) running 11.3-RELEASE-p12 and a Transmission jail (also manually created) running 11.4-RELEASE.

Since updating the main OS to 12.0, when I try to update either jails via the GUI, I get the following error message:

Error after running update jail via GUI:

"Error: < urlopen error [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self signed certificate (_ssl.c:1123) >"

Similarly, running iocage upgrade JAILNAME -r 12.2-RELEASE via the CLI, gives the following error. Has anyone run into this previously and have any pointers that could help? My hardware specs are listed below and system has been running without drama for many years now, first on 9.10 and later on 11.2/11.3.

Error in console after running iocage upgrade command:

"Traceback (most recent call last):
File "/usr/local/lib/python3.8/urllib/request.py", line 1350, in do_open
h.request(req.get_method(), req.selector, req.data, headers,
File "/usr/local/lib/python3.8/http/client.py", line 1255, in request
self._send_request(method, url, body, headers, encode_chunked)
File "/usr/local/lib/python3.8/http/client.py", line 1301, in _send_request
self.endheaders(body, encode_chunked=encode_chunked)
File "/usr/local/lib/python3.8/http/client.py", line 1250, in endheaders
self._send_output(message_body, encode_chunked=encode_chunked)
File "/usr/local/lib/python3.8/http/client.py", line 1010, in _send_output
self.send(msg)
File "/usr/local/lib/python3.8/http/client.py", line 950, in send
self.connect()
File "/usr/local/lib/python3.8/http/client.py", line 1424, in connect
self.sock = self._context.wrap_socket(self.sock,
File "/usr/local/lib/python3.8/ssl.py", line 500, in wrap_socket
return self.sslsocket_class._create(
File "/usr/local/lib/python3.8/ssl.py", line 1040, in _create
self.do_handshake()
File "/usr/local/lib/python3.8/ssl.py", line 1309, in do_handshake
self._sslobj.do_handshake()
ssl.SSLCertVerificationError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self signed certificate (_ssl.c:1123)

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
File "/usr/local/bin/iocage", line 10, in <module>
sys.exit(cli())
File "/usr/local/lib/python3.8/site-packages/click/core.py", line 764, in __call__
return self.main(*args, **kwargs)
File "/usr/local/lib/python3.8/site-packages/click/core.py", line 717, in main
rv = self.invoke(ctx)
File "/usr/local/lib/python3.8/site-packages/click/core.py", line 1137, in invoke
return _process_result(sub_ctx.command.invoke(sub_ctx))
File "/usr/local/lib/python3.8/site-packages/click/core.py", line 956, in invoke
return ctx.invoke(self.callback, **ctx.params)
File "/usr/local/lib/python3.8/site-packages/click/core.py", line 555, in invoke
return callback(*args, **kwargs)
File "/usr/local/lib/python3.8/site-packages/iocage_cli/upgrade.py", line 40, in cli
ioc.IOCage(jail=jail, skip_jails=skip_jails).upgrade(release)
File "/usr/local/lib/python3.8/site-packages/iocage_lib/iocage.py", line 2071, in upgrade
new_release = ioc_upgrade.IOCUpgrade(
File "/usr/local/lib/python3.8/site-packages/iocage_lib/ioc_upgrade.py", line 110, in upgrade_jail
with urllib.request.urlopen(f) as fbsd_update:
File "/usr/local/lib/python3.8/urllib/request.py", line 222, in urlopen
return opener.open(url, data, timeout)
File "/usr/local/lib/python3.8/urllib/request.py", line 525, in open
response = self._open(req, data)
File "/usr/local/lib/python3.8/urllib/request.py", line 542, in _open
result = self._call_chain(self.handle_open, protocol, protocol +
File "/usr/local/lib/python3.8/urllib/request.py", line 502, in _call_chain
result = func(*args)
File "/usr/local/lib/python3.8/urllib/request.py", line 1393, in https_open
return self.do_open(http.client.HTTPSConnection, req,
File "/usr/local/lib/python3.8/urllib/request.py", line 1353, in do_open
raise URLError(err)
urllib.error.URLError: <urlopen error [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self signed certificate (_ssl.c:1123)>"


Hardware summary:
CPU: AMD FX-4300
MOBO: Gigabyte GA-78LMT-USB3
RAM: 32gb, ECC unbuffered
STORAGE CONTROLLER: LSI 9211-8
HDDS: 6x 3tb HDD for storage pool, 2x 256GB SSD for jail pool and 2x128gb SSD bootpool

 

[iced_maggot]

Update: I have also tried going back to 11.3 boot environment and no change unfortunately - still get the SSL certificate error.

 

[iced_maggot]

Further update: it seems using the update fetch command also has the SSL certificate verification error. I was able to get around this by adding —noverify option with the fetch command and then it would go ahead and download the latest bsd release, ignoring the certificate error. Does such an option exist when using the iocage upgrade or update commands?

 

[iced_maggot]

Hey all, still struggling with this SSL certificate error when trying to upgrade iocage jail. Anyone have any pointers?