From: olszomal Date: Thu, 8 Feb 2024 13:30:22 +0000 (+0100) Subject: Improve the documentation on -cert_chain and -status_verbose options X-Git-Tag: openssl-3.3.0-alpha1~25 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=7ceb770883d5bbb60868df46a699dff928f865aa;p=thirdparty%2Fopenssl.git Improve the documentation on -cert_chain and -status_verbose options Reviewed-by: Matt Caswell Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/22192) --- diff --git a/doc/man1/openssl-s_server.pod.in b/doc/man1/openssl-s_server.pod.in index 6b9c91ba87e..268eca066b6 100644 --- a/doc/man1/openssl-s_server.pod.in +++ b/doc/man1/openssl-s_server.pod.in @@ -232,6 +232,8 @@ See L for details. A file or URI of untrusted certificates to use when attempting to build the certificate chain related to the certificate specified via the B<-cert> option. +These untrusted certificates are sent to clients and used for generating +certificate status (aka OCSP stapling) requests. The input can be in PEM, DER, or PKCS#12 format. =item B<-build_chain> @@ -513,6 +515,8 @@ Enables certificate status request support (aka OCSP stapling). Enables certificate status request support (aka OCSP stapling) and gives a verbose printout of the OCSP response. +Use the B<-cert_chain> option to specify the certificate of the server's +certificate signer that is required for certificate status requests. =item B<-status_timeout> I