pfSense

Update the Copyright year of the files owned by Rubicon/Netgate.

OpenVPN Generated RADIUS ACL Ruleset for status_output. Implements #12316

Add incorrectly generated package rules to status_output. Implements #12269

Sanitize WireGuard keys from status_output. Fixes #12256

Sanitize pass and radmac_secret. Fixes #11767 and #11769

Remove WireGuard support

Out of an abundance of caution while we investigate the claims about
WireGuard in public, we need to remove it from pfSense Plus and CE in
order to shield customers from potential risk.

Sanitize PKCS11 PIN from swanctl.conf. Issue #11348

Sanitize securiteinfo_id. Issue #11344

Sanitize DHCP DDNS keys. Issue #11342

Sanitize WireGuard PresharedKey from config. Fixes #11341

Add WireGuard info to status output. NG 5483

Update the Copyright year.

A subsequent commit will deal with .po's.

Add product_label global variable

Introduce product_label global variable, by default with same value of
product_name. The idea is to make it easier for rebranded products to
change the name on all visual texts while internal structures are
preserved.

While here, remove deprecated $g['platform'] and also replace places...

NTP server authentication. Issue #8794

Remove space from EOL

Merge pull request #4466 from vktg/sanitizewifiradius

Sanitize WiFi 802.1x RADIUS shared secrets. Implements #10946

Sanitize secret2. Implements #10944

Merge pull request #4409 from vktg/sanitizegeoipkey

Sanitize MaxMind GeoIP key. Implements #10797

Sanitize Net-SNMP community. Fixes #10840

Merge pull request #4413 from vktg/unboundstatusoutput

status.php: Add DNS Resolver configuration. Implements #10635

Sanitize HAproxy stats_password. Issue #10794

status.php: Add config history. Implements #10696

Merge pull request #4321 from vktg/sanitizeacme

status.php: Add L2TP VPN configuration. Implements #10583

Sanitize ACME passwords. Issue #10569

Sanitize FreeRADIUS passwords. Fixes #10568

status.php: Add upgrade_log.latest.txt. Issue #10455

status.php updates

• Add kldstat verbose output. Implements #10423
• Change pkg calls to pkg-static. Fixes #10424

Merge pull request #4239 from vktg/squidldappwsanitize

Sanitize ldapbindpass and ldap_pass. Issue #10349

Add OpenVPN config files to status output. Implements #10350

This form will only work on 2.5.0 since the directory layout changed.

This is 2020. Issue #9245

Add IPFW table contents to status.php

Merge pull request #4109 from vktg/p11ipsec

some progress

Update status.php to read swanctl.conf, not ipsec.conf

Also ensure that secrets are redacted, and change the strongswan.conf
command to match.

IPsec swanctl conversion. Implements #9603

• Converted IPsec configuration code from ipsec.conf ipsec/stroke style
  to swanctl.conf swanctl/vici style. Issue #9603
• Split up much of the single large IPsec configuration function into
  multiple functions as appropriate....

Use central download function

Reduce duplicated/inconsistent code by using the new download function.

Fix oinkmastercode tag in status.php. Fixes #9736

Redact BandwidthD postgres db password. Fixes #9784

Sanitize barnyard_dbpwd in status.php output. Fixes #9764

status.php: Sanitize snort/suricata oink and etpro codes.

status.php: Sanitize zabbix TLS psk info. Fixes #9729

status.php: Restrict thoth tests to arm64. Fixes NG 2569

status.php: Sanitize influx_pass and cert_key. Fixes #9727 Fixes #9728

Add log compression type option. Issue #9711

Change logging to plain text, deprecate clog. Issue #8350

Add kernel memory usage to status.php. Implements #9705

Redact ACB encryption PW. Fixes #9694

Fix copyright message years to reflect BSDP -> ESF -> Netgate

Update status.php to use ping-auth for pubkey

status.php updates

• Ensure firewall info is generated when run from the CLI
• For SG-1100, also include its public key

Deprecate the built-in relayd Load Balancer. Closes #9386

It is not available on FreeBSD 12 with OpenSSL 1.1.x.

Users can migrate to the HAProxy package.

status.php optimizations. Implements #9290

• Rewrites the command output so it is first written to files, then read through line-by-line to PHP. Should be much more efficient and consume less memory, making the previously "too large" commands viable.
• Increase verboseness of ifconfig output, add supported media...

Update copyright notices to 2019. Happy New Year

Change the method used by status.php to mask sensitive info.

Also add a few new tags to be masked. See Factory #1170

Change status.php to use "ifconfig -v". Implements #8860

Redact lightsquid pw in status output. Fixes #8819

Add switch config to status output. Implements #8525

Redact some more info from the status.php output. Fixes #8394

Silence warnings generated by sysctl to standard error.

Update the Copyright notice for pfSense.

Do not show Serial when it's empty

Fix PPP log reference in status.php

Redact BGP MD5 password/key in status output. Fixes #7642

Add download button/function directly on status.php to ease confusion.

Add NGID to status.php

Add "netstat -nWx" to status.php output

Fix typo

setHelp and getttext format for status*

Only fetch ZFS status if ZFS is loaded. Otherwise it can load it unintentionally on a system that doesn't need it.

Fix variable reference. Ticket #7047

Add version and build data to status output. Ticket #7047

Bring status.php up-to-date and add a number of new items as listed on redmine. Fixes #7047

Added:
The firewall platform and serial number
ARP Table
NDP Table
Gateway status (See #7046)
ZFS disk/pool info
gmirror status
Limiter info...

Use the full "netstat -s" command so we also get pfkey, ipsec, esp, and other stats.

Use tree-style ps output in status.php

Move copyright from ESF to Netgate

Move to Apache License 2.0

Review license / copyright on all files (1st round)

Omit <secret> tags from L2TP in status.php config.xml dump.

Mask a few more sensitive bits of data in the status.php config.

Add authorizedkeys to exclusion in status.php, and fix. While these are public keys and hence not sensitive, they're also of no diagnostic value. Suggested-by: Denny Page

Remove bcrypt-hash from status.php config dump. Noticed by Denny Page

Add PCI and USB device lists to status output

Renamed exec.php and edit.php

Review alert wording. End sentence with period, remove redundant 'Warning', 'Error', etc. prefixes, since alerts are now color coded. Remove <b> tags.

Consistent panel-heading h2

Make all the panel-heading uses also have consistent <h2
class="panel-title"> so they all display the same size.
Forum https://forum.pfsense.org/index.php?topic=105275.0

Nuke fifolog support. It was never used or fully implemented, no GUI option, and didn't end up working out.
It buffered writes too long, users could never see the most current log data.

Change status.php state dump to use -vvss for more verbose info, add kenv and pkg info

Remove all pfSense_MODULE and pfSense_BUILDER_BINARIES definitions, whatever was the reason they were added, it was never finished and it's not being used

Code style status*

Ticket #5624: Welcome dpinger!

Fixed #5555

Add -W to netstat call to make sure long interface name will be not truncated. Ticket #5484

Calling all of these "Page" in the privilege name is redundant since they are all pages and the "WebCfg" prefix implies they are pages.

Copyright and license cleanup

- Remove personal copyright from people who assigned it to employer (ESF)
- Remove $Id$
- Remove extra spaces

EOL whitespace and header consistency for www