pfSense

Remove "auto", it's just a synonym for IKEv2. Ticket #4873

include vpn.inc so IPsec CRL reload works. require_once filter.inc in
vpn.inc for callers there that haven't already included it.

Most of the flowtable bits were removed some time ago, take out the last of them too.

When a CRL is updated, refresh strongswan's CRLs.

Merge pull request #1775 from phil-davis/Interfaces-Widget-2-2

Add isset check for strictcrlpolicy

To be consistent with the checks in the rest of this code.

Add IPsec advanced option for strict CRL checking

fix typo

Handle IPsec Advanced Settings save before IPsec is enabled

If the Advanced Settings are saved before any other IPsec is set up then $config['ipsec'] can be just the empty string. As a result you can get:
a) If you select some debug settings then those are not saved. The code to save those settings was only executed when $config['ipsec'] was already an array. Actually the code already did the necessary "if isset() then unset()" stuuf. So I just took the the "if is_array()" away from the code block....

Interfaces widget use more obscure separator RELENG_2_2

Redmine #4859 fix for RELENG_2_2