• certificate - allow to import certificate with DNS name constraint
  • certificate - require CRL presence when using “crl-use=yes” setting;
  • conntrack - fixed “active-ipv4” property;
  • console - added “:convert” command;
  • dhcp-server - fixed setting “bootp-lease-time=lease-time”;
  • ike2 - log “reply ignored” as non-debug log message;
  • modem - added initial support for BG77 modem DFOTA firmware update;
  • modem - changed Quectel EC25 portmap to expose DM (diag port), DM channel=0, GPS channel=1;
  • ovpn - do not try to use the “bridge” setting from PPP/Profile, if the OVPN server is used in IP mode (introduced in v7.10);
  • ovpn - improved key renegotiation process;
  • ovpn - include “connect-retry 1” and “reneg-sec” parameters into the OVPN configuration export file;
  • routerboot - increased etherboot bootp timeout to 40s on MIPSBE and MMIPS devices (“/system routerboard upgrade” required);
  • ssh - fixed private key import (introduced in v7.9);
  • user - added “sensitive” policy requirement for SSH key and certificate export;
  • webfig - fixed gray-out italic font for entries after enable
  • @rayman30OPM
    link
    English
    211 months ago

    Looks like it almost ready for RC