* Removed the Private Tunnel section. The Private Tunnel app can be downloaded from the App Store separately
* Improved connection stability when device is in sleep mode
* Improved error messages during profile import and connection attempts
* Improved security by saving profile passwords in System Security storage
* Changed timeout logic when network is unavailable
* Fixed usage of basic authentication for proxies
* Fixed the ‘AES-CBC cipher algorithm’ setting to help connect to legacy servers
* Other various connectivity fixes

* Added Data Policy Agreement
* Added "Certificates" screen with the possibility to remove external certs
* Removed outdated "Network State detection" setting and enabled it by default
* Increased max length of inputs - username, hostname, etc.
* Added missed labels for Voice Over
* Fixed iOS 12 connectivity issues
* Fixed 'high battery usage' issue by reducing speed stats frequency. Now Speed Chart shows data with 10 sec interval
* Allowed empty password for certificates
* Added custom error messages for connection attempt without network available or proper certificate
* Disabled "Compression" by default (because it is insecure)
* Changed icons for "Edit Profile" and "Edit Proxy" buttons, and improved UX by increasing touch area
* Small UI improvements

Changes from 1.2.8 to 1.2.9:
* show MD5 warning pop-up only once per VPN session
* fix glitch upon key re-negotiation when using tls-crypt
* fix interoperability issue with private keys created using OpenSSL 1.1 default settings (aka add support for private keys encrypted using PKCS#5v2.0 with PRF newer than SHA1)

Changes from 1.2.6 to 1.2.7:
* fixed WiFi detection while connected via LTE
* fixed tunnel reconfiguration after reconnection with seamless tunnel ON
* added message about new .ovpn12 extension in cert list (when empty)
* fixed issue with DNS upon reconnection in split tunnel setups
* fixed tunnel disconnection when closing App from background app list
* fixed spurious connection crash when connecting using TCP
* fixed several connection instabilities
* fixed routing towards VPN IPs other than the VPN server
* fixed usage of PROXY_AUTO_CONFIG_URL and PROXY_BYPASS setting
* fixed DNS settings when server directive comes as last one

Changes between 1.2.5 and 1.2.6:

* fixed reconnection with external certificate or password when
device is still locked
* fixed blank-screen issue on iPods
* fixed reconnection after sleep or connectivity loss
* fixed seamless tunnel handling
* fixed tls-auth setup. missing key-direction in new profiles
is again interpreted as "bidirectional" mode
* fixed DNS server assignment on split tunnel configurations
* fixed IPv6 DNS server assignment on split tunnel configurations
* fixed search domain assignment on split tunnel configurations
* fixed profile renaming
* fixed PROXY settings assignment
* fixed permanent disconnection due to TRANSPORT_ERROR
when uplink is unavailable

Changes between 1.1.1 and 1.2.5:

* converted VPN backend to new Apple Network Extensions
framework
* implemented private keychain for storing certificates and
passwords. PKCS#12 bundles imported via Safari or Mail
must now end with '.ovpn12'
* implemented support for "tls-crypt" config option.
If the OpenVPN server you are connecting to has enabled
this option, it will provider a safer method to exchange
certificates during the initial TLS handshake
* improved log verbosity
* added preference switch to disable MD5 in TLS
* updated mbedTLS to 2.6.0 (MD5 support will be
dropped on Apr, 31st 2018)
* updated ovpn3 backend

Changes between 1.1.0 and 1.1.1:
* updated ovpn3 backend and plugin
* better support for NAT64
* workaround for sweet32 vulnerability
* implementation of relay protocol

Changes between 1.0.7 and 1.1.0:

* The OpenVPN Setting "Force AES-CBC ciphersuites" is now
off by default. If you experience connection issues with
this change, you can easily turn it back on in the Settings
App under OpenVPN.

* Known issue: sometimes after install, the OpenVPN settings
in the Settings app may vanish. This is a known iOS
issue. A suggested workaround is to quit the Settings app
by double-tapping the home button, and then dragging
Settings out of the list of apps. The next time you launch
Settings, the OpenVPN settings ought to show up.

* NAT64 is now fully supported.

* Improved network reachability detection.

* Implemented automatic per-key data limits on Blowfish and
other 64-bit block-size ciphers to sidestep "Sweet32"
vulnerability (CVE-2016-6329).

* Relaxed mbedTLS/PolarSSL certificate date checking:
1. allow dates that omit the seconds field
2. allow dates that specify a timezone
This should solve the error "PolarSSL: error parsing cert
certificate : X509 - The date tag or value is invalid"

* Added fix for error "digest_error: NONE: not usable".

* Added mbedTLS/PolarSSL log level setting.

* Library updates:
mbedTLS/PolarSSL : 1.3.17

Changes in 1.0.7 (from 1.0.5):

* Updated mbedTLS (formerly PolarSSL).

* The OpenVPN Setting "Force AES-CBC ciphersuites" is now off by
default. If you experience connection issues with this change,
you can easily turn it back on in the Settings App under OpenVPN.

* Added "Minimum TLS version" setting. If you experience connection
issues with this option, try setting it to "Disabled" in the
Settings App under OpenVPN.

* Added AES-GCM cipher support.

* Developers can now detect if OpenVPN is installed:

BOOL installed = [application canOpenURL:[NSURL
URLWithString:@"openvpn://"]];

* Library updates:
mbedTLS : 1.3.16

Changes between 1.0.4 and 1.0.5:

* Fixed Import Profiles bug that affects 1.0.4 on iOS 8. This issue causes OpenVPN to fail to detect new profiles that are available for import.

* Support new iOS 8 feature where Settings App can be used to launch native OpenVPN profiles. Note that only autologin profiles (i.e. profiles that don't require credential entry) can be launched using this mechanism.

* Added "Seamless Tunnel" setting (See OpenVPN section of Settings App) for iOS 8 and higher. Make a best-effort to keep the VPN tunnel active during pause, resume, and reconnect states to minimize the likelihood of packet leakage during sleep/wakeup and network reconfiguration events.

* Connection speed improvements.

* Support OpenVPN "float" directive.

* Don't fail the connection when OpenVPN "topology net30" directive is mixed with "ifconfig-ipv6", since the topology setting doesn't really affect IPv6.

* Recognize backslash as a directory separator, to allow import of Windows profiles.

* Library updates:
PolarSSL : 1.3.8
Boost : 1.56.0

Note: The release notes shown here are grabbed from time to time from the iTunes servers, so maybe there's some missing versions.