Steve Beaver
db28039e4e
Fixed #8112
2017-11-21 10:22:09 -05:00
Yorick Koster
c4212dc6ce
Prevent Clickjacking in CSRF error page
2017-11-19 20:44:41 +01:00
Steve Beaver
4a67060696
Add upgrade notice include file
2017-11-16 13:15:01 -05:00
Steve Beaver
8ba87e856c
Add upgrade notice to dashboard
2017-11-16 13:15:01 -05:00
Renato Botelho
3e496fa4ea
Bump version to 2.4.3-DEVELOPMENT
2017-11-16 15:34:26 -02:00
Steve Beaver
7f8d1f31a7
Revise modal notice header
2017-11-16 11:41:31 -05:00
Steve Beaver
8905346897
Provide a simple mechanism for pakage installer to display a notice to the user. (Such as: Firewall must be rebooted before this package becomes available")
2017-11-16 11:37:43 -05:00
Stephen Jones
00fc2d5eee
Fixed #7896 Made sure only images could be uploaded and validated on the server to make sure it is an image and not something else.
2017-11-15 16:07:25 -06:00
jim-p
48f08ba1e6
Tweak the formatting of the disk usage section of the system info widget
2017-11-15 12:37:33 -05:00
Steve Beaver
3bb0275d75
Fixed #8098 by converting the '.' in interfaces names to '_' when used to compose an HTML element class name
2017-11-15 12:31:23 -05:00
jim-p
7c4e07c625
Ensure that the value passed to ipfw pipes is always an integer, no matter the source. Fixes #8097
2017-11-15 09:01:22 -05:00
Steve Beaver
947394d291
Fixed #8053
...
value vs text on Gateway selector
2017-11-14 11:53:56 -05:00
Renato Botelho
557f7ad0bc
Update translation files
2017-11-14 09:32:46 -02:00
Renato Botelho
3a80a8230b
Regenerate pot
2017-11-14 09:26:47 -02:00
jim-p
37f05e9792
Add a separate checkbox for OpenVPN servers to redirect an IPv6 gateway now that OpenVPN has a native flag for it. Implements #8082
...
While here, since local network boxes are hidden when redirect gateway is enabled, do not use the values in those boxes when crafting the configuration. That way the GUI configuration is consistent with the backend.
2017-11-13 11:44:09 -05:00
jim-p
5bd94e5f2e
Fix saving the CRL choice for OpenVPN clients. Fixes #8088
2017-11-13 11:04:38 -05:00
Steve Beaver
6bb6903413
Fixed #8053 Revised page JavaScript to update gateway selector on IP family change
...
(cherry picked from commit ae381698db
2017-11-10 15:20:14 -05:00
jim-p
66dd4fe2ad
Remove this part, the voucher settings shouldn't be synchronized this way, it's handled via the voucher sync settings on the secondary. Fixes #8079
...
It was only working before because of this typo, the code shouldn't have been there at all.
2017-11-10 14:08:07 -05:00
jim-p
927a988e06
When synchronizing vouchers, avoid allowing null values. Also, fix a missing variable global declaration. Part of ticket #8079
2017-11-10 14:00:32 -05:00
jim-p
ff25106d8e
Correct voucher config section name. Part of ticket #8079
2017-11-10 13:14:07 -05:00
Renato Botelho
bc60e0701f
Use a strict check of array_search() result
2017-11-10 14:33:07 -02:00
Renato Botelho
c253e3520b
Remove empty items from output
2017-11-10 14:18:46 -02:00
Renato Botelho
8d5ff32b7a
Detect when system is running a newer version than the one available on remote repository
2017-11-10 12:20:13 -02:00
Renato Botelho
eaed7e74dd
Always do rquery when pkg search is not used
2017-11-10 12:17:16 -02:00
Renato Botelho
a9b0a7a314
Fix #7946 : Display installed packages missing on remote repo to let user to delete it
2017-11-10 10:10:08 -02:00
Stephen Jones
d70eaff578
Fixed #8039 Changed to on sanitizing data. This is to help so if the user has previous cookie data it shouldn't try and sanitize it.
2017-11-09 13:52:10 -06:00
jim-p
73568673eb
Also kill off sshlockout_pf processes when restarting syslogd. Fixes #7984
2017-11-09 12:10:39 -05:00
Stephen Jones
e00f69c8cd
Fixed #7966 added a moving average smoothing factor to help out with some of the jagged graphs. Since the quickest update will be every other second this will help make it look smoother. Also added this to the widget and added some functionality to the status page so it can display in two different styles. Setting smoothing to 0 will make the graph the same as before this was added. Raising it will allow for a moving average to be taken into account to smooth out the graphs.
2017-11-09 10:40:34 -06:00
jim-p
258fc75b09
Several corrections to service sorting to produce output consistent with user expectations. Fixes #8069
2017-11-08 11:01:58 -05:00
jim-p
0587104380
Reorder reading the product name in pfSense-rc so it happens after all filesystems are mounted. Fixes #8065
2017-11-07 14:29:21 -05:00
Steve Beaver
00d0c66e62
Provide mechanism to allow for transition to a new package repository server
2017-11-07 12:32:03 -05:00
jim-p
635dcc697a
Check for /bootpool and import the bootpool zfs pool if present. Fixes #8063
2017-11-07 10:38:37 -05:00
Luiz Souza
373513a561
Fix a bug in interfaces.php that will cause a failure on first 'Save' of 'OPT1' with some hardware configurations.
2017-11-07 02:15:48 -02:00
Luiz Souza
1328b1542f
Add the XML tags to support the switch entries.
2017-11-07 01:10:11 -02:00
Luiz Souza
3b1355820f
Remove stray white space.
2017-11-07 01:10:11 -02:00
Stephen Jones
9b36e210f0
fixed the ipsec widget to show splitconnections for ikev2
2017-11-06 15:01:08 -06:00
jim-p
3414dea15b
Restore some customizations to openssl.cnf, otherwise it cannot generate a certificate. Fixes #8059
...
We set prompt=no, so most of these values will cause an error when openssl commands are run directly.
2017-11-06 15:54:19 -05:00
Stephen Jones
2807660f70
removed extra quote
2017-11-06 08:59:22 -06:00
Stephen Jones
153f09b8d3
Fixed an issue where it was showing the escaped apostrophes on all info boxes. This will fix the issue of the javascript getting terminated in the ipsec status page in french. and not print it to the user
2017-11-03 16:45:57 -05:00
Stephen Jones
46b9efddca
Fixed #8043 It didn't like one of the french characters being saved in the config so it would rollback the config and not allow you to enable mobile clients. Added an html entities to replace it with safe characters. Also added some escapes when it tried to print certain words using a ['] and terminating a string in javascript for the ipsec_status page. This is a possibly a potential problem for multiple pages in French.
2017-11-03 16:05:12 -05:00
Steve Beaver
8c2831e141
Cosmetic changes to repo branch switching
2017-11-03 13:46:13 -04:00
Steve Beaver
73d5b5d226
Provide a firmware branch selector on the System->Update page to allow the user to change their mind.
...
On changing the selector, refresh the page to show the revised version information.
2017-11-03 13:23:48 -04:00
jim-p
7e37da2e9d
When crafting the CA subject for ipsec.conf, handle component values that are arrays. Fixes #7929
2017-11-03 11:27:14 -04:00
jim-p
c2a524405c
When ntp is bound to specific interfaces, disable listening on wildcard. Fixes #8046
2017-11-03 09:13:45 -04:00
jim-p
87c67243c2
Add an option for LDAP servers to use the global root CA list as a peer CA. Fixes #8044
2017-11-02 14:30:12 -04:00
doktornotor
3ed3a367e5
Disable HSTS for captive portals
2017-11-02 14:39:13 -02:00
doktornotor
a257c4c99a
Add option to disable HSTS for nginx (Bug #6650 )
2017-11-02 14:39:13 -02:00
doktornotor
b42a43f7e7
Add option to disable HSTS for nginx (Bug #6650 )
2017-11-02 14:39:13 -02:00
doktornotor
3684280db0
Add option to disable HSTS for nginx (Bug #6650 )
2017-11-02 14:39:13 -02:00
Steve Beaver
fbbd7d2b53
Crudely fixed #7786 by eliminating check of parent bandwidth when children are sepcified in %
2017-11-02 11:23:11 -04:00
