summaryrefslogtreecommitdiffstats
path: root/doc/man1/s_server.pod
diff options
context:
space:
mode:
authorMatt Caswell <matt@openssl.org>2016-11-15 14:22:29 +0000
committerMatt Caswell <matt@openssl.org>2016-11-23 15:31:21 +0000
commitacf65ae5c852c8d05b5d3af263f29dd5115f556b (patch)
tree9fda416620849a00999d724c21138563b207c6a8 /doc/man1/s_server.pod
parentc11237c23e9f60cecdb899580b7b9ffb88614a7e (diff)
Add an s_server capability to read an OCSP Response from a file
Current s_server can only get an OCSP Response from an OCSP responder. This provides the capability to instead get the OCSP Response from a DER encoded file. This should make testing of OCSP easier. Reviewed-by: Rich Salz <rsalz@openssl.org>
Diffstat (limited to 'doc/man1/s_server.pod')
-rw-r--r--doc/man1/s_server.pod6
1 files changed, 6 insertions, 0 deletions
diff --git a/doc/man1/s_server.pod b/doc/man1/s_server.pod
index 94065ba753..f1a13dc868 100644
--- a/doc/man1/s_server.pod
+++ b/doc/man1/s_server.pod
@@ -109,6 +109,7 @@ B<openssl> B<s_server>
[B<-status_verbose>]
[B<-status_timeout nsec>]
[B<-status_url url>]
+[B<-status_file file>]
[B<-alpn protocols>]
[B<-nextprotoneg protocols>]
@@ -501,6 +502,11 @@ Sets a fallback responder URL to use if no responder URL is present in the
server certificate. Without this option an error is returned if the server
certificate does not contain a responder address.
+=item B<-status_file file>
+
+Overrides any OCSP responder URLs from the certificate and always provides the
+OCSP Response stored in the file. The file must be in DER format.
+
=item B<-alpn protocols>, B<-nextprotoneg protocols>
these flags enable the