pfSense

dns_split was a comma separated list and moved to use space as separator, provide upgrade code to make sure old configs are converted. Since there was a config upgrade version 11.7 only on master, I pushed it to 11.8 and used dns_split one as 11.7 to be able to backport it to RELENG_2_2. Ticket #4418

Remove the harden-glue option entirely and hard code it to yes. Ticket #4402

Update Unbound defaults

To avoid issues with clashing SAIDs go back to specifying the reqid in strongswan config.

To be able to manage this first upgrade the config to assign each phase2 an reqid
Second use that during config generation

Ticket #4208

Fix #4090:

- Unbound advanced options may contain double quotes and it breaks the
syntax when a backup is restored because newlines are trimmed. Save it
in base64 format is a safe way to prevent it
- Bump config version to 11.5
- Provide upgrade code to encode current config or the one that came...

Add config upgrade code to make sure iketype is set, bump config version to 11.4. It fixes #4163

Add config upgrade code to validate changes made on c2fe67eb and d269747b. It fixes #4134

Add a cron item to expire items from webConfiguratorlockout, also add config upgrade code. This fixes #4122

Update default config.xml for 2.2. Disable dnsmasq, enable Unbound. Remove
outdated comments that used to sort of document the config file, but had
been neglected for quite some time and aren't all that useful anyway.
Change default NICs from vr to em, given vr is on the way out and em is...

Do not require the default sysctl items to be set on the config.xml but rather extract the definitions from the sysctl tree. Also to reduce config.xml size