pfSense

Changed license as requested and added a missing apostrophe in a comment.

fix for broken preselection of select boxes

Improves bug#6400 further reducing page load time from my previous commit

Moved select box generation code out of interface display loop, meaning it runs once iterating over count(interfaces) rather than running count(interfaces) times iterating over count(interfaces) each time....

refactored interfaces_assign.php to to benefit people with large numbers of VLANs, as requested on the forum at https://forum.pfsense.org/index.php?topic=137391.0. Also contains a minor speedup for interfaces_vlan.php. Modified functions are contained in interfaces_fast.inc. Profiling code is still present but commented out, as is replaced code.

Fixed #8053 Revised page JavaScript to update gateway selector on IP family change

(cherry picked from commit ae381698db23f260027c27c9aa12694a38c2f9ce)

Remove this part, the voucher settings shouldn't be synchronized this way, it's handled via the voucher sync settings on the secondary. Fixes #8079

It was only working before because of this typo, the code shouldn't have been there at all.

When synchronizing vouchers, avoid allowing null values. Also, fix a missing variable global declaration. Part of ticket #8079

Correct voucher config section name. Part of ticket #8079

Use a strict check of array_search() result

Remove empty items from output

Detect when system is running a newer version than the one available on remote repository

Always do rquery when pkg search is not used

Fix #7946: Display installed packages missing on remote repo to let user to delete it

Fixed #8039 Changed to on sanitizing data. This is to help so if the user has previous cookie data it shouldn't try and sanitize it.

Also kill off sshlockout_pf processes when restarting syslogd. Fixes #7984

Fixed #7966 added a moving average smoothing factor to help out with some of the jagged graphs. Since the quickest update will be every other second this will help make it look smoother. Also added this to the widget and added some functionality to the status page so it can display in two different styles. Setting smoothing to 0 will make the graph the same as before this was added. Raising it will allow for a moving average to be taken into account to smooth out the graphs.

Several corrections to service sorting to produce output consistent with user expectations. Fixes #8069

Reorder reading the product name in pfSense-rc so it happens after all filesystems are mounted. Fixes #8065

Provide mechanism to allow for transition to a new package repository server

Check for /bootpool and import the bootpool zfs pool if present. Fixes #8063

Fix a bug in interfaces.php that will cause a failure on first 'Save' of 'OPT1' with some hardware configurations.

Add the XML tags to support the switch entries.

Remove stray white space.

fixed the ipsec widget to show splitconnections for ikev2

Restore some customizations to openssl.cnf, otherwise it cannot generate a certificate. Fixes #8059

We set prompt=no, so most of these values will cause an error when openssl commands are run directly.

removed extra quote

Fixed an issue where it was showing the escaped apostrophes on all info boxes. This will fix the issue of the javascript getting terminated in the ipsec status page in french. and not print it to the user

Fixed #8043 It didn't like one of the french characters being saved in the config so it would rollback the config and not allow you to enable mobile clients. Added an html entities to replace it with safe characters. Also added some escapes when it tried to print certain words using a ['] and terminating a string in javascript for the ipsec_status page. This is a possibly a potential problem for multiple pages in French.

Cosmetic changes to repo branch switching

Provide a firmware branch selector on the System->Update page to allow the user to change their mind.
On changing the selector, refresh the page to show the revised version information.

When crafting the CA subject for ipsec.conf, handle component values that are arrays. Fixes #7929

When ntp is bound to specific interfaces, disable listening on wildcard. Fixes #8046

Add an option for LDAP servers to use the global root CA list as a peer CA. Fixes #8044

Disable HSTS for captive portals

Add option to disable HSTS for nginx (Bug #6650)

Add option to disable HSTS for nginx (Bug #6650)

Add option to disable HSTS for nginx (Bug #6650)

Crudely fixed #7786 by eliminating check of parent bandwidth when children are sepcified in %

Merge pull request #3857 from PiBa-NL/20171022-pf-wait-dont-wedge

Merge pull request #3847 from luckman212/pftop-extras-1

Merge pull request #3842 from PiBa-NL/20171004-vip-uniqueid

Merge pull request #3859 from PiBa-NL/20171031-xmlrpc-encodedspace

Merge pull request #3860 from PiBa-NL/20171031-config-backup-check-exception

Fix #6459: Skip interfaces config in AWS EC2 wizard

Implement <skip_flavors> tag in wizards to skip specific steps on specific flavors

Set title and description after $stepid changes

pf, retry pfctl -f rule loading when pf is 'busy', don't try and fail to force -d -e as that would also fail at this point in time.

Merge pull request #3858 from nagyrobi/patch-25

config, xmlparse throw exception instead of calling die(), so corruption check will properly handle the unlink action of the corrupted config

Fix handling of wildcard CN/SAN entries in certificates. Fixes #7994

Ensure that a certificate authority entry is capable of acting as a CA when importing. Fixes #7885

Reindex the user and group arrays after deleting items, to avoid operating on incorrect array entries. Fixes #7733

Fixed #8035

(cherry picked from commit 9c4e7fd3e155d08911feb0afc527af21d79ce917)

xmlrpc, fix usage of space and + character that need different encoding

Change a few more instances of using the physical interface to the friendly interface in status_queues.php, which allows root queues to function with the new VLAN interface names. Fixes #8007

Update the system sysctls to not harvest data from interrupts, point-to-point interfaces and ethernet devices.

The sysctl names changed in FreeBSD 11.

Make is_ipaddrv6() compatible with is_ipaddrv4().

Only the IP address must be accepted, address with netmasks do not qualify.

Ticket #8024

Check the correct variable.

All the IPv6 verification code block was being ignored before this commit.

Ticket #8024

added some security to strip html characters

Do not display logo.css as a valid theme

Do not print JS when there are input errors on diag_dns.php; fix json_encode syntax. Ticket #7999

Fix #7984: Make sure sshlockout_pf stops when syslogd stops

Added a description to mobile client to reflect description in phase1

Fix typo in function name: insterface_is_qinq -> interface_is_qinq

Fix a typo.

Allow the use of mbuf tags to set the VLAN pcp on output packets.

This is necessary for use with the pf 'set prio'.

Ticket #7973

added a string SESSION_TIMEOUT to be returned when a widget times out

Fixed #7978 I added a section in the css that is only parsed by IE10+ and it just sets the margin for tables to 1px instead of 0 this stops it from collapsing

The members of a LAGG cannot be assigned, used in VLANs, QinQ, or PPP.

This commit removes the LAGG members from the list of available interfaces.

Do not allow direct download of .inc files (unparsed PHP source). Fixes #8005

Do not return QinQ interfaces in the physical interface list.

Fix the interface_is_vlan() function.

It now works when only QinQ VLANs exist in the system.

Fix status_queues.php for the new VLAN interface format. Fixes #8007

Do not attempt to change the MAC address when the interface do not store the vendor MAC address.

Fix a bug in interface_is_vlan(), only check QinQ interfaces when they exist.

Revise timeout message

Do no set the MAC address for LAGG interfaces.

Ticket #7928

Provide a mechanism to display a warning if the session times out and the dashboard is no longer updating

Encode uses of $widgetkey in various contexts so it isn't echoed back to the user raw. Fixes #7998

Widget instance counter must be numeric. Fixes #8000

Encode hostname parameter contents in javascript for diag_dns.php. Fixes #7999

Made it so it doesn't display an error when the session expires it just
stops updating the graph. It will display in the console that it caught
and error when the session expires.

Fixed #7856 fixed an issue with a slightly different array format. Also
updated the child key and id to be more robust.

Merge pull request #3811 from trunet/add-cloudns-to-dynamicdns

Interface description doesn't fit the console screen

Strip 2 more chars from interface description because with the new font used by 2.4 it goes off screen on VGA console.

Fix the netgraph path for VLAN interfaces.

Fix #7981: Convert PPP ports interface names to new VLAN notation using dots

fixed indentation

Fixed #7714 Edited it to show correct timezone

Update translation files

Regenerate pot

Fix #7976: Do not add button value to gettext

Bump version to 2.4.2-DEVELOPMENT

Fix #7968

Show Network Device ID in console banner

Do not show Serial when it's empty

Stop using hostuuid as serial

Recognize the first level tag of QinQ interfaces as standard VLANs.

Add missing space

Fix #7953: Make sure a proper empty array is returned instead of NULL

Revert "Fix #7953: Make sure NULL values are not passed to XMLRPC functions"

This reverts commit 73ee3d78d505c10e8c70606bf008732833c00859.