FreshBSD

pkg: new stuff!

    OpenVPN export, work in progress for https://github.com/opnsense/core/issues/2787
    
    * Add factory class to request export template types
    * Add some test code to show/hide options depending on supported functions
    * Use our normal form type to construct the UI
    * Use stored ip/hostname when available or determine target based on ip address, the 
previous hostname resolution type will be replaced.
    * List configured templates using /api/openvpn/export/templates/

    mvc/forms, accept style keyword on all input types, needed when working on 
https://github.com/opnsense/core/issues/2787

pkg: fix plist

    system: add configd call to return json structured interface data using 
`legacy_interfaces_details()`, while working on 
https://github.com/opnsense/core/issues/2787 missed something to return configured 
addresses.
    No need to duplicate legacy_interfaces_details.
    
    adds:
    ```
    configctl interface list ifconfig
    ```

menu: reorder WireGuard and ZeroTier (#916)

src: style change

net-mgmt/net-snmp: 1.2 from master

net-mgmt/telegraf: version 1.7.0

mail/postfix: merge version 1.6 from master

net/wireguard: version 0.7 from master

security/openconnect: chmod changes

security/openconnect: add groups and client certificates (#915)

www/nginx: merge version 1.2 from master

firmware: ignore kernel/base when argument was given

config: deprecate old-style versioning files

www/nginx: version bump

firmware: refactor mtree tests slightly

firmware: improve mtree handling further

www/squid: fix pac template (#2806)

misc/theme-cicada: whitespace fix

Firewall: Log Files: Live View color themes modification (#913)

Firewall: Log Files: Live View color themes modification (#913)

(cherry picked from commit 53b29276d811192cea86b5918e365eb8d9dc0d8f)
(cherry picked from commit 739082f646868e1b41913f176086b43103a57681)

build: two small changes

* Always purge signatures when we can't generate new ones.
* Instead of testing who called us see if config files are there.

    Restore area - line break is missing, closes 
https://github.com/opnsense/core/pull/2813
    
    (cherry picked from commit 9aeb91cced3fa80256b0b0fe1d9b9fe399c71971)

    Restore area - line break is missing, closes 
https://github.com/opnsense/core/pull/2813

 

Merge pull request #914 from opnsense/ngx_rule_19_fix

www/nginx: fix rule 19 issue

www/nginx: fix rule 19 issue

root cause: even if MainRule is successfully parsed, it is currently
not supported. So it must be moved to a basic rule.

    OpenVPN linkup/down scripts, add IPv6 + ifconfig_local ipv4 route, for 
https://github.com/opnsense/core/issues/2799

Revert "border between <a>´s are missing"

This reverts commit d60b154b0ccd25aafd861b57e4898227b03da286.
The normal theme menu does not use separators so the sidebar
shouldn't use them as well.  Noticed this morning with a fresh
pot of coffee.

www/nginx: fix rule 19 issue

root cause: even if MainRule is successfully parsed, it is currently
not supported. So it must be moved to a basic rule.

firmware: small tweaks for future flexibility

Most of this will only be relevant for 19.1 where we shall have
an "enforcement" of mtree files through the sets so that this
check can audit our whole system for issues... :)

firmware: rename security audit script for clarity

firmware: wrong audit ;)

firmware: first part of mtree verification

PR: https://github.com/opnsense/update/issues/37

config: caching sphinx is not strictly needed..

as it does not take an insane amount of time to rebuild.
The underlying issue is that if we cache this package all
it's later unneeded dependencies land in the packages set.

    OpenVPN linkup, add remote address as route when set, for 
https://github.com/opnsense/core/issues/2799

Framework: sync with upstream

Taken from: HardenedBSD

*/*: sync with upstream

Taken from: HardenedBSD

    Firewall/live log, replace color styles with classes, for 
https://github.com/opnsense/plugins/issues/912

    Firewall/live log, replace color styles with classes, for 
https://github.com/opnsense/plugins/issues/912
    
    (cherry picked from commit fe21186e05f5e33167cc109ce7fef09e3dc947b7)

build: signature doesn't have to be there

config: rebase 19.1 after recent changes

config: rebase 18.7 for mtree file inclusion

    IDS/IPS, abuse.ch fingerprint ruleset for suricata 4.1.x using tls_cert_fingerprint 
keyword for better performance.
    
    keep on master while still on suricata 4.0.x

build/base: repack set for mtree inclusion as well

Framework: sync with upstream

Taken from: HardenedBSD

audio/alsa-lib: sync with upstream

Taken from: HardenedBSD

net/mpd5: sync with upstream

Taken from: HardenedBSD

mail/pecl-mailparse: sync with upstream

Taken from: HardenedBSD

*/*: sync with upstream

Taken from: HardenedBSD