BSD Commit Log Search

Only normalize when changing away from pass, as we don't know the intention when switching back to pass

Add a small js change handler for non pass rules to remove or change unsupported combinations

ui: reduce diff

Remove specific match validations since backend already normalizes or disables invalid state types or route-to gateway rules

Remove specific match validations since backend already normalizes or disables invalid state types or route-to gateway rules

ui: implement dialog search field

ipsec: add some hybrid post-quantum variants as additional key exchanges (#10798)

system: minor touches on widget styles

widget: Services: more structured layout (#10817)

* widget: Services: structured layout

* Update Services.js

ipsec: shorten this a bit

system: audit log injection via login username in auth_log()

* prevent syslog.filter splitting our messages
* remove newlines when flushing out local files

PR: GHSA-jjm2-jg4p-3v9q

ipsec: further reduce diff

ipsec: reduce diff

ipsec: further limit PQ options

system: selftest POC with OpenSSL FIPS

Feeds the FIPS config to the OpenSSL config, but needs
an untainted config to run.  Wires base OpenSSL to use
the same FIPS module since base does not have one.

Activation confirmed by seeing fips for both base and
ports using:

     # /usr(/local)/bin/openssl list -providers

system: selftest POC with OpenSSL FIPS

Feeds the FIPS config to the OpenSSL config, but needs
an untainted config to run.  Wires base OpenSSL to use
the same FIPS module since base does not have one.

Activation confirmed by seeing fips for both base and
ports using:

     # /usr(/local)/bin/openssl list -providers

system: fips goes to provider_sect

system: second try with fips=yes

system: selftest POC with OpenSSL FIPS

Feeds the FIPS config to the OpenSSL config, but needs
an untainted config to run...

system: advertise fips module to base openssl

system: add audit log and comments

Add match keyword support to Firewall Live Log and Widget

system: restructure openssl.cnf since FIPS sections are already mentioned

review, early return not needed here indeed, revert

review, getValue()

Revert moving the scrub settings to advanced firewall settings

system: selftest POC with OpenSSL FIPS

Feeds the FIPS config to the OpenSSL config, but needs
an untainted config to run...

dnsmasq: leases sorting fixes (#10790)

* dnsmasq: leases sorting fixes

* Refactor to use sortable fields

system: also consider VTI tunnels for lower priority #10819

interface: replace strstr()/strpos() with more precise str_starts_with()

This works for everything but VLANS which still need to check for an
inlie _vlan for backwards compatibility.