Yes, you are right that the doc is outdated. The debian package installs docs from the lighttpd source tree path doc/outdated/*.txt
We are aware of this issue, but it is non-trivial to correct. Updated lighttpd SSL doc can be found at: https://redmine.lighttpd.net/projects/lighttpd/wiki/Docs_SSL Updated lighttpd doc in general can be found at: https://redmine.lighttpd.net/projects/lighttpd/wiki