(cherry picked from commit 16a876d0)
(cherry picked from commit 642cbe1c)
(cherry picked from commit 2d9e6004)

(cherry picked from commit 528b2168)

(cherry picked from commit bcb39d0c)

Instead of injecting dynamic gateways after reading the config, we will
inject them before instead.  This gives us the opportinuity to check
for matches and remove disabled gateways, finally addressing #933 in a
sane way.

(cherry picked from commit 125808e2)

(cherry picked from commit c0c56778)
(cherry picked from commit 546a7157)

(cherry picked from commit 6ddffae2)

(cherry picked from commit 3336c43d)

(cherry picked from commit e584db96)

(cherry picked from commit f08747e3)

(cherry picked from commit 40c8dc03)
(cherry picked from commit d376cfdf)
(cherry picked from commit 5076ad19)

(cherry picked from commit 5382c314)

(cherry picked from commit e9cb6519)

(cherry picked from commit fcafea09)

(cherry picked from commit aaa72bb9)

(cherry picked from commit 77578606)

(cherry picked from commit 8fd415a9)

(cherry picked from commit 21b428d3)

(cherry picked from commit ae4dfa67)

(cherry picked from commit 2b026db8)

(firmware) move tooltip to button, apply tooltip for dynamic generated buttons. closes https://github.com/opnsense/core/issues/830

(cherry picked from commit 02c2b33c)
(cherry picked from commit 39c780e5)

(cherry picked from commit e15bcea2)

(cherry picked from commit d9a0cbf1)

(cherry picked from commit 5399370d)

o Mirror/flavour settings now in firmware section
o Proper locking layer to prevent parallel invokes
o Can reattach to running background update
o Can even GUI-attach to cron job or console update

(cherry picked from commit 70998ed9)
(cherry picked from commit 2e10248c)
(cherry picked from commit 5a3a3a84)
(cherry picked from commit d2471552)
(cherry picked from commit 96be50d4)
(cherry picked from commit 9f7e1b89)
(cherry picked from commit 2fe4dce1)
(cherry picked from commit 419d6d72)
(cherry picked from commit eb7a9a31)
(cherry picked from commit 4dde2392)
(cherry picked from commit 951a2984)
(cherry picked from commit b891dc9f)
(cherry picked from commit d46366d2)
(cherry picked from commit 3201c221)

(cherry picked from commit d0f6c169)

(cherry picked from commit 2e5ab318)

(cherry picked from commit 2e6f92f6)
(cherry picked from commit 53e87f7a)
(cherry picked from commit 398ae5bb)
(cherry picked from commit 845b96d4)

(cherry picked from commit ebe341ec)

PR:           https://github.com/opnsense/core/issues/1004
Sponsored by: OSNet.eu -- https://www.osnet.eu/

(cherry picked from commit 449f506b)
(cherry picked from commit 304e2c3d)

Geez, PHP won't really tell if decode failed so we go full circle.

(cherry picked from commit 06ababd8)

(cherry picked from commit 17f656da)

While there zap a note that is obvious, because there is no button
and a text label saying what facility uses the cert...

(cherry picked from commit fb8c8b44)

Further proof that all of the system should use the plugin system,
as the dependencies are going to be unmanageable in the long run.
As soon as there is a new base service with its own include file
its definition will be missing.

(cherry picked from commit f441eae5)

(cherry picked from commit ae6b495e)
(cherry picked from commit 4dde1f08)
(cherry picked from commit e287db60)

(cherry picked from commit 5fa09cd4)

(cherry picked from commit 43f61b07)

(cherry picked from commit a4bb9cd5)

(cherry picked from commit cd724c2b)

(cherry picked from commit c43fcea6)
(cherry picked from commit 7086992b)
(cherry picked from commit fffcede4)
(cherry picked from commit 726e4c05)
(cherry picked from commit 5f14ec36)
(cherry picked from commit 0e916fb2)
(cherry picked from commit 61192fce)
(cherry picked from commit 741bae45)
(cherry picked from commit d5654b79)
(cherry picked from commit b0250b97)
(cherry picked from commit eaabe7f4)
(cherry picked from commit 26fbbb0f)
(cherry picked from commit 409a032c)
(cherry picked from commit ae7f0008)

(cherry picked from commit 41430381)
(cherry picked from commit 5937d16c)