One more maintainance release for the stable 2.0 branch is available for your pleasure... Greetings, Ralf S. Engelschall [EMAIL PROTECTED] www.engelschall.com Changes with mod_ssl 2.0.15 (01-Nov-1998 to 07-Nov-1998) *) Fixed some long-standing inconsistencies in mod_ssl.html *) Now SSLVerifyDepth defaults to 1 and this means the client certificate has to be signed directly by the root CA. The verify depth now is the max number of CAs which are checked: 0 = self-signed only, 1 = self-signed or signed by root-CA, 2 = signed by root-CA or signed by a CA which is signed by the root-CA, etc. *) Now SSLSessionCacheTime defaults to 300s. *) Fixed RSAref instructions in INSTALL file and added more support for implicitly finding the RSA_BASE to the libssl.module script. *) Backport from 2.1 branch: Now under `make certificate' an interactive prompt is given which asks whether the private key should be encrypted (the default) or not. This way it's a little bit easier to setup test servers, at least for me ;-) *) Fixed SSLRequiredCiphers: The server configuration entry wasn't correctly merged internally which lead to the effect that it got ignored. ______________________________________________________________________ Apache Interface to SSLeay (mod_ssl) www.engelschall.com/sw/mod_ssl/ Official Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]