Allow editing of CAs, so that imported CAs can have their private keys added later (mainly affected users upgrading from 1.2.3 and wanting to use the cert manager). Also, allow editing the CA's serial, since this shouldn't really be 0 for imported CAs, but the serial of the last cert that was made from this CA.
Do not rely on first user being admin as this breaks in certain cases the XMLRPC authentication. TODO: pass username as argument too. This now can use the local system authentication settings as well.
Check for "aes 256" as IPsec encryption type, not just rijndael.
Add some upgrade code for IPsec mobile clients. Passes php -l but needs more testing.
Trim spaces out to avoid problems from explode.
Add back gre allowing rules since they are needed.
Allow TCP and UDP for DHCP failover traffic.
In IPsec, s/mobileclients/client/, this was changed long ago in the config but not everywhere followed.
Correct PPTP Clients alias address. The PPTP server address was been utlized instead, which resulted in an incorrect firewall rule when 'PPTP Clients' was configured.
Backing this out to see if it unbreaks NanoBSD upgrades with packages involved. Revert "Workaround for conf_mount_rw/ro during boot to only allow it to change at the start and end. Fixes #1279"
This reverts commit 548be1fd6697ab115cbb29d61bc5507744488094.
View revisions
Also available in: Atom