FreshBSD

www/nginx: bugfixes and a change I hope I won't regret

captive portal: fix server tag; closes #2638

(cherry picked from commit 5d2ff1def1c0d4e6e583b1e175785d8a0482dcce)

captive portal: fix server tag; closes #2638

Revis manual pages. [SA-18:08.tcp]

Fix L1 Terminal Fault (L1TF) kernel information disclosure.
[SA-18:09.l1tf]

Fix resource exhaustion in IP fragment reassembly. [SA-18:10.ip]

Fix unauthenticated EAPOL-Key decryption vulnerability.
[SA-18:11.hostapd]

Approved by:        so

Revis manual pages. [SA-18:08.tcp]

Fix L1 Terminal Fault (L1TF) kernel information disclosure.
[SA-18:09.l1tf]

Fix resource exhaustion in IP fragment reassembly. [SA-18:10.ip]

Fix unauthenticated EAPOL-Key decryption vulnerability.
[SA-18:11.hostapd]

Approved by:        so

www/nginx: add PHP support to model and view

    load ipfw when either CP or the trafficshaper is enabled, final take on 
https://github.com/opnsense/core/issues/2569

 

Merge pull request #789 from ghostwheel42/master

fix acme operations when using multiple accounts

fix acme operations when using multiple accounts

acme.sh stores some account-related information in
/var/etc/acme-client/home/ca
this leads to "validation failed" messages every time a certificate
with a different account is validated
this is fixed by adding ACCOUNT_JSON_PATH and CA_CONF to account.conf

ui: no minified version for tokenize2

Discussed with: @adschellevis

system: tweak previous to make code clearer

system: fix policy check on empty password save

(cherry picked from commit eccc786ef1272174829b3e165ba1903d55450872)

system: fix policy check on empty password save

rc: remove fluff from ipfw load script

    ipfw/dummynet, don't depend on ipfw to load it's modules, it may cause side effects 
like https://github.com/opnsense/core/issues/2569

    Revert "squid, deleay startup during boot, for 
https://github.com/opnsense/core/issues/2569"
    
    This reverts commit 72af231b41403447c682dc9337301ebde786a168.

www/nginx: CSP and other headers, allow running webserver sockets safely

firewall/nat, hide Redirect target port when port is not applicable

squid, deleay startup during boot, for https://github.com/opnsense/core/issues/2569

Framework: sync with upstream

Taken from: HardenedBSD

sysutils/nut: sync with upstream

Taken from: HardenedBSD

misc/pciids: sync with upstream

Taken from: HardenedBSD

security/yara: sync with upstream

Taken from: HardenedBSD

www/p5-Mojolicious: sync with upstream

Taken from: HardenedBSD

devel/gdb: sync with upstream

Taken from: HardenedBSD

security/vuxml: sync with upstream

Taken from: HardenedBSD

*/*: sync with upstream

Taken from: HardenedBSD

interfaces: allow explicit mtu to reach the stf device; closes #2553

interfaces: register em1_stf instead of wan_stf

Discussed with: @adschellevis

interfaces: $destroy does not exist anywhere

openvpn: "connection refused" cannot mean a lot of things #2610

fix table headers: tr elements cannot have a colspan, th elements can

config: allow EMBED on php package

OpenVPN p2p_tls with /30 fix, for https://github.com/opnsense/core/issues/2624

OpenVPN p2p_tls with /30 fix, for https://github.com/opnsense/core/issues/2624

(cherry picked from commit 29cb71425d0428833d52489b97589f7465a8a164)

net/freeradius: style sweep

net/freeradius: add sqlite support (#783)

net-mgmt/telegraf: add elasticsearch output (#782)

sysutils/nut: add apcsmart driver (#781)

ui: rework the resize logic to remember the current setting; closes #2628

(cherry picked from commit db50af0d5aea04a0424f1d15ef353ce30aec76c8)

ui: rework the resize logic to remember the current setting; closes #2628

www/nginx: CSP model fix

www/nginx: add model and form properties for CSP

www/nginx: add help strings

config: 18.7 add wireguard development plugin

ui: fix footer boxing; closes #2626

opnsense/opnsense-update: ready for 18.7.1

net-mgmt/mk-livestatus: sync with upstream

Taken from: HardenedBSD

devel/pear: sync with upstream

Taken from: HardenedBSD

devel/py-py: sync with upstream

Taken from: HardenedBSD

*/*: sync with upstream

Taken from: HardenedBSD