is too long to put here (over 650 lines of changelog).
* properly handle NUL in CN of SSL certs (CVE-2009-3767)