pfSense

Add fixed suggested by jim-p

Moved out of my root directory :(

Change option text

Make it a force-on option
Hide option if ocsp is enabled

add cert_get_ocspstaple

Improve description, reorder

make ordering proper

Add OCSP option in config

Merge pull request #3926 from martgras/azureddns

remove whitespace - pt. 2

Fix function name typo

Add function to detect OCSP Must Staple certs. Ticket #8418 and Ticket #8299

Fix #8417

- Changed default value for Maximum Table Entries to 400000 in order to
make bogonsv6 to work
- Added code to upgrade config and set default value on systems where
it's not defined
- Changed default config to match new default and version 18.0...

Redmine # 7769: Add support for Azure DNS to DynamicDNS

Remove Whitespace

I'm aware this is a very large commit. Let me know if you'd rather have it broken down by file type (ie: PHP/shell scripts) so it would be easier to review.

-RJ

Merge pull request #3916 from robjarsen/tweak/cf-spelling

Ensure the OpenVPN wizard protocol is valid for use in firewall rules. Fixes #8391

Remove the possessive

Make copyright notice downloadable from server
Trigger cpyright notice on completion of setup wizard

Change CloudFlare to Cloudflare

This commit also includes misc. whitespace removal on the affected files.

Don't read picture file if it does not exist

Revise picture widget to store inamge on file system, not in XML config

Fix case where $_POST['if'] == 0 in sprint_info_box()

Deduplicate build_repo_list() and get_repo_name()

Merge pull request #3911 from PiBa-NL/20180304-igmp-disable

Merge pull request #3910 from PiBa-NL/20180304-fix-log-link

igmp, Add option to disable the igmp service

fix log link

small addition to augment jim-p's 58a2ba621c390362170aa2e377e4b41c8fdce1c6

Replace some hardcoded paths.

Add missing firewall rule tracker info to automatically generated rules. Fixes #8353

Add tracker ID to firewall rule list and edit page. Implements #8348

Fix #7972

Rework the way Captive Portal vouchers are synchronized on HA:

- When voucher use is enabled on primary, do the same on secondary
- When voucher rolls are created/modified/deleted, sync to secondary
- When voucher is used, disconnected or expired, sync it in both...

Add GUI support to display and set the PTI state.

Update translation files

Regenerate pot

Merge pull request #3892 from al-right/master

Merge pull request #3906 from phil-davis/system_authservers-authentication-containers-01

Merge pull request #3907 from phil-davis/auth-server-test-output-01

Trim domain for learned DNS entries. Ticket #6847

If the CN is already an FQDN on the given domain, this prevents the
domain from being present in the record twice (e.g. host.example.com
as a CN leads to records for host.example.com.example.com)

Report correct auth server host when testing LDAP auth server

Mark authentication containers label as required field

Fix #7469

Sort users / groups alphabetically on config.xml

Fix typo

Update the copyright year on login page.

Ticket: #8331

Fix #7469

• Rename local_sync_accounts() to local_reset_accounts() and keep it
  only being used /etc/rc.bootup
• Reimplement local_sync_accounts() receiving a list of users and
  groups to be added and/or deleted
• Remove call to filter_configure xmlrpc method from...

Allow Dual Stack IPsec P1 interface. Fixes #6886

Allow "Both" to be selected for IPv4/IPv6 on IPsec P1, in the config use both addresses as "left =" if they both exist.
Some cases where a single address was assumed (e.g. ping hosts) default to using the first address....

Correct variable used to populate the IPv4/IPv6 selector on status_logs_settings.php. Fixes #8323

Do not apply a DHCP static mapping uniqueness test for hostnames or IP addresses. The DHCP daemon allows the entries to be duplicated provided they have unique MAC addresses or identifiers. Fixes #8220

Merge pull request #3711 from PiBa-NL/20170427-ipsec-multiple-P1-algo

Add DDNS client update option to DHCPv4 configuraiton

Fixed #8303

Fixed #8301 CSRF Enabled on all widgets.

Enabled CSRF on all widgets.

Silence warnings generated by sysctl to standard error.

Update OpenVPN wizard with current protocol selection options. Fixes #8298

Add input validation to traffic_graphs_widget.php and fix JS encoding. Fixes #8302

Re-enable CSRF protection in traffic_graphs_widget.php. Ticket #8301

Fix a potential encoding issue in diag_system_activity.php. Fixes #8300

Merge pull request #3830 from PiBa-NL/20170925-pppoe-on-carpmaster

Fixed #8296

Merge pull request #3862 from marjohn56/pfsense

Fix get_cpu_crypto_support() to not overwrite $cpucrypto_type.

Merge pull request #6400 from loonylion/master

Add an update source control to RFC2136 dynamic DNS updates. Implements #8278

Add localhost to list of interfaces for packet capture. Implements #8257

Merge pull request #3889 from kangtastic/master

Follow-up to syntax, file order and other changes

• Those able to check a proper failover configured system please check if
  the Pool Staus table shows up in the top of the Status DHCPv6 Leases page
  and that the leases are showing up fine. Thanks

• I am in doubt about the markdown readme file parser_readme.md where it...

[services_dyndns_edit] Clarify use of @ for Cloudflare

Add GUI prompts corresponding to #7357 that allows users to
enter @ for the hostname, and have it replaced with an empty hostname.

Signed-off-by: Earl Chew <earl_chew@yahoo.com>

Fix certificate SAN input validation so it does not improperly allow an IP address when FQDN is selected. Fixes #8275

Fixed #8268

Add an option to push a gatewy address to bridged tap clients. Implements #8267

Fixed #8266 by removing JS alerts

re-adding changes made to fix bug#6400, includes fixes for bug#8222 and bug#8223 that were introduced with the initial commit of this code.

original pull request was #3868

Encode rangedescr before display in firewall_schedules.php. Fixes #8259

Update the Copyright notice for pfSense.

Merge pull request #3893 from JoeriCapens/ddns-rfc2136-algorithm-choice

Add keyalgorithm input validation.

Change how SANs are generated from the CN, considering that not all CNs will produce a valid SAN. Fixes #8252

Add RFC 2136 Client key algorithm choice. Implements #8244

Use consistent variable order, remove unused variable.

Replace Dynamic DNS dnssec-keygen style files with simpler ddns-confgen style file.

Merge pull request #3887 from JoeriCapens/dhcp-ddns-algorithm-choice

ipsec, multiple phase1 ciphers, make use of 'repeatable' group

ipsec, allow configuration of multiple ike phase1 encryption ciphers (algo/bits/hash/dh)
this is useful for mobile users that need to connect with different operating systems. This way there is no need to find a single commonly supported weaker cipher.

Fix the unnecessary 'RAM Disk has settings has changed' reboot every time the miscellaneous settings are saved.

Revert "Fix a bug in interfaces.php that will cause a failure on first 'Save' of 'OPT1' with some hardware configurations."

This reverts commit 373513a56140215c93282252186a938b7cefcf47.

Merge pull request #3792 from PiBa-NL/20170731-status_queues-realtime

Merge pull request #3891 from miken32/patch-1

Fixed #8129 Updated to show timezones that have half hour increments i.e. asia/kolkata

Revert "Merge pull request #3868 from loonylion/master"
Caused issues reported in https://redmine.pfsense.org/issues/8223
This reverts commit 74c55258b21ada7a542965c2470fbaa45ce19689, reversing
changes made to 2acb4025ee7fef074a67d1021a5e62a0aff9fd37.

Optimze ICMP description processing

Fixes #8219
Escape single quotes when they arise from ICMP description translations

Fixes #7413: Some DHCPv6 leases are not displayed in the GUI

. Better handling/parsing of ISC dhcpv6 leases file and removal of unnecessary properties.
. Experimental Pools/failover handling in the parsing of DHCPv6.
. Cleanup on the Status DHCVPv6 Leases page....

Fix input field help texts

make inputs a bit wider for fahrenheit

address comments

fix copy/paste error

update label on unit change

also ensure unit labels can be internationalized, and fix some whitespace

Moving this code to PHP for i18n

don't change thresholds to F until after passing to Javascript

spelling!

"Save" user selection for DUID type

It proved confusing for users who entered a DUID as a certain type to
see the resulting DUID file displayed as a "Raw DUID" upon page reload.
Still work with dhcp6c_duid file data, but parse it and show the Form
corresponding to the DUID type with the inputs filled in, so the user...