FreshBSD

python 2-->3 / configd

First (functional) attempt, this needs to stay on devel for some time there might be 
dragons ;)

src/etc/rc.d/configd --> command_interpreter could cause restart issues after an upgrade, 
the rc system doesn't like command changes it seems. Maybe not a real world problem, just 
haven't tried it yet.
unit tests are somewhat functional, although generating all templates will likely fail, 
since the test config doesn't include all data involved.

python 2->3 iteritems() in core templates

IDS, minor template cleanups using https://github.com/opnsense/core/issues/3100

configd, add helpers.empty(), closes https://github.com/opnsense/core/issues/3100

OpenVPN export, add auth-nocache option, closes 
https://github.com/opnsense/core/issues/3193

mvc/forms, add support for tokenize2 sortable tag, closes 
https://github.com/opnsense/core/issues/3145

auth/pam, better CamelCase for https://github.com/opnsense/core/issues/3242

Auth, add example authentication service and some filename cleansing. for 
https://github.com/opnsense/core/issues/3242

refresh logo, small scaling issue in previous

theme, sharpen our theme a bit

psec_mobile.php fix minor escaping issue

config access, don't try to open config.xml in write mode when file is not writeable. 
closes https://github.com/opnsense/core/issues/3241

minor simplification for https://github.com/opnsense/core/issues/3242

Authentication/pam, initial (working) version to move already implemented pam services 
into our framework. for https://github.com/opnsense/core/issues/3242

MVC/Exception handling, prevent UserException from being pushed to /tmp/PHP_errors.log

php session, fix previous

Revert "php session path, 
https://github.com/opnsense/core/commit/3eba9a739e49f23830751a0104ece72eaecff7cb"

This reverts commit 545f29a7d2a883696f4923286bbb21dd9e5618d6.

php session path, 
https://github.com/opnsense/core/commit/3eba9a739e49f23830751a0104ece72eaecff7cb

php, session.savepath, add to recover as discussed 
https://github.com/opnsense/core/commit/3eba9a739e49f23830751a0104ece72eaecff7cb#commitcomment-32356556

remove "show certificate info" on certificate list from pending CSR (#3243)

php, move session files into it's own directory

certs.inc, make sure create_temp_openssl_config() can't wrap lines

ids, rule-updater.py, cleanup unused

Merge branch 'fredronnv-dev/ipfwcaptiveportal'

Merge branch 'dev/ipfwcaptiveportal' of https://github.com/fredronnv/core into 
fredronnv-dev/ipfwcaptiveportal

legacy_config_get_interfaces, let's make sure we don't stumble over an empty interface, 
closes https://github.com/opnsense/core/issues/3231

(cherry picked from commit 621f84e900f5ea17c58bf665573b9d13f4344f59)

interfaces: check for valid alias IP #3197

Suggested by: @tbandixen

(cherry picked from commit 90c0c395a54967f28c797b46293d4fb975b27ded)

interfaces: check for valid alias IP #3197

Suggested by: @tbandixen

Revert "interfaces: remove arp flush from dhclient-script #3197"

This reverts commit a1dbbb5ef132487c88b2b144ac67eeedb00a576c.

legacy_config_get_interfaces, let's make sure we don't stumble over an empty interface, 
closes https://github.com/opnsense/core/issues/3231

firewall: tweak a help text

(cherry picked from commit 32cd65b9f9f4a11080671181f1ecfb4a7d0bf78b)

openvpn: proper daemonize instead of background job #3223

(cherry picked from commit c217bee6f2f6f7bc2d8ffbad5535812a62627e22)
(cherry picked from commit 156d6f7287da05f337f9784dfc024c7b42a3a50d)
(cherry picked from commit f10b710a587e69edb704184ac7171a209f21f604)

Revert "ipfw: there's no need to loop over cp_interfaces"

This reverts commit 6178310af241221faf94e9515235b002a12dfbdf.

Don't want to risk opening 53 on wan

ipfw: there's no need to loop over cp_interfaces

We can allow traffic to this host via all.

ipfw: only allow traffic to/from me via cp_interfaces

interfaces: do not do background ifconfig call

openvpn: daemon is already in the config #3223

system: syslog doesn't need background job

The foreground option is -F so we double-background it...

openvpn: proper daemonize instead of background job #3223

openvpn: remove stale PID file as well

PR: https://github.com/opnsense/core/issues/3223
Suggested by: @marjohn56

src: style sweep

(cherry picked from commit 5bc3ed8ccf286c6996a3579053257751c6c5394e)

src: style sweep

ipfw: Remove VIP loop / Add explicit "to me" for DNS

There's no need to explicitly loop around VIPs. We can get away with
simply allowing DNS "to me" via the captive portal interfaces.

Removed unneccessary attribute in cp_interface_list

www: html_safe() for value=; closes #3218

www: everything not "dhcp" for #3218

firewall: tweak a help text

LICENSE: sync

(cherry picked from commit d8f2251d7bb582e193d3516542dde723e2f054a3)

www: d+f for #3218

www: a few for #3218

LICENSE: sync