Bug 3484: Docs: sslproxy_cert_error example flawed

This is still far from perfect because dstdomain is not really a FAST ACL
either: Its documentation says that it becomes slow on IP addresses.

diff --git a/src/cf.data.pre b/src/cf.data.pre
index 724a9be1eac217e9006613954efa940f0d573ad7..7798a5bc307c322fbb885c829506ea6c76842f97 100644 (file)
--- a/src/cf.data.pre
+++ b/src/cf.data.pre
@@ -1711,11 +1711,11 @@ DOC_START
        Use this ACL to bypass server certificate validation errors.
 
        For example, the following lines will bypass all validation errors
-       when talking to servers located at 172.16.0.0/16. All other
+       when talking to servers for example.com. All other
        validation errors will result in ERR_SECURE_CONNECT_FAIL error.
 
-               acl BrokenServersAtTrustedIP dst 172.16.0.0/16
-               sslproxy_cert_error allow BrokenServersAtTrustedIP
+               acl BrokenButTrustedServers dstdomain example.com
+               sslproxy_cert_error allow BrokenButTrustedServers
                sslproxy_cert_error deny all
 
        This clause only supports fast acl types.