pfSense

CA/Cert descr validation fixes. Fixes #13387

Validate description on save when editing and in other situations that
were not yet covered.

While here, ensure that errors when editing a cert leave the user on the
cert edit screen properly, but successful cases return to the cert list....

Encode alias URL before display. Fixes #13060

(cherry picked from commit ac6e07b50d1f72d689eee3ad16427c975482adc3)

Clean up pkg filter text before use. Fixes #12725

Also remove unnecessary echos of the value.

(cherry picked from commit 5d82cce0d615a76b738798577a28a15803e59aeb)

Correct PHP syntax error. Fixes #12713

(cherry picked from commit f73ace96e837ca2f0957a5fafe5794e033231c2e)

Fix ARP table interface names. Fixes #12698

(cherry picked from commit 81e7e462f00a031f6010bfcc955681a6ccdeac7b)

Don't del ONAT rules w/o selection. Fixes #12694

(cherry picked from commit f783d68bd1708f7845fc21f035b4f3232a6f435d)

OpenVPN validation improvements. Fixes #12677

Added validation for the following fields:

• OpenVPN Server:
  • mode, dev_mode, protocol, interface, ecdh_curve, digest,
    engine, cert_depth, caref, crlref, certref, allow_compression,
    compression, tlsauth_keydir, netbios_ntype,...

Improve OpenVPN Data Cipher handling. Fixes #12677

(cherry picked from commit 78ce96a9af3b2ab5159ef6623078bfc4b15f8a89)

Redirect user to / if Plus and attempting to directly access system_register.php

Make registration process contingent on PLus vs CE to accommodate automatic CE -> Plus merging

netgate-ca.pem is now in the base image at /usr/local/share/${product_name}/ssl/netgate-ca.pem

Fix default password warning check. Fixes #12666

Use the existing function to check the password to avoid duplicating
effort.

Disable DNS Resolver recursion if the selected outgoing interfaces are not available. Fixes #12460

Originally-By: Viktor Gurov

Revert "Use OpenVPN async client-connect, clear stale rules, add option to limit connections per user. Implements #12407 and #12332 and #12267"

This reverts commit 7aaa20d95a345c4688e8786c755c7d0433451688.

Fix "assignement" typo. Fixes #12383

Update the Copyright year of the files owned by Rubicon/Netgate.

Ignore DynDNS requestif for non-custom providers. Fixes #12631

Fix PHP error on backup if SSH keys do not exists. Issue #12635

Merge pull request #4541 from blkeller/document-auto-nat

Merge pull request #4546 from olehfb/namedotcom_dyndns

Merge pull request #4540 from spootle/master

Minor cosmetic fix in gateway widget.

Make sure $sitems (skip items) is always an array.

Restart RADVD on interface IPv6 address change. Fixes #12604

IPsec RADIUS Advanced Parameters default value reset fix. Issue #12575

IPsec IKEv2 Retransmission options. Implements #12184

Revert "move firewall functions to include file"

This reverts commit a5a4cf87eeacfaf922151ce356fca1eee53762eb

Revert "Certmanager mvc"

This reverts commit 033c3ae82d20ca5760ed483cf8d0c947764b2371

Certmanager mvc

Add missing upload_url to acbupload.php. Fixes #12572

Gateway/Group link fix on the firewall rules page. Issue #12555

Add dynamic DNS service provider Name.com, closes #12567

Do not display direction indicator on the non-floating tabs. Fixes #12559

Certificate fields input validation. Issue #12035

SNMP IPv6 support. Implements #12325

Input validation to prevent removing a gateway if it is still in use by DNS servers. Fixes #8390

Backup and Restore SSH Host Key(s). Feature #11118

Gateway / Gateway group edit on the firewall rules page. Implements #12555

Add a note about the AutoConfig backup behavior. Implements #12296

Route overlap input validation fix. Issue #12554

IPsec status isset+is_array phase2 check. Fixes #12550

move firewall functions to include file

Do not show the pulldown menu when rebooting after restoring AutoConfigBackup. Fixes #10662

Static routes handling update. Fixes #11599 #11895 #7547

• Confirmation box to apply static routes add/route/change
• Reloading routes using aliases after changing the alias
• Correct route updates after changing destination or gateway

Support DNS server gateway selection on ``system.php`` for multiple gateways not assigned to interfaces. Implements #12116

Hide the Duplicate Connection Limit input field until the Duplicate Connection check box is ticked. Issue #12267

Interface Groups start digit input validation. Fixes #12529

Fix typo

Ui3 bandwidth

Local Logging warning note. Issue #12511

DNS check improvements for fw check and ACB. Fixes #12141

Uninitialized config variables in interface_assign.php

Use OpenVPN async client-connect, clear stale rules, add option to limit connections per user. Implements #12407 and #12332 and #12267

Port Forward checks for special interfaces and reflection type. Fixes #12452

NTP Peer mode. Implements #11496

Input error message box on the interfaces_ppps.php page. Fixes #12514

Keep port value for PPPoE/L2TP/PPTP on interfaces.php page. Fixes #12498

Do not change ports value for PPPoE/L2TP/PPTP on interfaces.php page. Fixes #12498

IPsec Keep Alive Gateway Group CARP support. Fixes #12472

Allow to delete limiter referenced in filter rules. Fixes #12503

status_logs_settings.php logcompression value fix. Issue #12011

Change traffic shaper wizard default bandwidth type to Mbit/s. Todo #12501

Wake All Devices confirmation prompt. Implements #12480

Document that upstream gateway controls WAN type vs. LAN type interface

IPsec SPD status updates. Implements #12397

• Fix backend parsing of setkey data
• Check for VTI vs tunnel mode
• Output mode in GUI status, and VTI interface name if available
• Make directionality of endpoints and arrow icon match in both the
  direction column and tunnel endpoints column.

Revise IPsec widget icon behavior. Fixes #12347

• Change P1 status test so it can detect the "connecting" state and show
  a distinct icon.
• Use gettext() for icon tooltip text
• Code optimization

Allow to select PPPoE Server authentication protocol. Implements #12438

DNS check optimization for NDP diag page. Fixes #11512

Send notification on WebGUI reboot/reroot/halt. Implements #12441

Icon for traffic direction on floating rules tab. Implements #12433

Update DNS Server Override and DNS Query Forwarding help text. Todo #12449

IPsec PC/SC daemon status / services page fix. Issue #12468

Set Gateway creation radio button to Both by default. Fixes #12448

deleteVIP() input validation fix. Issue #12442

Allow to use /0 netmask on IGMP Proxy edit page. Fixes #7749

Traffic Shaper Wizard IPv6 support. Implements #4769

fix filter expression to check correct variable instead of non-existing one

Use proxy for DDNS Check IP Services. Feature #12342

Dynamic DNS proxy option. Fixes #12342

Slack Notifications. Feature #12291

NAT 1:1 pseudo-interface input validation fix. Issue #12408

OpenVPN Generated RADIUS ACL Ruleset for status_output. Implements #12316

Modal window to see RADIUS ACL generated rules on the status_openvpn.php page. Implements #12321

IPsec PH2 BINAT subnet size input validation. Todo #12430

Display default Reflection Timeout value. Feature #12318

1:1 NAT destination entries description fix. Issue #12410

DNS check optimization. Fixes #11512

IPv6 Port Forwarding Proxy+NAT input validation. Fixes #12319

fix #11734 NAT overlap validation does not check special networks

deleteVIP() IPsec PH1 input validation. Fixes #12356

Correct input validation on deleting a CARP VIP which is referenced by an IP Alias. Fixes #12362

Reload syslogd on log Rotation Size / Retention Count change. Fixes #12366

Allow to halt OpenVPN client on status page. Issue #12416

Swap Captive Portal Redirection URL and Blocked MAC redirect URL input validation messages. Fixes #12388

Update help text for RAM disk settings. Fixes #12389

6RD Prefix input validation. Fixes #12435

Default preferred lifetime input validation. Fixes #12439

Fix IPsec P2 Keep Alive mobile check. Issue #12398

Some small cleanups with disk widget and library code.

Fix Disks widget UI on UFS systems

```
PHP 7.4.22 | 10 parallel jobs
............................................................ 60/279 (21 %)
............................................................ 120/279 (43 %)
............................................................ 180/279 (64 %)...