2011-01-19
  * flush_io after starttls, bug described in http://www.kb.cert.org/vuls/id/555316 (Wietse Venema)

2007-04-08
  * type correction of time argument in ssl_timeoutio functions
  * bug in tlsserversciphers processing (Michael Hanselmann)
  * RFC1891 (James Couzens)

2006-01-04
  * strerror declaration in tls.c compile problem (Renato Botelho, Bill Shupp)
  * chown uid.gid deprecated, should be uid:gid (Bill Shupp)

2005-03-29
  * no STARTTLS advertised when control/servercert.pem absent (Jason Haar) [already fixed in qmail-tls]
  * control/notlshosts (Albert Weichselbraun)
  * control/tlshosts/exhaustivelist
  * scripts honor conf-users (Sven Verdoolaege)

2004-04-17
  * bug: qmail-remote loops on malformed server response (B. Shupp, A. Meltzer) [already fixed in qmail-tls]

2004-01-20
  * bug: DH caused exit if dh512.pem and dh1024.pem absent (Samuli Karkkainen)

2003-12-27
  * script for update temporary RSA/DH temp keys
  * CRL checking of clients
  * Diffie-Hellman parameters added
  * RFC 2821 compliance of headers (Matthias Wimmer)
  * bug: sk_GENERAL_NAME_pop_free call (Joe Orton)