summaryrefslogtreecommitdiff
path: root/doc/apps
diff options
context:
space:
mode:
authorDr. Stephen Henson <steve@openssl.org>2014-07-06 22:16:21 +0100
committerJanusz Kozerski <j.kozerski@samsung.com>2014-10-20 15:25:30 +0200
commit006a780c087c405c153d7d3567e12f747b07609a (patch)
tree046b99b015fe1e6f2cfbdc3877e27ef03576e788 /doc/apps
parentaa8d49774878fb0cf61074cd4cadaa993f9a04f5 (diff)
downloadopenssl-006a780c087c405c153d7d3567e12f747b07609a.tar.gz
openssl-006a780c087c405c153d7d3567e12f747b07609a.tar.bz2
openssl-006a780c087c405c153d7d3567e12f747b07609a.zip
Document certificate status request options.
(cherry picked from commit cba3f1c739f012aaadb85aaefaf8de424d2695e2) Conflicts: doc/apps/s_client.pod doc/apps/s_server.pod
Diffstat (limited to 'doc/apps')
-rw-r--r--doc/apps/s_client.pod6
-rw-r--r--doc/apps/s_server.pod23
2 files changed, 29 insertions, 0 deletions
diff --git a/doc/apps/s_client.pod b/doc/apps/s_client.pod
index 883da15..57b67f7 100644
--- a/doc/apps/s_client.pod
+++ b/doc/apps/s_client.pod
@@ -47,6 +47,7 @@ B<openssl> B<s_client>
[B<-sess_out filename>]
[B<-sess_in filename>]
[B<-rand file(s)>]
+[B<-status>]
=head1 DESCRIPTION
@@ -259,6 +260,11 @@ Multiple files can be specified separated by a OS-dependent character.
The separator is B<;> for MS-Windows, B<,> for OpenVMS, and B<:> for
all others.
+=item B<-status>
+
+sends a certificate status request to the server (OCSP stapling). The server
+response (if any) is printed out.
+
=back
=head1 CONNECTED COMMANDS
diff --git a/doc/apps/s_server.pod b/doc/apps/s_server.pod
index b6487b2..319622f 100644
--- a/doc/apps/s_server.pod
+++ b/doc/apps/s_server.pod
@@ -56,6 +56,10 @@ B<openssl> B<s_server>
[B<-no_ticket>]
[B<-id_prefix arg>]
[B<-rand file(s)>]
+[B<-status>]
+[B<-status_verbose>]
+[B<-status_timeout nsec>]
+[B<-status_url url>]
=head1 DESCRIPTION
@@ -287,6 +291,25 @@ Multiple files can be specified separated by a OS-dependent character.
The separator is B<;> for MS-Windows, B<,> for OpenVMS, and B<:> for
all others.
+=item B<-status>
+
+enables certificate status request support (aka OCSP stapling).
+
+=item B<-status_verbose>
+
+enables certificate status request support (aka OCSP stapling) and gives
+a verbose printout of the OCSP response.
+
+=item B<-status_timeout nsec>
+
+sets the timeout for OCSP response to B<nsec> seconds.
+
+=item B<-status_url url>
+
+sets a fallback responder URL to use if no responder URL is present in the
+server certificate. Without this option an error is returned if the server
+certificate does not contain a responder address.
+
=back
=head1 CONNECTED COMMANDS