pfSense Gold Subscription

Author Topic: 2.3.1 Update 1 Available  (Read 6030 times)

0 Members and 1 Guest are viewing this topic.

Offline cmb

  • Hero Member
  • *****
  • Posts: 11230
  • Karma: +893/-7
    • View Profile
    • Chris Buechler
2.3.1 Update 1 Available
« on: May 25, 2016, 05:56:17 pm »
2.3.1 Update 1 is now available. The changes can be found appended to the 2.3.1-RELEASE change list under Update 1.
https://doc.pfsense.org/index.php/2.3.1_New_Features_and_Changes#Update_1

Offline jdillard

  • Administrator
  • Sr. Member
  • *****
  • Posts: 534
  • Karma: +124/-1
  • Web Dude
    • View Profile
    • Personal Website
Re: 2.3.1 Update 1 Available
« Reply #1 on: May 26, 2016, 12:01:03 pm »

Offline AR15USR

  • Full Member
  • ***
  • Posts: 266
  • Karma: +10/-0
    • View Profile
Re: 2.3.1 Update 1 Available
« Reply #2 on: May 26, 2016, 12:45:26 pm »
2.3.1 Update 1 is now available. The changes can be found appended to the 2.3.1-RELEASE change list under Update 1.
https://doc.pfsense.org/index.php/2.3.1_New_Features_and_Changes#Update_1

I noticed your doc (https://pfsense.org/security/advisories/pfSense-SA-16_05.webgui.asc) is PGP signed. Do you have your public key posted for us to download? Or whats the ID we can search the key servers for?

Thanks
_________________________

Release: pfSense 2.3.4

Offline cmb

  • Hero Member
  • *****
  • Posts: 11230
  • Karma: +893/-7
    • View Profile
    • Chris Buechler
Re: 2.3.1 Update 1 Available
« Reply #3 on: May 26, 2016, 04:00:44 pm »
I noticed your doc (https://pfsense.org/security/advisories/pfSense-SA-16_05.webgui.asc) is PGP signed. Do you have your public key posted for us to download? Or whats the ID we can search the key servers for?

ID 0x9214F8DA

Offline JorgeOliveira

  • Full Member
  • ***
  • Posts: 153
  • Karma: +24/-1
  • May the Triforce be with you...
    • View Profile
Re: 2.3.1 Update 1 Available
« Reply #4 on: May 26, 2016, 04:05:36 pm »
Just a side-note, using 32bit key IDs is a bad idea. See https://evil32.com for details.

I've found a key on the keyserver for "pfSense Security Team (Security Advisories for pfSense) <security AT pfsense DOT org>" with the following fingerprint "E345 EF8C 4539 E974 943C  831D 13B9 87FD 9214 F8DA".

The message is successfully verified with that key.

I'd recommend the applicable public PGP key to be added here for reference: https://www.pfsense.org/security/

My views have absolutely no warranty express or implied. Always do your own research.

Offline AR15USR

  • Full Member
  • ***
  • Posts: 266
  • Karma: +10/-0
    • View Profile
Re: 2.3.1 Update 1 Available
« Reply #5 on: May 26, 2016, 05:01:32 pm »
Just a side-note, using 32bit key IDs is a bad idea. See https://evil32.com for details.

I've found a key on the keyserver for "pfSense Security Team (Security Advisories for pfSense) <security AT pfsense DOT org>" with the following fingerprint "E345 EF8C 4539 E974 943C  831D 13B9 87FD 9214 F8DA".

The message is successfully verified with that key.

I'd recommend the applicable public PGP key to be added here for reference: https://www.pfsense.org/security/

Jorge are you saying they should identify their key by the longer ID of "0x13b987fd9214f8da"? Just curious..
_________________________

Release: pfSense 2.3.4

Offline kpa

  • Hero Member
  • *****
  • Posts: 1185
  • Karma: +131/-6
    • View Profile
Re: 2.3.1 Update 1 Available
« Reply #6 on: May 26, 2016, 05:14:49 pm »
Just a side-note, using 32bit key IDs is a bad idea. See https://evil32.com for details.

I've found a key on the keyserver for "pfSense Security Team (Security Advisories for pfSense) <security AT pfsense DOT org>" with the following fingerprint "E345 EF8C 4539 E974 943C  831D 13B9 87FD 9214 F8DA".

The message is successfully verified with that key.

I'd recommend the applicable public PGP key to be added here for reference: https://www.pfsense.org/security/

Jorge are you saying they should identify their key by the longer ID of "0x13b987fd9214f8da"? Just curious..

That and the key fingerprint as well, forging those two combined is practically impossible.

Offline rjbradlow

  • Newbie
  • *
  • Posts: 5
  • Karma: +0/-0
    • View Profile
Re: 2.3.1 Update 1 Available
« Reply #7 on: May 29, 2016, 01:52:27 pm »
This update broke my instance.  >:(
2.3.0 and 2.31 was fine but 2.3.1_1 boots and has console errors above menu:
Code: [Select]
Fatal error: require_once(): Failed opening required 'config.inc' (include_path='.:/usr/local/share/pear') in /etc/rc.banner on line <i>32</i><th></tr> ... Then continues to vomit the rest of that code all over the console screen and the usual menu appears but with limited functionality.
There is NO 'pear' in /usr/local/share/

All interfaces are down and cannot be reset; Menu options 1 and 2 do not work.

I changed the boot kernel from kernel.old back to kernel and that did not help.

I can get shell as menu choice 8 works but 12 (dev shell) does not.

Menu: '13) Update from console'  runs into errors... the same that caused this mess as follows:
Code: [Select]
Warning: require_once(config.inc): failed to open stream: No such file or directory on /etc/rc.conf_mount_rw on line 31

Call Stack:
     0.0002     117684    1. {main}() /etc/rc.conf_mount_rw:0

Fatal Error: require_once(): Failed opening required 'config.inc' (include_path='.:/usr/local/share/pear') in /etc/rc.conf_mount_rw on line 31

Call Stack:
     0.0002     117684    1. {main}() /etc/rc.conf_mount_rw:0

/usr/local/sbin/pfSense-upgrade: grep: not found

...~

Menu: '15) Restore recent configuration'  does not work.

Is this update broken or what??

Thank you for looking into it.
« Last Edit: May 29, 2016, 02:18:03 pm by rjbradlow »

Offline JorgeOliveira

  • Full Member
  • ***
  • Posts: 153
  • Karma: +24/-1
  • May the Triforce be with you...
    • View Profile
Re: 2.3.1 Update 1 Available
« Reply #8 on: May 29, 2016, 05:34:26 pm »
Jorge are you saying they should identify their key by the longer ID of "0x13b987fd9214f8da"? Just curious..
Yes.

This update broke my instance.  >:(
(...)
I can get shell as menu choice 8 works but 12 (dev shell) does not.
(...)
This may be caused by network/hardware problem causing an half-baked upgrade process. I'd recommend running this on shell:
Code: [Select]
pkg upgrade -fIt will download and reinstall all packages. Be aware this may take a considerable amount of time: 30 minutes to 2 hours. Be patient.
My views have absolutely no warranty express or implied. Always do your own research.

Offline rjbradlow

  • Newbie
  • *
  • Posts: 5
  • Karma: +0/-0
    • View Profile
Re: 2.3.1 Update 1 Available
« Reply #9 on: May 29, 2016, 07:10:26 pm »
This update broke my instance.  >:(
(...)
I can get shell as menu choice 8 works but 12 (dev shell) does not.
(...)
This may be caused by network/hardware problem causing an half-baked upgrade process. I'd recommend running this on shell:
Code: [Select]
pkg upgrade -fIt will download and reinstall all packages. Be aware this may take a considerable amount of time: 30 minutes to 2 hours. Be patient.

Thank you Jorge but I also mentioned that all interfaces were down... and unable to be brought up so no dice there... No Network at all. Totally hosed.
I'm a Linux / bash guy and not familiar enough with the castrated shell in pfSense to attempt trying to fix it by hand.
If you look at the error again it states that the update was looking for a nonexistent directory named 'pear' and thus the missing file 'config.inc' as well.

So am I to gather from your reply that this directory does actually exist and was not downloaded by some networking glitch on a machine that had been updating and working flawlessly up to the latest update?

If so then why would it have been deleted instead of overwritten during a minor update from 2.3.1 to 2.3.1_1?

???
« Last Edit: May 29, 2016, 07:17:37 pm by rjbradlow »

Offline phil.davis

  • Hero Member
  • *****
  • Posts: 4612
  • Karma: +550/-3
    • View Profile
    • International Nepal Fellowship
Re: 2.3.1 Update 1 Available
« Reply #10 on: May 29, 2016, 09:34:21 pm »
I don't know what the PEAR thing is about, maybe that happ0ened to be the last dir in the searchlist for looking for include files.
You should have a bunch of include files in /etc/inc
Code: [Select]
/etc/inc/config.incDo you have files there?
Does the content of /etc/inc/config.inc look like a bunch of PHP functions?
As the Greek philosopher Isosceles used to say, "There are 3 sides to every triangle."
If I helped you, then help someone else - buy someone a gift from the INF catalog http://secure.inf.org/gifts/usd/

Offline rjbradlow

  • Newbie
  • *
  • Posts: 5
  • Karma: +0/-0
    • View Profile
Re: 2.3.1 Update 1 Available
« Reply #11 on: May 29, 2016, 10:57:17 pm »
Does the content of /etc/inc/config.inc look like a bunch of PHP functions?

Yes it is there with all of it's friends and yes it is PHP.

Offline phil.davis

  • Hero Member
  • *****
  • Posts: 4612
  • Karma: +550/-3
    • View Profile
    • International Nepal Fellowship
Re: 2.3.1 Update 1 Available
« Reply #12 on: May 29, 2016, 11:41:29 pm »
Does the content of /etc/inc/config.inc look like a bunch of PHP functions?

Yes it is there with all of it's friends and yes it is PHP.
That's a good start.
/etc/rc.php_ini_setup should create:
Code: [Select]
/usr/local/etc/php.iniand that should specify the include path:
Code: [Select]
include_path = ".:/etc/inc:/usr/local/www:/usr/local/captiveportal:/usr/local/pkg:/usr/local/www/classes:/usr/local/www/classes/Form"and if all that is good, then config.inc (and lots of other include files) should be found.
As the Greek philosopher Isosceles used to say, "There are 3 sides to every triangle."
If I helped you, then help someone else - buy someone a gift from the INF catalog http://secure.inf.org/gifts/usd/

Offline rjbradlow

  • Newbie
  • *
  • Posts: 5
  • Karma: +0/-0
    • View Profile
Re: 2.3.1 Update 1 Available
« Reply #13 on: May 29, 2016, 11:52:11 pm »
That's a good start.
/etc/rc.php_ini_setup should create:
Code: [Select]
/usr/local/etc/php.iniand that should specify the include path:
Code: [Select]
include_path = ".:/etc/inc:/usr/local/www:/usr/local/captiveportal:/usr/local/pkg:/usr/local/www/classes:/usr/local/www/classes/Form"and if all that is good, then config.inc (and lots of other include files) should be found.


Code: [Select]
./rc_php_ini_setup: /usr/bin/grep: not found
Thank you Phil.  :)

Downloaded and mounted latest ISO, copied grep from ISO to /usr/bin/

Re-ran /etc/rc_php_ini_setup and exited to find a normal console menu

Further repairs in progress.
« Last Edit: May 30, 2016, 12:04:56 am by rjbradlow »

Offline 2chemlud

  • Sr. Member
  • ****
  • Posts: 385
  • Karma: +20/-5
    • View Profile
Re: 2.3.1 Update 1 Available
« Reply #14 on: May 30, 2016, 02:17:28 am »
Hy!

Don't get me wrong, but is it really worth the effort? Fresh install, extract your config.xml, copy over to fresh install and start over again... max 1 hour, I guess.

regards

chemlud
https://www.youtube.com/watch?v=TlBIa8z_Mts

I have been permanently banned from posting/PM on this forum. Sorry, no replies... ;-)