pfSense

Fix service status widget listing of non-disabled services

Add quotes around variable usage to prevent word splitting

Avoid using -o in test(1)

-1 is not allowed, exit only uses 0-255

Add quotes around variable usage to prevent word splitting

PHP8 updates for resolver host editing

Fix PHP syntax in prefixes.php

PHP8 fixes for service status widget. Fixes #13506

qinq: use if_vlan rather than netgraph

if_vlan now supports QinQ, so use that rather than netgraph. This is
expected to perform better, removes a subsystem dependency and
simplifies the php code as well.

Note that this is not possible on stable/12.

Properly quote variables

No functional change intended

Fix missing ikeid in created ipsec p1. Issue #13446.

When a new or duped p1 is submitted, $p1ent['ikeid'] is an empty string. Prior
to php 8.0, comparing ($p1ent['ikeid'] == 0) for the empty string would yield
true, allowing the code to properly create and assign a new ikeid by calling...

Allow user to select PKCS#12 encryption. Fixes #13257

Convert P12 export to OpenSSL. Fixes #13257

PHP native method of creating PKCS#12 archives does not support using specific algorithms for encryption, so use the openssl binary instead.

Use AES-256 and SHA256 when encrypting the PKCS#12 data and private key.

Fixes some PHP bugs. For #13446

Fix primary console handling for EFI. Fixes #13080

Tested and working for both BIOS and EFI systems.

Update external http links

Fix some config access bugs in pkg.php for PHP81. Fixes #13446

Replace direct $config accesses in interfaces_vlan_edit.php. Issue #13446

Cert-related PHP 8.x changes.

Update status_carp.php PHP81 for #13446

Update interfaces_qinq_edit.php PHP81 for #13466

Update interfaces_vlan_edit.php PHP81 for #13466

Fix interfaces_groups_edit.php PHP81 for #13466

Fixes some PHP81 related config access issues related to interfaces and interface assignments for #13446

Merge pull request #4612 from zeroflow/master

Rename DHCP status from online/offline to active / idle/offline

Fix checking openvpn client or server config exists. Issue #13446

Captive portal PHP 8.1 fixes Issue #13446

CP stats fclose fix.

Don't attempt to close unless the open succeeded.

Update pfSense-dark.css

Darken disabled input fields in dark theme. Fix #13390

Add option to list ACB restores in reverse order. Feature #11266

Avoid creating empty ciscoavpair rules files. Fix #13243

Restart gateway monitor on interface re-assign. Issue #12920

Skip empty gateways on interfaces.php Issue #13446

Fix PHP error on services_dnsmasq.php. Issue #13446

Fix PHP error on services_unbound.php. Issue #13446

Correct typo on include of config.lib. #13446

Remove IPv6 validation for RADIUS auth. Fixes #4154

Rework formatting

Add icons
remove red text for offline
remove bold/italic for both

Add formatting to online status in status_dhcp[v6]_leases.php for better readability. Implements #10345

Adds color & formatting to host online status
online = bold + green
offline = italic + red

Fix missing format specifier in input field help

Replace direct config accesses in status_graph.php, status_ntpd.php

Correct format specifier in input help

Fix warnings in firewall_virtual_ip.inc

• unused variable $natdescr removed
• double quoted gettext string swallows and expands $s, single quote instead
• type of filter_configure() is void, don't assign to $retval

Replace direct config array access in diag_packet_capture.php

Add config and config lib requires to guionfig.inc

Remove direct config array accesses from firewall_virtual_ip.inc

Fix some missing '/'es in config paths

Replace some direct config array accesses in wizard.php

Correct deprecated implode() syntax

Fix warnings in guiconfig.inc, unexpanded string in get_config_path call

Replace config array accesses in guiconfig.inc

Change some config array accesses in interfaces.php

Replace some config array access in services_dnsmasq.inc

Fix several unsafe multilevel config array accesses in setup wizard

Silence unused/undef'd variable warnings in filter.inc

Correct required param after optional param syntax errors

Inhibit startup error printing to stdout in read_global_var

Consider EC digest prefix when renewing CA/Cert. Fixes #13437

fix: corrects validations for various fields in system_advanced_firewall.inc

CRL lifetime fixes to avoid rollover. Fixes #13424

Skip URL tables with invalid names. Fixes #13425

Clean up+encode pkg rule filenames. Fixes #13426

Update UPnP status regex. Fixes #4500

Submitted-By: rtadams89 @ GitHub PR #4610

CA/Cert descr validation fixes. Fixes #13387

Validate description on save when editing and in other situations that
were not yet covered.

While here, ensure that errors when editing a cert leave the user on the
cert edit screen properly, but successful cases return to the cert list....

Check for empty config.xml restore. Fixes #13289

Trim leading space from CSV vouchers. Fixes #13272

Fixed handling of single rule selected with multi-delete Issue #9887

Clarify delegated IPv6 prefix source. Fixes #13310

Indicates the tracked interface and prefix ID, which is more important
now that delegation works from multiple upstream sources.

Fix OpenVPN override TN handling. Fixes #13274

Encode filename browser.php. Fixes #13262

Merge branch 'pfsense:master' into fix-omission-of-pr4551

oops. forgot to actually process the dpinger_dont_add_static_routes flag

Update CARP status state sync note. Fixes #12701

Always display Global Root CA List. Fixes #13185

Reload Captive Portal rules on nomacfilter or per-user bandwidth change. Fixes #13216

Fix CP pipe function call. Fixes #13204

Captive Portal pipes reserve fix. Fixes #13204

Do not force setting a gateway with floating match limiter rules. Fix #13027

Incompatible OpenVPN P2P option note. Issue #13189

Revert "Destroy deleted/disabled IPsec SA. Fixes #13102"

This appears to be causing a pileup of swanctl processes on systems with
a significant number of disabled tunnels.

This reverts commit d90552c59e51fb13c712b6a96a51ca2462424156.

Delete temporary route file on OpenVPN client disconnect. Fixes #13145

Merge pull request #4586 from luckman212/outbound-nat-remove-colon

Merge pull request #4585 from luckman212/fix-status-dhcpleases-wrong-ifname

Merge pull request #4583 from luckman212/add-restore-dashboard-layout

Merge pull request #4588 from luckman212/fix-infoblock-placement-firewall_nat_out.php

captiveportal_ether_delete_entry() anchors/pipes delete fix. Issue #13169

captiveportal_passthru_delete_entry() -> captiveportal_passthrumac_delete_entry(). Fixes #13175

User Mgr scope icon corrections. Fixes #13174

Port Forward Redirect target IP save fix. Fixes #13171

fix infoblock placement on firewall_nat_out.php - redmine #13164

Ensure same type comparison. Additional fix #13059

ovpn-dnslinkup: do not set interface routes for DNS servers

If the OpenVPN server provides DNS server information (and 'Pull DNS' is
set) we add these DNS servers to our DNS configuration.
That's fine, but we should not add interface routes for these DNS...

Fix JS for mobile IPsec disconnect. Fixes #13131

remove colon to stay consistent with the rest of the GUI

Cleanup PPPoE VIPs on interface down to fix IP address order. Issue #11629

Adapt OpenVPN widget to new output. Fixes #13129

Add default value to $ipv6type argument of restart_interface_services(). Fixes #13134

add option to restore dashboard widget layout