[Solved by reboot] 26.7 Update-> "failed, signature invalid"

[notspam]

Got the following error message:

***GOT REQUEST TO UPGRADE***
Currently running OPNsense 26.1.11_10 (amd64) at Wed Jul 15 12:45:08 UTC 2026
Fetching packages-26.7-amd64.tar: ... failed, signature invalid
***DONE***

[Patrick M. Hausen]

After doing what exactly?

[notspam]

Sit on 26.1.11_10 and upgrade to 26.7.
I'll do a clean reboot now and try the upgrade to 26.7 again.
Next report in about 20min ......

[notspam]

Ok, after reboot the second try was successful.
Now I use 26.7.

[notspam]

Need to look at the little repo issues.
Saw a thread with it. Need to read.

***GOT REQUEST TO CHECK FOR UPDATES***
Currently running OPNsense 26.7 (amd64) at Wed Jul 15 17:05:11 UTC 2026
Fetching changelog information, please wait... done
Updating OPNsense repository catalogue...
Fetching meta.conf: . done
Fetching data.pkg: .......... done
Processing entries: .......... done
OPNsense repository update completed. 928 packages processed.
Updating SunnyValley repository catalogue...
pkg: Repository SunnyValley has a wrong packagesite, need to re-create database
pkg: An error occurred while fetching package: Unknown error
pkg: An error occurred while fetching package: Unknown error
Unable to update repository SunnyValley
Error updating repositories!
***DONE***

[Cableguy_]

Reboot isn't helping here at all. The same (exactly the same initial problem with invalid signature) is repeated again and again.

[patient0]

Zenarmor is not yet ready for 26.7, read official statement here https://forum.opnsense.org/index.php?topic=52376.0, and more about in the Zenarmor category.

[franco]

Can you specify "same"? There are number of topics about LTE downloads not working correctly with libfetch for example. It could also be defunct IPv6. Or maybe you refer to "Unable to update repository SunnyValley" which is a very different issue and several threads exist, also where they actually belong.


Cheers,
Franco

[Cableguy_]

Tried also changing to different mirrors in settings tab and rebooting, after that move it says different error.
Nothing else was touched.
---------------
***GOT REQUEST TO CHECK FOR UPDATES***
Currently running OPNsense 26.1.11_10 (amd64) at Wed Jul 15 20:58:32 EEST 2026
Fetching changelog information, please wait... done
pkg: Warning: Major OS version upgrade detected.  Running "pkg bootstrap -f" recommended
Updating FreeBSD-ports repository catalogue...
Fetching meta.conf: . done
Fetching data.pkg: .......... done
Processing entries: .......... done
FreeBSD-ports repository update completed. 37821 packages processed.
Updating FreeBSD-ports-kmods repository catalogue...
Fetching meta.conf: . done
Fetching data.pkg: ... done
Processing entries: .......... done
FreeBSD-ports-kmods repository update completed. 239 packages processed.
Updating OPNsense repository catalogue...
pkg: Repository OPNsense has a wrong packagesite, need to re-create database
Unable to update repository OPNsense
Updating SunnyValley repository catalogue...
pkg: Repository SunnyValley has a wrong packagesite, need to re-create database
Waiting for another process to update repository SunnyValley
Error updating repositories!
Upgrading package manager from version '2.3.1_1' to ''
pkg: Warning: Major OS version upgrade detected.  Running "pkg bootstrap -f" recommended
Updating OPNsense repository catalogue...
pkg: Repository OPNsense has a wrong packagesite, need to re-create database
Unable to update repository OPNsense
Error updating repositories!
pkg: Warning: Major OS version upgrade detected.  Running "pkg bootstrap -f" recommended
Updating FreeBSD-ports repository catalogue...
Fetching meta.conf: . done
Fetching data.pkg: .......... done
Processing entries: .......... done
FreeBSD-ports repository update completed. 37821 packages processed.
Updating FreeBSD-ports-kmods repository catalogue...
Fetching meta.conf: . done
Fetching data.pkg: ... done
Processing entries: .......... done
FreeBSD-ports-kmods repository update completed. 239 packages processed.
Updating OPNsense repository catalogue...
pkg: Repository OPNsense has a wrong packagesite, need to re-create database
Unable to update repository OPNsense
Updating SunnyValley repository catalogue...
pkg: Repository SunnyValley has a wrong packagesite, need to re-create database
Unable to update repository SunnyValley
Error updating repositories!
***DONE***

[franco]

Can you do a health check? It already looks like it updated the kernel and now you're in an inconsistent state.


Cheers,
Franco

[Cableguy_]

Can you do a health check? It already looks like it updated the kernel and now you're in an inconsistent state.


Cheers,
Franco

It really does look like it got updated partially after all (whichiis really weird, GUI never showed up even a succesful start of updating progress, only exactly the same error than user notspam in initial message). Health check log can be found below:
***GOT REQUEST TO AUDIT HEALTH***
Currently running OPNsense 26.1.11_10 (amd64) at Wed Jul 15 21:13:25 EEST 2026
>>> Root file system: zroot/ROOT/default
>>> Check installed kernel version
Version 26.7 is incorrect, expected: 26.1.11
>>> Check for missing or altered kernel files
No problems detected.
>>> Check installed base version
Version 26.7 is incorrect, expected: 26.1.11
>>> Check for missing or altered base files
Error 2 occurred.
etc/ssl/certs/002c0b4f.0:
   type (file, link)
etc/ssl/certs/0179095f.0:
   type (file, link)
etc/ssl/certs/062cdee6.0:
   type (file, link)
etc/ssl/certs/064e0aa9.0:
   type (file, link)
etc/ssl/certs/06dc52d5.0:
   type (file, link)
etc/ssl/certs/09789157.0:
   type (file, link)
etc/ssl/certs/0a775a30.0:
   type (file, link)
etc/ssl/certs/0b1b94ef.0:
   type (file, link)
etc/ssl/certs/0b9bc432.0:
   type (file, link)
etc/ssl/certs/0bf05006.0:
   type (file, link)
etc/ssl/certs/0f5dc4f3.0:
   type (file, link)
etc/ssl/certs/0f6fa695.0:
   type (file, link)
etc/ssl/certs/1001acf7.0:
   type (file, link)
etc/ssl/certs/14bc7599.0:
   type (file, link)
etc/ssl/certs/1cef98f5.0:
   type (file, link)
etc/ssl/certs/1d3472b9.0:
   type (file, link)
etc/ssl/certs/1e08bfd1.0:
   type (file, link)
etc/ssl/certs/1e09d511.0:
   type (file, link)
etc/ssl/certs/2923b3f9.0:
   type (file, link)
etc/ssl/certs/2ae6433e.0:
   type (file, link)
etc/ssl/certs/2ccbdda3.0:
   type (file, link)
etc/ssl/certs/30e1580d.0:
   type (file, link)
etc/ssl/certs/32888f65.0:
   type (file, link)
etc/ssl/certs/3bde41ac.0:
   type (file, link)
etc/ssl/certs/3e359ba6.0:
   type (file, link)
etc/ssl/certs/3fb36b73.0:
   type (file, link)
etc/ssl/certs/40193066.0:
   type (file, link)
etc/ssl/certs/4042bcee.0:
   type (file, link)
etc/ssl/certs/406c9bb1.0:
   type (file, link)
etc/ssl/certs/48bec511.0:
   type (file, link)
etc/ssl/certs/4b718d9b.0:
   type (file, link)
etc/ssl/certs/4bfab552.0:
   type (file, link)
etc/ssl/certs/5443e9e3.0:
   type (file, link)
etc/ssl/certs/54657681.0:
   type (file, link)
etc/ssl/certs/5860aaa6.0:
   type (file, link)
etc/ssl/certs/5931b5bc.0:
   type (file, link)
etc/ssl/certs/5f15c80c.0:
   type (file, link)
etc/ssl/certs/5f618aec.0:
   type (file, link)
etc/ssl/certs/607986c7.0:
   type (file, link)
etc/ssl/certs/616816f6.0:
   type (file, link)
etc/ssl/certs/6805c744.0:
   type (file, link)
etc/ssl/certs/68dd7389.0:
   type (file, link)
etc/ssl/certs/6a9bdba3.0:
   type (file, link)
etc/ssl/certs/6d41d539.0:
   type (file, link)
etc/ssl/certs/6fa5da56.0:
   type (file, link)
etc/ssl/certs/749e9e03.0:
   type (file, link)
etc/ssl/certs/75d1b2ed.0:
   type (file, link)
etc/ssl/certs/7719f463.0:
   type (file, link)
etc/ssl/certs/773e07ad.0:
   type (file, link)
etc/ssl/certs/7a3adc42.0:
   type (file, link)
etc/ssl/certs/7a780d93.0:
   type (file, link)
etc/ssl/certs/7f3d5d1d.0:
   type (file, link)
etc/ssl/certs/7fa05551.0:
   type (file, link)
etc/ssl/certs/8160b96c.0:
   type (file, link)
etc/ssl/certs/8508e720.0:
   type (file, link)
etc/ssl/certs/865fbdf9.0:
   type (file, link)
etc/ssl/certs/878d9bca.0:
   type (file, link)
etc/ssl/certs/8cb5ee0f.0:
   type (file, link)
etc/ssl/certs/8d89cda1.0:
   type (file, link)
etc/ssl/certs/8f103249.0:
   type (file, link)
etc/ssl/certs/9046744a.0:
   type (file, link)
etc/ssl/certs/90c5a3c8.0:
   type (file, link)
etc/ssl/certs/930ac5d2.0:
   type (file, link)
etc/ssl/certs/9482e63a.0:
   type (file, link)
etc/ssl/certs/9846683b.0:
   type (file, link)
etc/ssl/certs/988a38cb.0:
   type (file, link)
etc/ssl/certs/9b46e03d.0:
   type (file, link)
etc/ssl/certs/9bf03295.0:
   type (file, link)
etc/ssl/certs/9d04f354.0:
   type (file, link)
etc/ssl/certs/9e654b62.0:
   type (file, link)
etc/ssl/certs/9ef4a08a.0:
   type (file, link)
etc/ssl/certs/9f727ac7.0:
   type (file, link)
etc/ssl/certs/a09a51ae.0:
   type (file, link)
etc/ssl/certs/a3418fda.0:
   type (file, link)
etc/ssl/certs/a89d74c2.0:
   type (file, link)
etc/ssl/certs/a94d09e5.0:
   type (file, link)
etc/ssl/certs/b0d5255e.0:
   type (file, link)
etc/ssl/certs/b0e59380.0:
   type (file, link)
etc/ssl/certs/b433981b.0:
   type (file, link)
etc/ssl/certs/b7a5b843.0:
   type (file, link)
etc/ssl/certs/b81b93f0.0:
   type (file, link)
etc/ssl/certs/b8d25de6.0:
   type (file, link)
etc/ssl/certs/bf53fb88.0:
   type (file, link)
etc/ssl/certs/c01eb047.0:
   type (file, link)
etc/ssl/certs/c28a8a30.0:
   type (file, link)
etc/ssl/certs/ca6e4ad9.0:
   type (file, link)
etc/ssl/certs/cbf06781.0:
   type (file, link)
etc/ssl/certs/cc450945.0:
   type (file, link)
etc/ssl/certs/cd58d51e.0:
   type (file, link)
etc/ssl/certs/cd8c0d63.0:
   type (file, link)
etc/ssl/certs/ce5e74ef.0:
   type (file, link)
etc/ssl/certs/d4dae3dd.0:
   type (file, link)
etc/ssl/certs/d52c538d.0:
   type (file, link)
etc/ssl/certs/d6325660.0:
   type (file, link)
etc/ssl/certs/da0cfd1d.0:
   type (file, link)
etc/ssl/certs/dc4d6a89.0:
   type (file, link)
etc/ssl/certs/dd8e9d41.0:
   type (file, link)
etc/ssl/certs/ddcda989.0:
   type (file, link)
etc/ssl/certs/de6d66f3.0:
   type (file, link)
etc/ssl/certs/e18bfb83.0:
   type (file, link)
etc/ssl/certs/e35234b1.0:
   type (file, link)
etc/ssl/certs/e36a6752.0:
   type (file, link)
etc/ssl/certs/e73d606e.0:
   type (file, link)
etc/ssl/certs/e868b802.0:
   type (file, link)
etc/ssl/certs/e8de2f56.0:
   type (file, link)
etc/ssl/certs/ecccd8db.0:
   type (file, link)
etc/ssl/certs/ed858448.0:
   type (file, link)
etc/ssl/certs/eed8c118.0:
   type (file, link)
etc/ssl/certs/ef954a4e.0:
   type (file, link)
etc/ssl/certs/f0c70a8d.0:
   type (file, link)
etc/ssl/certs/f30dd6ad.0:
   type (file, link)
etc/ssl/certs/f44703f1.0:
   type (file, link)
etc/ssl/certs/f51bb24c.0:
   type (file, link)
etc/ssl/certs/fb717492.0:
   type (file, link)
etc/ssl/certs/fc5a8f99.0:
   type (file, link)
etc/ssl/certs/fd64f3fc.0:
   type (file, link)
etc/ssl/certs/fe8a2cd8.0:
   type (file, link)
etc/ssl/certs/feffd413.0:
   type (file, link)
etc/ssl/certs/ff34af3f.0:
   type (file, link)
etc/ssl/certs/ffdd40f9.0:
   type (file, link)
etc/ssl/untrusted/02265526.0:
   type (file, link)
etc/ssl/untrusted/0b7c536a.0:
   type (file, link)
etc/ssl/untrusted/0d972af8.0:
   type (file, link)
etc/ssl/untrusted/106f3e4d.0:
   type (file, link)
etc/ssl/untrusted/1422d63c.0:
   type (file, link)
etc/ssl/untrusted/1766e401.0:
   type (file, link)
etc/ssl/untrusted/19dbc0dd.0:
   type (file, link)
etc/ssl/untrusted/244b5494.0:
   type (file, link)
etc/ssl/untrusted/2d803388.0:
   type (file, link)
etc/ssl/untrusted/2dab9e33.0:
   type (file, link)
etc/ssl/untrusted/3136ea36.0:
   type (file, link)
etc/ssl/untrusted/3323bb7e.0:
   type (file, link)
etc/ssl/untrusted/3513523f.0:
   type (file, link)
etc/ssl/untrusted/40547a79.0:
   type (file, link)
etc/ssl/untrusted/442adcac.0:
   type (file, link)
etc/ssl/untrusted/4632c230.0:
   type (file, link)
etc/ssl/untrusted/4c3cbf99.0:
   type (file, link)
etc/ssl/untrusted/4f316efb.0:
   type (file, link)
etc/ssl/untrusted/5a4d6896.0:
   type (file, link)
etc/ssl/untrusted/5ad8a5d6.0:
   type (file, link)
etc/ssl/untrusted/5c79eb85.0:
   type (file, link)
etc/ssl/untrusted/5e98733a.0:
   type (file, link)
etc/ssl/untrusted/626dceaf.0:
   type (file, link)
etc/ssl/untrusted/69cf9657.0:
   type (file, link)
etc/ssl/untrusted/6b99d060.0:
   type (file, link)
etc/ssl/untrusted/76faf6c0.0:
   type (file, link)
etc/ssl/untrusted/779a714a.0:
   type (file, link)
etc/ssl/untrusted/7ffa47b4.0:
   type (file, link)
etc/ssl/untrusted/896c8bb4.0:
   type (file, link)
etc/ssl/untrusted/981901c3.0:
   type (file, link)
etc/ssl/untrusted/ade2cc8c.0:
   type (file, link)
etc/ssl/untrusted/aee5f10d.0:
   type (file, link)
etc/ssl/untrusted/b1159c4c.0:
   type (file, link)
etc/ssl/untrusted/b1b8a7f3.0:
   type (file, link)
etc/ssl/untrusted/c9e4c02b.0:
   type (file, link)
etc/ssl/untrusted/cbd811bd.0:
   type (file, link)
etc/ssl/untrusted/d2be6420.0:
   type (file, link)
etc/ssl/untrusted/d7e8dc79.0:
   type (file, link)
etc/ssl/untrusted/e113c810.0:
   type (file, link)
etc/ssl/untrusted/e1e8b7dc.0:
   type (file, link)
etc/ssl/untrusted/e53e0c3b.0:
   type (file, link)
etc/ssl/untrusted/ee64a828.0:
   type (file, link)
etc/ssl/untrusted/f081611a.0:
   type (file, link)
etc/ssl/untrusted/f2d4863f.0:
   type (file, link)
etc/ssl/untrusted/f387163d.0:
   type (file, link)
etc/ssl/untrusted/f84fab51.0:
   type (file, link)
etc/ssl/untrusted/fd2eb50d.0:
   type (file, link)
>>> Check installed repositories
FreeBSD-ports (Priority: 0)
FreeBSD-ports-kmods (Priority: 0)
OPNsense (Priority: 11)
SunnyValley (Priority: 7)
>>> Check installed plugins
pkg: Warning: Major OS version upgrade detected.  Running "pkg bootstrap -f" recommended
os-cpu-microcode-intel 1.1
os-ddclient 1.31_1
os-dmidecode 1.2
os-hw-probe 1.0_1
os-isc-dhcp 1.0_6
os-sensei 2.6.1
os-sensei-updater 2.0
os-smart 2.4
os-sunnyvalley 1.5_2
os-vnstat 1.4
>>> Check locked packages
pkg: Warning: Major OS version upgrade detected.  Running "pkg bootstrap -f" recommended
>>> Check for missing package dependencies
pkg: Warning: Major OS version upgrade detected.  Running "pkg bootstrap -f" recommended
Checking all packages: .......... done
>>> Check for missing or altered package files
pkg: Warning: Major OS version upgrade detected.  Running "pkg bootstrap -f" recommended
Checking all packages: .
isc-dhcp44-server-4.4.3P1_2: missing file /usr/local/bin/omshell
Checking all packages............ done
>>> Check for core packages consistency
Core package "opnsense" at 26.1.11_10 has 68 dependencies to check.
Checking packages: .
beep-1.0_2 has no upstream equivalent
Checking packages: .
ca_root_nss-3.124 has no upstream equivalent
Checking packages: .
choparp-20150613_1 has no upstream equivalent
Checking packages: .
colordiff-1.0.22 has no upstream equivalent
Checking packages: .
cpustats-0.1 has no upstream equivalent
Checking packages: .
dhcp6c-20260122 has no upstream equivalent
Checking packages: .
dhcrelay-1.0 has no upstream equivalent
Checking packages: .
dnsmasq-2.93,1 has no upstream equivalent
Checking packages: .
dpinger-3.4 has no upstream equivalent
Checking packages: .
filterlog-0.8 has no upstream equivalent
Checking packages: .
flock-2.37.2_1 has no upstream equivalent
Checking packages: .
flowd-0.9.1_5 has no upstream equivalent
Checking packages: .
hostapd-2.11_3 has no upstream equivalent
Checking packages: .
hostwatch-1.0.13 has no upstream equivalent
Checking packages: .
ifinfo-13.0_1 has no upstream equivalent
Checking packages: .
iftop-1.0.p4_1 has no upstream equivalent
Checking packages: .
kea-3.0.3 has no upstream equivalent
Checking packages: .
lighttpd-1.4.84 has no upstream equivalent
Checking packages: .
monit-5.35.2 has no upstream equivalent
Checking packages: .
mpd5-5.9_19 has no upstream equivalent
Checking packages: .
ntp-4.2.8p18_5 has no upstream equivalent
Checking packages: .
openssh-portable-10.3.p1,1 has no upstream equivalent
Checking packages: .
openvpn-2.7.5 has no upstream equivalent
Checking packages: .
opnsense-26.1.11_10 has no upstream equivalent
Checking packages: .
opnsense-installer-25.1_2 has no upstream equivalent
Checking packages: .
opnsense-lang-26.1.7 has no upstream equivalent
Checking packages: .
opnsense-update-26.1.11 has no upstream equivalent
Checking packages: .
pam_opnsense-24.1 has no upstream equivalent
Checking packages: .
pftop-0.13 has no upstream equivalent
Checking packages: .
php83-ctype-8.3.31 has no upstream equivalent
Checking packages: .
php83-curl-8.3.31 has no upstream equivalent
Checking packages: .
php83-dom-8.3.31 has no upstream equivalent
Checking packages: .
php83-filter-8.3.31 has no upstream equivalent
Checking packages: .
php83-gettext-8.3.31 has no upstream equivalent
Checking packages: .
php83-ldap-8.3.31 has no upstream equivalent
Checking packages: .
php83-pcntl-8.3.31 has no upstream equivalent
Checking packages: .
php83-pdo-8.3.31 has no upstream equivalent
Checking packages: .
php83-pear-Crypt_CHAP-1.5.0_1 has no upstream equivalent
Checking packages: .
php83-pecl-radius-1.4.0b1_4 has no upstream equivalent
Checking packages: .
php83-phalcon-5.16.0 has no upstream equivalent
Checking packages: .
php83-phpseclib-3.0.55 has no upstream equivalent
Checking packages: .
php83-session-8.3.31 has no upstream equivalent
Checking packages: .
php83-simplexml-8.3.31 has no upstream equivalent
Checking packages: .
php83-sockets-8.3.31 has no upstream equivalent
Checking packages: .
php83-sqlite3-8.3.31 has no upstream equivalent
Checking packages: .
php83-xml-8.3.31 has no upstream equivalent
Checking packages: .
php83-zlib-8.3.31 has no upstream equivalent
Checking packages: .
pkg-2.3.1_1 has no upstream equivalent
Checking packages: .
py313-Jinja2-3.1.6 has no upstream equivalent
Checking packages: .
py313-dnspython-2.8.0_1,1 has no upstream equivalent
Checking packages: .
py313-duckdb-1.5.4 has no upstream equivalent
Checking packages: .
py313-jq-1.11.0 has no upstream equivalent
Checking packages: .
py313-ldap3-2.9.1_1 has no upstream equivalent
Checking packages: .
py313-numpy-2.4.6_1,1 has no upstream equivalent
Checking packages: .
py313-pandas-2.3.3_3,1 has no upstream equivalent
Checking packages: .
py313-requests-2.34.2 has no upstream equivalent
Checking packages: .
py313-sqlite3-3.13.14_10 has no upstream equivalent
Checking packages: .
py313-ujson-5.12.1 has no upstream equivalent
Checking packages: .
py313-vici-6.0.3 has no upstream equivalent
Checking packages: .
radvd-2.20 has no upstream equivalent
Checking packages: .
rrdtool-1.9.0_1 has no upstream equivalent
Checking packages: .
samplicator-1.3.8.r1_1 has no upstream equivalent
Checking packages: .
strongswan-6.0.7 has no upstream equivalent
Checking packages: .
sudo-1.9.17p2_2 has no upstream equivalent
Checking packages: .
suricata-8.0.6 has no upstream equivalent
Checking packages: .
syslog-ng-4.12.0 has no upstream equivalent
Checking packages: .
unbound-1.25.1_1 has no upstream equivalent
Checking packages: .
wpa_supplicant-2.11_7 has no upstream equivalent
Checking packages: .
zip-3.0_5 has no upstream equivalent
***DONE***

[Cableguy_]

Any suggestions how to fix this? Fresh new install and config restore?

[franco]

Looks good, but missing the packages:

# opnsense-update -upr 26.7 -a FreeBSD:15:amd64/26.7
(reboot)


Cheers,
Franco

[Cableguy_]

Trying updating packages-26.7-amd64.tar using console.

Initial problem and also my main problem was signature error with this exact file. Let's hope it will update this time.

Once again, it is really weird that the system did indeed update without valid packages.

Edit: fetching packages-26.7.-amd64.tar still fails: failed, signature invalid

[newsense]

Try another mirror