openssl dgst, openssl enc: check for end of input

[oweals/openssl.git] / doc / man1 / ocsp.pod

diff --git a/doc/man1/ocsp.pod b/doc/man1/ocsp.pod
index 7bfa6936c031b5e228f783a8aba9860f1550724b..4c0aaac17b57b66e9ac507f4ff0515172f1698a9 100644 (file)
--- a/doc/man1/ocsp.pod
+++ b/doc/man1/ocsp.pod
@@ -88,6 +88,7 @@ B<openssl> B<ocsp>
 [B<-ndays n>]
 [B<-resp_key_id>]
 [B<-nrequest n>]
+[B<-rcid I<digest>>]
 [B<-I<digest>>]
 
 =head1 DESCRIPTION
@@ -304,6 +305,12 @@ status information is immediately available. In this case the age of the
 B<notBefore> field is checked to see it is not older than B<age> seconds old.
 By default this additional check is not performed.
 
+=item B<-rcid I<digest>>
+
+This option sets the digest algorithm to use for certificate identification
+in the OCSP response. Any digest supported by the OpenSSL B<dgst> command can
+be used. The default is the same digest algorithm used in the request.
+
 =item B<-I<digest>>
 
 This option sets digest algorithm to use for certificate identification in the
@@ -486,7 +493,7 @@ to a second file.
 
 =head1 HISTORY
 
-The -no_alt_chains options was first added to OpenSSL 1.1.0.
+The -no_alt_chains option was added in OpenSSL 1.1.0.
 
 =head1 COPYRIGHT