25.1..5_5 ssl3_get_record:decryption failed or bad record mac

Started by mattlund, May 24, 2025, 06:53:01 PM

Previous topic - Next topic
Hi,
I have got a SSL issue after I updated to 25.1.5_5.

I first saw when accessing why HA web interface from internet. When I then tried to login I also saw SSL isse and webgui failed to load.

When I login with ssh and try to "update from console" I get issues saying:
"Enter an option: 12

Fetching change log information, please wait... 0020C12AEF200000:error:0A000119:SSL routines:ssl3_get_record:decryption failed or bad record mac:/usr/src/crypto/openssl/ssl/record/ssl3_record.c:632:
fetch: https://pkg.opnsense.org/FreeBSD:14:amd64/25.1/sets/changelog.txz: No error: 0

This will automatically fetch all available updates and apply them.

Proceed with this action? [y/N]: y

Updating OPNsense repository catalogue...
008041B1F5130000:error:0A000119:SSL routines:ssl3_get_record:decryption failed or bad record mac:/usr/src/crypto/openssl/ssl/record/ssl3_record.c:632:
OPNsense repository is up to date.
Updating mimugmail repository catalogue...
008041B1F5130000:error:0A000119:SSL routines:ssl3_get_record:decryption failed or bad record mac:/usr/src/crypto/openssl/ssl/record/ssl3_record.c:632:
008041B1F5130000:error:0A000119:SSL routines:ssl3_get_record:decryption failed or bad record mac:/usr/src/crypto/openssl/ssl/record/ssl3_record.c:632:
008041B1F5130000:error:0A000119:SSL routines:ssl3_get_record:decryption failed or bad record mac:/usr/src/crypto/openssl/ssl/record/ssl3_record.c:632:
008041B1F5130000:error:0A000119:SSL routines:ssl3_get_record:decryption failed or bad record mac:/usr/src/crypto/openssl/ssl/record/ssl3_record.c:632:
pkg-static: https://opn-repo.routerperformance.net/repo/FreeBSD:14:amd64/packagesite.txz: Authentication error
Unable to update repository mimugmail
Error updating repositories!
Starting web GUI...done."

I saw some old posts that thsi could be realted to openssl package, but I have not found anyone having the same issue in this forum or on internet.

Anyone that have an idea on how to fix this?

Thanks

/Mattlund