libeap: enable sha256
Bump release to turn on sha256
tok_type can never be -1
check gssEapRadiusAddAttr(REALM_NAME) return code
do not ignore sequenceCheck() return value
don't set major = GSS_S_FAILURE twice
zeroAndReleasePassword must be called with non-NULL buffer
gss_trailerlen = 0 not used
assert name non-NULL before dereferencing
gssHeaderLength redundantly initialized
take length of display_value, not value
Treat caCertificate as pem contents rather than pem filename
Correctly handle "ca-cert" in peerGetConfigBlob
Avoid double-free of bio. Better error code for ca cert parsing failure.
Treat caCertificate as base64-encoded DER rather than PEM

Openssl's pem parser is very picky and requires newlines.
Moonshot-webp eats newlines from the raw xml, requiring
hand-placed '&#10;' for successful parsing, which is
undersirable. So instead use mech_eap's base64Decode() to
convert caCertificate to DER.
Version 0.9.1
Register new RADIUS attributes
fix typo
Merge branch 'master' into debian
Merge in 0.9.1
new upstream release

* new upstream release
  - Includes support for CA certificates.