pfSense

Rework cert keylen/digest validation. Fixes #9180

Fix array init in setup_wizard.xml. Fixes #9170

Do not call interfaces_vlan_configure() every time an interface is edited in GUI.

This is just necessary when a parent interface is changed and we have to propagate the changes to all clones (MTU, FLAGS and others).

Add a logic to detect when a parent interface is changed and only then call interfaces_vlan_configure()....

Make the WF2Q+ the default scheduler for the dummynet limiters.

The WF2Q+ was the default scheduler in previous versions, it is well tested and support dynamic queues.

Add a note for the FIFO scheduler to make clear that it does not support dynamic queues (by design) and as such, it is working as intended....

Allow no username for FreeDNS-v6

Also include that and Digital Ocean in the help text.

Fix #9121: Initialize arrays to prevent PHP 7 errors

Minor fixes related to #9121

Fix #8937: Show hwaddr for LAGG members

Merge pull request #4016 from Augustin-FL/captiveportal-spelling

Merge pull request #4004 from NanoCaiordo/js-warnings

Fix few spelling issues
Ticket #9134

Remove obsolete OLSRD code. Implements #9117

Fix #9071: Make sure pkg metadata is updated when repo config changes

Remove unused variable

Simplify logic to remove packages section from backup

Initialize QinQ arrays before use. Fixes #9109

Fix change detection of GUI web server toggles. Fixes #9105

Add checkbox to disable SMTP SSL cert verification. Implements #9001

The default action is to validate the certificate. If the user knows the
server does not have a valid certificate (e.g. self-signed), this option
will allow encryption to be used without validating the identity of the...

Prevent CRL from using too large a lifetime on ARM. Fixes #9098

Improve handling of empty cert tags. Fixes #9099

Prevent log size from being too large, which breaks clog. Fixes #9081

Prevent PHP error when saving log config. Fixes #9095

Update src/usr/local/www/vendor/d3/d3.min.js

Restored d3.min.js

Update src/usr/local/www/vendor/d3/d3.min.js

make sure to only pass valid options when supported by the browser

Removed js warnings

Add help text to sshguard whitelist
Reduce delete button size
Change label text to "Add address"

Fix #8864: Let users modify sshguard parameters and whitelist

Array initialization in NAT pages. Fixes #9080

Validate and protect powerd option values. Fixes #9061

Merge pull request #4000 from Augustin-FL/patch-cp-3

Fixes to ssh agent forwarding setting

Restore the RADIUS NAS ID option to Captive Portal. Fixes #8998

Keeps the default of using CaptivePortal-<zonename> when not set,
otherwise uses the value supplied by the user as with older versions.

Implement login fallback for RADIUS MAC authentication

Merge pull request #3993 from ssbarnea/master_ssh_forward

Add help.php entry for AWS VPC wizard.

Wording changes for PTI disable option. Fixes #9026

Added #8976 Allow traffic graph settings to be saved

Init schedules before use. Fixes #9009

Review fix.

Review fixes.

Unify and improve crash report checking. Fixes #8915

Disable display of Diagnostics->AutoConfigBackup menu item if config is restored from pfSense < 2.4.4
Fixed #8959

Add top buttons if table > 24 rows

Enable setting AllowAgentForwarding value

Fixes #8590

Signed-off-by: Sorin Sbarnea <ssbarnea@redhat.com>

Fixed #9002 - PPPoE Service Name may contain ':'

Avoid creating or parsing a second empty rrddata tag. Fixes #8994

Change the method used by status.php to mask sensitive info.

Also add a few new tags to be masked. See Factory #1170

Issue #8974

ssh settings alignment. Fixes #8974

Remove redundant settings stored in the wrong place
Store all ssh settings in the same place
Initialize this array before use

Merge pull request #3990 from luckman212/draggin-v2

Fix typo

Init dnsmasq arrays before referencing. Fixes #8967

gettext on strings

Simplify schedule validation

Merge pull request #3989 from luckman212/wol-default-lan-if

Merge pull request #3981 from NanoCaiordo/NanoCaiordo-patch-1

Fix typo in error msg

Fix JSON encoding of gw/gwg params for firewall rule gw list. Fixes #8962

Merge pull request #3992 from luckman212/status-gateways-fixup1

Merge pull request #3980 from luckman212/underscores-on-outbount-nat

Default ACB schedule to every day at midnight

Fixes #8949 Looks like there was 2 variable names for the same variable shownetboot and netboot. It now just uses the variable name netboot

Added scheduled config backup
Fixed: #8947

Fix a display bug in status_gateways.php
This bug causes the Monitor IP to appear even when a gateway
is unmonitored. The monitor IP from the last gateway in the list
to have one will simply get repeated. This patch fixes that bug,
and also cleans up a few other things- unused variables, gets...

default to the lan interface on WOL page, unless another if is
submitted in the form data.

don't show drag message if roworderdragging is disabled

Fix redirect back to user mgmt when editing user 0. Fixes #8920

Initialize DHCP settings before use. Fixes #8919

JimP already fixed it
Revert "Fixed #8913"

This reverts commit fc575f17b66cab903b1241a060180295788e4728.

Fixed #8913

Fix dashboard update check & gitsync settings. Fixes #8913

Fix #8911: Keep configured pkg repository when restoring config

small change to fixup https://redmine.pfsense.org/issues/8851
without this, clicking edit on existing CA goes to wrong screen
and breaks Save button

Init syslog settings before using the array. Fixes #8905

Removed duplicate line :/

Properly restrict a network when default is open.

Effectively override any default setting.

Removed is_ipaddr() as ip_in_subnet() does it already.

Fixed NTP status page not honouring NTP ACLs

Reported in redmine https://redmine.pfsense.org/issues/7609

Don't allow deletion when spoofing another userkey

Fixed #8901

Underscores never hurt nobody
Also, i18n

Initialize DHCP settings in setup wizard. Fixes #8889

Rather than assume they are present, create the arrays before use.

Fix a PHP erorr when a CRL has no certificates

Fix typo

Revert "Default VTI remote to Address but allow it to change. Fixes #8859"

This reverts commit da54e84ae79328a87b4a319239bb1b14d7ed2ce6.

Prevent a user from selecting VTI for mobile IPsec. Fixes #8877

Changes on the parent interfaces will create new interfaces and the existing VLANs needs to be redone.

Ticket #8527

IPsec VTI requires a manually specified network/address. Issue #8877

Prevent a user from selecting an interface macro like "LAN Network"
which cannot be used with VTI since it does not work like traditional
IPsec Phase 2 definitions.

Init gateway group array before use. Fixes #8876

Fix #8806: Configure captive portal on secondary identical as master HA node

Fix #8721: Call proper filter_configure function from this class

Change status.php to use "ifconfig -v". Implements #8860

Default VTI remote to Address but allow it to change. Fixes #8859

Make async_crypto explicit enabled/disabled rather than current isset

Initialize IPsec logging array before use. Fixes #8857

Fix #7694: Replace sshlockout_pf by sshguard

Set default new CA/Cert action to Create Internal. Implements #8851

Fixes #8767 PHP7 syntax error

fixes #8837 part 2, initialize as array instead of string for PHP7

Bug was fixed in pfsense module and this code is no longer needed so removing.