pfSense

Self correcting - poor english

Accuracy

Large keys are not "slower to use" in many cases, since they are only used to validate or set up a session. An ongoing session usually transfers to a symmetric algorithm once established, and the user won't notice the short extra delay in session startup.

missed a comment I added and shouldn't have - removed

Update OpenVPN Wizard to include missing key sizes

...and add some useful info to guide the user.

Add missing recommended key lengths to OpenVPN options

Add key lengths to the OpenVPN options, for asymmetric keys of size 3072 (for current use), 7680, 15360 (for long term resistance), 8192 and 16384 (common binary exponents).

These are both supported by OpenVPN anyhow, and for certain uses are currently recommended (eg long term resistance to replay/decryption). See keylength.com for citations....

Setup gateway monitors and exit in rc.newwanip(v6) if system is booting. Ticket #6186

Log if rc.newwanip(v6) is called with empty interface.

status_queues.php, default packet_s to 0 if it falls through to that point. Ticket #6329

Experimentally fixed #6327

Merge pull request #2941 from NOYB/Miscellaneous_Textual_Correction_-_Firewall_/_Shaper

Merge pull request #2939 from NOYB/Miscellaneous_Textual_Correction_-_Firewall_/_Rules

Miscellaneous Textual Correction - Firewall / Shaper

Fixed #6331

Workaound fixes #6320

Don't divide by 0. Ticket #6329

Bump net.inet.raw.recvspace and net.inet.raw.maxdgram by default. Ticket #6223

Clear xmlrpc.lock when restarting php-fpm. Ticket #6328

Miscellaneous Textual Correction - Firewall / Rules

Remove a wrong comment I left by accident and make it really remove packages. Fixes #6137

Change the default output of pkg.php lists to be encoded before display. Preserve the old behavior as an option in case a package needs it (I didn't see any current ones that appeared to rely on the behavior, however)

Add authorizedkeys to exclusion in status.php, and fix. While these are public keys and hence not sensitive, they're also of no diagnostic value. Suggested-by: Denny Page

Update diag_nanobsd.php now that permanent rw is default. Ticket #6184

Only try to chown files that still exist. Ticket #6131

Fix #6322 Allow expanded forms of alias entry

Forum: https://forum.pfsense.org/index.php?topic=111361.0

Remove bcrypt-hash from status.php config dump. Noticed by Denny Page

Display Ports/Address based on tab name

Miscellaneous Textual Correction - Firewall / NAT

Revert "Added option to System > General Setup > webConfigurator to change the title of the Help menu in the navbar to either the system hostname or fqdn."

This reverts commit e3c5006b819063863f44fd2314dd635bd26e8a8c.

Added option to System > General Setup > webConfigurator to change the title of the Help menu in the navbar to either the system hostname or fqdn.

Unlock kernel package to make dry-run output more consistent

This was correct already. Revert "Allow uppercase letters in is_unqualified_hostname as well."

This reverts commit 94ccdcb8a4d6f7789fd39c4b6e9876bb689de9a4.

Merge pull request #2922 from NewEraCracker/redmine-6097

Allow uppercase letters in is_unqualified_hostname as well.

Miscellaneous Textual Correction - Aliases Import

Fixed #6306
Please enter the commit message for your changes. Lines starting

Merge pull request #2930 from NOYB/Miscellaneous_Textual_Correction_-_Interfaces

Merge pull request #2929 from george-gwu/master

Merge pull request #2928 from NewEraCracker/exec-sec-fix

Fixed #6310 by adding cusom validation pattern

Skip ro mounting to make nanobsd permanent rw mode regardless of config. Ticket #6184

Miscellaneous Textual Correction - Interfaces

Bug fixes to Route53 DynDNS

Fixed a bug regarding a leading space in $ZoneID that causes an AWS 505 error. Also adds support for updating DNS if TTL changes.

Show patchlevel together with product version on banners and system information widget

Ensure $nat_if_list is always an array before it is used as one. Fixes #6307

Fix typo

Fix form submission fields

Submitting one form may lead to any other filled forms to be also submitted. This commit fixes this flaw

Bump net.raw.recvspace and sendspace defaults. Ticket #6223

Fix missing interface in pool edit. Ticket #6303

Hide freelogins_resettimeout on disable

Reboot after upgrade when meta package version changed

Merge pull request #2927 from NOYB/Miscellaneous_Textual_Corrections

Remove a debug leftover

Miscellaneous Textual Corrections

Miscellaneous Textual Corrections

Skip LAN properly with static IP WAN and one interface. Ticket #6093

Merge pull request #2923 from NewEraCracker/patch-1

Remove stray colon

Fix Redmine #6097

Replace '/usr/bin/grep -vi warning' with '/bin/cat'

System Menu - Textual and Punctuation Corrections

Fix extrat return statement

Fix branch description

Fix #6137:

- Uninstall all packages on current system before upgrade using
pre_upgrade_command script
- Create a file containing all packages previously installed and
reinstall them on first boot after upgrade

Test for internet connection 3 times trying to reinstall packages after upgrade or config restore. Fixes #6180

Fixed #6920 - Missing input element

Merge pull request #2920 from NOYB/System_/_Update_-_Textual_Alteration

Merge pull request #2919 from NOYB/System_/_Update_-_Punctuation

Merge pull request #2918 from phil-davis/patch-4

Fixed #6287

System / Update - Textual Alteration

System / Update - Punctuation

Clean up some punctuation.

Comment typos in pkg_mgr_install.php

Omit local identifier for mobile PSKs. Ticket #6286

Retrieve firmware versions via Ajax so we don't hang the GUI if unable to reach the server

Merge pull request #2917 from phil-davis/patch-4

Merge pull request #2916 from phil-davis/validaliasmsg

Merge pull request #2915 from NOYB/HTML_Compliance_-_Setup_Wizard

Fix #6251 Brackets around Mbuf figures

Provide better messages for invalid alias name errors

HTML Compliance - Setup Wizard

Setup Wizard - Punctuation

Clean up some punctuation.

Reduce values of FETCH_TIMEOUT and FETCH_RETRY to help ticket #6177

Merge pull request #2913 from NOYB/Diagnostics_/_Packet_Capture

Fix Hyper-V SMART disable on widget. Ticket #6147

Diagnostics / Packet Capture

A few textual alterations.

Fix input validation check. Ticket #6231

PPP here, not L2TP. noticed by https://forum.pfsense.org/index.php?topic=110686.0

darken background colors

Merge pull request #2912 from phil-davis/patch-4

Merge pull request #2911 from NOYB/Diagnostics_-_Menu_-_Punctuation

Extra comma, not needed

Removed an extra comma - more correct IMO
(cherry picked from commit 90968c493922bd9d80a37fe90d1b9440ca7a2333)

Fix #6267 Load value of direction on edit

Diagnostics - Menu - Punctuation

Clean up some punctuation.

Allow port specification for Unbound domain overrides. Also fix display of input errors. Ticket #6091

Fix text.

Add validation to prohibit IPv6 on firewall_nat_edit.php, where it will generate invalid ruleset. Ticket #6265

localip and gateway aren't used when type is PPP, remove here. Ticket #6264

Fixed #6259 (Gateway widget form layout)

Reduce log level for RELEASE versions. Fixes #6178

Merge pull request #2909 from phil-davis/patch-4

Merge pull request #2908 from NOYB/Status_/_System_Logs_-_Punctuation