(cherry picked from commit 041702d2)

(cherry picked from commit 0f881bc4)
(cherry picked from commit 28ea1d73)
(cherry picked from commit b234d36f)
(cherry picked from commit ae4e38bc)
(cherry picked from commit d0f13284)
(cherry picked from commit f783f5c4)

(cherry picked from commit 5bfa41fd)

Console features:

o major upgrade support from the console (not enabled)

GUI features:

o pkg-audit to view current FreeBSD vulnerability report
o changelog viewer with all older and (possibly) newer releases
o intelligent plugin handling (release vs. development version)
o improved (simplified) update workflow and presentation
o license viewer for installed packages
o revamped tabs and menu navigation

(cherry picked from commit 052c9599)

We always set primaryconsole in our images, which is enough
for the code to figure out that serial was enabled.  If a
user changed this, he will have to reconfigure to get the
expected result: primaryconsole set to something different
other than serial and secondaryconsole not set will obviously
not be enogh of a hint for a system to use the serial one.

(cherry picked from commit ea2abc6b)

(cherry picked from commit a81aab89)
(cherry picked from commit 61626494)

Keep two names intact that were broken on master for the sake
of simplicity: legacy map stays in place for these two.

(cherry picked from commit 4763373d)
(cherry picked from commit 9ad060f6)
(cherry picked from commit a90efa28)
(cherry picked from commit d83563fa)
(cherry picked from commit 4b99ff9f)
(cherry picked from commit 9205427c)
(cherry picked from commit 40879017)
(cherry picked from commit ffbbfc96)
(cherry picked from commit a674b5e0)

(cherry picked from commit 7100fedb)

This adds the "normal" power state to the powerd - system_advanced_misc options.
If the powerd utillity can not determine the system power options (ac or battery) it will use the "normal" setting rendering the "ac" and "battery" settings useless for these systems.
(cherry picked from commit 28b058c8)

(cherry picked from commit f00d4309)
(cherry picked from commit d5969056)
(cherry picked from commit 8e78fd70)
(cherry picked from commit 85e62204)
(cherry picked from commit a7fbf99b)
(cherry picked from commit 6b19b436)
(cherry picked from commit 9bc6342f)
(cherry picked from commit d28b79a9)
(cherry picked from commit 7e4c3cf7)
(cherry picked from commit af8e12f5)
(cherry picked from commit e21aa229)
(cherry picked from commit 8b6d43f5)
(cherry picked from commit 68739fbb)

(cherry picked from commit 18c49439)

(cherry picked from commit 7c65a076)
(cherry picked from commit 88aab655)
(cherry picked from commit d4fe7fbc)

This partially reverts commit 8ecaf5f9.

(cherry picked from commit 6b0b2569)
(cherry picked from commit 85e62204)
(cherry picked from commit fbfb0019)
(cherry picked from commit e4cd7f59)

Replaced crypt($password, '$6$') with password_hash and password_verify in order to produce salted hashes from passwords.

(cherry picked from commit 2a025de4)
(cherry picked from commit bd2d28c6)

... but we already know that because we are performing one.

(cherry picked from commit 53ee7f57)

(cherry picked from commit 83969040)
(cherry picked from commit d88999b0)

(cherry picked from commit 85e4bef0)

(cherry picked from commit 235049b9)

PR: https://github.com/opnsense/core/issues/1275
(cherry picked from commit 621d703a)

(cherry picked from commit baa813eb)

(cherry picked from commit 09ed08e8)

(proxy, remote acl's) add option to disable cert validation, closes https://github.com/opnsense/core/issues/1271

(cherry picked from commit 1b442b8e)

(cherry picked from commit a2570701)

(legacy) ditch get_possible_traffic_source_addresses(), https://github.com/opnsense/core/issues/1257

(cherry picked from commit 18a991be)

(cherry picked from commit fc1a15df)

(captive portal) don't try to generate invalid vouchers, closes https://github.com/opnsense/core/issues/1253

Let's keep this simple for now, just don't leave the dialog as long as the input isn't valid yet....

(cherry picked from commit fc39bb33)

(cherry picked from commit 340da972)

We checked for IPs, but the code runs the service in all cases.

(cherry picked from commit d870e03d)

Should probably remove the weekly/daily rotation in favour of a
setting of the value in KB on the GUI instead...

(cherry picked from commit 19dfa96c)

o Mark interface used in case of interface tracking
o Don't inject local DNS server when there is no IP

PR: https://github.com/opnsense/core/issues/1273
(cherry picked from commit 0ec85692)

PR: https://github.com/opnsense/core/issues/1277
(cherry picked from commit df469d32)

PR: https://forum.opnsense.org/index.php?topic=3824
(cherry picked from commit 5d238412)

(cherry picked from commit daa45382)
(cherry picked from commit 3fcf1b3c)
(cherry picked from commit 0d17982b)
(cherry picked from commit fbf0005d)
(cherry picked from commit aedc25a1)
(cherry picked from commit 79da7c9a)
(cherry picked from commit 6138d557)
(cherry picked from commit ee09677b)
(cherry picked from commit a670d05c)
(cherry picked from commit e9d13d26)
(cherry picked from commit b9820b09)
(cherry picked from commit 4a7ff245)
(cherry picked from commit 2bb0f230)
(cherry picked from commit a5fc46bd)
(cherry picked from commit bed2dbd8)
(cherry picked from commit 1b5c6d1b)
(cherry picked from commit 7e75cf26)
(cherry picked from commit 2ca72533)
(cherry picked from commit 33c41b16)
(cherry picked from commit 7526194b)
(cherry picked from commit c602a7fd)

(cherry picked from commit b74970ee)

(cherry picked from commit 203732a9)