pfSense

Ticket #324. Add allow all rule during upgrade.

Ticket #280. Seems that xml parser does not set the value correctly.

Reorder a few lines so we do not step on the interface variable. This was the cause of accidentaly adding gateway name entries in the
$config['interfaces'] xml

Fix variable name, this tagged all gateways as dynamic on upgrades.

Unbreak remote-ip box. Mpd is now starting for ppptp server

Partial rewrite of gateway code, now partially facilitates dynamic interfaces
- Upgrade code takes different naming into account
- Add gateway entries for dynamic interfaces
- Rewrite status array to also support dynamic interfaces.
- Always use unique localhost monitor IP addresses for down dynamic interfaces...

Make sure we test for the right gateway name in the upgrade code.

Attempt to work around both static configs and dynamic configs on load balancer upgrades. Needs testing on
live installs 1.2 => 2.0.

Add a FIXME note to the upgrade part.

Make sure that the upgraded load balancer configuration reflects the new gateway names

Make sure that we mark the wan interface as the default gateway on upgrades

Replace the previous itteration with this version 2 attempt.
The interface gateways array previously contained no interface name that could be used.
Succesfully upgraded 1 configuration. Needs more testing to catch other edge cases.

Replace gateways configuration upgrade code with 1st attempt to fix.
Revert the lbpool descriptopn variable name. It was correct before.

Make sure that when upgrading the load balancer pools to the gateway format we set the description as well. Typo in the
variable name

Make sure that when upgrading a balance pool that we always user tier 1, it previously used tier 0 which equals "Do not use".

Fix the VLAN upgrade code so that it correctly renames the vlan entries and updates the interfaces
config section to the new name. Tested with 2 VLANS.

Make sure we do not place the temporary files in / but in /tmp

s/loadbalancer/load_balancer/

Add back chopped off and. Output updating configuration after rrd upgrade to make upgrade text look uniform.

oops, revert this. there is code already. focus on making it work for this config instead

Upgrade outgoing load balancing to gateway groups. Ticket #78

Do not rely on PHP5 features which are not widely used in pfSense.

upgrade sysctls to value default. Ticket #71

Extra protection to prevent empty load_balancer arrays on configuration upgrades

Add pfSense_BUILDER_BINARIES: and pfSense_MODULE: additions

add missing sysctl to config upgrade

Make the config upgrade sysctls match the correct values in the default config.xml.

Include certs.inc

Make style consistent

Oops, part of the git merge sneaked in here. Remove

Merge branch 'master' of git://rcs.pfsense.org/pfsense/nigel-ca-chain into review/master

Conflicts:
etc/inc/certs.inc
etc/inc/upgrade_config.inc

Minor header changes

Remove openvpn.inc from functions.inc since its just a subsystem that does not need to be present on all of the includes.

s/./_/ for vlans since netgraph does not like .(dots) in the path names.

Change even the upgrade code to use new style vlan names.

Revert "Do not use tags for vlan interface names since there might be same vlan tags on different parent interfaces and this will break configs and will hide the reason it does not work. Thanks-to: smos@"

This reverts commit 83bdca55920ca6ab3d848f0993d57a1f9b85098f.

Do not use tags for vlan interface names since there might be same vlan tags on different parent interfaces and this will break configs and will hide the reason it does not work. Thanks-to: smos@

Remove code from Seth since one code already exists. And fix a bug on the previous upgrade code.

Yank bridge upgrade function as it appears to be a duplicate. I should have checked before making one. Oh well.

Fix bridge upgrade code.

Fix VLAN upgrade code properly. That's what I get for blind coding.
Testing bridging code now

Fix butchered upgrade code in the end of the file

Add missing quote

Add missing ; to prevent parse error

Try to fix "key element can not be a reference"

Actually use the counter

Add bridge upgrade code for 1.2 -> 2.0
Like the vlan upgrade code this uses slot 38 to make sure it will not run on a 2.0 configuration.
This is blind coded and needs testing. Please help testing.

Since we still needed upgrade code for vlans from 1.2 to 2.0 I added the upgrade at spot number 39 which is just before the user manager upgrade code.
This should make sure that we won't accidentally try to convert a 2.0 install. Good thing we left some spots open!...

Revert mwexec back to exec. They are very different functions.
mwexec() has a mute flag which can be true or false, exec, returns a
array in the 2nd argument and the return code in the 3rd.
We require the output from the command.

Added support for certificate chains to manager so that lighty can deliver them via SSL.

• Shuffle functions around to reduce require_once() a little.

• Convert schedules to pf(4).
  This allows to schedule the whole feature of the rules like queues/limiters/gateways/blocks/allows/etc...
• Whitespace cleaning on filter.inc
• Move schedule backend logic from pfsense-utils.inc to filter.inc and prefix with filter_....

Use mwexec() to hide find *-quality.rrd messages

Modify IPsec code to allow for transport mode. All existing configurations are
marked as tunnel for backwards compatibility. There are problems with the spd
read code which Will likely choke on transport entries. We can fix this later.

Move the IPsec pinghost option from phase1 to phase2. Correct some
bugs that were preventing the local address from being selected.

Move 1700 lines of config upgrade code into it's own include file that's only
brought in when we actually need to upgrade the config file