(cherry picked from commit 51ad932c)

PR: https://forum.opnsense.org/index.php?topic=3305
(cherry picked from commit 6c0c6b6b)

(proxy) move acl part to separate file and add option for custom templates, closes https://github.com/opnsense/core/issues/802

(cherry picked from commit 6b88fe1f)

(cherry picked from commit 45cdeef9)

(cherry picked from commit 5c48a769)

(cherry picked from commit 00f3e345)

(cherry picked from commit 41b05365)

(cherry picked from commit 365afd1b)
(cherry picked from commit 76d9190b)

(cherry picked from commit 16a876d0)
(cherry picked from commit 642cbe1c)
(cherry picked from commit 2d9e6004)

(cherry picked from commit 528b2168)

(cherry picked from commit bcb39d0c)

Instead of injecting dynamic gateways after reading the config, we will
inject them before instead.  This gives us the opportinuity to check
for matches and remove disabled gateways, finally addressing #933 in a
sane way.

(cherry picked from commit 125808e2)

(cherry picked from commit c0c56778)
(cherry picked from commit 546a7157)

(cherry picked from commit 6ddffae2)

(cherry picked from commit 3336c43d)

(cherry picked from commit e584db96)

(cherry picked from commit f08747e3)

(cherry picked from commit 40c8dc03)
(cherry picked from commit d376cfdf)
(cherry picked from commit 5076ad19)

(cherry picked from commit 5382c314)

(cherry picked from commit e9cb6519)

(cherry picked from commit fcafea09)

(cherry picked from commit aaa72bb9)

(cherry picked from commit 77578606)

(cherry picked from commit 8fd415a9)

(cherry picked from commit 21b428d3)

(cherry picked from commit ae4dfa67)

(cherry picked from commit 2b026db8)

(firmware) move tooltip to button, apply tooltip for dynamic generated buttons. closes https://github.com/opnsense/core/issues/830

(cherry picked from commit 02c2b33c)
(cherry picked from commit 39c780e5)

(cherry picked from commit e15bcea2)

(cherry picked from commit d9a0cbf1)

(cherry picked from commit 5399370d)

o Mirror/flavour settings now in firmware section
o Proper locking layer to prevent parallel invokes
o Can reattach to running background update
o Can even GUI-attach to cron job or console update

(cherry picked from commit 70998ed9)
(cherry picked from commit 2e10248c)
(cherry picked from commit 5a3a3a84)
(cherry picked from commit d2471552)
(cherry picked from commit 96be50d4)
(cherry picked from commit 9f7e1b89)
(cherry picked from commit 2fe4dce1)
(cherry picked from commit 419d6d72)
(cherry picked from commit eb7a9a31)
(cherry picked from commit 4dde2392)
(cherry picked from commit 951a2984)
(cherry picked from commit b891dc9f)
(cherry picked from commit d46366d2)
(cherry picked from commit 3201c221)

(cherry picked from commit d0f6c169)

(cherry picked from commit 2e5ab318)

(cherry picked from commit 2e6f92f6)
(cherry picked from commit 53e87f7a)
(cherry picked from commit 398ae5bb)
(cherry picked from commit 845b96d4)

(cherry picked from commit ebe341ec)

PR:           https://github.com/opnsense/core/issues/1004
Sponsored by: OSNet.eu -- https://www.osnet.eu/

(cherry picked from commit 449f506b)
(cherry picked from commit 304e2c3d)

Geez, PHP won't really tell if decode failed so we go full circle.

(cherry picked from commit 06ababd8)

(cherry picked from commit 17f656da)

While there zap a note that is obvious, because there is no button
and a text label saying what facility uses the cert...

(cherry picked from commit fb8c8b44)