Latest OPNsense: libcrypto.so.12 not found after system update

Started by hakuna, Today at 02:53:00 AM

Previous topic - Next topic
I have updated my system via terminal which only installed 4 packages I cannot remember but were small like os-upnp and 3 others.

If I run:

pkg info -a -O '%t %n' | sort -rn
I get these 4 packages at the top which I believe they were the ones installed.

png-1.6.52
pkg-2.3.1_1
os-upnp-1.8
os-lcdprod-sdeclcd-1.1_1

The UI stopped working, it was not longer responding, interfaces not showing, etc. Reboot.
After 1min, I didn't hear the beep sound and the terminal is stuck at:

Shared object "libcrypto.so.12" not found, required by php
Then I tried a hack not knowing much of it just to get the system started:

echo "libcrypto.so.12 libcrypto.so.30" >> /etc/libmap.conf
echo "libssl.so.12 libssl.so.30" >> /etc/libmap.conf

I gets other errors because of course, the versions are incompatible.

My system is running openssl-3.0.16 so I have no idea why it is requesting libcrypto.so.12 which no longer belongs to this system version.

So anyway, I have no idea what this update did, 4 packages, now it longer boots up and I have no much idea of what to do other than a clean install.
I am avoiding a clean install because I have soooooo many firewall rules and I cannot just import the backup, I need to install wireguard, os-upnp and others, otherwise, the importing the backup ends up a complete mess.
I also need to manually assign ports, it is a job and half.

I appreciate any help


THIS CANNOT BE RIGHT!!!!

Download this since I am runnint 25.7: https://pkg.opnsense.org/FreeBSD:14:amd64/25.7/latest/All/openssl-3.0.18,1.pkg

Extract:

libcrypto.so.12
libssl.so.12

Copy from USB to both location since idk which is which:

/usr/lib/
/lib/

The system is booting and I can log in, now I need to check if it is gonna connect to the internet.

Something is terribly wrong with the latest updates, the one prior to 25.7.10 and 25.7.10

After fixing the drama above as explained, uPnP wasn't starting and all my DNS setup was broken (Pi-Hole + Unbound), no matter what I did, nothing was working, I had to use public DNS instead.

I checked the update again and there were another 85 packages to install, 25.7.10 update, during the update process it failed with a danger message and 404 when trying to access the UI.

Reboot and attempt to update via console, uPnP no longer fails and works, also, my DNS setup is working again.

I have no idea wtf happened, I did the usual, check for update and apply, nothing else.
If you are reading this and haven't updated it yet to 25.7.10, don't.

Something is broken!

Last update!

Everything is working, I have enabled the firewall rules back instead of using public DNS.

OPNsense Announcements is showing a hotfix 25.10.1_2 but it is not available yet, but I was reading 25.7 update and that seems to be the root cause of my problems indeed: https://forum.opnsense.org/index.php?topic=50052.msg255254#msg255254

That package manager update is the only thing that could have opened hell's door, until I ran the update again to install another 85 packages which failed with a Danger msg.

So anyway, this update is not great, I have never experience such major issue during an OPNsense update process before.
If you run this in prod, get ready for a wild ride.

Please be aware that during the update check the new package manager will be
installed, but will fail to report the update status like it always had before
and so you will end up with an error that will require checking for updates
again.  The fix is in this update, but impossible to install without upgrading
the package manager first.  We hope this will only be a minor inconvenience
during the process.