pfSense

Fix a bug in interfaces.php that will cause a failure on first 'Save' of 'OPT1' with some hardware configurations.

Add the XML tags to support the switch entries.

Remove stray white space.

fixed the ipsec widget to show splitconnections for ikev2

Restore some customizations to openssl.cnf, otherwise it cannot generate a certificate. Fixes #8059

We set prompt=no, so most of these values will cause an error when openssl commands are run directly.

removed extra quote

Fixed an issue where it was showing the escaped apostrophes on all info boxes. This will fix the issue of the javascript getting terminated in the ipsec status page in french. and not print it to the user

Fixed #8043 It didn't like one of the french characters being saved in the config so it would rollback the config and not allow you to enable mobile clients. Added an html entities to replace it with safe characters. Also added some escapes when it tried to print certain words using a ['] and terminating a string in javascript for the ipsec_status page. This is a possibly a potential problem for multiple pages in French.

Cosmetic changes to repo branch switching

Provide a firmware branch selector on the System->Update page to allow the user to change their mind.
On changing the selector, refresh the page to show the revised version information.

When crafting the CA subject for ipsec.conf, handle component values that are arrays. Fixes #7929

When ntp is bound to specific interfaces, disable listening on wildcard. Fixes #8046

Add an option for LDAP servers to use the global root CA list as a peer CA. Fixes #8044

Disable HSTS for captive portals

Add option to disable HSTS for nginx (Bug #6650)

Add option to disable HSTS for nginx (Bug #6650)

Add option to disable HSTS for nginx (Bug #6650)

Crudely fixed #7786 by eliminating check of parent bandwidth when children are sepcified in %

Merge pull request #3857 from PiBa-NL/20171022-pf-wait-dont-wedge

Merge pull request #3847 from luckman212/pftop-extras-1

Merge pull request #3842 from PiBa-NL/20171004-vip-uniqueid

Merge pull request #3859 from PiBa-NL/20171031-xmlrpc-encodedspace

Merge pull request #3860 from PiBa-NL/20171031-config-backup-check-exception

Fix #6459: Skip interfaces config in AWS EC2 wizard

Implement <skip_flavors> tag in wizards to skip specific steps on specific flavors

Set title and description after $stepid changes

pf, retry pfctl -f rule loading when pf is 'busy', don't try and fail to force -d -e as that would also fail at this point in time.

Merge pull request #3858 from nagyrobi/patch-25

config, xmlparse throw exception instead of calling die(), so corruption check will properly handle the unlink action of the corrupted config

Fix handling of wildcard CN/SAN entries in certificates. Fixes #7994

Ensure that a certificate authority entry is capable of acting as a CA when importing. Fixes #7885

Reindex the user and group arrays after deleting items, to avoid operating on incorrect array entries. Fixes #7733

Fixed #8035

(cherry picked from commit 9c4e7fd3e155d08911feb0afc527af21d79ce917)

xmlrpc, fix usage of space and + character that need different encoding

Change a few more instances of using the physical interface to the friendly interface in status_queues.php, which allows root queues to function with the new VLAN interface names. Fixes #8007

Update the system sysctls to not harvest data from interrupts, point-to-point interfaces and ethernet devices.

The sysctl names changed in FreeBSD 11.

Make is_ipaddrv6() compatible with is_ipaddrv4().

Only the IP address must be accepted, address with netmasks do not qualify.

Ticket #8024

Check the correct variable.

All the IPv6 verification code block was being ignored before this commit.

Ticket #8024

added some security to strip html characters

Do not display logo.css as a valid theme

Do not print JS when there are input errors on diag_dns.php; fix json_encode syntax. Ticket #7999

Fix #7984: Make sure sshlockout_pf stops when syslogd stops

Added a description to mobile client to reflect description in phase1

Fix typo in function name: insterface_is_qinq -> interface_is_qinq

Fix a typo.

Allow the use of mbuf tags to set the VLAN pcp on output packets.

This is necessary for use with the pf 'set prio'.

Ticket #7973

added a string SESSION_TIMEOUT to be returned when a widget times out

Fixed #7978 I added a section in the css that is only parsed by IE10+ and it just sets the margin for tables to 1px instead of 0 this stops it from collapsing

The members of a LAGG cannot be assigned, used in VLANs, QinQ, or PPP.

This commit removes the LAGG members from the list of available interfaces.

Do not allow direct download of .inc files (unparsed PHP source). Fixes #8005

Do not return QinQ interfaces in the physical interface list.

Fix the interface_is_vlan() function.

It now works when only QinQ VLANs exist in the system.

Fix status_queues.php for the new VLAN interface format. Fixes #8007

Do not attempt to change the MAC address when the interface do not store the vendor MAC address.

Fix a bug in interface_is_vlan(), only check QinQ interfaces when they exist.

Revise timeout message

Do no set the MAC address for LAGG interfaces.

Ticket #7928

Provide a mechanism to display a warning if the session times out and the dashboard is no longer updating

Encode uses of $widgetkey in various contexts so it isn't echoed back to the user raw. Fixes #7998

Widget instance counter must be numeric. Fixes #8000

Encode hostname parameter contents in javascript for diag_dns.php. Fixes #7999

Made it so it doesn't display an error when the session expires it just
stops updating the graph. It will display in the console that it caught
and error when the session expires.

Fixed #7856 fixed an issue with a slightly different array format. Also
updated the child key and id to be more robust.

Merge pull request #3811 from trunet/add-cloudns-to-dynamicdns

Interface description doesn't fit the console screen

Strip 2 more chars from interface description because with the new font used by 2.4 it goes off screen on VGA console.

Fix the netgraph path for VLAN interfaces.

Fix #7981: Convert PPP ports interface names to new VLAN notation using dots

fixed indentation

Fixed #7714 Edited it to show correct timezone

Update translation files

Regenerate pot

Fix #7976: Do not add button value to gettext

Bump version to 2.4.2-DEVELOPMENT

Fix #7968

Show Network Device ID in console banner

Do not show Serial when it's empty

Stop using hostuuid as serial

Recognize the first level tag of QinQ interfaces as standard VLANs.

Add missing space

Fix #7953: Make sure a proper empty array is returned instead of NULL

Revert "Fix #7953: Make sure NULL values are not passed to XMLRPC functions"

This reverts commit 73ee3d78d505c10e8c70606bf008732833c00859.

Added JSON checks for widgets to prevent parsing errors.

Simplify the code a little bit.

Use the new function to validate the VLAN tags.

Fix the QinQ support.

Bring the QinQ support to the VLAN dotted format.

To avoid breaks third party software (such as dhcpd), we silently ignore the interfaces with names bigger than the maximum size in FreeBSD.

Ticket #7942

add cache busting to css using last modified timestamp

Restore auth_check()

Added back the previous commit since it got overwritten.

Related to redmine #6318 helps fix some times when it would get back null data after a session ended

Use pkg-static binary to prevent errors when moving to new major FreeBSD version

Fix #7953: Make sure NULL values are not passed to XMLRPC functions

IPSec widget no longer includes session timout code

Do not reconfigure wireless on a link up event, or else it can get stuck in a loop. Fixes #7960

Fix 7868 - Allow to enable hostres on all platforms after fix on FreeBSD-src

Use hostapd / wpa_supplicant from ports when available

Change the VLAN inteface names to use the 'dotted' format of FreeBSD, which is shorter and helps to keep the interface name smaller than the limit (16).

This fixes the 4 digit VLAN issues when the NIC name is 6 bytes long.

Ticket #294

Merge pull request #3848 from PiBa-NL/20171011-xmlrpc-prevent-lost-lock

Merge pull request #3838 from doktornotor/patch-9

Merge pull request #3831 from luckman212/patch-1

Allow both AES-NI and Crypto modules to be loaded at the same time. Fixes #7810

Merge pull request #3821 from PiBa-NL/20170916-bsnmp-hostrest-check