From: Alex Rousskov <rousskov@measurement-factory.com>
Date: Thu, 12 Apr 2012 19:57:57 +0000 (-0600)
Subject: Bug 3484: Docs: sslproxy_cert_error example flawed
X-Git-Tag: BumpSslServerFirst.take08~7^2~13
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=a87bfd3b8cd4205d3ba0805b84c987570f53e7b8;p=thirdparty%2Fsquid.git

Bug 3484: Docs: sslproxy_cert_error example flawed

Synced ACL name after ACL type change in r12117.

This is still far from perfect because dstdomain is not really a FAST ACL
either: Its documentation says that it becomes slow on IP addresses.
---

diff --git a/src/cf.data.pre b/src/cf.data.pre
index c8c8afb356..d7d0d98564 100644
--- a/src/cf.data.pre
+++ b/src/cf.data.pre
@@ -1982,8 +1982,8 @@ DOC_START
 	when talking to servers for example.com. All other
 	validation errors will result in ERR_SECURE_CONNECT_FAIL error.
 
-		acl BrokenServersAtTrustedIP dstdomain example.com
-		sslproxy_cert_error allow BrokenServersAtTrustedIP
+		acl BrokenButTrustedServers dstdomain example.com
+		sslproxy_cert_error allow BrokenButTrustedServers
 		sslproxy_cert_error deny all
 
 	This clause only supports fast acl types.