pfSense

Clarify IPsec local/remote net usage for tunnel/vti/mobile. Fixes #8635

Fixed #8656 PHP7 fixed illegal string offsets

Revert "Add fields for DNS server hostnames for TLS verification. Implements #8602"

Per https://www.nlnetlabs.nl/bugs-script/show_bug.cgi?id=658 the verification
requires OpenSSL 1.1.x, and FreeBSD 11.2 base OpenSSL is 1.0.x.

This reverts commit ad08a8242ca45907e0486712d218a5f8f34c7332.

Merge pull request #3964 from marcelloc/patch-7

Fixed #8654
Fixed PHP7 issue causing separators not to work at all

Integrate ACB into core. Add config migration.

Fixed td placement from previous commit

Fixed table spacing when no tunnels were active

Fixed #8640 Added type casting in case destination port is empty

Fix another DynDNS status PHP error. Fixes #8648

status_ipsec.php, correct conX refs. Fixes #8629

Fix PHP7 errors in the Dynamic DNS widget. Fixes #8648

PHP7 Fixed illegal string offset for alias

Fixed a bug that won't let you create a bridge on PHP7. This is just a workaround until the actual issue is found

Fixed #8630 , PHP7 illegal string offset.

suppress php7.2 eval erros on pkg_edit.php

https://redmine.pfsense.org/issues/8637

As of PHP 7, if there is a parse error in the evaluated code, eval() throws a ParseError exception. Before PHP 7, in this case eval() returned FALSE and execution of the following code continued normally. It is not possible to catch a parse error in eval() using set_error_handler()....

Fixed #8598 Added IPsec ID to the table, Moved the disconnect button over to better fit the page, Also fixed the disconnect button and show child button for mobile clients

Make sure array exist before call count()

Improve style

Fixed #8622 It will now revert to whatever was previously saved in the config if there is an input error for user groups

Fix 8553: When creating a new user, make sure it's added to desired groups

Add fields for DNS server hostnames for TLS verification. Implements #8602

wizard.php: Ensure CA and Certs are arrays before using in foreach.

Cosmetic changes to warning maeesage

Add position params to gettext password warning

Test the password, not the hash, or it won't detect if the user reset password from the console or otherwise changed it to the default manually. Issue #8596

Change warning wording to avoid using a "click here" link. Issue #8596

Fixed #8596

Fixed #8597 The edit page will no longer initialize with focus on any element

Merge pull request #3960 from PiBa-NL/20180704-ipsec-fix-phase1-edit-page

Merge pull request #3958 from PiBa-NL/20180702-gateway-none

Suppress display of AutoConfigBackup in package list

ipsec, fix Phase1 and Phase2 edit pages 'section' class does not have a setHelp() function, and add help for insecure DH groups on mobile settings page

Add gettext() and other cosmetic changes

Provide warning if legacy mode not configured

Add legacy encrytopn password support

Add tabs to settings page

Update $config references

Fix #7024: Deprecate /etc/inc/radius.inc in favor of pear-Auth_RADIUS port

Initial commit of ACB core functionality

routing, add option 'automatic' for gateway selection, and allow manual ordering of gateways

Merge pull request #3955 from PiBa-NL/20180623-fix-edit-interface-set-default-gateway

Merge pull request #3953 from whislock/gw-mon-interval

Merge pull request #3952 from imcdona/master

Merge pull request #3939 from seanm/IPSec-Warnings2

Make GUI/config values for gateway groups match what the backend code expects. Fixes #8586

Correct a PHP error when saving on system_advanced_admin.php. Fixes #8606

Fix OpenVPN Wizard LDAP handling of ATTR fields. Fixes #8605

While here, also add missing LDAP fields and fix a PHP 7.2 error.

Fixed #7013
Added warning requiring reboot if group scope is changed

Fix PHP 7 error on services_unbound_host_edit.php

Remove unneeded commas

routing, when adding a new gateway and setting it as the default actually allow that to happen by indicating the proper ipprotocol for the gateway to set it for as a default

Reduce max interval to 60 minutes

Per discussion on Redmine, bringing the maximum probe interval down to 60 minutes. Anything higher than this would provide little real-world benefit to gateway monitoring.

Redmine #8592: Clarify DHCP hostname registration

Extend maximum monitoring interval.
The existing monitoring interval was a maximum of 86400 ms, or approximately 86 seconds. This can cause excessive data usage over strictly metered connections. This patch extends the maximum interval to 86,400,000 ms, or exactly 24 hours.

Merge pull request #3950 from marcelloc/patch-5

Merge pull request #3949 from Hobby-Student/master

Merge pull request #3943 from miken32/patch-2

requested changes

fix the fix

get total size on system dashboad

check total swap size on dashboard

Refer to bug #8587

fixed wrong if conditions
added support of dns server

Correct the gateway check when deleting a VIP. Fixes #4438

Now it checks to see if there are other VIPs in the same subnet left,
and only prevents deleting the last VIP by which a gateway could be
reached.

Added future ACB settings page

Validate NPt IPv6 address input and do not use invalid stored settings in rules. Fixes #8575

Fix IPsec status widget conn matching to align with recent changes. Fixes #8562

Be specific with port fwd priv checks. Fixes #8563

This way, users with only privs to view but not edit port forwards can still see the entries, but not act upon them.

Correct PHP syntax error. Fixes #8557

Allow hostname/ip to be deleted if the captive portal is not enabled

Fixed #8539

Fix up user/group management save message descriptions, add logging for same. Fixes #8548

Rework how IPsec VTI interfaces and reqid specifications for same are formed. Ticket #8544

IPsec VTI interface refinements/fixes. Ticket #8544

PHP7 fixed illegal string offset warning

Fix reference to non-existent variable in IPsec P1. Fixes #8543

Please welcome routed IPsec using if_ipsec VTI interfaces. Implements #8544

To use, create a P1/P2 and set P2 to VTI using local/remote network as tunnel endpoint addresses, then assign the interface (enable, but IP type = none), and use like any other interface for routing.

Do not disable rekeying by default on IPsec P1 entries. Fixes #8540

Fix crash reporter download button display when there are only PHP errors, no textdumps.

Fix crash reporter "submit" wording (can't submit anymore!)

Rework crash reporter page so users can download the data files directly rather than submitting to a server.

Restrict entry of DHCP options (ticket #8534)

PHP 7.2 fixed string offset and undefined constant

PHP 7.2 Migration. Replace is_numeric() with ctype_xdigit() to check for valid hex string

Add switch config to status output. Implements #8525

PHP migration 7.2 enforce type array

PHP 7.2 Migration fixed count() issue

Array checking for PHP 7.2 migration

Store the old LAN IP address and temporarily add it to the alt hostnames to work around a referer check issue in the setup wizard. Fixes #8524

PHP7 - Resolve count() error

Fixed #8519
Added simple test to ensure the instance of pfSense-upgrade is the instance started by hte upgrade GUI page, not some other process

Fixed #8515 (Syntax error)

Fixed #8515 (Syntax error)

PHP7 - Resolve count() warning

PHP7 - Resolve illegal string offset warning

PHP7 - Resolve illegal string offset array

PHP7 - Resolve illegal string offset warning

PHP7 - Resolve illegal string offset warning

PHP7 - Resolve illegal string offset warning

PHP7 - Resolve illegal string offset warning