Eventually we should move this kind of "get all attached networks" to a single and simple function, which uses legacy_get_interface_addresses() underneath. but there's still too much obscure code in this region to remove it easily

(cherry picked from commit 86996d7b)

(cherry picked from commit 65653b7c)
(cherry picked from commit 0e158f0b)

While there also get rid of the need for a /usr/ports dir (this will
make tools.git crash and burn for sure.)

shadow.ucl adapted from https://github.com/freebsd/freebsd-ports/blob/master/Keywords/sample.ucl

(cherry picked from commit 82bece2a)
(cherry picked from commit 73e58543)

We don't have to do anything here anymore.  Since we started using
pkg(8) the extensions.ini was always consistent, but we needed to
make sure that the order is correct.  Some more cleverness was added
to no prevent other PHP modules from simply "plugging in", but since
they are not in one extensions.ini anymore it won't matter.

Expecting some splatter during upgrade, but hopefully also no more
php-suhosin clashes with php56-session not loaded.  :)

(cherry picked from commit 706d2804)
(cherry picked from commit bd66467d)

(cherry picked from commit 0cdd609e)

(cherry picked from commit f107116e)

(cherry picked from commit 6f503e56)

(cherry picked from commit 652089dd)

(cherry picked from commit 35ec2adc)
(cherry picked from commit f52dd530)
(cherry picked from commit 54ec6487)

(cherry picked from commit ed4a3335)

This looks simple enough now.  Discussed with @adschellevis.

(cherry picked from commit 1d73b3b5)
(cherry picked from commit ab4f67c8)
(cherry picked from commit 47c3fee7)
(cherry picked from commit 3947fff4)

(cherry picked from commit 5585e109)

Now always restore from a full backup only, the standard has already
been switched in the scope of this ticket a while back.  The section
restore could be improved, but it's not really worth doing this in
the old code anymore.  Hopefully the last change of its kind here.

(cherry picked from commit 14fabe46)
(cherry picked from commit 0dad9094)
(cherry picked from commit e3196586)
(cherry picked from commit 96820738)
(cherry picked from commit d3c7d74c)

(cherry picked from commit f96a3fc0)
(cherry picked from commit ab5cb92d)

(cherry picked from commit bcd96a58)

Also see: http://www.openssh.com/txt/release-7.0

(cherry picked from commit 4870ff10)

Prefer LiveCD boot during install media boot, then
set up an extra user for installation.  This user
shall be reached via console or SSH soon enough for
a sort of remote install experience.

PR: https://forum.opnsense.org/index.php?topic=3403

Inspired by: DragonFlyBSD (and we're using its installer anyway!)

(cherry picked from commit 710f00e8)
(cherry picked from commit 8ea003a0)
(cherry picked from commit bde361f7)
(cherry picked from commit d4ecff6f)
(cherry picked from commit 557e7271)
(cherry picked from commit 738f733d)

(cherry picked from commit 5ec2101a)
(cherry picked from commit b0aeb04b)

(cherry picked from commit 571bc8c9)
(cherry picked from commit 75e4f8ee)
(cherry picked from commit 9a557bdf)

(status_gateway_groups) show missing gateways and status "monitoring disabled", for https://github.com/opnsense/core/issues/1132

(cherry picked from commit 342337f3)
(cherry picked from commit f8b18799)
(cherry picked from commit f3f36924)

(cherry picked from commit 5f50315c)

(cherry picked from commit 90a6bb77)

(firewall, alias) move field split to proper location, for https://github.com/opnsense/core/issues/1109

(cherry picked from commit 214d92c3)

(cherry picked from commit 5dc170e2)

PR: https://github.com/opnsense/core/issues/1087

(cherry picked from commit fdf05de6)

PR: https://forum.opnsense.org/index.php?topic=3514

(cherry picked from commit 48769e27)
(cherry picked from commit 14d53f5b)
(cherry picked from commit 26a66802)

(openvpn) add "Use common name" option to control username-as-common-name, closes https://github.com/opnsense/core/issues/1154

(cherry picked from commit 765164a0)

When using opnsense_standard_table_form on a table, the first visible row contains a top border (because the invisible mobile border is placed first).
The change sets border-top-width on the first td,th to 0px and swaps the zebra printing to keep things more consistent.

(cherry picked from commit 2eda2d63)

(cherry picked from commit 11bd0171)
(cherry picked from commit 459362ef)

(cherry picked from commit a36bb78d)

(cherry picked from commit 636e2cea)

(cherry picked from commit f56f7e86)
(cherry picked from commit fb91e313)
(cherry picked from commit 629ead66)

(theme) switch font to https://github.com/adobe-fonts/source-sans-pro/releases/tag/2.020R-ro/1.075R-it

for https://github.com/opnsense/core/issues/1104

(cherry picked from commit daca31be)

(cherry picked from commit 0441cf4c)
(cherry picked from commit 26568482)

(cherry picked from commit b6f3b960)

This is especially useful for "sudo su" in manually created admins
to gain access to the console menu without compromising the root
password.

(cherry picked from commit 273692e5)
(cherry picked from commit 96ffce7c)
(cherry picked from commit 686f6a92)

The console would refuse to assign an IP that was used by the
PPTP or L2TP server (surprisingly not PPPoE).  This rule changed
during the MPD4 -> MDP5 migration, so remove that code.  Also,
the subnet check was never executed, good time to remove it as
well.

(cherry picked from commit 081415d4)