pfSense

Fix lineup of copyright lines

and module names and other bits of formatting and typos in header
comment sections.

Welcome 2015

Change copyright statement to reflect reality

Replace GET by POST on system_usermanager.php and make necessary adjustments on necessary pages. It fixes #3856

Tidy up Ampersand XHTML

Deprecate Ampersand in Anchor tags

xhtml Compliance
replaced <br>, <br/> and </br> with <br />

Improve checks for params 'id', 'dup' and other similar ones to make sure they are numeric integer, also, pass them through htmlspecialchars() before print

Skip input validation when choosing an existing certificate, it should fix #3505

Remove unecessary quotes

Fix issue with CSR generation. Ticket #2820

One more typo on Alternative Names fill, that was setting type field with $value

Fix a (probably) copy/paste issue that is making all Alternative Names disapear when an input error is detected

Remove call-time pass by reference for do_input_validation, helps ticket #2565

Include CA in generated .p12 file. Fixes #2147 the way it was originally intended.

Certificate Manager, for 'Create an internal Certificate' use the correct 'Digest Algorithm'

Allow removing CA and Cert entries that are blank/empty. Fixes #3005

Don't restrict the content of descr when making CA/Certs, it's free-form.

Correct mouseover description for adding a certificate. Fixes #3017

Update "system_certmanager.php" XHTML

Add CDATA section to SCRIPT tags
Update HTML boolean operators
Close BR tags
Deprecate ampersand in ANCHOR tags

fixup text

Show cert start/end dates in list.

Default to using sha256 for a ca/cert digest algorithm, since sha1 is no longer recommended.

Correct some inconsistencies in keylen/csr_keylen. Should fix csr generation errors mentioned on ticket #2820

Add Digest Algorithm option to the CSR screen, should fix #2820

Apparently some systems don't like pulling this in globally, but it should work if defined locally like the other similar lists.

Update usr/local/www/system_certmanager.php

Cleanup HTML

Update usr/local/www/system_certmanager.php

Add space between option's value and selected attributes. Get rid of some stray closing td tags. That's it for now.

Update usr/local/www/system_certmanager.php

Add $userid check

Allow selecting the digest algorithm when creating a CA or Cert. Implements #2765

Use Certificate Manager in Captive Portal settings

Create $altnames earlier, and also fix a bracing issue with this if statement. Fixes certificate importing.

Add initial support for subjectAltName - still needs some select love for the "type" field, freetext for now for testing (it does work, cert gets the specified subjectAltName).

Carry over the key length on input errors when creating a certificate signing request. Fixes #2233

Add button to download a .p12 of a cert+key. Implements #2147

Check userid better here, 0 is also valid

Add an indication in the certificate list to show if a certificate is internally capable of being a CA (basicConstraints has CA:TRUE) or if the nsCertType is set to server.

When creating an internal certificate, offer the user a choice of what constraints to place upon the certificate (CA, Server, or User).

Unlock the fields when making a new internal cert, so we copy the data from the CA but are not locked into it. (Cert details often differ from CA details...)

Note consistency and gettext() added.

Internal cert and CSR creation error handling added.

Bug #1437. Dropdown list for country codes for CSRs (Cert Manager)

Bug #1437. Check for invalid characters in the fields for ca, cert and csr.

Redirect back to the CA/Cert management page after delete so a person can't refresh and accidentally delete other CA/Certs. (CRLs are deleted differently and don't need this fix)

Merge branch 'master' into yakatz-ssl

fix typo

missed a bit of my last commit

checking moduli of ssl csr request and response

override option for certificate subject mismatch

Validate imported CA/Cert a bit more strongly. Should fix #1190

Fix XSS issues

Indicate in various places if a certificate is revoked.

Indicate if a certificate has been revoked, both in the cert list and the user manager list.

Fix some forgotten name->descr changes.

Rename 'name' to 'descr' for CA, Certificates, and CRLs, to gain CDATA protection and standardize field names. Ticket #320.

Add CRL manager tab to other Cert Manager pages

Allow creating a user certificate, pre-fill some info, direct back to user edit screen if that is what led us here. If we are making a user certificate, give another choice to select a pre-existing certificate to associate with that user.

Only allow a certificate to be deleted if it is not currently in use.

Show was a certificate is used for, if anything.

CA/CERT Move

gettext fixes

Use array instead of explode for reqdfieldsn to fit it better with gettext() calls

Fixing gettext() implementation for required fields

Reviewing gettext()

Addin gettext to page title

Gettext for System::Cert manager

remove pfsense references, make generic

Fix typo

increase the default cert lifetime

fix typo

Add pfSense_BUILDER_BINARIES: and pfSense_MODULE:. Adjust Copyright to include 2009 on files that I have asserted (C) on

Merge branch 'master' of git://rcs.pfsense.org/pfsense/nigel-ca-chain into review/master

Conflicts:
etc/inc/certs.inc
etc/inc/upgrade_config.inc

Remove certs.inc from functions.inc it is needed only by two pages usermanager and certmanager.

Added support for certificate chains to manager so that lighty can deliver them via SSL.

Correctly enforce limits on html input.

Migrate IPsec certificate management to centralized system.

This is the cert manager.

Cleanup the tab format of the system ca/certificate pages. The edges were
square instead of rounded like most pfSense pages. While here, fix a bug
that made the submit button disappear when it shouldn't.

Add options to export ca, certificate and user certificate data from the
webui.

Rework most of the OpenVPN support. The interfaces have been updated to
not use the pkg system and the configuration has been migrated to an
openvpn prefix. The centralized user and certificate manager is now used
to support the openvpn configurations. Most of the files removed in this...

fix typo

Implement a certificate authority and certificate webui that can be used
to centrally manage this data. There are no consumers at this time. This
interface allow for the following ...

Certificate Authority Manager:
- List certificates authorities
- Import existing certificate authority...