1.2.6+1.16	Make it possible to disable session caching.
		Support SSLeay 0.9.0.
		Make client auth work with session caching (contributed by
			Stefano Ravaioli <Stefano.Ravaioli@cineca.it>).
		Possibly make gcache more reliable.
		Make SSLVerifyClient 3 work. At least with SSLeay 0.9.0.
		Give up on support SSLeay 0.6.x (at least until someone
			persuades me otherwise).

1.2.6+1.15	Fix minor security holes (/tmp symlink attacks) (found by
			Ondrej Suchy <ondrej@eurexa.cz>).
		Port to Apache 1.2.6.
		Fix mistake in check_fulluri (contributed by Frank Bernard
			<fbernard@apriori.de>).

1.2.5+1.14	mod_imap.c was not correctly translated. Fixed.
		Pass on SSL_* to module make.
		Add SSL_APP_DIR to make life easier for people who want to use
			installed SSLeay.
		Add experimental session ID caching.
		Add vague explanation of SSLRequiredCiphers and friends.
		Add SSLEnable (contributed by Ray Bellis <rpb@community.net.uk>).


1.2.5+1.13	This version was sponsored by Virgin Music Group.
		Brought up to date.
		Send client the server's CA for client certs [Wojceich Tryc].
		Note that this could be made more sophisticated!

1.2.4+1.12	? [this is the only version that works correctly with 1.2.4]

1.2.4+1.11	Fix bug related to double load of config.
		Fix bug in check_fulluri (pointed out by Laurentiu Badea). This
			could have caused some strangeness in virtual hosts, I
			suppose.

1.2.4+1.10	Fix bug in buff.c causing corruption in large files.

1.2.4+1.9	Brought up to date.

1.?+1.4-8	?

1.1.1+1.3	Configurable logging was lost in 1.2. Fixed.
		':' missing. Fixed.
		Now that HTTP and HTTPS are both supported many assumption
			about default ports are wrong. Mostly fixed.

1.1.1+1.2	Ported to Apache 1.1.1 (thanks to Nigel Metheringham for an
			initial version of this).
		Changed version numbering scheme again to conform to HTTP
			standards.
		Ported to SSLeay 0.6.1. Support still present for 0.5.x.
		Added "no CA" client verification mode. This didn't work with
			SSLeay 0.5.x and is untested with 0.6.1.
		Added new directives SSLRequiredCiphers, SSLRequireCipher,
			SSLBanCipher, SSLDisable.
		Allowed a single server to serve both HTTP and HTTPS.
		Set HTTPS, HTTPS_CIPHER, HTTPS_KEYSIZE, HTTPS_SECRETKEYSIZE and
			SSL_CLIENT_DN for CGIs.

1.0.5+1.1	Allow SSLCertificateKeyFile to use an absolute path.

1.0.5+1.0	Ported to Apache 1.0.5 and SSLeay 0.5.2a.
		Fixed mod_dir.c stack overrun bug.
		Fixed client authentication.
		Changed version numbering scheme to de facto standard Apache
			derivative numbering (that is <derivative name>/<Apache
			version>+<derivative version>).

1.0.3a		Ported to Apache 1.0.3 and SSLeay 0.5.1b.
		Removed SSL logging from mod_log_common.c. It is now available
			only in configurable logs.
		Removed duplicate typedef for pool in apache_ssl1.h.
		Added "make certificate" to generate a test certificate.
		Added per-host control of CA verification path/file.
		Inverted this list!

1.0.1a		Ported to Apache 1.0.1. This was considerably more troublesome
			than expected, so apologies to those who have tried and
			failed to apply the 0.8.14 patches to 1.0.x.
		A small amount of extra documentation was added to httpd.conf.
		Worked around a bug in timeouts in 1.0.1 (pool close functions
			weren't used).
		Copyright notices updated.

0.8.14h		Corrected mod_imap - http: and https: were reversed.
		Corrected another reference to http: in util.c, and default
			port numbers in util.c, mod_imap.c and httpd.h.

0.8.14g		Added configurable logging to mod_log_config.c (another
			sameer@c2.org idea).
		Removed extra logging from mod_log_common.c (code left behind
			in case anyone relies on it, but will be removed
			later).
		Made mod_imap use https: by default, and recognise https: and
			ftp: as valid methods (again, sameer@c2.org).
			(Not tested).

0.8.14f		szClientX509 was not cleared for a new connection. Fixed.
		Put my PGP key in the distribution instead of anyone else who
			happens to have "ben" in their name. Ooops!

0.8.14e		Removed os_conn_printf(), which was ugly, unused and
			unintelligible.
		Added "#include <stdarg.h>" to apache_ssl2.h.
		Removed os_one_time_init(), also ugly and unused.
		Added SSLLogError (suggested by sameer@c2.org), to log errors
			to the main error log. Note that many are also logged
			in SSLLogFile.
		Added remark about patch usage in README.SSL.

0.8.14d		Fixed mod_imap.c.
		Added SSLLogFile for miscellaneous rubbish produced by SSL.
		Added this file, and EXPORT.SSL.
