hostwatch: emit discovered hosts sorted by last_seen, which helps callers like kea_prefix_watcher to use the most recent address (#10786)
Emit hosts in DESC order, use first match in kea_prefix_watcher, cleanup arp.py redundant sorting
Interfaces: Wireless: Devices - Migrate to MVC code, first phase for https://github.com/opnsense/core/issues/10751 (#10782)
This commit just replaces the existing (rather minimal) wireless clone configuration section with an mvc implementation, so we have a landing spot for the actual settings later.
Impact of this change should be relatively low and easy to merge to production as it doesn't change configuration settings.
To not impact the weirdness with "Persist common settings", we currently only overlay the clone property in the wireless container.
VPN: Wireguard: Give peer generator standard save and cancel buttons (#10748)
* VPN: Wireguard: Give peer generator standard save and cancel buttons
* Add a new row below the last row that contains these buttons so striping works
* wireguard: native save/cancel field row
---------
Co-authored-by: Franco Fichtner <franco at opnsense.org>
Interfaces: Wireless: Devices - Migrate to MVC code, first phase for https://github.com/opnsense/core/issues/10751
This commit just replaces the existing (rather minimal) wireless clone configuration section with an mvc implementation, so we have a landing spot for the actual settings later.
Impact of this change should be relatively low and easy to merge to production as it doesn't change configuration settings.
To not impact the weirdness with "Persist common settings", we currently only overlay the clone property in the wireless container.
pfsync: handle large MTU pfsync interfaces
pfsync packets were allocated with m_get2(), which can't return packets
larger than MJUMPAGESIZE. As a result 9k MTU pfsync interfaces simply didn't work.
Use m_get3(), which can allocate sufficiently large mbufs.
Extend the pfsync:bulk test case to provoke this problem.
PR: 297307
MFC after: 2 weeks
Sponsored by: Rubicon Communications, LLC ("Netgate")
(cherry picked from commit 7e2781fdcfdbe489cc07572d33dc36bca06a342d)
trust: Fix server certificate purpose detection
Allow ECDSA TLS server certificates that only require digital signatures, without requiring key encipherment or key agreement.
system: revisit edbfc5318557 since hardcoding is not necessary here
While here wrap the returned values in html_safe(). If we want to
enforce 'en_US' we should do it in config.xml.sample or add it as
a model default once we get to it.
Interfaces: Wireless: Devices - Migrate to MVC code, first phase for https://github.com/opnsense/core/issues/10751
This commit just replaces the existing (rather minimal) wireless clone configuration section with an mvc implementation, so we have a landing spot for the actual settings later.
Impact of this change should be relatively low and easy to merge to production as it doesn't change configuration settings.
To not impact the weirdness with "Persist common settings", we currently only overlay the clone property in the wireless container.
cron: handle missing job during deletion (#10773)
* cron: handle missing job during deletion
* Update src/opnsense/mvc/app/controllers/OPNsense/Cron/Api/SettingsController.php
Co-authored-by: Ad Schellevis <AdSchellevis at users.noreply.github.com>
---------
Co-authored-by: Ad Schellevis <AdSchellevis at users.noreply.github.com>