diff options
author | Dr. Stephen Henson <steve@openssl.org> | 2014-07-06 22:16:21 +0100 |
---|---|---|
committer | Dr. Stephen Henson <steve@openssl.org> | 2014-07-06 22:59:03 +0100 |
commit | 1326733457a611bcc935a18251db58ba1009fd8b (patch) | |
tree | 3d85b7e5cda3d2e9ddaf81f9ab20d8a7c2d48d3f /doc | |
parent | d8426e6b7d0ad5b6bbc0a8aff0cd32054ea7d181 (diff) |
Document certificate status request options.
Conflicts:
doc/apps/s_client.pod
doc/apps/s_server.pod
(cherry picked from commit b197c770a6a6ec3d17d7d310a9b64570f044eca0)
Diffstat (limited to 'doc')
-rw-r--r-- | doc/apps/s_client.pod | 6 | ||||
-rw-r--r-- | doc/apps/s_server.pod | 23 |
2 files changed, 29 insertions, 0 deletions
diff --git a/doc/apps/s_client.pod b/doc/apps/s_client.pod index 883da15d25..57b67f7c4e 100644 --- a/doc/apps/s_client.pod +++ b/doc/apps/s_client.pod @@ -47,6 +47,7 @@ B<openssl> B<s_client> [B<-sess_out filename>] [B<-sess_in filename>] [B<-rand file(s)>] +[B<-status>] =head1 DESCRIPTION @@ -259,6 +260,11 @@ Multiple files can be specified separated by a OS-dependent character. The separator is B<;> for MS-Windows, B<,> for OpenVMS, and B<:> for all others. +=item B<-status> + +sends a certificate status request to the server (OCSP stapling). The server +response (if any) is printed out. + =back =head1 CONNECTED COMMANDS diff --git a/doc/apps/s_server.pod b/doc/apps/s_server.pod index b6487b2a80..319622f737 100644 --- a/doc/apps/s_server.pod +++ b/doc/apps/s_server.pod @@ -56,6 +56,10 @@ B<openssl> B<s_server> [B<-no_ticket>] [B<-id_prefix arg>] [B<-rand file(s)>] +[B<-status>] +[B<-status_verbose>] +[B<-status_timeout nsec>] +[B<-status_url url>] =head1 DESCRIPTION @@ -287,6 +291,25 @@ Multiple files can be specified separated by a OS-dependent character. The separator is B<;> for MS-Windows, B<,> for OpenVMS, and B<:> for all others. +=item B<-status> + +enables certificate status request support (aka OCSP stapling). + +=item B<-status_verbose> + +enables certificate status request support (aka OCSP stapling) and gives +a verbose printout of the OCSP response. + +=item B<-status_timeout nsec> + +sets the timeout for OCSP response to B<nsec> seconds. + +=item B<-status_url url> + +sets a fallback responder URL to use if no responder URL is present in the +server certificate. Without this option an error is returned if the server +certificate does not contain a responder address. + =back =head1 CONNECTED COMMANDS |