pfSense

Fix branch name

Check RA service on interface IPv6 type change. Fixes #11367

OpenVPN User Auth fix. Issue #11368

OpenVPN input validation fix. Issue #11362

Fixed #11328 by fixing jQuery and error when 'protocol' is undefined

Captive Portal custom logo fix. Issue #11360

Refactored system_advanced_* pages for MVC

Sanitize PKCS11 PIN from swanctl.conf. Issue #11348

Sanitize securiteinfo_id. Issue #11344

Sanitize DHCP DDNS keys. Issue #11342

Sanitize WireGuard PresharedKey from config. Fixes #11341

Issue #11340
Hide WireGuard interfaces on DHCP/DHCPv6 Relay pages,
Hide mediaopt field for WireGuard interfaces on interfaces.php page

Hide TLS keydir for p2p openvpn mode. Issue #11336

Clarify that Peer WireGuard Address can be multiple addrs.

Update vpn_wg_edit.php

• Text edits
• Formatting
• Remove debug console.log()

OpenVPN Server page fields hide fix. #11272

WireGuard: Make pubkey read only, populate automatically. Fixes #11322

While here, add a link to copy the public key to the clipboard.

Merge branch 'viktor/pfSense-ipsecmobileinperror'

Mobile IPsec certificate validation. Issue #11319

Fix PHP error in Mobile IPsec validation if Group Auth is selected. Fixes #11212

Update OpenVPN Wizard to match current server options. Fixes #10919

Fix WG Keep Alive field variable name. Fixes #11288

Fix WG Generate button descr.

Improve WireGuard field labels & descriptions.

Encode WireGuard tunnel edit/peer values. Issue #11312

Encode WireGuard tunnel list values. Issue #11312

Merge branch 'viktor/pfSense-checkipsecwildcardcert'

IPsec wildcard certificates input validation. Implements #11297

Add WireGuard to backup areas. Implements NG 5485

Add units to source tracking timeout description. Fixes #11303

Fix length check for WireGuard interface descriptions

PPPoE Server users create and instance delete fix. Issue #11282

Fixed 11287 by moving style to css

Use gettext() on WireGuard endpoint text. Issue #11286

Assume default WG port if empty. Fixes #11286

While here, print a more user-friendly value when peer endpoints are
empty.

Fix populating keepalive value. Fixes #11288

Add doubleclick handlers to WireGuard tables

Add help.php entries for Wireguard pages. NG 5455 and Fixes #11283

Fix WireGuard case

Ticket #5186: Enable Wireguard firewall rules tab

Correct typo. Fixes #11279

Prevent invalid WireGuard assignments. Fixes #11277

Show WireGuard interface description during assignment. Issue #11277

WireGuard assignment/disable behavior improvements. NG 5518

• Do not allow a WireGuard instance to be removed while assigned
• Do not allow a WireGuard instance to be disabled while assigned
• Destroy the WireGuard interface when disabled

Add WireGuard info to status output. NG 5483

WireGuard default port usage fix. NG 5482

Signed CSR import fix. Issue #11275

Add OS routes using WireGuard Peer AllowedIPs. Part of NG 5437

Remove WireGuard peernwks field which is not needed. Part of NG 5437

Fix some bad WireGuard capitalization

Update translation files

Regenerate pot

Retire VXLAN support

VXLAN support is not enterprise ready and after internal discussion we
decided we are not able to support it. We are committed to release
features only when they are ready.

Fix copyright notices

Spell WireGuard properly

Fixed #11265 - Remove unwanted log messages

wg: Deny toconfigure IP address on wg interfaces

Ticket #5186

Fixed #5486 by making peer endpoint and port optional

Warn user if peer table has changed before leaving page

Added new Wireguard config fields peernwks and peerwgaddr per #5437

Update copyright year

Fix typo

Load file on pressing 'Enter' key

#5186 - Revised peer configuration to use 'wgpeer' rather than 'peer'

wg: Fix indent and improve code readability

wg: Adjust priv entries

wg: Remove extra spaces

wg: Style fixes

Fix Wireguard tunnel save with zero peers

Completed revision of wg config edit fors

Revised wg edit system to use peer table as source of truth

Eliminate ghost lines in modal

revised peer display/edit form

Revise appearance of save and PSK buttons

#5186 fixed validation issues as requested

#5186 - Provide 'generate PSK' butoon. Some fixes to validation

#5186 - Add ability to mark row-helper help text as required (underlined) by pre-pendinf text with '*'. No longer clear help text when adding new peer.

#5186 Added keepalive units, clarified Address text, added incremented port placeholder, minor validation changes

Added user input validation for Wireguard config. Marked certain values as required

Fix the wireguard configuration file, start tunnels at boot.

Add the Endpoint port, fix the configuration permissions.

Remove the WG tunnel when a tunnel is removed.

Added support for wireguard pre-shared keys

Optionally generate keys in JSON

Added ability to generate a new public/private key pair for hte interface. Public key is displayed on the tunnel edit form

Fixes the saving of peers settings in GUI.

The previous commits had a few mistakes which were fixed in here.

Fixes the WG configuration path and creation.

The GUI is now working as expected to add, edit and save the WG tunnel entries.

Rename the Wireguard peers entries in configuration XML to 'peer'.

'peer' is already properly handled by the XML routines as a list entry, which
is not the case of 'peers'.

This fixes the saving of peers settings in GUI.

Fix a typo.

No functional change.

Moved wg.inc to proper location

Dim row when tunnel is disabled

Removed peer file. No longer needed

Revised tunnel table, added firewall key display, added key generation code

Add tunnel name (wg?) to tunnel so that tunnels can be deleted without renumbering the remaining tunnels

Completed tunnel delete logic

Completed new tunnel functionality when no tunnels exist in hte config

Completed config file update

Add new tunnel functionality

Completed 'row helper' stuff to allow peers to be added and deleted

Split peer form into two rows with custom Javascript methods

Added form elements to edit interface

Prototyped main wireguard UI page

Outlined Wireguard GUI pages and added it to the VPN menu