(cherry picked from commit 9f315cec)

(cherry picked from commit 57ab36d3)
(cherry picked from commit 76c66b2e)
(cherry picked from commit 6e5f2354)

(openvpn client export) add X-Content-Type-Options: nosniff header, closes https://github.com/opnsense/core/issues/1204

(cherry picked from commit ab3098d6)

(cherry picked from commit 06307f9e)

PR: https://github.com/opnsense/core/issues/1018

(cherry picked from commit b9ff688b)
(cherry picked from commit e98569bb)

PR: https://forum.opnsense.org/index.php?topic=3684
(cherry picked from commit d569a8e1)

The rules edit page can do it, but it was not picked up
by the actual firewall rules...

(cherry picked from commit 3126c616)

(cherry picked from commit 378bc316)
(cherry picked from commit 96f5e7fa)
(cherry picked from commit 50f557f4)
(cherry picked from commit 1fea1163)
(cherry picked from commit 28f3f539)
(cherry picked from commit 12a5ac98)
(cherry picked from commit dc2bd361)
(cherry picked from commit 54cb00d7)
(cherry picked from commit f597fff3)
(cherry picked from commit 481dc9ef)
(cherry picked from commit 30d0c176)
(cherry picked from commit c91304c9)

Fix a few style errors while there.

(cherry picked from commit 63a0231e)
(cherry picked from commit a10382ca)
(cherry picked from commit 79863b19)

(cherry picked from commit c9e40130)

(cherry picked from commit b08d5827)

PR: https://github.com/opnsense/core/issues/1189

(cherry picked from commit 0fb1cb1d)
(cherry picked from commit e52b51f5)
(cherry picked from commit 98ed70d8)
(cherry picked from commit 0760c967)

(cherry picked from commit 5120905f)
(cherry picked from commit 3b54d298)
(cherry picked from commit 73f61f06)

The file came from Scott Dale in 2007 like some of the others.
While there, also fix Deciso update from 2014->2016 in our tree.

See: https://github.com/pfsense/pfsense/commit/ab6a5cfc

(cherry picked from commit 5344b423)
(cherry picked from commit ca61acd3)

Same same, but different. (See previous commit for details.)

o Human-readable format of authentication method in overview
o Refine behaviour of enable / apply on main IPsec page
o Dedup leftsubnet/rightsubnet for meshed IKEv2
o More elegant interface and service plugging
o Tunnel isolation mode for IKEv2 (unmashed)
o Cleanup pass over backend code
o Allow Camellia for IKEv2
o Allow %any in phase 1
o Allow EAP-MSCHAPV2

Since the changes are splattered over several commits already
taken apart by other cherry-picks, just sync the files that
have not had their changes moved to stable/16.7 yet.

o Adapt to cipher output changes in OpenVPN 2.1.12
o Improve plugin probing for virtual interface
o Added missing IPv6 Tunnel Network for CSC

While here, remove the RAM disk mention, we can cope with this now.

(cherry picked from commit f85f3566)
(cherry picked from commit 02f9143e)
(cherry picked from commit 47988b58)

(cherry picked from commit 5ad7adc6)

(cherry picked from commit ffbb29e4)

Since we weaved the latter into the former, we can now get rid of
the transition code.  The behaviour doesn't change.

(cherry picked from commit 927f4e0e)
(cherry picked from commit 0b119652)

(cherry picked from commit 17b3374c)

(cherry picked from commit 6882250b)

(cherry picked from commit f88210b4)

* translation fixes (for example submit button)
* remove some not operators
* make short echo tags look more like a template

(cherry picked from commit d1e9265f)

(cherry picked from commit 7b59e10c)

The old script had a lot of unused code in it, either stuff that couldn't be configured from OPNsense or dead code.

(cherry picked from commit 9ba2b2f6)

(cherry picked from commit 0db74eff)

(cherry picked from commit bc2765ea)
(cherry picked from commit ac8eba7d)
(cherry picked from commit 87011deb)
(cherry picked from commit 5c6a2ef8)
(cherry picked from commit c782d9e8)
(cherry picked from commit 5497ae4e)
(cherry picked from commit 51aec445)
(cherry picked from commit 75e7e0e4)
(cherry picked from commit 2c25e3e3)
(cherry picked from commit dcd0e068)

(cherry picked from commit 15374ba7)

(cherry picked from commit c3daf44a)

(cherry picked from commit 9a117cd0)

(cherry picked from commit e6f5a191)

Reported by: Simon Brunet

(cherry picked from commit 5a21a07a)

(cherry picked from commit 9503d722)
(cherry picked from commit 69e28f84)
(cherry picked from commit 0cd0c895)
(cherry picked from commit 1334374b)
(cherry picked from commit d27cdb43)
(cherry picked from commit 2f5468ae)

(cherry picked from commit 1ccf6b45)

(cherry picked from commit d3d583ab)

Suggested by: @fabianfrz

(cherry picked from commit b218ce7d)