pfSense

Remove the previous 'no_dad' workaround now that if_stf is fixed.

Partly revert b76e0baebb70775b192507ec18f523141800ce95.

(cherry picked from commit dad3885f9f5afbe0768387527122a885414dd3bc)

Populate more default values in the OpenVPN configuration generated by the wizard and rearrange some options so there is less of a difference when editing the configuration for the first time. Fixes #7864

Do not show group privilege controls unless the user is editing an existing group. Fixes #7865

(cherry picked from commit 7af38087fef168f213c6880c6782153630c13386)

Fixed #7728
Revised enabled/disabled diplay to match other firewall pages

(cherry picked from commit 25b82b200de7e846066bef3c6a3918592527763f)

Implements PR170013 - Revise setup wizardwording and links

(cherry picked from commit d8455e10d71ab90b7faa96bc1748fa761e7a4166)

If /boot/loader.conf is not presetn check /boot/loader.conf.local.

(cherry picked from commit 4ff3adec7a6bdd6d87cc5eeae2b1039954ee5ce2)

Move this file_exists test inside the dpinger status check loop and also suppress PHP errors from stream_socket_client()
Both are done to avoid a race where the status file can be missing and the status check fails, resulting in an alert/crash report.

(cherry picked from commit 59104a6ff6c862482eddb9696fd8d22dec89052e)

Fix incorrect function name/typo. Ticket #7719

Relax OpenVPN wizard cert validation to match that of the cert manager and encode values before using them. Fixes #7854
Also, CDATA escape these fields in config.xml since they will most likely contain characters which are invalid in XML.
While here, fix a cert display issue where a SAN value could be reused from a previous entry in the cert list display....

Fix #7719

When Dynamic DNS entry uses a gateway group as interface,
return_gateway_groups_array() will be called and it returns real
interface instead of friendly name, as expected. Take both friendly and
real interface name into consideration.