pfSense

Updated captive portal to use a template with customizable image uploads

Co-authored-by: Felix Häberle <felixhaeberle@users.noreply.github.com>

Disable OpenVPN compression for new instances by default. Fixes #8788

Also add warning text that cautions against enabling compression.

While here, also add missing "stub-v2" compression mode.

Update translation files

Regenerate pot

Revise setup wizard link

Fixed #8745 by trimming nulls from bridgeif

Merge pull request #3640 from Augustin-FL/master

Rework pkg_mgr_install.php

There were many reports from users that in some specific cases GUI was
losing track of pfSense-upgrade instance and showing messages saying
upgrade process aborted while it was still running in background.

Keep track of pfSense-upgrade wrapper process started by GUI and...

Revise Netgate product links

Update and clarify captiveportal GUI settings

Obsolete old captiveportal radius files

Update captiveportal RADIUS Accounting

Make captiveportal use user manager as auth source

Merge pull request #3946 from martinisoft/martinisoft/dnsimple_v2_api

Merge pull request #3934 from PiBa-NL/20180406-outboundnat-ipv6-mixedaddresses

Update translation files

Regenerate pot

Normalize RADIUS authentication

Add GUI control for IPsec async crypto. Implements #8772

Remove pfsense => pfSense nonsense that was breaking wizrd hyperlinks that included hte product name

Revise Netgate links

Fix #7604: Rework pkg reinstall on config restore

- Remove old code needed to upgrade fom < 2.3 to 2.3
- Simplify logic using a single file /conf/needs_package_sync
- Create /etc/rc.package_reinstall_all, a script used to reinstall all
packages present in config but not on pkg database...

index.php doesn't need to care about needs_package_sync

Simplify logic and break some long lines

Fixes #8741 make sure type is selected before specifying address(es)

Fixes #8101 added an input error if the alias name was equal to the alias value

Revise setup wized for consistency

Fix #8595

Implement MTU override option that allow client to force a bigger MTU
value than the one negotiated on LCP that is known to work.

Merge pull request #3968 from stephenw10/master

Remove unnecessary 'pppoe' class

Revise page footer height

Show/hide pppoe-multilink-over-singlelink advanced option

Fixed #8673

Fix #8737: Add option to use multilink over single link for PPPoE

Revise page footer text and centralize footer output for consistency

FEC LAGG is deprecated, remove from GUI and change on upgrade. Fixes #8734

outbound-nat, make sure rules generated with outbound-nat rules are valid also on interfaces with mixed ipv4/ipv6 address environments

Add a button to generate a secure IKE PSK. Issue #8667

Preliminary footer revisions. Pending link targets

Fixes #8732 PHP7 illegal string offsets

Fixes #8730 PHP7 issues illegal string offsets

Support older md5 password hashes when testing for default password

Cosmetic changes to help text

Fixed #7623

Fixed #8728

Validation for GUI custom settings. Fixes #8726

Add validation for customizable GUI setting fields and test submitted
values before allowing them to be stored.
Also ensure that dashboardcolumns is an integer before using it in the
GUI.

Correct the DHCP DNS reg check. Fixes #8120

Now allows all but one DHCP server to be disabled, rather than denying
all of them.

Correct QinQ interface naming

Add htmlspecialchars to dashboardcolumns

Revert "Add cast to int for unbound tunable values. Fixes #8689"

This reverts commit 56cc5709e424aeab65ee93fd08eaccff6c7bbf7e.

Fixes #8714 PHP7 illegal string offset error

Fixes preservation of help text when deleting first row of a rowhelper row that includes a checkbox

Fixed PHP7 invalid array issue

Fixed #8704

Merge pull request #3908 from pdemonaco/master

Prevent disabling IPsec P1 with assigned VTI P2. Fixes #8674

Add cast to int for unbound tunable values. Fixes #8689

Fix a PHP error when visiting the GIF/GRE page with no GIF/GRE ifs

Fix missing period, set default local to network/30 for VTI. Fixes #8635

Hide address controls for interfaces that do not support them. Fixes #8687

Add a mechanism to blacklist interfaces from filtering. Fixes #8685

Only entry at the moment is ipsec for if_ipsec interfaces which have
some issues interacting with pf currently.

Add VTI validation check for disable in the P2 edit screen. Fixes #8674

Merge pull request #3966 from jburel-clever-age/patch-2

Merge pull request #3954 from whislock/crypto-updates

Cosmetic text changes

Allow user to store all blank legacy settings

VTI input validation. Fixes #8674

Add input validation to prevent switching away from VTI or deleting a
VTI P1/P2 which belongs to an assigned interface, since this would break
the interface assignment and cause an interface mismatch at the next
boot.

Default cipher selections conform to proposal.

Correct string missing quotes. Fixes #8681

Fixed #8679

Fixed #8678

Fix ID issues when edit/delete DNS Forwarding rule

ELiminate 8 char restriction on "legacy" password
Fix spelling error

Fix PHP7 error in miniupnpd.inc

Config/Configuration in breadcrumbs

Fixes #8659 PHP7 Illegal string offset and count

PHP7 fixed illegal string offset

Fixed #8663

fixed #981

Revise ACB settings breadcrumbs

Fix OpenVPN Bridge Route Gateway field hide/unhide. Fixes #8658

Fixed #8657 PHP7 illegal string offset error

Fix potential PHP error editing VLANs

Fix PHP7 error in services_unbound_domainoverride_edit.php

Group CA/Cert CN w/required options. Fixes #8381

Also add a note stating the other fields are optional.

RFC 5280 changes for OpenVPN wizard. Issue #8381

Conform CA/Cert fields to RFC 5280. Fixes #8381

Only required subject field is CN (for simplicity)
e-mail field deprecated from CA/Cert (can still be Cert SAN)

Clarify IPsec local/remote net usage for tunnel/vti/mobile. Fixes #8635

Fixed #8656 PHP7 fixed illegal string offsets

Revert "Add fields for DNS server hostnames for TLS verification. Implements #8602"

Per https://www.nlnetlabs.nl/bugs-script/show_bug.cgi?id=658 the verification
requires OpenSSL 1.1.x, and FreeBSD 11.2 base OpenSSL is 1.0.x.

This reverts commit ad08a8242ca45907e0486712d218a5f8f34c7332.

Merge pull request #3964 from marcelloc/patch-7

Fixed #8654
Fixed PHP7 issue causing separators not to work at all

Integrate ACB into core. Add config migration.

Fixed td placement from previous commit

Fixed table spacing when no tunnels were active

Fixed #8640 Added type casting in case destination port is empty

Fix another DynDNS status PHP error. Fixes #8648

status_ipsec.php, correct conX refs. Fixes #8629

Fix PHP7 errors in the Dynamic DNS widget. Fixes #8648

PHP7 Fixed illegal string offset for alias