* add the Aes128 and Aes256 profiles
* Aes profies were tested on IoP workshop against Ascolab, Softing, Matrikon, Milo, ProSys and others
* Pss padding is not supported on all platforms, so autodetect if it is supported and filter out Aes256 if not
* not a breaking change: not specifying the SecurityProfileUri in the config xml will automatically add all supported profiles but not deprecated profiles (e.g. Basic256Sha256, Aes128, Aes256). Aes256 is only added if the platform supports Pss padding. This will simplify the maintenance of config xml, since automatically all supported and secure profiles are exposed.
* Fix for Mantis #4231. Refuse to use untrusted certificates to encrypt user identity tokens sent to servers.
* Deprecated security policies removed from default server config.xml files.
- add helper batch files to start / stop all apps
- distribute ports to be able to run all apps at the same time
- fix config files
- fix csproj to include libuv.dll for kestrel servers
- fix race condition in https listener
* enable sha256 in ref server and fix cert validation check 038
* fix localisation issue in authority key parser
* IOP Workshop: ref server doesn't set source timestamp
* Fix localisation issue with cert extension parsing
* fix exception when issuer cert has no auth key serial number/issuer
- create self signed cert on first start (kudos to bouncy castle)
- fix path handling in many areas,
- ./ or ../ is treated as rooted dir
- special %LocalFolder% for UWP apps to allow to write certs in app temp storage
- all batch helpers to create certs removed