pfSense

Fix #7972

Rework the way Captive Portal vouchers are synchronized on HA:

- When voucher use is enabled on primary, do the same on secondary
- When voucher rolls are created/modified/deleted, sync to secondary
- When voucher is used, disconnected or expired, sync it in both...

Add GUI support to display and set the PTI state.

Update translation files

Regenerate pot

Merge pull request #3892 from al-right/master

Merge pull request #3906 from phil-davis/system_authservers-authentication-containers-01

Merge pull request #3907 from phil-davis/auth-server-test-output-01

Trim domain for learned DNS entries. Ticket #6847

If the CN is already an FQDN on the given domain, this prevents the
domain from being present in the record twice (e.g. host.example.com
as a CN leads to records for host.example.com.example.com)

Report correct auth server host when testing LDAP auth server

Mark authentication containers label as required field

Fix #7469

Sort users / groups alphabetically on config.xml

Fix typo

Update the copyright year on login page.

Ticket: #8331

Fix #7469

• Rename local_sync_accounts() to local_reset_accounts() and keep it
  only being used /etc/rc.bootup
• Reimplement local_sync_accounts() receiving a list of users and
  groups to be added and/or deleted
• Remove call to filter_configure xmlrpc method from...

Allow Dual Stack IPsec P1 interface. Fixes #6886

Allow "Both" to be selected for IPv4/IPv6 on IPsec P1, in the config use both addresses as "left =" if they both exist.
Some cases where a single address was assumed (e.g. ping hosts) default to using the first address....

Correct variable used to populate the IPv4/IPv6 selector on status_logs_settings.php. Fixes #8323

Do not apply a DHCP static mapping uniqueness test for hostnames or IP addresses. The DHCP daemon allows the entries to be duplicated provided they have unique MAC addresses or identifiers. Fixes #8220

Merge pull request #3711 from PiBa-NL/20170427-ipsec-multiple-P1-algo

Add DDNS client update option to DHCPv4 configuraiton

Fixed #8303

Fixed #8301 CSRF Enabled on all widgets.

Enabled CSRF on all widgets.

Silence warnings generated by sysctl to standard error.

Update OpenVPN wizard with current protocol selection options. Fixes #8298

Add input validation to traffic_graphs_widget.php and fix JS encoding. Fixes #8302

Re-enable CSRF protection in traffic_graphs_widget.php. Ticket #8301

Fix a potential encoding issue in diag_system_activity.php. Fixes #8300

Merge pull request #3830 from PiBa-NL/20170925-pppoe-on-carpmaster

Fixed #8296

Merge pull request #3862 from marjohn56/pfsense

Fix get_cpu_crypto_support() to not overwrite $cpucrypto_type.

Merge pull request #6400 from loonylion/master

Add an update source control to RFC2136 dynamic DNS updates. Implements #8278

Add localhost to list of interfaces for packet capture. Implements #8257

Merge pull request #3889 from kangtastic/master

Follow-up to syntax, file order and other changes

• Those able to check a proper failover configured system please check if
  the Pool Staus table shows up in the top of the Status DHCPv6 Leases page
  and that the leases are showing up fine. Thanks

• I am in doubt about the markdown readme file parser_readme.md where it...

[services_dyndns_edit] Clarify use of @ for Cloudflare

Add GUI prompts corresponding to #7357 that allows users to
enter @ for the hostname, and have it replaced with an empty hostname.

Signed-off-by: Earl Chew <earl_chew@yahoo.com>

Fix certificate SAN input validation so it does not improperly allow an IP address when FQDN is selected. Fixes #8275

Fixed #8268

Add an option to push a gatewy address to bridged tap clients. Implements #8267

Fixed #8266 by removing JS alerts

re-adding changes made to fix bug#6400, includes fixes for bug#8222 and bug#8223 that were introduced with the initial commit of this code.

original pull request was #3868

Encode rangedescr before display in firewall_schedules.php. Fixes #8259

Update the Copyright notice for pfSense.

Merge pull request #3893 from JoeriCapens/ddns-rfc2136-algorithm-choice

Add keyalgorithm input validation.

Change how SANs are generated from the CN, considering that not all CNs will produce a valid SAN. Fixes #8252

Add RFC 2136 Client key algorithm choice. Implements #8244

Use consistent variable order, remove unused variable.

Replace Dynamic DNS dnssec-keygen style files with simpler ddns-confgen style file.

Merge pull request #3887 from JoeriCapens/dhcp-ddns-algorithm-choice

ipsec, multiple phase1 ciphers, make use of 'repeatable' group

ipsec, allow configuration of multiple ike phase1 encryption ciphers (algo/bits/hash/dh)
this is useful for mobile users that need to connect with different operating systems. This way there is no need to find a single commonly supported weaker cipher.

Fix the unnecessary 'RAM Disk has settings has changed' reboot every time the miscellaneous settings are saved.

Revert "Fix a bug in interfaces.php that will cause a failure on first 'Save' of 'OPT1' with some hardware configurations."

This reverts commit 373513a56140215c93282252186a938b7cefcf47.

Merge pull request #3792 from PiBa-NL/20170731-status_queues-realtime

Merge pull request #3891 from miken32/patch-1

Fixed #8129 Updated to show timezones that have half hour increments i.e. asia/kolkata

Revert "Merge pull request #3868 from loonylion/master"
Caused issues reported in https://redmine.pfsense.org/issues/8223
This reverts commit 74c55258b21ada7a542965c2470fbaa45ce19689, reversing
changes made to 2acb4025ee7fef074a67d1021a5e62a0aff9fd37.

Optimze ICMP description processing

Fixes #8219
Escape single quotes when they arise from ICMP description translations

Fixes #7413: Some DHCPv6 leases are not displayed in the GUI

. Better handling/parsing of ISC dhcpv6 leases file and removal of unnecessary properties.
. Experimental Pools/failover handling in the parsing of DHCPv6.
. Cleanup on the Status DHCVPv6 Leases page....

Fix input field help texts

make inputs a bit wider for fahrenheit

address comments

fix copy/paste error

update label on unit change

also ensure unit labels can be internationalized, and fix some whitespace

Moving this code to PHP for i18n

don't change thresholds to F until after passing to Javascript

spelling!

"Save" user selection for DUID type

It proved confusing for users who entered a DUID as a certain type to
see the resulting DUID file displayed as a "Raw DUID" upon page reload.
Still work with dhcp6c_duid file data, but parse it and show the Form
corresponding to the DUID type with the inputs filled in, so the user...

update convenience functions

update threshold values dynamically

otherwise problems occur with saving wrong values when switching between C/F

more accurate progress bar display

we only use Fahrenheit for display, don't change the values!

show ºF on updates via javascript

initial display of temperature in ºF

still need to update javascript

account for thresholds and bar width in ºF

global variables are really really ugly, this should be wrapped in an anonymous function

display/enter thresholds in ºF as well

fix copy/paste error

provide temperature in Fahrenheit

Also resolve some indent issues, restrict live updates to temperature value only (not unit text)

checkbox for option to display Fahrenheit

Code cleanup
Add a check to Copy DUID button on system_advanced_network.php

Support for configuring additional DUID types

dhcp6c stores the entirety of the OPTION_CLIENTID option in DHCPv6 datagrams in
its DUID file (named dhcp6c_duid), except for the option code itself. The first
two octets in the DUID file are the option-len field, and are saved according to...

After recent fixes to auth_check.inc, move the IPsec widget back to auth_check.inc since its timeout problems are likely now fixed.

Skip IPsec ping host CARP check when there are no IPSec ping hosts. Also, add a safety belt so cat can't get stuck waiting on input. Fixes #8172

Add DHCP Dynamic DNS key algorithm choice. Implements #6621

Fix logging for L2TP and PPPoE server login/logout events. Fixes #8164

See https://redmine.pfsense.org/issues/8164 for the reasoning about why it was done this way.

Merge pull request #3882 from PiBa-NL/20171130-remove-console-output

Merge pull request #3883 from stilez/patch-70

Fixed #8159 added a sort by index after a delete call has been made to make sure it lines up correctly.

Fix typo

correct %d -> %s

As previous code used a string. Probably makes no difference and a number is simpler but doesn't matter

Clarify the unexplained numbers in "log verbosity"

At the moment verbosity is a bare list of digits, 0 to 5. No explanation, nothing else. This PR replaces the visible text by user-friendly info as to what will be logged. Source is https://www.unbound.net/documentation/unbound.conf.html

Merge pull request #3880 from bibz0r/master

Merge pull request #3873 from PiBa-NL/20171121-localauth-translated-problem

Merge pull request #3810 from svenauhagen/bugfix/mpd

Merge pull request #3801 from cgull/radvd-zero-router-lifetime

notify_monitor, don't write EXITQUEUELOCK debug output to system-console

webgui, option to disable dragging of rules

Merge pull request #3776 from nazar-pc/ram-disk-reboot-fix

Merge pull request #3868 from loonylion/master