I have just uploaded a new -current. The only change is the addition of a mode 
3 for HTTPSHeaders - request a client certificate, but do not verify it.

What this means is that if a client presents a certificate Pound does not 
require a CA certificate to verify it. It is assumed that this verification 
is done by the application itself by checking the HTTP headers.

This modification is done for the sake of compatability with the Apache 
mod_ssl, which seems to work that way.

As usual, comments and test results are welcome.[...]