pfSense

Suppress errors from touch when marking GW down. Fixes #9851

(cherry picked from commit 83794361b7135aaef4e47b35bd27df7da6ce023c)

Fix OpenVPN keepalive default values. Fixes #3473

(cherry picked from commit 99d7e8c10e96e6f22ad47973d07258cd02426fe6)

Update privilege definitions

Reduce default GUI cert lifetime to 825 days. Issue #9825

Add root warning to HA node sync privilege.

(cherry picked from commit 03b8b94ed86ca85510e7d00e035d30eab7e3a43b)

Initialize array to avoid a PHP error in upgrade_144_to_145(). Fixes #9840

(cherry picked from commit 8e0d33ec48792e13839a0181031664261269c220)

Fixes #9362: proxied value must be a boolean

(cherry picked from commit 888635338d63e8b21297e3b25f0ff545fe9c4c41)

Image upload validation improvements. Fixes #9804

• Make functions for validating images against a pre-defined list of
  approved types
• Change the picture widget to use these functions
• Add validation for uploaded Captive Portal logo/background images

(cherry picked from commit 09d597434c9ccb456c8f207649dbe43fd5ff85db)

Fix #9674: Do not set duplicate-cn in p2p_shared_key mode

Fix #9285: Move ping-check option from global to per-subnet

(cherry picked from commit 5197e3e3a3b0ee048785e2ffb4222d7cba4e6c74)