Unstable: 384.13-gnuton0_alpha5

Changes from the latest stable gnuton build (384.11_2-gnuton2):

• nano: updated to 4.2 (closes #303)
• openvpn: move openvpn-event script calling for server into an updown script
• openvpn: rework the updown.sh handling for OpenVPN clients
• webui: display hostnames on Classification page
• webui: re-enable option to extend TTL value
• others: fix installation of the two new updown scripts for OpenVPN
• webui: use client_functions's function for client dropdown list
• build: disable memaccess component for HND (got re-enabled in a recent GPL merge)
• wsdd: initial commit
• wsdd: add build recipes
• wsdd: implement Asus-specific code, enable build recipe
• rc: implement wsdd stop/start alongside Samba
• wsdd: generate ID from the kernel's boot-id instead of hashing the MAC (patch from OpenWRT)
• wsdd: implement -i parameter to provide a specific interface
• webui: replace proto filter field on the Classification page by a dropdown menu
• Updated documentation
• webui: only show RSA strength selector if server is not started
• ovpn: configurable allow/drop firewall policy for clients
• rc: fix parameter order when launching wsdd2
• rc: change default behaviour of resolv.conf to use ISP instead of local cache
• rc/shared: disable obsolete exec code
• rc: fix de88069
• Merge with GPL 384_45717
• Merged 45717 binary blobs for SDK7.14 devices
• Merged 45717 binary blobs for RT-AC68U
• Merged 45717 binary blobs for RT-AC86U
• webui: tweaked popup help for OpenVPN client's Inbound Firewall setting
• Merged 382_51636 binary blobs for RT-AC3200
• rc: kludge for RT-AC3200 building with 382 blobs
• httpd: revert RT-AC3200 web_hook blob to custom 384_xxxx version, as the 382 blob is no longer compatible with 384 GPL
• Updated documentation
• rc: allow experimental AiMesh toggle to survive factory default resets
• rc: revert broadcom.o blob for RT-AC86U to 45713 version - the 45717 version fails to link
• Merged 382_51634 binary blobs for RT-AC87U (minus incompatible httpd/web_hook.o), and updated rc kludges for that model
• Cleanup accidentally committed .orig files
• httpd: randomize serial number of router-generated SSL certificates
• bridge-utils: fix hnd clean
• webui: remove duplicate references to ipv6_dhcp6c_release
• curl: updated to 7.65.0
• webui: allow usb idle values up to 9999 (nvram has an enforced limit of four chars for that setting)
• rc: shared: add missing function, and re-merge RT-AC86U's rc/broadcom.o binary blob from 45717
• wsdd2: fix listening on specified interface
• wsdd2: skip bonding slaves and bridged interfaces
• curl: revert 7.65.0 merge, as it doesn't work properly.
• openssl: update OpenSSL 1.0 to 1.0.2s
• openssl11: Update to OpenSSL 1.1.1c.
• Updated documentation
• rc: give ntpd some time to sync clock on wanup
• curl: merge 7.65.0 back
• curl: tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
• Updated documentation
• networkmap: provide separate binaries for the RT-AC87U
• shared: implement kludge on model enum for 382 models
• bwdpi: provide separate binaries for the RT-AC87U
• rc: give at least 30 secs instead of only 20 secs before enforcing a system reset during reboot
• netool: enable Netool daemon but with the BB traceroute applet for non-ND models
• miniupnpd: updated to 20190604 (git 765156b)
• rc: remove unnecessary log message from erp_monitor when not in European region
• rc: fix memory leak in erp_monitor
• rc: always set log facility to ntpd for consistency with other log entries
• Updated documentation
• webui: remove warning about SMBv1, since unlike stock firmware we support SMBv2
• netool: enable netool for the RT-AC87U - missing in 588ab6e (closes #316)
• rc: openvpn: remove waits for ntp sync in openvpn code since wanup already does it before starting OpenVPN instances.
• rc: reduce max wait for ntp sync on wanup from 51 to 26 secs
• rc: re-add variable to start_ovpn_*() funtions that is required
• webui: fix Network Analysis symlinks location for RT-AC5300
• rc: firewall: define VUPNP and PUPNP chains in default nat_rules
• openssl11: The SHA256 is not a mandatory digest for DSA.
• openssl11: issue-8998: Ensure that the alert is generated and reaches the remote
• openssl11: Revert the DEVRANDOM_WAIT feature
• rc: only start ddns and Openvpn in wan_up() if ntpd is set, with a small max wait period, and start both of these on the first ntpd sync event
• rc: remove unnecessary linking with libbcmcrypto
• Merge remote-tracking branch 'origin/master' into mainline
• curl: update to 7.65.1
• Merge remote-tracking branch 'origin/master' into mainline
• rc: further tweaks to ntpd handling on wanup()
• Updated documentation
• Migrate to the new dedicated domain name; update to the new fwupdate file structure
• webui: remove references to SMBv1 FAQ
• kernel 2.6.36: improve sack handling and resource usage
• kernel 4.1: improve sack handling and resource usage
• kernel 2.6.36: fix commit dbd4abf
• Merge RT-AC3200 binary blobs from GPL 382_51640
• rc: backport start_lan_port() fix for RT-AC87U from GPL 382-51640
• Updated documentation
• Updated documentation
• Merged asus merlin code
• dnsmasq: add openssl backend for dnssec, default is nettle
• dnsmasq: skip gost validation with nettle, it's not supported anyway
• rc: disable LLMNR support in wsdd2
• webui: fix description for Continous Ping function
• webui: make get_helplink() return link to Asuswrt-Merlin website instead of Asus support
• webui: fix Firmware Update page when firmware scheduled checks are disabled
• webui: hide ping count field when using continuous ping on Network Analysis
• webui: use a standard cssRules (instead of rules) property of CSSStyleSheet (#328)
• httpd: fix detection of whether QTN wifi is enabled or not in get_wifi_clients()
• Updated documentation
• config: fix too old config DNSSEC rules
• config: reflect rule change, let it be disabled by default
• rc: firewall: only enable FTP WAN access if explicitely enabled while using LB DualWAN or IPTV
• dnsmasq: fix dnssec with nettle 3.5 and openssl
• Updated RT-AC87U wireless driver to 382_51640 release
• Updated documentation
• rc: start jffs2 before running config_format_compatibility_handler(), as it might need access to /jffs/nvram
• rc: Split static lease hostnames into their own nvram; implement conversion code
• snooper: fix crash with more than 32 hosts
• strongswan: import 5.7.2 from git with proper .gitignores and missed files
• strongswan: drop asus hacks for 64-bit build
• strongswan: follow general style for 64-bit align
• strongswan: add support for ChaCha20-Poly1305
• rc: move dhcp ntp options into proper place
• Updated documentation
• dnsmasq: dhcpv6: add ntp server option support
• rc: webui: rom: Rework firmware version check implementation, for cfg_mnt compatibility
• webui: fix version string for local router on the upgrade page
• dnsmasq: enable OpenSSL support for dnssec
• Updated documentation
• rc: cwebs_state_info_am check was done in the wrong version of auto_firmware_check()
• dnsmasq: fix segfault at run time when using OpenSSL on uclibc platform
• rc: fix truncated entries when converting dnsfilter or dhcp static leases to new format
• lldpd: log custom TLV add/remove at the debug level instead of info
• rc: webui: Remove amas_force flag
• webui: disable AiMesh Node support
• Revert "dnsmasq: enable OpenSSL support for dnssec"
• dnssec: remove target.mak option, and enable it (with OpenSSL support) in config_base
• webui: enhance "Firmware Update" button location in AiMesh Router mode
• rc: fix missing default route when in non-router mode
• webui: Make check_AiMesh_fw_version() use regexp instead of iterating an array
• webui: handle displaying new release notes from Merlin AiMesh nodes
• Revert "webui: disable AiMesh Node support"
• httpd: rewrite code that parse arp/lease lists for wireless clients
• webui: display properly formatted new firmware version string during QiS
• Updated documentation
• Update vpnrouting.sh
• webui: relabeled Internet Traffic Redirection option to more accurately describe what it does
• dnsmasq: fix wrong return code from explore_rrset() with some errors.
• Change default DynDNS IP server to the .com TLD, since .org cannot be resolved in China (closes #338)
• webui: use networkmap name field instead of the no-longer existing hostname field
• webui: filter on the correct field when filtering by destination IP on Classification page
• webui: rename Local and Remote fields for Source and Destination on the Classification page, which is more accurate
• dnsmasq: Fix wrong return code from explore_rrset() with some errors
• curl: update to 7.65.3
• Updated documentation
• webui: display menus earlier on IPTraffic page to ensure initial form values are properly set as per cookies
• kernel: tcp: refine memory limit test in tcp_fragment()
• curl: revert previous gitignore file, as the new one was incomplete
• openvpn: quoting parameters before passing them to a script (like openvpn-event) will break argument parsing by that script
• webui: fix display of user permissions on FTP page
• Updated documentation
• :Merge tag '384.13-mainline' into v384.13_test1