Version 0.4.4
-------------
Improvements:
- add support for systemd via a unit file
- fix code for OpenSSL-1.1 API (sync with scas-client)
- for XACML 1.4.3 and higher, set a proper issuer in the XACML response and log
  ID, issuer, issue_instant for incoming request and outgoing response.
- optionally use the cert-chain subject attribute as PEM string for LCMAPS,
  allowing to use PEM based plugins such as verify-proxy and c-pep. It can be
  enabled via new cmdline option or config file option.
- add reload/force-reload to init script.
- init script creates log and pidfile directories when they don't yet exist.
- use default config file when none is specified.
Minor Bugfixes:
- prevent infinite restart loop in case key or cert is unreadable
- update and improve code to setup the socket
- restore UID also when loading certificates/keys failed
- fix some format problems in the logging (thanks to __attribute((format...
- fix minor cppcheck warnings

Version 0.4.3
-------------
Bugfix:
- the second step of the SSL shutdown does not work completely correct,
  resulting in an error message.

Version 0.4.2
-------------
Bugfix:
- commandline option --port kills the server, introduced in 0.4.0

Improvements:
- use pidfile to cleaner stop the service, default location can be set at
  configure time, default is /var/run/scas/scas.pid
- fix compiler warnings
- sync common code with lcmaps-plugins-scas-client

Version 0.4.1
-------------
Bugfix:
- protect against hanging child process by cleanup of signalling child:
  * First send a SIGINT, which should trigger a clean shutdown
  * If child doesn't exit after 4 seconds send SIGTERM, which should trigger a
    _exit() in the child.
  * If child doesn't exit after 2 more seconds send a SIGKILL.

Version 0.4.0
-------------
Bugfixes:
- properly handle signals from and to child process. When the child dies or
  exists, the parent notices and optionally restarts the child. This fixes
  https://bugzilla.nikhef.nl/show_bug.cgi?id=10
  When the child has failed (due to signal or non-zero exit value) more than 3
  times in 60 seconds, the SCAS gives up.
- SCAS does not notice when another process has the port in use (instead it
  segfaults).
- solved numerous memory leaks.
Improvements:
- properly implemented logging to file, syslog or both.
- allowing to set a custom log facility for syslog.
- scas_debug_level now sets the (sys)loglevel: it cuts of above this.
- new settings for send, receive and accept timeout in the gSOAP: this requires
  building against libxacml 1.4.0 or higher (when not available, the feature is
  disabled).
- new configure flag to enable having SCAS setup the listening socket.
- scas_no_daemonize can now also be set via the config file.
- Improve config file parsing:
    * it becomes valid to add comment lines: anything on a line from a # onwards
      is ignored.
    * lines without a = are ignored.
    * unknown or invalid config entries are no longer fatal.
