pfSense

Use central download function

Reduce duplicated/inconsistent code by using the new download function.

CA/Cert/CRL code optimizations

While here, use the new download function when exporting items

Validate CA/CRL serial input. Issue #9883 Issue #9869

Update privilege definitions

Enforce a max lifetime for CA/Cert/CRL. Issue #3956

Add support for randomized cert serial numbers. Implements #9883

CRL Fixes

• Correct a PHP error in non-edit CRL actions. Fixes #9879
• Correct display of revoke by serial options when the CRL CA contains no certificates. Issue #9869
• Wording/text changes

CRL management overhaul

• Allow revoking by serial number or cert. Implements #9869
• Allow revoking multiple entries at a time. Implements #3258
• Declutter the main CRL list screen
• Move the create control to the bottom under the list
• Various other efficiency/style improvements

Also refresh trust store when renewing. Issue #4068

Add option to trust local CA entries. Implements #4068

Similar to closed PR #3558 from overhacked, but with a number of
changes.

Make value of cert notify setting consistent with others. Issue #7332

Allow packet capture to match IPv4+IPv6 CARP. Fixes #9867

CA validity checks. Fixes #3956

Add clientAuth EKU to Server type certificates. Fixes #9868

Certificate strength improvements. Fixes #9825

• Change default GUI cert lifetime to 825 days
• Add notes on CA/Cert pages about using potentially insecure parameter
  chocies
• Add visible warnings on CA/Cert pages if paramers are insecure/not
  recommended.

Fix whitespace

Fix Cert expire threshold input validation to allow empty values.

Set autocomplete=new-password for auth forms around the GUI. Implements #9864

Cert expire threshold input validation

Add settings to control certificate expiration notifications. Issue #7332

Note that the notices themselves do not yet exist. Those are still a
work in progress.

Add certificate lifetime to infoblock. Issue #7332

• Adds the total lifetime and lifetime remaining before expiration to
  the info block
• Adds a visual indication to the infoblock and end date when the
  certificate will be expiring soon, or if it has already expired.

Show detailed infoblock on CA and Cert pages. Implements #9856

• Moved info block to common function
• Used that function on CA and Cert pages
• Added more information to the info block

Add GUI code and more backend for CA/Cert Renewal. Issue #9842

Merge pull request #4104 from vktg/geneckey

show the key type and related info in the per-cert info block

spaces to tabs

spaces to tabs

fixes

Merge pull request #4103 from vktg/csreckey

Merge pull request #4101 from vktg/pcapstart

initial version

cosmetic

spaces

touch() if action == Start

Update diag_packet_capture.php

fixes

additions

initial

if spaces fixes

touch() fixes

Revise jquery/jquery-ui in csrf_error page, which needs its own copy

ec key parser

Renamed jQuery-ui files for consistency with jQuery naming

Fixed #9407

workaround if capture already exist

check if time file exist

print capture start time

Merge pull request #4075 from bechaire/patch-1

Merge pull request #4067 from crypto-powers/master

Merge pull request #4030 from jalavoy/master

Merge pull request #4087 from vktg/multipcap

Fix #7304: Add OMAPI to the DHCP Server settings

Supports setting a port and setting or generating a key. Service is
enabled when settings are defined. Validation logic added on save to
verify port is valid and not in use as well as that a key is defined or...

Retire openvpn alias type, it was never implemented

Merge pull request #4092 from gitdevmod/patch-3

Update openvpn.widget.php

Update openvpn.widget.php

Fix random typos

Merge pull request #4089 from vktg/extraguireboot

Image upload validation improvements. Fixes #9804

• Make functions for validating images against a pre-defined list of
  approved types
• Change the picture widget to use these functions
• Add validation for uploaded Captive Portal logo/background images

Create custom CSRF Error page. Implements #9799

• Use formatting consistent with other GUI pages
• Warns the user about potential dangers of submitting form data

Fix oinkmastercode tag in status.php. Fixes #9736

Ticket #9674: Do not check password when using shared key

Clarify that error message is about proxy password

Fix #9719: Fix descriptive name field behavior

Fix spacing of MAC OEM on ARP table

Add search/filter to DHCP/DHCPv6 leases, ARP, and NDP. Implements #9791

fixes 25.09.19

Update openvpn.widget.php

Update openvpn.widget.php

Update status_openvpn.php

Merge pull request #4085 from s-fiebig/master

Update openvpn.widget.php

Update status_openvpn.php

Redact BandwidthD postgres db password. Fixes #9784

Provide optional "enable" argument to enable/disable form submit button

Removed escaping of CSS classes

Initialize JSON data to avoid warning.

Avoid warning/error for not initialized JSON variable.

removed unused code, switch default, print

 fixes

Fixed #9785

renaming

dropdown menu to select reboot method

Fix #9612: Run fsck -z once during upgrade

cosmetic fixes

two generic functions: precheck_hostport, hostport_array_fixer

functions fixup_host and fixup_port merged to fixup_hostport

Fix #9722: Change voucher shortcut to point to voucher status page

Initialize array properly

Redirect to status_captiveportal.php

Update translation files

Regenerate pot

Fix #9756: Fix NCP multiple selection

add ability to reroot and reboot with fsck to WebGUI

Fix #3743: Allow OpenVPN keepalive configuration

- Remove hardcoded 'keepalive 10 60' configuration
- Added 'inactive seconds' option
- Let user configure 'keepalive interval timeout'. It defaults to 10 60
as it was hardcoded until now
- Let user define ping and chose between ping-exit or ping-restart...

Setup shortcuts for packages. Fixes #9770

Add GUI option for IPsec tunnel closeaction. Fixes #9767

Remove redundant if

same boolean logic as for hosts

Sanitize barnyard_dbpwd in status.php output. Fixes #9764

Correct input validation for firewall rule VLAN priority/set. Fixes #9763

added to input space-separated list of ports

Add dedicated auth log. Implements #9754