PR: https://forum.opnsense.org/index.php?topic=4094
(cherry picked from commit 26d9815d)

Way better fix for the squid file transition.  Does not require
a manual restart anymore.

(cherry picked from commit 101fc844)

The regdhcp conditional option never really worked in the first place.
Dhcplease registration is controlled by regdhcp and regdhcpstatic
elsewhere already and we always need to include this file.

PR: https://forum.opnsense.org/index.php?topic=4041
(cherry picked from commit f31e5560)

(cherry picked from commit cd6cdba1)

(cherry picked from commit 902b9431)

(cherry picked from commit 041702d2)

(cherry picked from commit 0f881bc4)
(cherry picked from commit 28ea1d73)
(cherry picked from commit b234d36f)
(cherry picked from commit ae4e38bc)
(cherry picked from commit d0f13284)
(cherry picked from commit f783f5c4)

(cherry picked from commit 5bfa41fd)

Console features:

o major upgrade support from the console (not enabled)

GUI features:

o pkg-audit to view current FreeBSD vulnerability report
o changelog viewer with all older and (possibly) newer releases
o intelligent plugin handling (release vs. development version)
o improved (simplified) update workflow and presentation
o license viewer for installed packages
o revamped tabs and menu navigation

(cherry picked from commit 052c9599)

We always set primaryconsole in our images, which is enough
for the code to figure out that serial was enabled.  If a
user changed this, he will have to reconfigure to get the
expected result: primaryconsole set to something different
other than serial and secondaryconsole not set will obviously
not be enogh of a hint for a system to use the serial one.

(cherry picked from commit ea2abc6b)

(cherry picked from commit a81aab89)
(cherry picked from commit 61626494)

Keep two names intact that were broken on master for the sake
of simplicity: legacy map stays in place for these two.

(cherry picked from commit 4763373d)
(cherry picked from commit 9ad060f6)
(cherry picked from commit a90efa28)
(cherry picked from commit d83563fa)
(cherry picked from commit 4b99ff9f)
(cherry picked from commit 9205427c)
(cherry picked from commit 40879017)
(cherry picked from commit ffbbfc96)
(cherry picked from commit a674b5e0)

(cherry picked from commit 7100fedb)

This adds the "normal" power state to the powerd - system_advanced_misc options.
If the powerd utillity can not determine the system power options (ac or battery) it will use the "normal" setting rendering the "ac" and "battery" settings useless for these systems.
(cherry picked from commit 28b058c8)

(cherry picked from commit f00d4309)
(cherry picked from commit d5969056)
(cherry picked from commit 8e78fd70)
(cherry picked from commit 85e62204)
(cherry picked from commit a7fbf99b)
(cherry picked from commit 6b19b436)
(cherry picked from commit 9bc6342f)
(cherry picked from commit d28b79a9)
(cherry picked from commit 7e4c3cf7)
(cherry picked from commit af8e12f5)
(cherry picked from commit e21aa229)
(cherry picked from commit 8b6d43f5)
(cherry picked from commit 68739fbb)

(cherry picked from commit 18c49439)

(cherry picked from commit 7c65a076)
(cherry picked from commit 88aab655)
(cherry picked from commit d4fe7fbc)

This partially reverts commit 8ecaf5f9.

(cherry picked from commit 6b0b2569)
(cherry picked from commit 85e62204)
(cherry picked from commit fbfb0019)
(cherry picked from commit e4cd7f59)

Replaced crypt($password, '$6$') with password_hash and password_verify in order to produce salted hashes from passwords.

(cherry picked from commit 2a025de4)
(cherry picked from commit bd2d28c6)

... but we already know that because we are performing one.

(cherry picked from commit 53ee7f57)

(cherry picked from commit 83969040)
(cherry picked from commit d88999b0)

(cherry picked from commit 85e4bef0)

(cherry picked from commit 235049b9)

PR: https://github.com/opnsense/core/issues/1275
(cherry picked from commit 621d703a)

(cherry picked from commit baa813eb)

(cherry picked from commit 09ed08e8)

(proxy, remote acl's) add option to disable cert validation, closes https://github.com/opnsense/core/issues/1271

(cherry picked from commit 1b442b8e)

(cherry picked from commit a2570701)

(legacy) ditch get_possible_traffic_source_addresses(), https://github.com/opnsense/core/issues/1257

(cherry picked from commit 18a991be)

(cherry picked from commit fc1a15df)

(captive portal) don't try to generate invalid vouchers, closes https://github.com/opnsense/core/issues/1253

Let's keep this simple for now, just don't leave the dialog as long as the input isn't valid yet....

(cherry picked from commit fc39bb33)

(cherry picked from commit 340da972)

We checked for IPs, but the code runs the service in all cases.

(cherry picked from commit d870e03d)

Should probably remove the weekly/daily rotation in favour of a
setting of the value in KB on the GUI instead...

(cherry picked from commit 19dfa96c)

o Mark interface used in case of interface tracking
o Don't inject local DNS server when there is no IP

PR: https://github.com/opnsense/core/issues/1273
(cherry picked from commit 0ec85692)