Another error while updating to 22.7.3_2

[Patrick M. Hausen]

Hi all,

i just successfully updated my home system and our office in Frankfurt to the latest release. Unfortunately for my office in Karlsruhe things did not turn out well.

This is the last thing my browser has cached for some reason:

Code Select Expand

Fatal error: Uncaught Error: Class "phpseclib3\Crypt\Common\AsymmetricKey" not found in /usr/local/share/phpseclib/Crypt/RSA.php:73 Stack trace: #0 /usr/local/etc/inc/certs.inc(34): require_once() #1 /usr/local/etc/inc/config.inc(40): require_once('/usr/local/etc/...') #2 /usr/local/www/guiconfig.inc(39): require_once('/usr/local/etc/...') #3 /usr/local/www/index.php(31): require_once('/usr/local/www/...') #4 {main} thrown in /usr/local/share/phpseclib/Crypt/RSA.php on line 73

But the firewall is not online at all. I can't reach it.

Seems like beginning of work really early tomorrow, like 7:00 or so ... I have all the config in git, not that big a deal, but definitely annoying.

Any ideas? What can I expect once I have console access? Fixable without reinstall (and without Internet access)?

Thanks,
Patrick

[franco]

Temporary issue during "pkg upgrade": phpseclib 3 installs, core package still using phpseclib 2 layout. Fixes itself when 22.7.3_2 is installed at the end of that run.


Cheers,
Franco

[Patrick M. Hausen]

OK, then why is my office offline?

Crystall ball's at the shop at the moment, so I will check on premises tomorrow.  ;)

[franco]

Maybe it caught initial 22.7.3 instead? Not sure without further data.

For one 22.7.3 ships a new kernel so reboot is required. It always a higher risk as all code gets executed once. So there could be another issue, but haven't heard of anything else so far.


Cheers,
Franco

[Patrick M. Hausen]

No console output, power cycle and the system came back with 22.7.3_2. Health audit ok.

All services up and running, but for one odd thing. ntpd is up and synchronized (checked with ntpq) but the dashboard widget shows that same PHP error:



I tried:

Code Select Expand

pkg install -f php80-phpseclibfollowed by a restart of the web UI - no change.

It's only the network time widget that fails. And my two other firewalls running 22.7.3_2 do not show this behaviour.

Any ideas?
Patrick

[franco]

Sometimes hardware doesn't reboot even though it should. I don't know if this is a FreeBSD issue or not, but it happens from time to time even now.

I'm not sure about the error. Can you run a health audit?


Cheers,
Franco

[Patrick M. Hausen]

Code Select Expand

***GOT REQUEST TO AUDIT HEALTH***
Currently running OPNsense 22.7.3_2 (amd64/OpenSSL) at Fri Sep  2 12:27:47 CEST 2022
>>> Check installed kernel version
Version 22.7.3 is correct.
>>> Check for missing or altered kernel files
No problems detected.
>>> Check installed base version
Version 22.7.3 is correct.
>>> Check for missing or altered base files
No problems detected.
>>> Check installed repositories
mimugmail
OPNsense
>>> Check installed plugins
os-acme-client 3.13
os-bind 1.24
os-dmidecode 1.1_1
os-git-backup 1.0_3
os-smart 2.2
os-wireguard 1.12
>>> Check locked packages
No locks found.
>>> Check for missing package dependencies
Checking all packages: .......... done
>>> Check for missing or altered package files
Checking all packages: .......... done
>>> Check for core packages consistency
Core package "opnsense" has 63 dependencies to check.
Checking packages: ................................................................. done
***DONE***

[franco]

Not all was pasted, is the process stuck?


Cheers,
Franco

[Patrick M. Hausen]

No, not stuck. Fixed it in the post above.

[franco]

Thanks, looks normal from the audit's POV.

I'm not sure what's wrong: leftover files from phpseclib 2? php-cgi process not restarting properly? cached response in browser?

I'm leaning towards the latter.


Cheers,
Franco

[Patrick M. Hausen]

Nailed it. Sorry for the noise.

[franco]

Is this Chrome or Firefox/Safari?

I still wonder why the browser tries to cache 500 errors.. maybe because the server didn't tell it to not cache it? Because it couldn't, because it crashed ¯\_(ツ)_/¯


Cheers,
Franco

[Patrick M. Hausen]

Safari.

[franco]

Webkit snafu then, thanks. I'll try to remember this.


Cheers,
Franco