Project

General

Profile

Bug #16194

Cannot update Freenas 9.10 - Manifest could not be found!

Added by Bliod Hans about 4 years ago. Updated almost 3 years ago.

Status:
Resolved
Priority:
Blocks Until Resolved
Assignee:
Josh Paetzel
Category:
Forums/Websites
Target version:
Severity:
New
Reason for Closing:
Reason for Blocked:
Needs QA:
Yes
Needs Doc:
Yes
Needs Merging:
Yes
Needs Automation:
No
Support Suite Ticket:
n/a
Hardware Configuration:
ChangeLog Required:
No

Description

When I try to check if there is a update, this is what I get:

Update server could not be reached

Traceback

Traceback (most recent call last):
File "/usr/local/www/freenasUI/../freenasUI/system/views.py", line 1448, in update_check
train=updateobj.get_train(),
File "/usr/local/lib/freenasOS/Update.py", line 809, in CheckForUpdates
raise UpdateManifestNotFound("Manifest could not be found!")
UpdateManifestNotFound: Manifest could not be found!

This has been the case for the last couple of weeks now. Nothing has been done to the system since my last update, all the jails are running just fine and the server is online. DNS is just fine as well.
According the system info I'm running FreeNAS-9.10-MASTER-201606121757 (a33184e)
Let me know if there is more info I can provide.

freenas-update.pem (11 KB) freenas-update.pem Sean Fagan, 07/05/2016 01:03 AM

Related issues

Related to FreeNAS - Bug #16232: Error Updating 9.10 StableClosed: Duplicate2016-07-07
Has duplicate FreeNAS - Bug #16234: Update GUI can not find updatesClosed: Duplicate2016-07-07

History

#1 Updated by Sean Fagan about 4 years ago

  • Status changed from Unscreened to 15

Please do the following:

freenas-update -v check

If that fails, then please try

manifest_util verify

and include the output of each.

#2 Updated by Bliod Hans about 4 years ago

Sean Fagan wrote:

Please do the following:

freenas-update -v check

If that fails, then please try

manifest_util verify

and include the output of each.

freenas-update -v check

TryGetNetworkFile([u'http://update-master.freenas.org/FreeNAS/FreeNAS-9.10-Nightlies/LATEST'])
TryGetNetworkFile([u'http://update-master.freenas.org/FreeNAS/FreeNAS-9.10-Nightlies/LATEST']):  Read 9195 bytes total
VerifySignature:  Cannot find a required file
Latest manifest has invalid signature: Signature verification failed
No updates available

manifest_util verify

VerifySignature:  Cannot find a required file
Bad Signature

#3 Updated by Sean Fagan about 4 years ago

Okay, you're running the nightlies.

There was an issue with that. Save the attached file freenas-update.pem into /usr/local/share/certs on the freenas system.

The issue was resolved in a later build.

#4 Updated by Bliod Hans about 4 years ago

Sean Fagan wrote:

Okay, you're running the nightlies.

There was an issue with that. Save the attached file freenas-update.pem into /usr/local/share/certs on the freenas system.

The issue was resolved in a later build.

Working like a charm again! Thank you very much!

#5 Updated by Matt Kessler about 4 years ago

+1, but on:FreeNAS-9.10-STABLE/LATEST

Build    FreeNAS-9.10-STABLE-201606270534 (dd17351)

[root@freenas ~]# freenas-update -v check                                                                                           
TryGetNetworkFile([u'http://update-master.freenas.org/FreeNAS/FreeNAS-9.10-STABLE/LATEST'])                                         
Unable to load http://update-master.freenas.org/FreeNAS/FreeNAS-9.10-STABLE/LATEST: <urlopen error timed out>                       
Unable to load [u'http://update-master.freenas.org/FreeNAS/FreeNAS-9.10-STABLE/LATEST']: <urlopen error timed out>                  
<urlopen error timed out>                                                                                                           
Received exception during download phase, cannot update   

[root@freenas ~]# manifest_util verify                                                                                              
TryGetNetworkFile(['https://web.ixsystems.com/updates/ix_crl.pem'])                                                                 
Unable to load https://web.ixsystems.com/updates/ix_crl.pem: Host web.ixsystems.com returned an invalid certificate (hostname mismat
ch) {'issuer': ((('countryName', u'US'),), (('organizationName', u"Let's Encrypt"),), (('commonName', u"Let's Encrypt Authority X3")
,)), 'subject': ((('commonName', u'www.ixsystems.com'),),), 'caIssuers': (u'http://cert.int-x3.letsencrypt.org/',), 'serialNumber': 
u'03F65B8BAC803C4150C5F62313F185EEB68C', 'version': 3L, 'notAfter': 'Sep 20 18:51:00 2016 GMT', 'OCSP': (u'http://ocsp.int-x3.letsen
crypt.org/',), 'notBefore': u'Jun 22 18:51:00 2016 GMT', 'subjectAltName': (('DNS', 'ixsystems.com'), ('DNS', 'www.ixsystems.com'))}

Unable to load ['https://web.ixsystems.com/updates/ix_crl.pem']: Host web.ixsystems.com returned an invalid certificate (hostname mi
smatch) {'issuer': ((('countryName', u'US'),), (('organizationName', u"Let's Encrypt"),), (('commonName', u"Let's Encrypt Authority 
X3"),)), 'subject': ((('commonName', u'www.ixsystems.com'),),), 'caIssuers': (u'http://cert.int-x3.letsencrypt.org/',), 'serialNumbe
r': u'03F65B8BAC803C4150C5F62313F185EEB68C', 'version': 3L, 'notAfter': 'Sep 20 18:51:00 2016 GMT', 'OCSP': (u'http://ocsp.int-x3.le
tsencrypt.org/',), 'notBefore': u'Jun 22 18:51:00 2016 GMT', 'subjectAltName': (('DNS', 'ixsystems.com'), ('DNS', 'www.ixsystems.com
'))}                                                                                                                                

Trying to get CRL, got exception Host web.ixsystems.com returned an invalid certificate (hostname mismatch) {'issuer': ((('countryNa
me', u'US'),), (('organizationName', u"Let's Encrypt"),), (('commonName', u"Let's Encrypt Authority X3"),)), 'subject': ((('commonNa
me', u'www.ixsystems.com'),),), 'caIssuers': (u'http://cert.int-x3.letsencrypt.org/',), 'serialNumber': u'03F65B8BAC803C4150C5F62313
F185EEB68C', 'version': 3L, 'notAfter': 'Sep 20 18:51:00 2016 GMT', 'OCSP': (u'http://ocsp.int-x3.letsencrypt.org/',), 'notBefore': 
u'Jun 22 18:51:00 2016 GMT', 'subjectAltName': (('DNS', 'ixsystems.com'), ('DNS', 'www.ixsystems.com'))}                            

Could not get CRL https://web.ixsystems.com/updates/ix_crl.pem, so we'll just continue                                              
Verify command = ['/usr/local/libexec/verify_signature', '-K', '/usr/local/share/certs/freenas-update.pem', '-C', '/usr/local/share/
certs/iX-CA.pem', '-S', u'rb9sd5vQ3jPAj8phmJSsSSUBN+i5ZH46+KFwuiOEG9lBkRvl0CpD/lrxeV75pY22a2zefR9JZv9r4zChE+l1nS6VetI8hTEVVcyQ5yRL3N
jkgVoo2vuMZ4sbvf5L8oYHt79wUEi/hbxVI6f6cmn4ynuHjs9VMuBJL9betbW9zxYWqSyN2JwWMik3YfEisfe7v60FzOEgYZ0iqhd769TOnLOwzDM5pWuT6C0+m1X0Cqc7RR
DhBVRhmS4bHZO3MJU01YLgxn4GzqCenTzg3ZUuhBe6qx5DGucswMB6DNHhhOKdkKAwzWNmsTo8M5Om9xEWLBOJob0dyc0+h3iti7yWGQ==']                        
Signature check succeeded                                                                                                           
Verified                                                                                                                            
[root@freenas ~]#  

#6 Updated by Ville Steudle about 4 years ago

Same here, using FreeNAS 9.10-STABLE.

Looks to me like http://update-master.freenas.org/ is temporarily down?

Worked ok yesterday (about 20h ago).

#7 Updated by Matt Kessler about 4 years ago

I'd look at that, too:

invalid certificate (hostname mismatch)

web.ixsystems.com seems to be missing in Subject Alternative Names

#8 Updated by han sooloo about 4 years ago

Ville Steudle wrote:

Same here, using FreeNAS 9.10-STABLE.

Looks to me like http://update-master.freenas.org/ is temporarily down?

Worked ok yesterday (about 20h ago).

Simple HTTP GET is failing for me as well.

#9 Updated by Josh Paetzel about 4 years ago

  • Status changed from 15 to Fix In Progress
  • Assignee changed from Sean Fagan to Josh Paetzel
  • Priority changed from No priority to Blocks Until Resolved

There are two issue:

1) The SSL cert mismatch for web.ixsystems.com

That is currently resolved.

2) update-master.freenas.org is down

Working on that now.

#10 Updated by Josh Paetzel about 4 years ago

  • Has duplicate Bug #16234: Update GUI can not find updates added

#11 Updated by Josh Paetzel about 4 years ago

  • Related to Bug #16232: Error Updating 9.10 Stable added

#12 Updated by Sean Fagan about 4 years ago

Looks like, for some reason, the update server can't be reached.

#13 Updated by Sean Fagan about 4 years ago

  • Tracker changed from Bug to Purchase Requests
  • Project changed from FreeNAS to SysAdmin
  • Category deleted (1)

update-master.freenas.org is not reachable, internally or externally.

#14 Updated by Josh Paetzel about 4 years ago

  • Tracker changed from Purchase Requests to Bug
  • Project changed from SysAdmin to FreeNAS
  • Category set to 1
  • Status changed from Fix In Progress to Resolved
  • Seen in set to 9.10-STABLE-201606270534

#15 Updated by Dru Lavigne almost 3 years ago

  • Category changed from 1 to Forums/Websites
  • Target version set to N/A

Also available in: Atom PDF