pfSense

Revise setup wized for consistency

Fix #8595

Implement MTU override option that allow client to force a bigger MTU
value than the one negotiated on LCP that is known to work.

Merge pull request #3968 from stephenw10/master

Remove unnecessary 'pppoe' class

Revise page footer height

Show/hide pppoe-multilink-over-singlelink advanced option

Fixed #8673

Fix #8737: Add option to use multilink over single link for PPPoE

Revise page footer text and centralize footer output for consistency

FEC LAGG is deprecated, remove from GUI and change on upgrade. Fixes #8734

Add a button to generate a secure IKE PSK. Issue #8667

Preliminary footer revisions. Pending link targets

Fixes #8732 PHP7 illegal string offsets

Fixes #8730 PHP7 issues illegal string offsets

Support older md5 password hashes when testing for default password

Cosmetic changes to help text

Fixed #7623

Fixed #8728

Validation for GUI custom settings. Fixes #8726

Add validation for customizable GUI setting fields and test submitted
values before allowing them to be stored.
Also ensure that dashboardcolumns is an integer before using it in the
GUI.

Correct the DHCP DNS reg check. Fixes #8120

Now allows all but one DHCP server to be disabled, rather than denying
all of them.

Correct QinQ interface naming

Add htmlspecialchars to dashboardcolumns

Revert "Add cast to int for unbound tunable values. Fixes #8689"

This reverts commit 56cc5709e424aeab65ee93fd08eaccff6c7bbf7e.

Fixes #8714 PHP7 illegal string offset error

Fixes preservation of help text when deleting first row of a rowhelper row that includes a checkbox

Fixed PHP7 invalid array issue

Fixed #8704

Merge pull request #3908 from pdemonaco/master

Prevent disabling IPsec P1 with assigned VTI P2. Fixes #8674

Add cast to int for unbound tunable values. Fixes #8689

Fix a PHP error when visiting the GIF/GRE page with no GIF/GRE ifs

Fix missing period, set default local to network/30 for VTI. Fixes #8635

Hide address controls for interfaces that do not support them. Fixes #8687

Add a mechanism to blacklist interfaces from filtering. Fixes #8685

Only entry at the moment is ipsec for if_ipsec interfaces which have
some issues interacting with pf currently.

Add VTI validation check for disable in the P2 edit screen. Fixes #8674

Merge pull request #3966 from jburel-clever-age/patch-2

Merge pull request #3954 from whislock/crypto-updates

Cosmetic text changes

Allow user to store all blank legacy settings

VTI input validation. Fixes #8674

Add input validation to prevent switching away from VTI or deleting a
VTI P1/P2 which belongs to an assigned interface, since this would break
the interface assignment and cause an interface mismatch at the next
boot.

Default cipher selections conform to proposal.

Correct string missing quotes. Fixes #8681

Fixed #8679

Fixed #8678

Fix ID issues when edit/delete DNS Forwarding rule

ELiminate 8 char restriction on "legacy" password
Fix spelling error

Fix PHP7 error in miniupnpd.inc

Config/Configuration in breadcrumbs

Fixes #8659 PHP7 Illegal string offset and count

PHP7 fixed illegal string offset

Fixed #8663

fixed #981

Revise ACB settings breadcrumbs

Fix OpenVPN Bridge Route Gateway field hide/unhide. Fixes #8658

Fixed #8657 PHP7 illegal string offset error

Fix potential PHP error editing VLANs

Fix PHP7 error in services_unbound_domainoverride_edit.php

Group CA/Cert CN w/required options. Fixes #8381

Also add a note stating the other fields are optional.

RFC 5280 changes for OpenVPN wizard. Issue #8381

Conform CA/Cert fields to RFC 5280. Fixes #8381

Only required subject field is CN (for simplicity)
e-mail field deprecated from CA/Cert (can still be Cert SAN)

Clarify IPsec local/remote net usage for tunnel/vti/mobile. Fixes #8635

Fixed #8656 PHP7 fixed illegal string offsets

Revert "Add fields for DNS server hostnames for TLS verification. Implements #8602"

Per https://www.nlnetlabs.nl/bugs-script/show_bug.cgi?id=658 the verification
requires OpenSSL 1.1.x, and FreeBSD 11.2 base OpenSSL is 1.0.x.

This reverts commit ad08a8242ca45907e0486712d218a5f8f34c7332.

Merge pull request #3964 from marcelloc/patch-7

Fixed #8654
Fixed PHP7 issue causing separators not to work at all

Integrate ACB into core. Add config migration.

Fixed td placement from previous commit

Fixed table spacing when no tunnels were active

Fixed #8640 Added type casting in case destination port is empty

Fix another DynDNS status PHP error. Fixes #8648

status_ipsec.php, correct conX refs. Fixes #8629

Fix PHP7 errors in the Dynamic DNS widget. Fixes #8648

PHP7 Fixed illegal string offset for alias

Fixed a bug that won't let you create a bridge on PHP7. This is just a workaround until the actual issue is found

Fixed #8630 , PHP7 illegal string offset.

suppress php7.2 eval erros on pkg_edit.php

https://redmine.pfsense.org/issues/8637

As of PHP 7, if there is a parse error in the evaluated code, eval() throws a ParseError exception. Before PHP 7, in this case eval() returned FALSE and execution of the following code continued normally. It is not possible to catch a parse error in eval() using set_error_handler()....

Fixed #8598 Added IPsec ID to the table, Moved the disconnect button over to better fit the page, Also fixed the disconnect button and show child button for mobile clients

Make sure array exist before call count()

Improve style

Fixed #8622 It will now revert to whatever was previously saved in the config if there is an input error for user groups

Fix 8553: When creating a new user, make sure it's added to desired groups

Add fields for DNS server hostnames for TLS verification. Implements #8602

wizard.php: Ensure CA and Certs are arrays before using in foreach.

Cosmetic changes to warning maeesage

Add position params to gettext password warning

Test the password, not the hash, or it won't detect if the user reset password from the console or otherwise changed it to the default manually. Issue #8596

Change warning wording to avoid using a "click here" link. Issue #8596

Fixed #8596

Fixed #8597 The edit page will no longer initialize with focus on any element

Merge pull request #3960 from PiBa-NL/20180704-ipsec-fix-phase1-edit-page

Merge pull request #3958 from PiBa-NL/20180702-gateway-none

Suppress display of AutoConfigBackup in package list

ipsec, fix Phase1 and Phase2 edit pages 'section' class does not have a setHelp() function, and add help for insecure DH groups on mobile settings page

Add gettext() and other cosmetic changes

Provide warning if legacy mode not configured

Add legacy encrytopn password support

Add tabs to settings page

Update $config references

Fix #7024: Deprecate /etc/inc/radius.inc in favor of pear-Auth_RADIUS port

Initial commit of ACB core functionality