pfSense

OpenVPN input validation fix. Issue #11362

Fixed #11328 by fixing jQuery and error when 'protocol' is undefined

Captive Portal custom logo fix. Issue #11360

Fix #8954: Enable hn_altq_enable on default config

Refactored system_advanced_* pages for MVC

Sanitize PKCS11 PIN from swanctl.conf. Issue #11348

Sanitize securiteinfo_id. Issue #11344

Sanitize DHCP DDNS keys. Issue #11342

Sanitize WireGuard PresharedKey from config. Fixes #11341

Issue #11340
Hide WireGuard interfaces on DHCP/DHCPv6 Relay pages,
Hide mediaopt field for WireGuard interfaces on interfaces.php page

Hide TLS keydir for p2p openvpn mode. Issue #11336

Add brackets around IPv6 endpoint address. Issue #11338

Clarify that Peer WireGuard Address can be multiple addrs.

Update vpn_wg_edit.php

• Text edits
• Formatting
• Remove debug console.log()

Gateway Group Policy rule creation fix. Issue #11298

OpenVPN Server page fields hide fix. #11272

Delete all OpenVPN related files on instance deletion. Issue #11254

Mute console before load crypto modules

Fix WireGuard interface name assignment. Fixes #11323

Only set the name when it's empty/unset (e.g. when first created),
automatically determine the next available wg interface number.

WireGuard: Always derive public key. Issue #11322

If the user enters a different private key, using the supplied public
key would lead to a mismatch. So always derive the public key when saving.

WireGuard: Make pubkey read only, populate automatically. Fixes #11322

While here, add a link to copy the public key to the clipboard.

Merge branch 'viktor/pfSense-ipsecmobileinperror'

Mobile IPsec certificate validation. Issue #11319

Fix PHP error in Mobile IPsec validation if Group Auth is selected. Fixes #11212

Update OpenVPN Wizard to match current server options. Fixes #10919

Fix WG Keep Alive field variable name. Fixes #11288

Fix WG Generate button descr.

Improve WireGuard field labels & descriptions.

Improve WireGuard port validation. Fixes #11311

Encode WireGuard tunnel edit/peer values. Issue #11312

Encode WireGuard tunnel list values. Issue #11312

Suppress errors when opening router file. Fixes #11314

Merge branch 'viktor/pfSense-checkipsecwildcardcert'

IPsec wildcard certificates input validation. Implements #11297

Attempt to use peer wg address if possible for gateway. Implements #11300

Add WireGuard to backup areas. Implements NG 5485

Refine Unbound auto ACL generation. Implements #11309

Rework WireGuard tonatsubnets/unbound ACL entries. Fixes #11304

Init var before use. Fixes #11307

Add units to source tracking timeout description. Fixes #11303

Allowe peer port < 512

Allowe listen port < 512

Use correct default MTU for WireGuard. Fixes #11291

Fix length check for WireGuard interface descriptions

Add WireGuard to easyrule

Exclude wg(4) from auto outbound NAT. Fixes #11289

PPPoE Server users create and instance delete fix. Issue #11282

Fixed 11287 by moving style to css

Use gettext() on WireGuard endpoint text. Issue #11286

Assume default WG port if empty. Fixes #11286

While here, print a more user-friendly value when peer endpoints are
empty.

Fix populating keepalive value. Fixes #11288

Assume default WG port if empty. Fixes #11286

Add doubleclick handlers to WireGuard tables

Revert "Add wg to ALTQ list. Implements #11280"

Unstable. See #11285

This reverts commit 4a49b0d9b182c76f658201124c43278a65542c98.

Add help.php entries for Wireguard pages. NG 5455 and Fixes #11283

Fix WireGuard case

Ticket #5186: Enable Wireguard firewall rules tab

Correct typo. Fixes #11279

Add wg to ALTQ list. Implements #11280

Prevent invalid WireGuard assignments. Fixes #11277

Show WireGuard interface description during assignment. Issue #11277

WireGuard assignment/disable behavior improvements. NG 5518

• Do not allow a WireGuard instance to be removed while assigned
• Do not allow a WireGuard instance to be disabled while assigned
• Destroy the WireGuard interface when disabled

Add WireGuard info to status output. NG 5483

WireGuard default port usage fix. NG 5482

Signed CSR import fix. Issue #11275

Add ^wg to list of interface mimatch types

Add OS routes using WireGuard Peer AllowedIPs. Part of NG 5437

Remove WireGuard peernwks field which is not needed. Part of NG 5437

Fix some bad WireGuard capitalization

Automatic WireGuard interface gateways. Part of NG 5437

Update translation files

Regenerate pot

Retire VXLAN support

VXLAN support is not enterprise ready and after internal discussion we
decided we are not able to support it. We are committed to release
features only when they are ready.

Change XML listtag entry for peer to wgpeer for issue #5186

Fix copyright notices

Remove commented out code

Spell WireGuard properly

Fixed #11265 - Remove unwanted log messages

wg: Deny toconfigure IP address on wg interfaces

Ticket #5186

Add igc to ALTQ list. Issue NG 5185

Preserve wireguard address after interface assign

Improve code readability

Fixed #5486 by making peer endpoint and port optional

Warn user if peer table has changed before leaving page

Added new Wireguard config fields peernwks and peerwgaddr per #5437

wg: Configure static routes

When configuring a wg tunnel, update static routes associated with that
interface

Update copyright year

Fix typo

Ticket #5186: Re-create config files during boot

Load file on pressing 'Enter' key

Ticket #5186: Implement is_wg_enabled()

Ticket #5186: Fix comment

#5186 - Revised peer configuration to use 'wgpeer' rather than 'peer'

wg: Do not check assigned interface (Ticket #5186)

When saving changes on wireguard, do not check address conflict on
interface assigned to that tunnel, otherwise, it will not allow user to
save any modification

wg: Fix indent and improve code readability

wg: Adjust priv entries

wg: Use a more generic function to detect IP address

wg: Remove extra spaces

wg: isset() just before is_array() is redundant

wg: unlink_if_exists() can deal with glob matches