openssl-ocsp.pod.in: state for options that they are flexible w.r.t. cert input format

Reviewed-by: Hugo Landau <hlandau@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/18917)

diff --git a/doc/man1/openssl-ocsp.pod.in b/doc/man1/openssl-ocsp.pod.in
index 0c93dc9d8426d92e9ae21b5093320830e478e72b..9106a1d34949603f4439c3ea87081edf1ba89d35 100644 (file)
--- a/doc/man1/openssl-ocsp.pod.in
+++ b/doc/man1/openssl-ocsp.pod.in
@@ -103,12 +103,16 @@ specify output filename, default is standard output.
 =item B<-issuer> I<filename>
 
 This specifies the current issuer certificate.
+The input can be in PEM, DER, or PKCS#12 format.
+
 This option can be used multiple times.
 This option B<MUST> come before any B<-cert> options.
 
 =item B<-cert> I<filename>
 
 Add the certificate I<filename> to the request.
+The input can be in PEM, DER, or PKCS#12 format.
+
 This option can be used multiple times.
 The issuer certificate is taken from the previous B<-issuer> option,
 or an error occurs if no issuer certificate is specified.
@@ -127,8 +131,10 @@ be specified by preceding the value by a C<-> sign.
 =item B<-signer> I<filename>, B<-signkey> I<filename>
 
 Sign the OCSP request using the certificate specified in the B<-signer>
-option and the private key specified by the B<-signkey> option. If
-the B<-signkey> option is not present then the private key is read
+option and the private key specified by the B<-signkey> option.
+The input can be in PEM, DER, or PKCS#12 format.
+
+If the B<-signkey> option is not present then the private key is read
 from the same file as the certificate. If neither option is specified then
 the OCSP request is not signed.
 
@@ -322,13 +328,14 @@ must also be present.
 
 =item B<-CA> I<file>
 
-CA certificate corresponding to the revocation information in the index
+CA certificates corresponding to the revocation information in the index
 file given with B<-index>.
 The input can be in PEM, DER, or PKCS#12 format.
 
 =item B<-rsigner> I<file>
 
 The certificate to sign OCSP responses with.
+The input can be in PEM, DER, or PKCS#12 format.
 
 =item B<-rkey> I<file>