Upgrading 11.1u7 to 11.2u7 breaks SSL cert?

mitch8b

Cadet
Joined
Dec 20, 2019
Messages
2
So I tried installing 11.2u7 for my first FreeNAS. Using USB drive to install to an ssd I would get "panic: free: guard1 fail" after a handful of 0x80 errors. So I zero'ed drives per suggestions HERE with Ubuntu test run via sudo dd if=/dev/zero of=/dev/sdb status=progress and tried to install again but got the same errors.

11.1u7 can install with no errors. so i tried to manually update to 11.2u7 from the web GUI of 11.1u7. This worked but during boot there were error's and failed to's that were scrolled away too fast to read. (Is there any way to go back read what gets outputted during boot?)


When I go to available plugins i get this:


Code:
Update server could not be reached

HTTPSConnectionPool(host='update-master.ixsystems.com', port=443): Max retries exceeded with url: /FreeNAS/trains.txt (Caused by SSLError(SSLError("bad handshake: Error([('SSL routines', 'ssl3_get_server_certificate', 'certificate verify failed')],)",),))


Traceback
Traceback (most recent call last):
File "/usr/local/lib/python3.6/site-packages/urllib3/contrib/pyopenssl.py", line 441, in wrap_socket
cnx.do_handshake()
File "/usr/local/lib/python3.6/site-packages/OpenSSL/SSL.py", line 1806, in do_handshake
self._raise_ssl_error(self._ssl, result)
File "/usr/local/lib/python3.6/site-packages/OpenSSL/SSL.py", line 1546, in _raise_ssl_error
_raise_current_error()
File "/usr/local/lib/python3.6/site-packages/OpenSSL/_util.py", line 54, in exception_from_error_queue
raise exception_type(errors)
OpenSSL.SSL.Error: [('SSL routines', 'ssl3_get_server_certificate', 'certificate verify failed')]

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
File "/usr/local/lib/python3.6/site-packages/urllib3/connectionpool.py", line 601, in urlopen
chunked=chunked)
File "/usr/local/lib/python3.6/site-packages/urllib3/connectionpool.py", line 346, in _make_request
self._validate_conn(conn)
File "/usr/local/lib/python3.6/site-packages/urllib3/connectionpool.py", line 850, in _validate_conn
conn.connect()
File "/usr/local/lib/python3.6/site-packages/urllib3/connection.py", line 326, in connect
ssl_context=context)
File "/usr/local/lib/python3.6/site-packages/urllib3/util/ssl_.py", line 329, in ssl_wrap_socket
return context.wrap_socket(sock, server_hostname=server_hostname)
File "/usr/local/lib/python3.6/site-packages/urllib3/contrib/pyopenssl.py", line 448, in wrap_socket
raise ssl.SSLError('bad handshake: %r' % e)
ssl.SSLError: ("bad handshake: Error([('SSL routines', 'ssl3_get_server_certificate', 'certificate verify failed')],)",)

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
File "/usr/local/lib/python3.6/site-packages/requests/adapters.py", line 440, in send
timeout=timeout
File "/usr/local/lib/python3.6/site-packages/urllib3/connectionpool.py", line 639, in urlopen
_stacktrace=sys.exc_info()[2])
File "/usr/local/lib/python3.6/site-packages/urllib3/util/retry.py", line 388, in increment
raise MaxRetryError(_pool, url, error or ResponseError(cause))
urllib3.exceptions.MaxRetryError: HTTPSConnectionPool(host='update-master.ixsystems.com', port=443): Max retries exceeded with url: /FreeNAS/trains.txt (Caused by SSLError(SSLError("bad handshake: Error([('SSL routines', 'ssl3_get_server_certificate', 'certificate verify failed')],)",),))

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
File "./freenasUI/system/views.py", line 1686, in update_check
train=updateobj.get_train(),
File "./freenasUI/system/models.py", line 649, in get_train
trains = conf.AvailableTrains() or []
File "/usr/local/lib/freenasOS/Configuration.py", line 973, in AvailableTrains
fileref = self.TryGetNetworkFile(file=TRAIN_FILE, reason="FetchTrains")
File "/usr/local/lib/freenasOS/Configuration.py", line 696, in TryGetNetworkFile
raise url_exc
File "/usr/local/lib/freenasOS/Configuration.py", line 669, in TryGetNetworkFile
stream=True, headers=header_dict)
File "/usr/local/lib/python3.6/site-packages/requests/api.py", line 72, in get
return request('get', url, params=params, **kwargs)
File "/usr/local/lib/python3.6/site-packages/requests/api.py", line 58, in request
return session.request(method=method, url=url, **kwargs)
File "/usr/local/lib/python3.6/site-packages/requests/sessions.py", line 508, in request
resp = self.send(prep, **send_kwargs)
File "/usr/local/lib/python3.6/site-packages/requests/sessions.py", line 618, in send
r = adapter.send(request, **kwargs)
File "/usr/local/lib/python3.6/site-packages/requests/adapters.py", line 506, in send
raise SSLError(e, request=request)
requests.exceptions.SSLError: HTTPSConnectionPool(host='update-master.ixsystems.com', port=443): Max retries exceeded with url: /FreeNAS/trains.txt (Caused by SSLError(SSLError("bad handshake: Error([('SSL routines', 'ssl3_get_server_certificate', 'certificate verify failed')],)",),))



Same thing with any service that needs to download from the internet.
Everything works in 11.1u7 with the same IP addressing.

Any ideas on how to fix this?
 
D

dlavigne

Guest
/var/log/dmesg.boot contains the boot messages. /var/log/messages contains the current errors.
 

pschatz100

Guru
Joined
Mar 30, 2014
Messages
1,184
Please post your system specs.
 

mitch8b

Cadet
Joined
Dec 20, 2019
Messages
2
OS Version:
FreeNAS-11.2-U7
(Build Date: Nov 19, 2019 0:4)
Processor:
AMD FX(tm)-4130 Quad-Core Processor (4 cores)
Memory:
8 GiB
Motherboard:
ga-78lmt-usb3

the onboard LAN is Realtek:/
 

pschatz100

Guru
Joined
Mar 30, 2014
Messages
1,184
More complete details would be helpful. You reported two problems: Unable to upgrade to 11.2 and problems downloading plugins

Are you booting from a flash drive?

A few suggestions:
1) If you are booting from a flash drive, try another flash device or better yet a small SSD. Your old boot device might be failing.
2) Disable all USB port enhancements - you do not want any special speed or charging options enabled.
3) Realtek network interfaces are prone to problems with FreeBSD and Freenas. Purchase an inexpensive Intel network card and disable the onboard Lan.

Good luck.
 
Top