pfSense Plus RELEASE 26.03

This is a software maintenance and feature release introducing performance improvements, stronger security defaults, and usability enhancements:

• WebGUI performance optimizations:
  Significant improvements to WebGUI responsiveness and load times due to back-end code optimizations, resulting in a smoother administrative experience.
• System Patches package included by default:
  The System Patches package is now pre-installed, allowing administrators to easily apply recommended Netgate security fixes and hot patches between releases. Regular review and application of patches is advised.
• Stronger SSH cryptography (post-quantum readiness):
  Updated SSH daemon with modern key exchange, encryption, and MAC algorithms. Introduces post-quantum key exchange support while removing legacy and weaker algorithms.
• TLS certificate strength enforcement:
  TLS server certificates with weak parameters (e.g., RSA keys < 2048 bits) are deprecated. During upgrade, the system validates the GUI certificate and automatically regenerates it if it is expired, invalid, or non-compliant.
• Automatic TLS certificate renewal:
  Adds automatic renewal for self-signed certificates and those issued by an internal CA stored in the configuration. Enabled by default for the GUI certificate, ensuring ongoing compliance with current security standards without manual intervention.

These updates reinforce pfSense Plus as a secure, modern, and robust firewall and network edge platform for both on-premises and cloud environments.