- certificate - allow to import certificate with DNS name constraint
- certificate - require CRL presence when using “crl-use=yes” setting;
- conntrack - fixed “active-ipv4” property;
- console - added “:convert” command;
- dhcp-server - fixed setting “bootp-lease-time=lease-time”;
- ike2 - log “reply ignored” as non-debug log message;
- modem - added initial support for BG77 modem DFOTA firmware update;
- modem - changed Quectel EC25 portmap to expose DM (diag port), DM channel=0, GPS channel=1;
- ovpn - do not try to use the “bridge” setting from PPP/Profile, if the OVPN server is used in IP mode (introduced in v7.10);
- ovpn - improved key renegotiation process;
- ovpn - include “connect-retry 1” and “reneg-sec” parameters into the OVPN configuration export file;
- routerboot - increased etherboot bootp timeout to 40s on MIPSBE and MMIPS devices (“/system routerboard upgrade” required);
- ssh - fixed private key import (introduced in v7.9);
- user - added “sensitive” policy requirement for SSH key and certificate export;
- webfig - fixed gray-out italic font for entries after enable
2 points
Looks like it almost ready for RC