pfSense

kea: filter self-signed certs from TLS options

Add safety check for alias ID

Fix config paths with leading slash

A single or a leading forwward-slash is not supported.

Add safety checks to config index variables

If a config path is called with a null index, the result is undefined due to the
config functions ignoring consecutive slashes.

Stop sshguard spam in system logs. Fix #12747

Instead of restarting sshguard with each log rotation, keep it running
separately while monitoring the auth log file. This allows sshguard
start/stop events to still be included in the system log without
spamming it. When the log file is rotated by newsyslog, sshguard will...

Move to CURLINFO_RESPONSE_CODE

As of cURL 7.10.8, CURLINFO_HTTP_CODE is a legacy alias of
CURLINFO_RESPONSE_CODE.

Introduce explicit config file read/write functions

Allow changing system-default SCTP timeouts. Implement #15661

Handle large sections when skipping package config. Fix #15624

Using regex to remove the 'installedpackages' config section may fail
depending on the size of the string being parsed. Avoid this limit by
modifying a config array instead.

kea: lower max unacked clients default from 10 to 0.