pfSense

Hide console output on system backup restore. Fixes #11909

Group copy button. Implements #12226

Do not show help text under each IPsec bypass rules entry. Fixes #12236

OpenVPN Wizard ncp_enable value fix. Issue #12172

Snort: Enable COREDUMPS option

Clean up some messy HTML in the cert/ca display code. Prep for future MVC changes.

Wireless EAP client option fix. Issue #12239

Merge pull request #4535 from luftegrof/bug12174

Merge pull request #4512 from jvandervyver/master

Merge pull request #4530 from Alexilmarranen/master

Merge pull request #4534 from Uglymotha/master

Merge pull request #4533 from seyfidin/patch-1

Register current pkg_set_version

On pfSense-base post-install script, register current pkg_set_version as
the same of /etc/version

Set PFSENSE_PKG_SET_VERSION to PRODUCT_VERSION

This is going to be used by pfSense-upgrade port to set pkg_set_version
based on PRODUCT_VERSION

Allow %PRODUCT_VERSION% to be used on make.conf

OpenVPN status f/tap+empty tunnel net Fixes #12232

Correct syntax. Fixes #12229

Improve NTP serial port validation. Fixes #12191

Init [''system']['acb']

OpenVPN GUI field adjustments. Implements #12218

• Move description to the top of the page
• For clients and servers, show the ID and corresponding interface name
• Split some options into different sections and change order slightly
  to be more logical.

IPsec Keep Alive corrections. Fixes #12169

• Checked CARP VIP status if used by P1, if VIP is in BACKUP or INIT
  state, it does not attempt to initiate.
• Disable debug printing.

Increase the number of logs we are keeping

Remove a trailing \r that prevents s3 rm from working

missing space in function parameters

Use the cached gateways_status in gateway_info_popup() call

Inline presentation instead of print/echo in PHP

Ensure ACB config section exists

Install ACB cron job on upgrade

Set the output format to avoid \r on line endings preventing log files from being deleted

Fix selector

Completes #12193. Ready for testing. Revert only this commit to go back to old ACB system.

Delete unsupported backups

Prototype cron script to upload ACB backups per #12193

Fix OpenVPN CA/CRL cleanup. Fixes #12192

Validate gpsport. Fixes #12191

Bug #12174 - rename gw_table to gw_info

Bug #12174 - cache results from gateway_info_popup function

IPsec identifier type updates. Implements #12044

Correct names to reflect what the actual types are (e.g. Distinguished
name is really FQDN)

Add an explicit "auto" type which passes the user input through as-is.
Previously some users took advantage of ASN.1 DN behaving this way to...

Add P2 Keep Alive function. Implements #12169

Works for VTI and Tunnel mode. Checks every 5 minutes if the P2 is connected and
initiates if it doesn't.

Since a failed initiation takes ~3-4 minutes to timeout, running more
frequently is counterproductive.

Fix IPsec buttons for Connecting. Fixes #12189

Status page was showing a connect button for tunnels which were already
connecting. It now shows a disconnect button instead.

Fix title length

Fix double encoding. Fixes #12186

The values in these arrays are already encoded, no need to do it again.

Small fixes for expiredays comparing

Add setting for ignore revoked certificates. Fix Bug #12109

Prevent ::\0 from becoming part of negate_networks

Merge branch 'pfsense:master' into master

Cache gw status for rules. Fixes #12174

Don't fetch a new gateway status for every rule. Fetch it once and use
it for the entire page load.

IPsec updates to address multiple issues

• Configure/apply code changes. * Vast performance increase. Fixes #12026 * Changed connection naming to be easier to interpret. Issue #11910
• VTI interface numbering changes. * Name is now "ipsec<reqid>" since reqid is unique per P2 and a low number....

Merge branch 'pfsense:master' into master

Only create pkg.pkg.sig if pkg.pkg exists

Revert "Show result of pkg sign command to make it easier to debug"

This reverts commit d796e0af08457ba75ad708b8a04e4dcfe70bbba3.

Create a pkg bootstrap signature symlink

Show result of pkg sign command to make it easier to debug

Log config changes. Implements #12118

• Add new option to System Log settings to log config changes
• On by default
• Logs the config revision description when making a config change.

Portal logout updates. Fixes #12138

• Change "Connected" page to also include a logout button
• Style page the same way as the login page for a more consistent user
  experience
• Show the "Connected" page when a user navigates back to the portal
  URL no matter the setting of the logout popup option...

Portal Redir URL scheme check. Fixes #11843

• Add support to is_URL() to check that the scheme only matches HTTP or
  HTTPS
• Use the new is_URL() feature in Captive Portal redirect URL tests

Ticket #12107: Fix reverse conditional

Follow up 28f1007613 and fix wrong conditional to validate SMTP Server
IP address or FQDN

Fix #12107: Rework SMTP fields validation

Do not validate SMTP related fields if E-Mail server field is empty. In
this case nothing will be done by notices.inc

While here, add checks to make sure ipaddress is a valida IP address or
FQDN.

System Notifications input validation fix. Issue #12107

IPsec PKCS#11 support as an optional feature. Issue #11933

Crash Reporter typo fix. Issue #12134

Fixed typo in lifetime validation

Captive Portal DB/Vouchers RAM disk backup. Issue #11894

DynDNS DNS Made Easy provider update. Implements #9341

Merge branch 'pfsense:master' into master

certs.inc closing parenthesis fix. Issue #11831

Merge pull request #4499 from GChuf/fonts

Merge pull request #4514 from raphendyr/patch-dyfi

VPN Packet Processing checkboxes fix. Issue #7801

Certificate Revocation page improvements. Issue #11831

idn_to_ascii failing with large input strings, fixes #12124

Fixes Redmine #12111

Set net.link.ifqmaxlen

This removes the need for a kernel patch which overrules IFQ_MAXLEN.

AWS: Separate release tarballs by branch

AWS: Add FLAVOR to distfiles.tar

AWS: Add branch name to pkgs tarball

AWS: Simplify logic using 's3 ls' to check if file exists

AWS: Make sure distfiles.tar exist before try to download it

AWS: Add missing s3 parameter to ls

AWS: Add FLAVORS to pkgs cache

Do not force git remote to be called origin

AWS: Create initial stashed ports tree on S3

AWS: Simplify logic

Create aws_exec() and replace all direct calls to use it

Always save built pkgs progress

Replace factory by ${FLAVOR}

Build improvements for using AWS:

• Use release artifacts from S3 to populate poudriere jails
• Pull prebuilt pkgs from S3 to only rebuild changed items
• Populate distfiles from S3
• If distfiles change, push an updated copy back into S3
• If the pkg repo changes, push an updated copy back into S3

Update strongSwan terminate syntax. Fixes #12052

2.5.2 is the new release

Update interface selection on save

Fix #12110 PHP error on line 329

Revised help text wording (bleow/above)

Fix reporting of onterface selection

Exclude revoked certs from expiration notification. Fix Bug #12109

Add dynamic DNS provider dy.fi

Fixes https://redmine.pfsense.org/issues/12090

Fix order of providers in doc string (use case-insensitive sort)

Revise DNS forwarder for MVC. #12096

Correct NAT rule overlap detection. Fixes #11734

XMLRPC synchronization for DHCP/DHCPv6 Relay settings. Implements #11957

Always apply IPsec changes on HA secondary. Fixes #12075

GRE Interfaces input validation fix. Issue #12049