Add documentation on -timeout option in the ocsp utility

PR#3612

Reviewed-by: Dr. Stephen Henson <steve@openssl.org>

diff --git a/apps/ocsp.c b/apps/ocsp.c
index 902546ff618c54eac13c0e7046284e3ed713bbae..5143a4dd22b7d3e2e2bdaae8c4e267d10b3acedd 100644 (file)
--- a/apps/ocsp.c
+++ b/apps/ocsp.c
@@ -650,6 +650,7 @@ int MAIN(int argc, char **argv)
                BIO_printf (bio_err, "-resp_key_id       identify reponse by signing certificate key ID\n");
                BIO_printf (bio_err, "-nrequest n        number of requests to accept (default unlimited)\n");
                BIO_printf (bio_err, "-<dgst alg>     use specified digest in the request\n");
+               BIO_printf (bio_err, "-timeout n timeout connection to OCSP responder after n seconds\n");
                goto end;
                }
 

diff --git a/doc/apps/ocsp.pod b/doc/apps/ocsp.pod
index 9758474f1c3fe9c1d69a2cc8004056fde70ccc7a..296b13ce506e622d4e9cd1c33138fd7a328a1a7c 100644 (file)
--- a/doc/apps/ocsp.pod
+++ b/doc/apps/ocsp.pod
@@ -159,6 +159,10 @@ if the B<host> option is present then the OCSP request is sent to the host
 B<hostname> on port B<port>. B<path> specifies the HTTP path name to use
 or "/" by default.
 
+=item B<-timeout seconds>
+
+connection timeout to the OCSP responder in seconds
+
 =item B<-CAfile file>, B<-CApath pathname>
 
 file or pathname containing trusted CA certificates. These are used to verify