1.1.1+1.3 Configurable logging was lost in 1.2. Fixed. ':' missing. Fixed. Now that HTTP and HTTPS are both supported many assumption about default ports are wrong. Mostly fixed. 1.1.1+1.2 Ported to Apache 1.1.1 (thanks to Nigel Metheringham for an initial version of this). Changed version numbering scheme again to conform to HTTP standards. Ported to SSLeay 0.6.1. Support still present for 0.5.x. Added "no CA" client verification mode. This didn't work with SSLeay 0.5.x and is untested with 0.6.1. Added new directives SSLRequiredCiphers, SSLRequireCipher, SSLBanCipher, SSLDisable. Allowed a single server to serve both HTTP and HTTPS. Set HTTPS, HTTPS_CIPHER, HTTPS_KEYSIZE, HTTPS_SECRETKEYSIZE and SSL_CLIENT_DN for CGIs. 1.0.5+1.1 Allow SSLCertificateKeyFile to use an absolute path. 1.0.5+1.0 Ported to Apache 1.0.5 and SSLeay 0.5.2a. Fixed mod_dir.c stack overrun bug. Fixed client authentication. Changed version numbering scheme to de facto standard Apache derivative numbering (that is /+). 1.0.3a Ported to Apache 1.0.3 and SSLeay 0.5.1b. Removed SSL logging from mod_log_common.c. It is now available only in configurable logs. Removed duplicate typedef for pool in apache_ssl1.h. Added "make certificate" to generate a test certificate. Added per-host control of CA verification path/file. Inverted this list! 1.0.1a Ported to Apache 1.0.1. This was considerably more troublesome than expected, so apologies to those who have tried and failed to apply the 0.8.14 patches to 1.0.x. A small amount of extra documentation was added to httpd.conf. Worked around a bug in timeouts in 1.0.1 (pool close functions weren't used). Copyright notices updated. 0.8.14h Corrected mod_imap - http: and https: were reversed. Corrected another reference to http: in util.c, and default port numbers in util.c, mod_imap.c and httpd.h. 0.8.14g Added configurable logging to mod_log_config.c (another sameer@c2.org idea). Removed extra logging from mod_log_common.c (code left behind in case anyone relies on it, but will be removed later). Made mod_imap use https: by default, and recognise https: and ftp: as valid methods (again, sameer@c2.org). (Not tested). 0.8.14f szClientX509 was not cleared for a new connection. Fixed. Put my PGP key in the distribution instead of anyone else who happens to have "ben" in their name. Ooops! 0.8.14e Removed os_conn_printf(), which was ugly, unused and unintelligible. Added "#include " to apache_ssl2.h. Removed os_one_time_init(), also ugly and unused. Added SSLLogError (suggested by sameer@c2.org), to log errors to the main error log. Note that many are also logged in SSLLogFile. Added remark about patch usage in README.SSL. 0.8.14d Fixed mod_imap.c. Added SSLLogFile for miscellaneous rubbish produced by SSL. Added this file, and EXPORT.SSL.