Messages

Might be more of an LTE, IPv6 or otherwise unstable connection.

# curl -o packages-26.7-amd64.tar https://pkg.opnsense.org/FreeBSD:14:amd64/26.1/sets/packages-26.7-amd64.tar
# curl -o packages-26.7-amd64.tar.sig https://pkg.opnsense.org/FreeBSD:14:amd64/26.1/sets/packages-26.7-amd64.tar.sig
# opnsense-update -upr 26.7 -l .
(reboot)

If curl also fails I have no way to help you.


Cheers,
Franco

Hey, Cheers, and many thanks, now it seems this corrected the whole situation! Thanks for your help.
It seems to be ok also from audit -> health check.

***GOT REQUEST TO AUDIT HEALTH***
Currently running OPNsense 26.7 (amd64) at Thu Jul 16 20:16:36 EEST 2026
>>> Root file system: zroot/ROOT/default
>>> Check installed kernel version
Version 26.7 is correct.
>>> Check for missing or altered kernel files
No problems detected.
>>> Check installed base version
Version 26.7 is correct.
>>> Check for missing or altered base files
No problems detected.
>>> Check installed repositories
OPNsense (Priority: 11)
SunnyValley (Priority: 7)
>>> Check installed plugins
os-cpu-microcode-intel 1.1
os-ddclient 1.31_1
os-dmidecode 1.2
os-hw-probe 1.0_1
os-isc-dhcp 1.0_6
os-sensei 2.6.1
os-sensei-updater 2.0
os-smart 2.4
os-sunnyvalley 1.5_2
os-vnstat 1.4
>>> Check locked packages
No locks found.
>>> Check for missing package dependencies
Checking all packages: .......... done
>>> Check for missing or altered package files
Checking all packages: .......... done
>>> Check for core packages consistency
Core package "opnsense" at 26.7 has 68 dependencies to check.
Checking packages: ..................................................................... done
***DONE***

Might be more of an LTE, IPv6 or otherwise unstable connection.

# curl -o packages-26.7-amd64.tar https://pkg.opnsense.org/FreeBSD:14:amd64/26.1/sets/packages-26.7-amd64.tar
# curl -o packages-26.7-amd64.tar.sig https://pkg.opnsense.org/FreeBSD:14:amd64/26.1/sets/packages-26.7-amd64.tar.sig
# opnsense-update -upr 26.7 -l .
(reboot)

If curl also fails I have no way to help you.


Cheers,
Franco

Thanks, I'll try this later today. Fresh install is also an option in case this doesn't fix this error.
Let's hope there won't be many more of these cases around.

Try another mirror

That led me into this in the first place (changing & testing mirrors via browser GUI). How to change mirrors in console, and which one should work?

Trying updating packages-26.7-amd64.tar using console.

Initial problem and also my main problem was signature error with this exact file. Let's hope it will update this time.

Once again, it is really weird that the system did indeed update without valid packages.

Edit: fetching packages-26.7.-amd64.tar still fails: failed, signature invalid

Any suggestions how to fix this? Fresh new install and config restore?

Can you do a health check? It already looks like it updated the kernel and now you're in an inconsistent state.


Cheers,
Franco

It really does look like it got updated partially after all (whichiis really weird, GUI never showed up even a succesful start of updating progress, only exactly the same error than user notspam in initial message). Health check log can be found below:
***GOT REQUEST TO AUDIT HEALTH***
Currently running OPNsense 26.1.11_10 (amd64) at Wed Jul 15 21:13:25 EEST 2026
>>> Root file system: zroot/ROOT/default
>>> Check installed kernel version
Version 26.7 is incorrect, expected: 26.1.11
>>> Check for missing or altered kernel files
No problems detected.
>>> Check installed base version
Version 26.7 is incorrect, expected: 26.1.11
>>> Check for missing or altered base files
Error 2 occurred.
etc/ssl/certs/002c0b4f.0:
   type (file, link)
etc/ssl/certs/0179095f.0:
   type (file, link)
etc/ssl/certs/062cdee6.0:
   type (file, link)
etc/ssl/certs/064e0aa9.0:
   type (file, link)
etc/ssl/certs/06dc52d5.0:
   type (file, link)
etc/ssl/certs/09789157.0:
   type (file, link)
etc/ssl/certs/0a775a30.0:
   type (file, link)
etc/ssl/certs/0b1b94ef.0:
   type (file, link)
etc/ssl/certs/0b9bc432.0:
   type (file, link)
etc/ssl/certs/0bf05006.0:
   type (file, link)
etc/ssl/certs/0f5dc4f3.0:
   type (file, link)
etc/ssl/certs/0f6fa695.0:
   type (file, link)
etc/ssl/certs/1001acf7.0:
   type (file, link)
etc/ssl/certs/14bc7599.0:
   type (file, link)
etc/ssl/certs/1cef98f5.0:
   type (file, link)
etc/ssl/certs/1d3472b9.0:
   type (file, link)
etc/ssl/certs/1e08bfd1.0:
   type (file, link)
etc/ssl/certs/1e09d511.0:
   type (file, link)
etc/ssl/certs/2923b3f9.0:
   type (file, link)
etc/ssl/certs/2ae6433e.0:
   type (file, link)
etc/ssl/certs/2ccbdda3.0:
   type (file, link)
etc/ssl/certs/30e1580d.0:
   type (file, link)
etc/ssl/certs/32888f65.0:
   type (file, link)
etc/ssl/certs/3bde41ac.0:
   type (file, link)
etc/ssl/certs/3e359ba6.0:
   type (file, link)
etc/ssl/certs/3fb36b73.0:
   type (file, link)
etc/ssl/certs/40193066.0:
   type (file, link)
etc/ssl/certs/4042bcee.0:
   type (file, link)
etc/ssl/certs/406c9bb1.0:
   type (file, link)
etc/ssl/certs/48bec511.0:
   type (file, link)
etc/ssl/certs/4b718d9b.0:
   type (file, link)
etc/ssl/certs/4bfab552.0:
   type (file, link)
etc/ssl/certs/5443e9e3.0:
   type (file, link)
etc/ssl/certs/54657681.0:
   type (file, link)
etc/ssl/certs/5860aaa6.0:
   type (file, link)
etc/ssl/certs/5931b5bc.0:
   type (file, link)
etc/ssl/certs/5f15c80c.0:
   type (file, link)
etc/ssl/certs/5f618aec.0:
   type (file, link)
etc/ssl/certs/607986c7.0:
   type (file, link)
etc/ssl/certs/616816f6.0:
   type (file, link)
etc/ssl/certs/6805c744.0:
   type (file, link)
etc/ssl/certs/68dd7389.0:
   type (file, link)
etc/ssl/certs/6a9bdba3.0:
   type (file, link)
etc/ssl/certs/6d41d539.0:
   type (file, link)
etc/ssl/certs/6fa5da56.0:
   type (file, link)
etc/ssl/certs/749e9e03.0:
   type (file, link)
etc/ssl/certs/75d1b2ed.0:
   type (file, link)
etc/ssl/certs/7719f463.0:
   type (file, link)
etc/ssl/certs/773e07ad.0:
   type (file, link)
etc/ssl/certs/7a3adc42.0:
   type (file, link)
etc/ssl/certs/7a780d93.0:
   type (file, link)
etc/ssl/certs/7f3d5d1d.0:
   type (file, link)
etc/ssl/certs/7fa05551.0:
   type (file, link)
etc/ssl/certs/8160b96c.0:
   type (file, link)
etc/ssl/certs/8508e720.0:
   type (file, link)
etc/ssl/certs/865fbdf9.0:
   type (file, link)
etc/ssl/certs/878d9bca.0:
   type (file, link)
etc/ssl/certs/8cb5ee0f.0:
   type (file, link)
etc/ssl/certs/8d89cda1.0:
   type (file, link)
etc/ssl/certs/8f103249.0:
   type (file, link)
etc/ssl/certs/9046744a.0:
   type (file, link)
etc/ssl/certs/90c5a3c8.0:
   type (file, link)
etc/ssl/certs/930ac5d2.0:
   type (file, link)
etc/ssl/certs/9482e63a.0:
   type (file, link)
etc/ssl/certs/9846683b.0:
   type (file, link)
etc/ssl/certs/988a38cb.0:
   type (file, link)
etc/ssl/certs/9b46e03d.0:
   type (file, link)
etc/ssl/certs/9bf03295.0:
   type (file, link)
etc/ssl/certs/9d04f354.0:
   type (file, link)
etc/ssl/certs/9e654b62.0:
   type (file, link)
etc/ssl/certs/9ef4a08a.0:
   type (file, link)
etc/ssl/certs/9f727ac7.0:
   type (file, link)
etc/ssl/certs/a09a51ae.0:
   type (file, link)
etc/ssl/certs/a3418fda.0:
   type (file, link)
etc/ssl/certs/a89d74c2.0:
   type (file, link)
etc/ssl/certs/a94d09e5.0:
   type (file, link)
etc/ssl/certs/b0d5255e.0:
   type (file, link)
etc/ssl/certs/b0e59380.0:
   type (file, link)
etc/ssl/certs/b433981b.0:
   type (file, link)
etc/ssl/certs/b7a5b843.0:
   type (file, link)
etc/ssl/certs/b81b93f0.0:
   type (file, link)
etc/ssl/certs/b8d25de6.0:
   type (file, link)
etc/ssl/certs/bf53fb88.0:
   type (file, link)
etc/ssl/certs/c01eb047.0:
   type (file, link)
etc/ssl/certs/c28a8a30.0:
   type (file, link)
etc/ssl/certs/ca6e4ad9.0:
   type (file, link)
etc/ssl/certs/cbf06781.0:
   type (file, link)
etc/ssl/certs/cc450945.0:
   type (file, link)
etc/ssl/certs/cd58d51e.0:
   type (file, link)
etc/ssl/certs/cd8c0d63.0:
   type (file, link)
etc/ssl/certs/ce5e74ef.0:
   type (file, link)
etc/ssl/certs/d4dae3dd.0:
   type (file, link)
etc/ssl/certs/d52c538d.0:
   type (file, link)
etc/ssl/certs/d6325660.0:
   type (file, link)
etc/ssl/certs/da0cfd1d.0:
   type (file, link)
etc/ssl/certs/dc4d6a89.0:
   type (file, link)
etc/ssl/certs/dd8e9d41.0:
   type (file, link)
etc/ssl/certs/ddcda989.0:
   type (file, link)
etc/ssl/certs/de6d66f3.0:
   type (file, link)
etc/ssl/certs/e18bfb83.0:
   type (file, link)
etc/ssl/certs/e35234b1.0:
   type (file, link)
etc/ssl/certs/e36a6752.0:
   type (file, link)
etc/ssl/certs/e73d606e.0:
   type (file, link)
etc/ssl/certs/e868b802.0:
   type (file, link)
etc/ssl/certs/e8de2f56.0:
   type (file, link)
etc/ssl/certs/ecccd8db.0:
   type (file, link)
etc/ssl/certs/ed858448.0:
   type (file, link)
etc/ssl/certs/eed8c118.0:
   type (file, link)
etc/ssl/certs/ef954a4e.0:
   type (file, link)
etc/ssl/certs/f0c70a8d.0:
   type (file, link)
etc/ssl/certs/f30dd6ad.0:
   type (file, link)
etc/ssl/certs/f44703f1.0:
   type (file, link)
etc/ssl/certs/f51bb24c.0:
   type (file, link)
etc/ssl/certs/fb717492.0:
   type (file, link)
etc/ssl/certs/fc5a8f99.0:
   type (file, link)
etc/ssl/certs/fd64f3fc.0:
   type (file, link)
etc/ssl/certs/fe8a2cd8.0:
   type (file, link)
etc/ssl/certs/feffd413.0:
   type (file, link)
etc/ssl/certs/ff34af3f.0:
   type (file, link)
etc/ssl/certs/ffdd40f9.0:
   type (file, link)
etc/ssl/untrusted/02265526.0:
   type (file, link)
etc/ssl/untrusted/0b7c536a.0:
   type (file, link)
etc/ssl/untrusted/0d972af8.0:
   type (file, link)
etc/ssl/untrusted/106f3e4d.0:
   type (file, link)
etc/ssl/untrusted/1422d63c.0:
   type (file, link)
etc/ssl/untrusted/1766e401.0:
   type (file, link)
etc/ssl/untrusted/19dbc0dd.0:
   type (file, link)
etc/ssl/untrusted/244b5494.0:
   type (file, link)
etc/ssl/untrusted/2d803388.0:
   type (file, link)
etc/ssl/untrusted/2dab9e33.0:
   type (file, link)
etc/ssl/untrusted/3136ea36.0:
   type (file, link)
etc/ssl/untrusted/3323bb7e.0:
   type (file, link)
etc/ssl/untrusted/3513523f.0:
   type (file, link)
etc/ssl/untrusted/40547a79.0:
   type (file, link)
etc/ssl/untrusted/442adcac.0:
   type (file, link)
etc/ssl/untrusted/4632c230.0:
   type (file, link)
etc/ssl/untrusted/4c3cbf99.0:
   type (file, link)
etc/ssl/untrusted/4f316efb.0:
   type (file, link)
etc/ssl/untrusted/5a4d6896.0:
   type (file, link)
etc/ssl/untrusted/5ad8a5d6.0:
   type (file, link)
etc/ssl/untrusted/5c79eb85.0:
   type (file, link)
etc/ssl/untrusted/5e98733a.0:
   type (file, link)
etc/ssl/untrusted/626dceaf.0:
   type (file, link)
etc/ssl/untrusted/69cf9657.0:
   type (file, link)
etc/ssl/untrusted/6b99d060.0:
   type (file, link)
etc/ssl/untrusted/76faf6c0.0:
   type (file, link)
etc/ssl/untrusted/779a714a.0:
   type (file, link)
etc/ssl/untrusted/7ffa47b4.0:
   type (file, link)
etc/ssl/untrusted/896c8bb4.0:
   type (file, link)
etc/ssl/untrusted/981901c3.0:
   type (file, link)
etc/ssl/untrusted/ade2cc8c.0:
   type (file, link)
etc/ssl/untrusted/aee5f10d.0:
   type (file, link)
etc/ssl/untrusted/b1159c4c.0:
   type (file, link)
etc/ssl/untrusted/b1b8a7f3.0:
   type (file, link)
etc/ssl/untrusted/c9e4c02b.0:
   type (file, link)
etc/ssl/untrusted/cbd811bd.0:
   type (file, link)
etc/ssl/untrusted/d2be6420.0:
   type (file, link)
etc/ssl/untrusted/d7e8dc79.0:
   type (file, link)
etc/ssl/untrusted/e113c810.0:
   type (file, link)
etc/ssl/untrusted/e1e8b7dc.0:
   type (file, link)
etc/ssl/untrusted/e53e0c3b.0:
   type (file, link)
etc/ssl/untrusted/ee64a828.0:
   type (file, link)
etc/ssl/untrusted/f081611a.0:
   type (file, link)
etc/ssl/untrusted/f2d4863f.0:
   type (file, link)
etc/ssl/untrusted/f387163d.0:
   type (file, link)
etc/ssl/untrusted/f84fab51.0:
   type (file, link)
etc/ssl/untrusted/fd2eb50d.0:
   type (file, link)
>>> Check installed repositories
FreeBSD-ports (Priority: 0)
FreeBSD-ports-kmods (Priority: 0)
OPNsense (Priority: 11)
SunnyValley (Priority: 7)
>>> Check installed plugins
pkg: Warning: Major OS version upgrade detected.  Running "pkg bootstrap -f" recommended
os-cpu-microcode-intel 1.1
os-ddclient 1.31_1
os-dmidecode 1.2
os-hw-probe 1.0_1
os-isc-dhcp 1.0_6
os-sensei 2.6.1
os-sensei-updater 2.0
os-smart 2.4
os-sunnyvalley 1.5_2
os-vnstat 1.4
>>> Check locked packages
pkg: Warning: Major OS version upgrade detected.  Running "pkg bootstrap -f" recommended
>>> Check for missing package dependencies
pkg: Warning: Major OS version upgrade detected.  Running "pkg bootstrap -f" recommended
Checking all packages: .......... done
>>> Check for missing or altered package files
pkg: Warning: Major OS version upgrade detected.  Running "pkg bootstrap -f" recommended
Checking all packages: .
isc-dhcp44-server-4.4.3P1_2: missing file /usr/local/bin/omshell
Checking all packages............ done
>>> Check for core packages consistency
Core package "opnsense" at 26.1.11_10 has 68 dependencies to check.
Checking packages: .
beep-1.0_2 has no upstream equivalent
Checking packages: .
ca_root_nss-3.124 has no upstream equivalent
Checking packages: .
choparp-20150613_1 has no upstream equivalent
Checking packages: .
colordiff-1.0.22 has no upstream equivalent
Checking packages: .
cpustats-0.1 has no upstream equivalent
Checking packages: .
dhcp6c-20260122 has no upstream equivalent
Checking packages: .
dhcrelay-1.0 has no upstream equivalent
Checking packages: .
dnsmasq-2.93,1 has no upstream equivalent
Checking packages: .
dpinger-3.4 has no upstream equivalent
Checking packages: .
filterlog-0.8 has no upstream equivalent
Checking packages: .
flock-2.37.2_1 has no upstream equivalent
Checking packages: .
flowd-0.9.1_5 has no upstream equivalent
Checking packages: .
hostapd-2.11_3 has no upstream equivalent
Checking packages: .
hostwatch-1.0.13 has no upstream equivalent
Checking packages: .
ifinfo-13.0_1 has no upstream equivalent
Checking packages: .
iftop-1.0.p4_1 has no upstream equivalent
Checking packages: .
kea-3.0.3 has no upstream equivalent
Checking packages: .
lighttpd-1.4.84 has no upstream equivalent
Checking packages: .
monit-5.35.2 has no upstream equivalent
Checking packages: .
mpd5-5.9_19 has no upstream equivalent
Checking packages: .
ntp-4.2.8p18_5 has no upstream equivalent
Checking packages: .
openssh-portable-10.3.p1,1 has no upstream equivalent
Checking packages: .
openvpn-2.7.5 has no upstream equivalent
Checking packages: .
opnsense-26.1.11_10 has no upstream equivalent
Checking packages: .
opnsense-installer-25.1_2 has no upstream equivalent
Checking packages: .
opnsense-lang-26.1.7 has no upstream equivalent
Checking packages: .
opnsense-update-26.1.11 has no upstream equivalent
Checking packages: .
pam_opnsense-24.1 has no upstream equivalent
Checking packages: .
pftop-0.13 has no upstream equivalent
Checking packages: .
php83-ctype-8.3.31 has no upstream equivalent
Checking packages: .
php83-curl-8.3.31 has no upstream equivalent
Checking packages: .
php83-dom-8.3.31 has no upstream equivalent
Checking packages: .
php83-filter-8.3.31 has no upstream equivalent
Checking packages: .
php83-gettext-8.3.31 has no upstream equivalent
Checking packages: .
php83-ldap-8.3.31 has no upstream equivalent
Checking packages: .
php83-pcntl-8.3.31 has no upstream equivalent
Checking packages: .
php83-pdo-8.3.31 has no upstream equivalent
Checking packages: .
php83-pear-Crypt_CHAP-1.5.0_1 has no upstream equivalent
Checking packages: .
php83-pecl-radius-1.4.0b1_4 has no upstream equivalent
Checking packages: .
php83-phalcon-5.16.0 has no upstream equivalent
Checking packages: .
php83-phpseclib-3.0.55 has no upstream equivalent
Checking packages: .
php83-session-8.3.31 has no upstream equivalent
Checking packages: .
php83-simplexml-8.3.31 has no upstream equivalent
Checking packages: .
php83-sockets-8.3.31 has no upstream equivalent
Checking packages: .
php83-sqlite3-8.3.31 has no upstream equivalent
Checking packages: .
php83-xml-8.3.31 has no upstream equivalent
Checking packages: .
php83-zlib-8.3.31 has no upstream equivalent
Checking packages: .
pkg-2.3.1_1 has no upstream equivalent
Checking packages: .
py313-Jinja2-3.1.6 has no upstream equivalent
Checking packages: .
py313-dnspython-2.8.0_1,1 has no upstream equivalent
Checking packages: .
py313-duckdb-1.5.4 has no upstream equivalent
Checking packages: .
py313-jq-1.11.0 has no upstream equivalent
Checking packages: .
py313-ldap3-2.9.1_1 has no upstream equivalent
Checking packages: .
py313-numpy-2.4.6_1,1 has no upstream equivalent
Checking packages: .
py313-pandas-2.3.3_3,1 has no upstream equivalent
Checking packages: .
py313-requests-2.34.2 has no upstream equivalent
Checking packages: .
py313-sqlite3-3.13.14_10 has no upstream equivalent
Checking packages: .
py313-ujson-5.12.1 has no upstream equivalent
Checking packages: .
py313-vici-6.0.3 has no upstream equivalent
Checking packages: .
radvd-2.20 has no upstream equivalent
Checking packages: .
rrdtool-1.9.0_1 has no upstream equivalent
Checking packages: .
samplicator-1.3.8.r1_1 has no upstream equivalent
Checking packages: .
strongswan-6.0.7 has no upstream equivalent
Checking packages: .
sudo-1.9.17p2_2 has no upstream equivalent
Checking packages: .
suricata-8.0.6 has no upstream equivalent
Checking packages: .
syslog-ng-4.12.0 has no upstream equivalent
Checking packages: .
unbound-1.25.1_1 has no upstream equivalent
Checking packages: .
wpa_supplicant-2.11_7 has no upstream equivalent
Checking packages: .
zip-3.0_5 has no upstream equivalent
***DONE***

Tried also changing to different mirrors in settings tab and rebooting, after that move it says different error.
Nothing else was touched.
---------------
***GOT REQUEST TO CHECK FOR UPDATES***
Currently running OPNsense 26.1.11_10 (amd64) at Wed Jul 15 20:58:32 EEST 2026
Fetching changelog information, please wait... done
pkg: Warning: Major OS version upgrade detected.  Running "pkg bootstrap -f" recommended
Updating FreeBSD-ports repository catalogue...
Fetching meta.conf: . done
Fetching data.pkg: .......... done
Processing entries: .......... done
FreeBSD-ports repository update completed. 37821 packages processed.
Updating FreeBSD-ports-kmods repository catalogue...
Fetching meta.conf: . done
Fetching data.pkg: ... done
Processing entries: .......... done
FreeBSD-ports-kmods repository update completed. 239 packages processed.
Updating OPNsense repository catalogue...
pkg: Repository OPNsense has a wrong packagesite, need to re-create database
Unable to update repository OPNsense
Updating SunnyValley repository catalogue...
pkg: Repository SunnyValley has a wrong packagesite, need to re-create database
Waiting for another process to update repository SunnyValley
Error updating repositories!
Upgrading package manager from version '2.3.1_1' to ''
pkg: Warning: Major OS version upgrade detected.  Running "pkg bootstrap -f" recommended
Updating OPNsense repository catalogue...
pkg: Repository OPNsense has a wrong packagesite, need to re-create database
Unable to update repository OPNsense
Error updating repositories!
pkg: Warning: Major OS version upgrade detected.  Running "pkg bootstrap -f" recommended
Updating FreeBSD-ports repository catalogue...
Fetching meta.conf: . done
Fetching data.pkg: .......... done
Processing entries: .......... done
FreeBSD-ports repository update completed. 37821 packages processed.
Updating FreeBSD-ports-kmods repository catalogue...
Fetching meta.conf: . done
Fetching data.pkg: ... done
Processing entries: .......... done
FreeBSD-ports-kmods repository update completed. 239 packages processed.
Updating OPNsense repository catalogue...
pkg: Repository OPNsense has a wrong packagesite, need to re-create database
Unable to update repository OPNsense
Updating SunnyValley repository catalogue...
pkg: Repository SunnyValley has a wrong packagesite, need to re-create database
Unable to update repository SunnyValley
Error updating repositories!
***DONE***

Reboot isn't helping here at all. The same (exactly the same initial problem with invalid signature) is repeated again and again.