OPNSense/core be882ccsrc/opnsense/mvc/app/controllers/OPNsense/Interfaces/Api WirelessSettingsController.php, src/opnsense/mvc/app/models/OPNsense/Interfaces Wireless.php

interface: style sweep
DeltaFile
+6-5src/opnsense/mvc/app/controllers/OPNsense/Interfaces/Api/WirelessSettingsController.php
+1-2src/opnsense/mvc/app/models/OPNsense/Interfaces/Wireless.php
+7-72 files

OPNSense/core 7572d50src/opnsense/mvc/app/controllers/OPNsense/Wireguard/forms dialogConfigBuilder.xml, src/opnsense/mvc/app/views/OPNsense/Wireguard general.volt

VPN: Wireguard: Reposition peer generator QR code into own field (#10787)
DeltaFile
+5-0src/opnsense/mvc/app/controllers/OPNsense/Wireguard/forms/dialogConfigBuilder.xml
+1-3src/opnsense/mvc/app/views/OPNsense/Wireguard/general.volt
+6-32 files

OPNSense/core 802f848src/opnsense/mvc/app/views/OPNsense/Wireguard general.volt

wireguard: detach the settings from the instances/peer tab
DeltaFile
+5-8src/opnsense/mvc/app/views/OPNsense/Wireguard/general.volt
+5-81 files

OPNSense/core 7e8a571src/opnsense/scripts/captiveportal/lib arp.py, src/opnsense/scripts/interfaces list_hosts.py

hostwatch: emit discovered hosts sorted by last_seen, which helps callers like kea_prefix_watcher to use the most recent address (#10786)

Emit hosts in DESC order, use first match in kea_prefix_watcher, cleanup arp.py redundant sorting
DeltaFile
+1-10src/opnsense/scripts/captiveportal/lib/arp.py
+3-2src/opnsense/scripts/kea/kea_prefix_watcher.py
+4-0src/opnsense/scripts/interfaces/list_hosts.py
+8-123 files

OPNSense/core 11012ebsrc/opnsense/mvc/app/controllers/OPNsense/Interfaces WirelessController.php, src/opnsense/mvc/app/controllers/OPNsense/Interfaces/Api WirelessSettingsController.php

Interfaces: Wireless: Devices - Migrate to MVC code, first phase for https://github.com/opnsense/core/issues/10751 (#10782)

This commit just replaces the existing (rather minimal) wireless clone configuration section with an mvc implementation, so we have a landing spot for the actual settings later.
Impact of this change should be relatively low and easy to merge to production as it doesn't change configuration settings.

To not impact the weirdness with "Persist common settings", we currently only overlay the clone property in the wireless container.
DeltaFile
+0-193src/www/interfaces_wireless_edit.php
+0-142src/www/interfaces_wireless.php
+118-0src/opnsense/mvc/app/controllers/OPNsense/Interfaces/Api/WirelessSettingsController.php
+53-0src/opnsense/mvc/app/models/OPNsense/Interfaces/Wireless.php
+47-0src/opnsense/scripts/interfaces/reconfigure_wireless.php
+39-0src/opnsense/mvc/app/controllers/OPNsense/Interfaces/WirelessController.php
+257-3358 files not shown
+352-34714 files

OPNSense/core 6ba92e4src/opnsense/mvc/app/controllers/OPNsense/Wireguard/forms dialogConfigBuilder.xml, src/opnsense/mvc/app/views/OPNsense/Wireguard general.volt

VPN: Wireguard: Reposition peer generator QR code into own field
DeltaFile
+5-0src/opnsense/mvc/app/controllers/OPNsense/Wireguard/forms/dialogConfigBuilder.xml
+1-3src/opnsense/mvc/app/views/OPNsense/Wireguard/general.volt
+6-32 files

OPNSense/core e41f8f2src/etc/inc/plugins.inc.d openssh.inc

system: do not regenerate all OpenSSH key files when adding new key types

https://github.com/opnsense/core/commit/9a854302b5ebeabece302c4aa1c79f79e81b16bf added mldsa44-ed25519 but this forced all keys to be regenerated according to the existing construct
DeltaFile
+2-11src/etc/inc/plugins.inc.d/openssh.inc
+2-111 files

OPNSense/core 0e1f66fsrc/opnsense/mvc/app/controllers/OPNsense/IPsec/forms dialogConnection.xml

ipsec: patch id for actions into field

This doesn't change anything, but this makes sense given we
needed it in the previous commit.
DeltaFile
+1-0src/opnsense/mvc/app/controllers/OPNsense/IPsec/forms/dialogConnection.xml
+1-01 files

OPNSense/core 93754ecsrc/opnsense/mvc/app/controllers/OPNsense/Wireguard/forms dialogConfigBuilder.xml, src/opnsense/mvc/app/views/OPNsense/Wireguard general.volt

VPN: Wireguard: Give peer generator standard save and cancel buttons (#10748)

* VPN: Wireguard: Give peer generator standard save and cancel buttons

* Add a new row below the last row that contains these buttons so striping works

* wireguard: native save/cancel field row

---------

Co-authored-by: Franco Fichtner <franco at opnsense.org>
DeltaFile
+10-7src/opnsense/mvc/app/views/OPNsense/Wireguard/general.volt
+4-4src/opnsense/mvc/app/controllers/OPNsense/Wireguard/forms/dialogConfigBuilder.xml
+14-112 files

OPNSense/core 5d1f201src/opnsense/mvc/app/controllers/OPNsense/Interfaces WirelessController.php, src/opnsense/mvc/app/controllers/OPNsense/Interfaces/Api WirelessSettingsController.php

Interfaces: Wireless: Devices - Migrate to MVC code, first phase for https://github.com/opnsense/core/issues/10751

This commit just replaces the existing (rather minimal) wireless clone configuration section with an mvc implementation, so we have a landing spot for the actual settings later.
Impact of this change should be relatively low and easy to merge to production as it doesn't change configuration settings.

To not impact the weirdness with "Persist common settings", we currently only overlay the clone property in the wireless container.
DeltaFile
+0-193src/www/interfaces_wireless_edit.php
+0-142src/www/interfaces_wireless.php
+118-0src/opnsense/mvc/app/controllers/OPNsense/Interfaces/Api/WirelessSettingsController.php
+53-0src/opnsense/mvc/app/models/OPNsense/Interfaces/Wireless.php
+47-0src/opnsense/scripts/interfaces/reconfigure_wireless.php
+39-0src/opnsense/mvc/app/controllers/OPNsense/Interfaces/WirelessController.php
+257-3358 files not shown
+352-34714 files

OPNSense/core 8185d19src/etc/inc certs.inc, src/opnsense/mvc/app/library/OPNsense/Trust Store.php

Make condition compliant to RFC 5280
DeltaFile
+8-3src/opnsense/mvc/app/library/OPNsense/Trust/Store.php
+4-3src/etc/inc/certs.inc
+12-62 files

OPNSense/core b2ca3ccsrc/opnsense/scripts/captiveportal/lib arp.py, src/opnsense/scripts/interfaces list_hosts.py

Emit hosts DESC, use first match in kea_prefix_watcher, cleanup arp.py redundant sorting
DeltaFile
+1-10src/opnsense/scripts/captiveportal/lib/arp.py
+3-2src/opnsense/scripts/kea/kea_prefix_watcher.py
+1-1src/opnsense/scripts/interfaces/list_hosts.py
+5-133 files

OPNSense/core cd40213src/opnsense/mvc/app/views/OPNsense/Wireguard general.volt

Add a new row below the last row that contains these buttons so striping works
DeltaFile
+7-2src/opnsense/mvc/app/views/OPNsense/Wireguard/general.volt
+7-21 files

OPNSense/src cda7faasys/netpfil/pf if_pfsync.c, tests/sys/netpfil/pf pfsync.sh

pfsync: handle large MTU pfsync interfaces

pfsync packets were allocated with m_get2(), which can't return packets
larger than MJUMPAGESIZE. As a result 9k MTU pfsync interfaces simply didn't work.

Use m_get3(), which can allocate sufficiently large mbufs.

Extend the pfsync:bulk test case to provoke this problem.

PR:             297307
MFC after:      2 weeks
Sponsored by:   Rubicon Communications, LLC ("Netgate")

(cherry picked from commit 7e2781fdcfdbe489cc07572d33dc36bca06a342d)
DeltaFile
+8-3tests/sys/netpfil/pf/pfsync.sh
+1-1sys/netpfil/pf/if_pfsync.c
+9-42 files

OPNSense/core caeead1src/opnsense/scripts/interfaces list_hosts.py

hostwatch: emit discovered hosts sorted by last_seen, which helps callers like kea_prefix_watcher to use the most recent address
DeltaFile
+4-0src/opnsense/scripts/interfaces/list_hosts.py
+4-01 files

OPNSense/core 5ad2156src/opnsense/mvc/app/library/OPNsense/Trust Store.php

trust: Fix server certificate purpose detection

Allow ECDSA TLS server certificates that only require digital signatures, without requiring key encipherment or key agreement.
DeltaFile
+1-4src/opnsense/mvc/app/library/OPNsense/Trust/Store.php
+1-41 files

OPNSense/core 3c9c8b5src/etc/inc/plugins.inc.d captiveportal.inc

captive portal: fix PHP warning here too
DeltaFile
+2-2src/etc/inc/plugins.inc.d/captiveportal.inc
+2-21 files

OPNSense/core 396beb5src/www system_general.php

system: another one in general settings
DeltaFile
+1-1src/www/system_general.php
+1-11 files

OPNSense/core 7fcd2fasrc/www system_general.php

system: revisit edbfc5318557 since hardcoding is not necessary here

While here wrap the returned values in html_safe().  If we want to
enforce 'en_US' we should do it in config.xml.sample or add it as
a model default once we get to it.
DeltaFile
+5-7src/www/system_general.php
+5-71 files

OPNSense/core e25fb3asrc/opnsense/mvc/app/controllers/OPNsense/Interfaces WirelessController.php, src/opnsense/mvc/app/controllers/OPNsense/Interfaces/Api WirelessSettingsController.php

Interfaces: Wireless: Devices - Migrate to MVC code, first phase for https://github.com/opnsense/core/issues/10751

This commit just replaces the existing (rather minimal) wireless clone configuration section with an mvc implementation, so we have a landing spot for the actual settings later.
Impact of this change should be relatively low and easy to merge to production as it doesn't change configuration settings.

To not impact the weirdness with "Persist common settings", we currently only overlay the clone property in the wireless container.
DeltaFile
+0-193src/www/interfaces_wireless_edit.php
+0-142src/www/interfaces_wireless.php
+118-0src/opnsense/mvc/app/controllers/OPNsense/Interfaces/Api/WirelessSettingsController.php
+53-0src/opnsense/mvc/app/models/OPNsense/Interfaces/Wireless.php
+47-0src/opnsense/scripts/interfaces/reconfigure_wireless.php
+39-0src/opnsense/mvc/app/controllers/OPNsense/Interfaces/WirelessController.php
+257-3358 files not shown
+352-34714 files

OPNSense/core 892d98bsrc/opnsense/mvc/app/controllers/OPNsense/Cron/Api SettingsController.php

cron: handle missing job during deletion (#10773)

* cron: handle missing job during deletion

* Update src/opnsense/mvc/app/controllers/OPNsense/Cron/Api/SettingsController.php

Co-authored-by: Ad Schellevis <AdSchellevis at users.noreply.github.com>

---------

Co-authored-by: Ad Schellevis <AdSchellevis at users.noreply.github.com>
DeltaFile
+3-0src/opnsense/mvc/app/controllers/OPNsense/Cron/Api/SettingsController.php
+3-01 files

OPNSense/core 31b6e6asrc/www diag_authentication.php

diagnostics: handle missing authentication fields (#10779)
DeltaFile
+10-11src/www/diag_authentication.php
+10-111 files

OPNSense/core dd178d4src/opnsense/scripts/auth add_user.php

system: use created user name for change event (#10757)
DeltaFile
+1-1src/opnsense/scripts/auth/add_user.php
+1-11 files

OPNSense/core cf556aesrc/www system_authservers.php

system: handle missing authentication plugin fields (#10759)
DeltaFile
+3-3src/www/system_authservers.php
+3-31 files

OPNSense/core 1f1dbf8src/opnsense/mvc/app/controllers/OPNsense/Auth/Api UserController.php

system: handle missing user during deletion (#10761)
DeltaFile
+12-12src/opnsense/mvc/app/controllers/OPNsense/Auth/Api/UserController.php
+12-121 files

OPNSense/core 75de713src/www interfaces.php

interfaces: handle basic DHCP mode fields (#10763)
DeltaFile
+3-3src/www/interfaces.php
+3-31 files

OPNSense/core 0a638dcsrc/www system_advanced_admin.php

system: handle missing sudo setting (#10767)
DeltaFile
+1-1src/www/system_advanced_admin.php
+1-11 files

OPNSense/core edbfc53src/www system_general.php

system: handle missing language setting (#10769)
DeltaFile
+1-1src/www/system_general.php
+1-11 files

OPNSense/core 06b1378src/opnsense/mvc/app/controllers/OPNsense/Auth/Api GroupController.php

system: handle missing group during deletion (#10771)
DeltaFile
+4-4src/opnsense/mvc/app/controllers/OPNsense/Auth/Api/GroupController.php
+4-41 files

OPNSense/core 4804216src/www interfaces_ppps.php

interfaces: handle missing PPP item ID (#10777)
DeltaFile
+1-1src/www/interfaces_ppps.php
+1-11 files