Add documentation on -timeout option in the ocsp utility

PR#3612

Reviewed-by: Dr. Stephen Henson <steve@openssl.org>
(cherry picked from commit de87dd46c1283f899a9ecf4ccc72db74f36afbf2)

diff --git a/apps/ocsp.c b/apps/ocsp.c
index 44e8ba022f9eae3fa508038fb758cecb15d2b1d7..6f85c9340aab6e249a62331329755c35a8262199 100644 (file)
--- a/apps/ocsp.c
+++ b/apps/ocsp.c
@@ -649,6 +649,7 @@ int MAIN(int argc, char **argv)
                BIO_printf (bio_err, "-resp_key_id       identify reponse by signing certificate key ID\n");
                BIO_printf (bio_err, "-nrequest n        number of requests to accept (default unlimited)\n");
                BIO_printf (bio_err, "-<dgst alg>     use specified digest in the request\n");
+               BIO_printf (bio_err, "-timeout n timeout connection to OCSP responder after n seconds\n");
                goto end;
                }
 

diff --git a/doc/apps/ocsp.pod b/doc/apps/ocsp.pod
index af2e12e418bf43944e8419212e5cb99fe4099615..38f026afc1b679af6cd950587c9dc45b0357d3c7 100644 (file)
--- a/doc/apps/ocsp.pod
+++ b/doc/apps/ocsp.pod
@@ -133,6 +133,10 @@ if the B<host> option is present then the OCSP request is sent to the host
 B<hostname> on port B<port>. B<path> specifies the HTTP path name to use
 or "/" by default.
 
+=item B<-timeout seconds>
+
+connection timeout to the OCSP responder in seconds
+
 =item B<-CAfile file>, B<-CApath pathname>
 
 file or pathname containing trusted CA certificates. These are used to verify