I found a distribution just yesterday that is Apache 1.3.12 that includes both mod_ssl AND PHP 4.0.4.
It can be found at http://www.opensa.org/download/beta/68.html
The reason I say this with such fascination is because, should you find another distribution with mod_ssl, it won't include PHP (This is what I've been doing for the last week). Thats because PHP is compiled under the regular Apache API, while mod_ssl, in order to work, must be compiled with the Apache Extended API. Unfortunately, they are not compatible (if you try, you will get error messages about possibly crashing the Apache).
The only problem I have found so far with the OpenSA distro, aside from having older version of Apache and PHP, is that Apache crashes whenever you stop it.
The ideal thing would be to get the source for all these things (which you can do), configure it according to numers instructions I've seen, and recompile PHP, Apache, and mod_ssl. Unfortunately, the only compiler that Apache supports is M$ Visual C++ 6. Talk about a hit to the wallet!
But give the OpenSA distro a try... it may work well for you!