Add documentation on -timeout option in the ocsp utility

PR#3612

Reviewed-by: Dr. Stephen Henson <steve@openssl.org>
(cherry picked from commit de87dd46c1283f899a9ecf4ccc72db74f36afbf2)
(cherry picked from commit 4d3df37bc7fd33d0bec5da04d2572caa0cdbab75)

diff --git a/apps/ocsp.c b/apps/ocsp.c
index 04263ffd927f882593e48c1c9ebcc80605267330..d421abd9398b5bcf72f0cd1ec2d0d3e1b1f2cc3a 100644 (file)
--- a/apps/ocsp.c
+++ b/apps/ocsp.c
@@ -628,6 +628,7 @@ int MAIN(int argc, char **argv)
                BIO_printf (bio_err, "-resp_key_id       identify reponse by signing certificate key ID\n");
                BIO_printf (bio_err, "-nrequest n        number of requests to accept (default unlimited)\n");
                BIO_printf (bio_err, "-<dgst alg>     use specified digest in the request\n");
+               BIO_printf (bio_err, "-timeout n timeout connection to OCSP responder after n seconds\n");
                goto end;
                }
 

diff --git a/doc/apps/ocsp.pod b/doc/apps/ocsp.pod
index af2e12e418bf43944e8419212e5cb99fe4099615..38f026afc1b679af6cd950587c9dc45b0357d3c7 100644 (file)
--- a/doc/apps/ocsp.pod
+++ b/doc/apps/ocsp.pod
@@ -133,6 +133,10 @@ if the B<host> option is present then the OCSP request is sent to the host
 B<hostname> on port B<port>. B<path> specifies the HTTP path name to use
 or "/" by default.
 
+=item B<-timeout seconds>
+
+connection timeout to the OCSP responder in seconds
+
 =item B<-CAfile file>, B<-CApath pathname>
 
 file or pathname containing trusted CA certificates. These are used to verify