Move to SHA256.  SHA1 is deprecated
Do OCSP checks only if we got issuer_cert.  Closes #756
Lock thread_pool.wait_mutex before forking to avoid a race condition between rad_fork, rad_waitpid and reap_children.

There is a race condition that can occur under high load where a child is reaped before being added to the waiters list.
Merge pull request #824 from jrouzierinverse/v2.x.x

Lock thread_pool.wait_mutex before forking to avoid a race condition bet...
Time zone is 2 octets, not "integer"
Note recent changes
Allow all UTF-8 characters
Note recent changes
Allow TLS 1.1 and 1.2
Note TLS 1.1 and 1.2
Remove xcodebuild stuff, it's not required
Backport udpfromto IPv6 fixes from v3.0.x
Allow for selective disabling of TLSv1.1 and TLSv1.2
Make tlsv1.2 and tlsv1.2 conditional on having them
Note recent changes
Acct-Session-Time doesn't have to exist
Note for 2.2.6
We should have bumped to 2.2.6 a while ago
Bump version number here, too
Bump in preparation for 2.2.7