pfSense

Add IPsec advanced option for strict CRL checking

write out built-in CRLs for strongswan

Merge pull request #1770 from phil-davis/patch-1

Unset old CA and Cert in left system config

Unset any old CA and Cert in the system section that might still be there from when upgrade_066_to_067 did not unset them. That will tidy up old configs that had the conversion done originally but these old sections were left behind.

Merge pull request #1771 from phil-davis/patch-2

Captive Portal zoneid upgrade fix var name typo

With the typo, this empty() test would always have been true. So maybe on upgrade some existing captive portal zoneid values have been getting overwritten by this even number counter? Or?

Allocate dnpipe and dnqueue numbers even if no filter rules

It would be quite unusual to have no filter rules array, but if that is indeed the case then the first part of this code that sets dnpipe and dnqueue numbers should execute anyway.

Unset old CA and Cert in system config

This looked odd. Why would we leave behind the old "ca" and "cert" section in $config["system"]?
I guess it would do no harm, but seems confusing for the future to have some unused entries like this remaining in the config....

Merge pull request #1738 from phil-davis/Static-Routes

Merge pull request #1763 from doktornotor/patch-4