Unstable: 384.14_beta3-gnuton0_alpha1

Changes from the latest stable gnuton build (384.12-gnuton1):

• dnsmasq: add openssl backend for dnssec, default is nettle
• dnsmasq: skip gost validation with nettle, it's not supported anyway
• rc: disable LLMNR support in wsdd2
• webui: fix description for Continous Ping function
• webui: make get_helplink() return link to Asuswrt-Merlin website instead of Asus support
• webui: fix Firmware Update page when firmware scheduled checks are disabled
• webui: hide ping count field when using continuous ping on Network Analysis
• webui: use a standard cssRules (instead of rules) property of CSSStyleSheet (#328)
• httpd: fix detection of whether QTN wifi is enabled or not in get_wifi_clients()
• Updated documentation
• config: fix too old config DNSSEC rules
• config: reflect rule change, let it be disabled by default
• rc: firewall: only enable FTP WAN access if explicitely enabled while using LB DualWAN or IPTV
• dnsmasq: fix dnssec with nettle 3.5 and openssl
• Updated RT-AC87U wireless driver to 382_51640 release
• Updated documentation
• rc: start jffs2 before running config_format_compatibility_handler(), as it might need access to /jffs/nvram
• rc: Split static lease hostnames into their own nvram; implement conversion code
• snooper: fix crash with more than 32 hosts
• strongswan: import 5.7.2 from git with proper .gitignores and missed files
• strongswan: drop asus hacks for 64-bit build
• strongswan: follow general style for 64-bit align
• strongswan: add support for ChaCha20-Poly1305
• rc: move dhcp ntp options into proper place
• Updated documentation
• dnsmasq: dhcpv6: add ntp server option support
• rc: webui: rom: Rework firmware version check implementation, for cfg_mnt compatibility
• webui: fix version string for local router on the upgrade page
• dnsmasq: enable OpenSSL support for dnssec
• Updated documentation
• rc: cwebs_state_info_am check was done in the wrong version of auto_firmware_check()
• dnsmasq: fix segfault at run time when using OpenSSL on uclibc platform
• rc: fix truncated entries when converting dnsfilter or dhcp static leases to new format
• lldpd: log custom TLV add/remove at the debug level instead of info
• rc: webui: Remove amas_force flag
• webui: disable AiMesh Node support
• Revert "dnsmasq: enable OpenSSL support for dnssec"
• dnssec: remove target.mak option, and enable it (with OpenSSL support) in config_base
• webui: enhance "Firmware Update" button location in AiMesh Router mode
• rc: fix missing default route when in non-router mode
• webui: Make check_AiMesh_fw_version() use regexp instead of iterating an array
• webui: handle displaying new release notes from Merlin AiMesh nodes
• Revert "webui: disable AiMesh Node support"
• httpd: rewrite code that parse arp/lease lists for wireless clients
• webui: display properly formatted new firmware version string during QiS
• Updated documentation
• Update vpnrouting.sh
• webui: relabeled Internet Traffic Redirection option to more accurately describe what it does
• dnsmasq: fix wrong return code from explore_rrset() with some errors.
• Change default DynDNS IP server to the .com TLD, since .org cannot be resolved in China (closes #338)
• webui: use networkmap name field instead of the no-longer existing hostname field
• webui: filter on the correct field when filtering by destination IP on Classification page
• webui: rename Local and Remote fields for Source and Destination on the Classification page, which is more accurate
• dnsmasq: Fix wrong return code from explore_rrset() with some errors
• curl: update to 7.65.3
• Updated documentation
• webui: display menus earlier on IPTraffic page to ensure initial form values are properly set as per cookies
• kernel: tcp: refine memory limit test in tcp_fragment()
• curl: revert previous gitignore file, as the new one was incomplete
• openvpn: quoting parameters before passing them to a script (like openvpn-event) will break argument parsing by that script
• webui: fix display of user permissions on FTP page
• Updated documentation
• rc: revert start_lan_port() backport from upstream which broke AP mode on the RT-AC87U.
• Updated documentation
• build: update copy-prebuilt script
• build: update build-all script, adding branch support
• webui: update OUI database to 2018-08-17 version
• webui: re-implement notification if free nvram < 3000 bytes
• rc: log unrecognized events to syslog
• build: change default toolchain symlink to be relative
• webui: fix typo
• miniupnpd: updated to 20190824
• Updated documentation
• httpd: limit SSL certificate to 2 years if clock is accurate
• httpd: add "TLS Web Server Authentication" to certificate's extended attributes
• dnsmasq: update to 2.80-67-g5a91334
• webui: ensure that YandexDNS is always disabled at the webui level (closes #347)
• webui: do not report new firmware availability during QIS since we lack liveupdate capabilities
• Updated documentation
• webui: fix ouiDB broken by c5f5f07
• iproute2: fix exe location on HND to match that of other platforms; remove related dead code in rc/qos.c.
• Merge with GPL 384_81044 (from GT-AC2900)
• Merge with GPL 384_81049 (from RT-AC68U)
• Merge SDK + binary blobs from 81049 for RT-AC68U
• webui: re-based DHCP web page on upstream code (with the new DNS field)
• libvpn: updated write_ovpn_dns() to match 81049; implemented get_ovpn_status() and get_ovpn_errno() which are new in 81049
• openvpn: implement support for verify-x509-name with "subject" or "name-prefix" types ("name" was already supported)
• webui: add bg class to non-Asus pages, to natch with 81049
• samba36: harmonized root Makefile with Asus's
• rc: shared: fix build warn error due to duplicate modprobe define
• rom: harmonized certs location in source tree with upstream
• openssl: harmonized recipes with upstream
• webui: updated Temperature page
• rc: shared: re-implemented LED control.
• rc: update state/error report for OpenVPN clients and servers
• libdisk: disable Asus's unfinished handling of SMB protocol version
• rc: remove call to set LED_WAN_NORMAL for non-HND models in setup_leds()
• rc: wrong variable used to report bitsize of rejected OVPN server DH
• Revert "rc: wrong variable used to report bitsize of rejected OVPN server DH" - should be done on master branch
• rc: wrong variable used to report bitsize of rejected OVPN server DH
• faketc: reimplement the faketc script as a C program
• iproute2: fix ip location on HND for OpenVPN; fix cleanup recipe
• rc: openvpn: re-implement establishing running state the way it used to be before 81049
• curl: updated to 7.66.0; updated install recipe for library version 4.6.0
• curl: re-enable smtp protocol (was disabled when we merged the 81049 build recipes)
• openssl-1.0: update to 1.0.2t
• openssl-1.1: move folder to openssl-1.1 to match with upstream 8104x
• openssl: fix folder layout ahead of master merge
• openssl: temporarily revert folder layout to pre-8104x, for easier merges
• openssl-1.1: update to 1.1.1d
• dnsmasq: update to 2.80-74-gdefd6b1
• openssl: move 1.0 folder back to its correct location, to be in-sync with other branches
• Implement option to prevent Firefox's automatic usage of DoH
• Updated documentation
• Removed some unused components: busybox-1.24.1, ez-ipupdate. mt-daapd-svn-1696, openssl-1.0.0q, ffmpeg-0.5, pppd_245 and Beceem_BCMS250_arm
• nano: update to 4.4 (closes #323)
• webui: fix dnsfilter table layout
• Merge with GPL 384_81116 + binary blobs (RT-AC88U)
• webui: fix Asus's mixing of sshd_port and sshd_port_x introduced in 81116
• httpd: kludge to allow RT-AC68U to build with 81116 GPL
• Merge binary blobs from 81116 for RT-AC3100
• Merge SDK + binary blobs from 81049 for RT-AC86U
• httpd: implement RT-AC86U kludge for set_fw_path.cgi
• build: fix truncated HND build profile from commit679c8b597610ca0ab0e4265dbefbd3a2d0526fd2
• rc: implement RT-AC86U kludge for hnd_set_hwstp() (requires 81116 blobs)
• build: fix wlcsm location for miniupnpd recipe
• nano: commit missing files excluded by gitignore
• Updated documentation
• webui: add missing semicolon
• webui: re-add DHCP settings lost when the page was re-implemented
• webui: remove leftover field from Asus's 811xx sshd_port mixup
• ssl: update root certificates to October 9th 2019 version
• webui: adjust allowed port ranges and displayed warnings on the System page.
• webui: sort the DHCP static list even if no cookie is found, otherwise no list is displayed
• build: revert OpenSSL-1.0 build recipes to pre-810xx
• busybox: enable split applet, for uniformity with HND platform
• webui: store OpenVPN Server custom clientlist info even if server is disabled
• webui: identify DHCP's first DNS server as such
• rc: firewall: better detection of EUI64 addresses; add missing support in Dual WAN LB / Multicast IPTV modes
• webui: allow empty local IP for IPv6 firewall rule
• Updated documentation
• openvpn: updated to 2.4.8
• webui: add IPv6 support to Netool webui
• Updated documentation
• libdisk: code cleanup
• dnsmasq: update to 2.80-93-g6ebdc95
• kernel41: disable debug logging left in the bcmmcast module by Asus
• Updated documentation
• Merge upstream tag '384.14-beta1-mainline' into dsl-ac68u
• buildfix: httpd/web.c has been checked out from tags/384.13-beta1-mainline
• buildfix: set_fw_path.cgi not available for DSL-AC68U as for RT
• buildfix: do not threat warning as errors for router
• dsl-ac68u: Prebuild imported from GPL_DSL-AC68U_3.0.0.4.384.81140
• Revert "dnsmasq: update to 2.80-93-g6ebdc95"
• rc: tell inadyn to accept any SSL cert when using Asus DDNS
• inadyn: minor logging changes to Asus DDNS pplugin
• rc: inadyn: always force AsusDDNS updates on LE-enabled build
• Merge with GPL 384_81351 + binary blobs (RT-AC86U)
• Merged RT-AC68U binary blobs + SDK from 384_81351
• rc: remove obsolete conn_diag.o blob
• rc: migrate AP hostname from computer_name to lan_hostname
• Updated documentation
• rc: silence a few modprobe failures (these either do not exist or are built-in)
• rc: ipv6 ns drop checking wrong nvram for dualwan/multiiptv builds
• socat: that is one fat cat, put him on a diet by removing unused features
• Updated documentation
• Merged RMerl 384.14-beta2-mainline
• buildfix: Backported rc/prebuild/DSL-AC68U/tcode_brcm.o from RT-AC86U since wl_disband5grp symbol was required for building
• Merge RT-AC5300 binary blobs from 384_81219
• webui: replace broken isPortConflict() with new function; added missing pwrsave code on System page
• webui: rc: harmonize max ntp server length with upstream, and ensure (legacy) ntp code has a matching buffer size
• Restore generic ARM prebuilts from 384_81351, which were accidentally downgraded by the RT-AC5300 81219 component merge in commit 19f7309
• inadyn: switch Asus DDNS server to ns1.asuscomm.com since their server certificate is missing the nwsrv-ns1.asus.com SAN; re-enable certificate validation when updating an Asus DDNS account
• Updated documentation
• Merged in GPL_DSL-AC68U_3.0.0.4.384.81727-g7c23ae8 prebuilds
• dnsmasq: update to 2.80-95-g1aef66b
• rp-l2tp: fix server route can't be added w/o ifname
• kernel: backport 81351 kernel fixes to L2TP to the sdk7114 kernel
• kernel: backport 81351 kernel fixes to L2TP to the sdk7.x kernel
• openvpn: do not run openvpn-event if custom scripts are disabled
• webui: update popup help for local DNS queries to match the current default behaviour
• webui: fix malformed Certificate label on DDNS page
• Updated documentation
• inadyn: re-disable cert validation for AsusDDNS - their server is once again using an expired certificate
• Merge tag '384.14-beta3-mainline' into 384.14_beta3