Skip to content

Conversation

@jaredhendrickson13
Copy link
Member

@jaredhendrickson13 jaredhendrickson13 commented May 31, 2025

New

Changes

  • Removes support for pfSense CE 2.7.2 and pfSense Plus 24.03
  • Potential breaking change: OpenVPNServer remove_route field has been replaced with remove_options
    • remove_options is an array of strings and must match redefined choices. Refer to the API documentation for more info.

Fixes

jaredhendrickson13 and others added 30 commits April 7, 2025 20:43
This allow to properly set conditions for 'password'
Plural (Many) Endpoint added.
create/delete FreeRADIUS user (initial commit)
pfSense 2.8.0 adds a new backend GatewaysCache that is not automatically kept up-to-date. This means there can be a conflict between the current configuration and the cache when the routing subsystem is applied which can result in duplicate or unintentional routing changes. This change clears the cache before we apply routing changes to ensure its always up-to-date with the config
In pfSense 2.8.0, password hashes generated by local_user_set_password() are now nested under an 'item' key. This change ensures we look for the hash at that location.
…move_options

In pfSense 2.8.0. remove_route is replaced with a more general remove_options with additional push-remove options
In pfSense 2.8.0, the OpenVPNClientSpecificOverride::push_reset field is represented as empty string when true, and null when false (default)
…sPool kea tests

These fields are currently not available for Kea, but remain for ISC DHCP
This fixes an issue that would silently cause writes to fail if there were extra slashes in the config path
This updates the model to be compatible with changes to pfSense's cert_renew() function introduced in pfSense 2.8.0. This fixes an issue that would cause a fatal configuration overwrite on pfSense 2.8.0.
…ead of certctl

In pfSense 2.8.0, it takes quite a lot of time for the system to rehash trusted CAs via certctl. But we can tell if a certificate is trusted by checking for the CA in /usr/local/etc/ssl/certs/ instead"
This updates the model to be compatible with changes to pfSense's cert_renew() function introduced in pfSense 2.8.0. This fixes an issue that would cause a fatal configuration overwrite on pfSense 2.8.0.
This updates the model to be compatible with changes to pfSense's crl_update() function introduced in pfSense 2.8.0.
vitspec99 and others added 21 commits May 30, 2025 14:43
This should help prevent a potential conflicts with other repo related tasks on the system.
Before, we were neglecting to cleanup some dynamic files like forms, endpoints, caches and schemas. This change includes de-install tasks to handle cleanup of these files. This also improves the order of de-installation tasks to avoid package de-install warnings about missing files due to improper removal order.
Now that CE is on FreeBSD-15.0-CURRENT this should be the default for all builds
@jaredhendrickson13 jaredhendrickson13 merged commit 10c9a16 into master Jun 1, 2025
11 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

3 participants