pfSense

Add a setting for PHP memory limit in System -> Advanced. Feature #13377

Prevent running upgrade code on first boot. Fixes #14698

• Update default config to current latest revision number
• Add safety belt check to not flag an empty GUI cert as weak when it
  will be handled naturally during GUI startup without a spurious
  notice/warning.

Cast to string before ctype_digit() testing. Fixes #14702

pkg-utils.inc: just consider the first line of output from rquery when determining remote version.

Fix var name in ipsec_ikeid_next(). Fixes #14690

Extend support for SCTP in firewall and NAT rules. Implement #14640

Support specialnets in outbound NAT source/destination. Implement #3288
Also, show an asterisk in place of 'Any' for the source,
and avoid generating oNAT rules with invalid aliases.

Extend alias and VIP checks to outbound NAT

Work around weak certificates for nginx. Implements #14672

• Generalize and move function that creates self-signed certs
• Detect weak cert when starting GUI and re-generate
• Check for weak cert in GUI on upgrade and re-generate
• Check for weak cert in Captive Portal zones on upgrade and...

Check OpenVPN instances for deprecated items

• Check for weak certificate digests. Implements #14677
• Check for deprecated encryption and digests. Implements #14686