* Fix a typo mismatch in /etc/inc/dyndns.class for CloudFlare URL entry.
cherry pic from 'hotfix/3347-Certificate_Authority_SAN_names_not_working':

bugfix #3347: Certificate Authority SAN names not working in 2.1

subjectAltName can be set _only_ via configuration file - created three extra sections in openssl.cnf to use in case of existing subjectAltName.

Unfortunately it is not possible to assign empty value to subjectAltName in openssl.cnf
fix #3515
use pgrep here instead, previous way could wrongly show SSH as enabled where it isn't.
delete the dhcpd.pid file before starting dhcpd. Fixes bug where on rare occasions a stale PID file could prevent dhcpd from starting until it's manually deleted.
pgrep parameters are out of order and it also needs -a to find sshd. While I'm here, simplify sh syntax and prevent noise to be printed if pid file doesn't exist
Take virtual IPs into consideration for automatic outbound NAT rules, it should now fix #983
fix typo
move if/else to switch for readability
Merge pull request #1265 from CharlieMarshall/switch
Remove 'reject' action from filter logs since reject and block are the same on logs, it should fix #3825
fix display of traffic graph
Merge pull request #1267 from CharlieMarshall/fixTrafficGraph
Fix #3807:

* When changing a pre existing VIP, use previous configured interface
  for checking, this fixes the issue that happens when you try to change
  a VIP to a new interface.
* Use the right interface name, only carp uses _vipN suffix
improve look of gateways widget
Alias name cannot have more than 31 chars, add maxlength here just as an extra check. Ticket #3827
Fix phase2 removal, p2index points to unique ide and not to array index
Fix indent whitespaces
Merge pull request #1255 from leleobhz/master
fix typo