pfSense

Replace '.' in radius name for strongSwan. Fixes #9106

(cherry picked from commit cc955fe63ad44b5aac66721e54965d9bc13e990c)

Initialize QinQ arrays before use. Fixes #9109

(cherry picked from commit 439d9beba0213c96281d8ff6b09ccb8136b1a0aa)

Fix #9102: Suppress stream_select() undesired warnings

Fix change detection of GUI web server toggles. Fixes #9105

(cherry picked from commit 8207fac69158ad4a56deab4a4b4f6f4c3c361b81)

Add 0.0.0.0/0 to VTI left/rightsubnets. Fixes #8859

No negative feedback from testing, time for a wider push.

This helps with third party devices that require 0.0.0.0/0 to route
traffic on a VTI P2.

(cherry picked from commit 5c4aa94a90256b13b19209f11e4c75b2d0e85ece)

Add checkbox to disable SMTP SSL cert verification. Implements #9001

The default action is to validate the certificate. If the user knows the
server does not have a valid certificate (e.g. self-signed), this option
will allow encryption to be used without validating the identity of the...

If the cert date is negative, use DateTime instead of date. Fixes #9100

(cherry picked from commit 3fec247042a91642a22a8761d3c8a1f9df119817)

Prevent CRL from using too large a lifetime on ARM. Fixes #9098

(cherry picked from commit 9aa8f6a864905c0e3738c337a51f0772b0c5eb93)

Improve handling of empty cert tags. Fixes #9099

(cherry picked from commit ca4456b95c53e89cf6b428a999ae15367b753073)

Prevent log size from being too large, which breaks clog. Fixes #9081

(cherry picked from commit 8bd36425b4bc46e5bbcc940a4d20bfbb2a0011ba)