pfSense/pfsense 6765f83src/etc/inc crypt.inc

Use new/stronger openssl options for crypt_data(). Fixes #9421

Retry with legacy options if new options fail, so we can still
read old style data from previous encryption runs (e.g. old encrypted
backups, ACB entries, etc)

Better error handling and suppression to prevent issues like #9421.
DeltaFile
+28-10src/etc/inc/crypt.inc
+28-101 files

pfSense/pfsense 0939f37src/etc/inc crypt.inc

Update openssl syntax for crypt_data(). Fixes #9420

pfSense/pfsense 996a1adsrc/etc/inc auth.inc

LDAP TLS option update. Implements #9417
DeltaFile
+30-32src/etc/inc/auth.inc
+30-321 files

pfSense/pfsense 7671193src/etc/inc filter_log.inc

Use the same regex used in parse_firewall_log_line().

No functional changes.

pfSense/pfsense af85efesrc/etc/inc filter_log.inc, src/usr/local/www status_logs_filter.php

Fix empty log files in the GUI. Fixes #9415

Two ways they were empty that I found:
* filterlog log entries now have a pid after the process
* CARP/VRRP entries did not set a source and so were not logged

While here, add CARP details to proto field of GUI log view.

pfSense/pfsense f30da99src/usr/local/www system_certmanager.php system_camanager.php

Fix CA/Cert search description. Issue #9412

pfSense/pfsense dd4fb72src/usr/local/www system_camanager.php

Fix bonus closing tag. Issue #9412

pfSense/pfsense 1497305src/usr/local/www system_camanager.php system_certmanager.php

Add sorting and search to CA/Certs. Implements #9412

pfSense/pfsense 0d82f93src/etc/inc certs.inc

Correct OSCP Must-Staple cert check for OpenSSL 1.1.1. Fixes #9408

pfSense/pfsense e788a9esrc/etc rc.embedded

Create /var/crash after creating /var RAM disk. Fixes #9409

(cherry picked from commit b39d615394eabd2d19afef0936219c609ef602e3)

pfSense/pfsense b39d615src/etc rc.embedded

Create /var/crash after creating /var RAM disk. Fixes #9409

pfSense/pfsense b7be92ctools/templates/pkg_repos pfSense-repo.altabi pfSense-repo.abi

Make it possible to fix armv6 -> armv7 config files

pfSense/pfsense 08acb53tools/templates/pkg_repos pfSense-repo-devel.altabi pfSense-repo-devel.abi

Make it possible to fix armv6 -> armv7 config files

pfSense/pfsense 9d91dd6tools/templates/pkg_repos pfSense-repo-devel.descr pfSense-repo-devel.altabi

Prepare repo templates for 2.5.0 based on FreeBSD 12

pfSense/pfsense d36cf2csrc/etc/inc util.inc

Test modules path before scanning. Fixes #9400

pfSense/pfsense 7db5a39tools/conf/pfPorts make.conf poudriere_bulk

Enable LDAP for sudo and build nss_ldap. Fixes #9399

pfSense/pfsense e078d31src/etc pfSense.obsoletedfiles

Update obsoleted files from FreeBSD 11 -> 12

pfSense/pfsense 64d2dd6src/etc pfSense.obsoletedfiles

Add missing obsoleted files

pfSense/pfsense b05d99esrc/etc pfSense.obsoletedfiles

Add missing obsoleted files

pfSense/pfsense 586c623src/etc/inc vslb.inc, src/usr/local/www load_balancer_pool_edit.php load_balancer_monitor_edit.php

Deprecate the built-in relayd Load Balancer. Closes #9386

It is not available on FreeBSD 12 with OpenSSL 1.1.x.

Users can migrate to the HAProxy package.

pfSense/pfsense 749dfdbsrc/etc rc.bootup, src/etc/inc pfsense-utils.inc config.lib.inc

Fix the spamming of warnings about ttyv0 not being available on ARM64 devices.

While here, use a more meaningful name for the function.

pfSense/pfsense 91677c0src/etc/inc util.inc

Generate hints for the kernel loader.
DeltaFile
+24-0src/etc/inc/util.inc
+24-01 files

pfSense/pfsense b69eea4src/etc/inc auth.inc, src/usr/local/www diag_tables.php

Initialized entries variable before use. Fixes #9359

(cherry picked from commit 9146639e722b4d437d19b5ade1157ae01849a313)

pfSense/pfsense 9146639src/etc/inc auth.inc, src/usr/local/www diag_tables.php

Initialized entries variable before use. Fixes #9359

pfSense/pfsense d67449csrc/etc/inc filter.inc auth.inc, src/usr/local/www diag_tables.php guiconfig.inc

Use only sshguard table for blocking ssh/gui attacks. Issue #9223

(cherry picked from commit 555a9ab5c01101ddab7daa41f35d379d1c39b26e)

pfSense/pfsense 922a1aesrc/conf.default config.xml

Remove unnecessary expiretable cron jobs for ssh/gui lockout. Issue #9223

(cherry picked from commit 7a68df5efc35b6d1ee514bb87a2298f5180de001)

pfSense/pfsense 555a9absrc/etc/inc filter.inc auth.inc, src/usr/local/www diag_tables.php guiconfig.inc

Use only sshguard table for blocking ssh/gui attacks. Issue #9223

pfSense/pfsense 7a68df5src/conf.default config.xml

Remove unnecessary expiretable cron jobs for ssh/gui lockout. Issue #9223

pfSense/pfsense f1caf19src/etc/inc upgrade_config.inc globals.inc

Remove unnecessary expiretable cron jobs for ssh/gui lockout. Issue #9223

(cherry picked from commit 397d9fff6df234d98ef2353b0b29912a14777442)

pfSense/pfsense 397d9ffsrc/etc/inc upgrade_config.inc globals.inc

Remove unnecessary expiretable cron jobs for ssh/gui lockout. Issue #9223

pfSense/pfsense 428f6f0src/usr/local/www diag_backup.php

Fix output buffering when downloading config backups. Fixes #9390

(cherry picked from commit 4015b03d4b184e546cb3590430fee6f9953ce23e)

pfSense/pfsense 4015b03src/usr/local/www diag_backup.php

Fix output buffering when downloading config backups. Fixes #9390

pfSense/pfsense 632f0dbsrc/etc/inc config.lib.inc

Revert "Remove definitions of conf_mount_r[ow]"

Leave functions declaration for now to prevent errors during upgrade.

This reverts commit da3ef5a3b359edb27bb9bb2b88a93cfb5ea8a0d1.

pfSense/pfsense 1d92575src/usr/local/www diag_smart.php

Update SMART status page with more detail/commands. Implements #9367

pfSense/pfsense 144863esrc/etc/inc service-utils.inc filter_log.inc, src/usr/local/www interfaces_assign.php status_logs_common.inc

Fix more illegal offset errors. Issue #9366

pfSense/pfsense 86ec819src/usr/local/www system.php interfaces.php

Target the proper loop in switch statements. Issue #9365

pfSense/pfsense b88050bsrc/etc/inc interfaces.inc services.inc, src/usr/local/www head.inc

Fix some illegal offset errors. Issue #9366

pfSense/pfsense 59449ddsrc/etc/inc gwlb.inc

Fix deeper continues. Issue #9365

pfSense/pfsense 0522114src/etc/inc gwlb.inc

Target the proper loop in switch statements. Issue #9365

pfSense/pfsense f403491src/etc/inc globals.inc, tools/conf/pfPorts poudriere_bulk

Move PHP to 7.3.x

pfSense/pfsense b2aae11src/etc rc.php_ini_setup

Add support for PHP 7.3.x

pfSense/pfsense ccc60c8src/etc rc.php_ini_setup

Remove PHP 5.x support

pfSense/pfsense 5ec87d1tools/conf/pfPorts make.conf

Move PHP to 7.3.x

pfSense/pfsense ac512a1tools/conf/pfPorts make.conf

Move to python 3.6 as default

pfSense/pfsense c5663bfsrc/etc/inc config.lib.inc unbound.inc

Comment out all pfSense_fsync() calls until it's properly fixed

pfSense/pfsense c03dc57src/etc/inc config.lib.inc

pfSense_fsync() call just before rename() is breaking it. Comment out for now until it's 
fixed

pfSense/pfsense da3ef5asrc/etc/inc config.lib.inc

Remove definitions of conf_mount_r[ow]

pfSense/pfsense 9c078e3src/etc rc.conf_mount_rw rc.conf_mount_ro

Remove /etc/conf_mount_r[ow]

pfSense/pfsense 522388asrc/etc/inc acb.inc, src/usr/local/www services_acb_backup.php services_acb.php

Remove all calls to conf_mount_r[ow]

pfSense/pfsense 90639e0tools/conf/pfPorts poudriere_bulk.exclude.arm.armv7 poudriere_bulk.exclude.arm.armv6

Rename exclude files to work with armv7