Opnsense 23.7.4 released

This comes with some fixes to the new openVPN system, and route-gateway was added (a big oversight imo). More updates to wireguard and improvements have been added, and are still ongoing.

Here are the full patch notes:

<span style="color:#323232;">system: correctly set RFC 5424 on remote TLS system logging
</span><span style="color:#323232;">
</span><span style="color:#323232;">system: remove hasGateways() and write DHCP router option unconditionally
</span><span style="color:#323232;">
</span><span style="color:#323232;">system: avoid plugin system for gateways monitor status fetch
</span><span style="color:#323232;">
</span><span style="color:#323232;">system: remove passing unused ifconfig data to Gateways class on static pages
</span><span style="color:#323232;">
</span><span style="color:#323232;">system: remove passing unused ifconfig data on gateway monitor status fetch
</span><span style="color:#323232;">
</span><span style="color:#323232;">system: remove the unused "alert interval" option from the gateway configuration
</span><span style="color:#323232;">
</span><span style="color:#323232;">interfaces: calculate_ipv6_delegation_length() should take advanced and custom dhcp6c into account
</span><span style="color:#323232;">
</span><span style="color:#323232;">interfaces: teach ifctl to dump all files and its data for an interface
</span><span style="color:#323232;">
</span><span style="color:#323232;">interfaces: remove dead link/hint in GIF table
</span><span style="color:#323232;">
</span><span style="color:#323232;">interfaces: avoid duplicating $vfaces array
</span><span style="color:#323232;">
</span><span style="color:#323232;">interfaces: introduce interfaces_restart_by_device()
</span><span style="color:#323232;">
</span><span style="color:#323232;">firewall: remove old __empty__ options trick from shaper model
</span><span style="color:#323232;">
</span><span style="color:#323232;">firewall: update models for clarity
</span><span style="color:#323232;">
</span><span style="color:#323232;">firmware: update model for clarity
</span><span style="color:#323232;">
</span><span style="color:#323232;">ipsec: omit conditional authentication properties when not applicable on connections
</span><span style="color:#323232;">
</span><span style="color:#323232;">ipsec: fix key pair generator for secp256k1 EC and add properer naming to GUI (contributed by Manuel Faux)
</span><span style="color:#323232;">
</span><span style="color:#323232;">ipsec: allow the use of eap_id = %any in instances
</span><span style="color:#323232;">
</span><span style="color:#323232;">openvpn: fix certificate list for client export when optional CA specified (contributed by Manuel Faux)
</span><span style="color:#323232;">
</span><span style="color:#323232;">openvpn: add CARP VHID tracking for client instances
</span><span style="color:#323232;">
</span><span style="color:#323232;">openvpn: add tun-mtu/fragment/mssfix combo for instances
</span><span style="color:#323232;">
</span><span style="color:#323232;">openvpn: add "route-gateway" advanced option to CSO
</span><span style="color:#323232;">
</span><span style="color:#323232;">openvpn: use new File::file_put_contents() wrapper for instances
</span><span style="color:#323232;">
</span><span style="color:#323232;">openvpn: updated model and clarified "auth" default option
</span><span style="color:#323232;">
</span><span style="color:#323232;">mvc: remove "non-functional" hints from form input elements
</span><span style="color:#323232;">
</span><span style="color:#323232;">mvc: uppercase default label in BaseListField is more likely
</span><span style="color:#323232;">
</span><span style="color:#323232;">ui: add bytes format to standard formatters list
</span><span style="color:#323232;">
</span><span style="color:#323232;">plugins: os-ddclient 1.16[1]
</span><span style="color:#323232;">
</span><span style="color:#323232;">plugins: os-frr 1.36[2]
</span><span style="color:#323232;">
</span><span style="color:#323232;">plugins: os-wireguard 2.1[3]
</span><span style="color:#323232;">
</span><span style="color:#323232;">plugins: os-tinc 1.7 adds support for "StrictSubnets" variable (contributed by andrewhotlab)
</span><span style="color:#323232;">
</span><span style="color:#323232;">lang: update translations and add Polish
</span><span style="color:#323232;">
</span><span style="color:#323232;">src: bring back netmap tun(4) ethernet header emulation (contributed by Sunny Valley Networks)
</span><span style="color:#323232;">
</span><span style="color:#323232;">src: axgbe: gracefully handle i2c bus failures
</span><span style="color:#323232;">
</span><span style="color:#323232;">src: bnxt: do not restart on VLAN changes
</span><span style="color:#323232;">
</span><span style="color:#323232;">src: ice: do not restart on VLAN changes
</span><span style="color:#323232;">
</span><span style="color:#323232;">src: net: do not overwrite VLAN PCP
</span><span style="color:#323232;">
</span><span style="color:#323232;">src: net: remove VLAN metadata on PCP / VLAN encapsulation
</span><span style="color:#323232;">
</span><span style="color:#323232;">src: if_vlan: always default to 802.1
</span><span style="color:#323232;">
</span><span style="color:#323232;">src: iflib: fix panic during driver reload stress test
</span><span style="color:#323232;">
</span><span style="color:#323232;">src: iflib: fix white space and reduce some line lengths
</span><span style="color:#323232;">
</span><span style="color:#323232;">src: ixgbe: define IXGBE_LE32_TO_CPUS
</span><span style="color:#323232;">
</span><span style="color:#323232;">src: ixgbe: check for fw_recovery
</span><span style="color:#323232;">
</span><span style="color:#323232;">src: net80211: fail for unicast traffic without unicast key[4]
</span><span style="color:#323232;">
</span><span style="color:#323232;">src: pcib: allocate the memory BAR with the MSI-X table[5]
</span><span style="color:#323232;">
</span><span style="color:#323232;">ports: php 8.2.10[6]
</span><span style="color:#323232;">
</span><span style="color:#323232;">ports: python 3.9.18[7]
</span><span style="color:#323232;">
</span><span style="color:#323232;">ports: unbound 1.18.0[8]
</span>