I attempted to upgrade (through the GUI) from 25.7 to 26.1 just a couple of days after the January release, but got "failed, signature invalid". I immediately tried again and got the same failure, so I waited a couple of weeks and tried again today. Same failure - signature invalid. So I tried again today, and this time it upgraded.
I searched and couldn't find any reports of this on the forum, and I have never seen it before until this upgrade - is this as rare as I think it is? Any suggestions as to the cause?
Type opnsense
Version 25.7.11_9
Architecture amd64
Commit 2e9ac2def
Mirror https://pkg.opnsense.org/FreeBSD:14:amd64/25.7
Repositories OPNsense (Priority: 11)
Updated on Thu Jan 29 02:38:37 MST 2026
Checked on N/A
***GOT REQUEST TO UPGRADE***
Currently running OPNsense 25.7.11_9 (amd64) at Sat Feb 14 06:30:12 MST 2026
Fetching packages-26.1-amd64.tar: ......................................... failed, signature invalid
***DONE***
Could be an intermittent mirror issue (not the main mirror?) where we switch the packages set for better upgrade experience, but it also writes the signature file so the large packages set and signature file could be out of sync for the sync duration.
Cheers,
Franco
I'm still experiencing the same error.
Try this in a terminal
opnsense-revert opnsense
Then try to update again.
Post here the full output
For most people this keeps happening on LTE connections. Can't fix that easily as it's some weird thing inside libfetch that triggers this.
Cheers,
Franco
For me the same. No LTE connection but standard DSL connection. signature invalid
Quote from: LineF on March 02, 2026, 05:56:33 PMFor me the same. No LTE connection but standard DSL connection. signature invalid
Problem solved - mirror probably has incomplete files. Changing mirror to "default" solved the problem. All files were downloaded witout problems.
I have the same error.
If downloading the files manually
fetch -a https://pkg.opnsense.org/FreeBSD:14:amd64/26.1/sets/packages-26.1.1-amd64.tar
fetch -a https://pkg.opnsense.org/FreeBSD:14:amd64/26.1/sets/packages-26.1.1-amd64.tar.sig
and checking it with "opnsense-verify -q packages-26.1.1-amd64.tar"
i get error "opnsense-verify: error:02000068:rsa routines::bad signature"
base-26.1.1-amd64.txz fails too
kernel-26.1.1-amd64.txz does not fail
This is quite strange...
kernel is the smallest one. Sounds like larger downloads are likely to corrupt on that link although I still think there is an issue with libfetch here. Does the same happen when using curl to download?
Cheers,
Franco