libimcv: Add generic constructor for PA-TNC attributes
android: Fix PA-TNC construction based on data passed via JNI
tls: Check all bytes of the padding if they equal the padding length
tls: Fix a memory leak if AEAD encryption fails
tls: Fix an invalid free on CBC encryption failure
Request IF-M segmentation contract for TCG/PTS subtype
Exempt TCG/SEG attributes from unsupported case statement
Process TCG/PTS File Measurement attribute incrementally
Remove unneeded get_count() method
Version bump to 5.2.1
Enabled IKEv2 fragmentation in ipv6/net2net-ikev2 scenario
Increased fragment size to 1400 in ipv6/net2net-ikev1 scenario
ip-packet: Fix length in IPv6 header of generated packets
android: Change how features of VPN types are stored and checked
android: Add EAP-TLS VPN type to the GUI
android: Enable EAP-TLS plugin in the app
android: Handle EAP-TLS in Android service
android: Allow enumeration of untrusted certificates
android: Add support for signature schemes used by EAP-TLS
android: Use %any as AAA identity, but disable EAP-only authentication

Without verification of the identity we can't prevent a malicious user
with a valid certificate from impersonating the AAA server and thus the
VPN gateway.  So unless we make the AAA identity configurable we have to
prevent EAP-only authentication.