1 |
|
.\" $MidnightBSD$ |
2 |
< |
.\" Automatically generated by Pod::Man 2.28 (Pod::Simple 3.28) |
2 |
> |
.\" Automatically generated by Pod::Man 4.09 (Pod::Simple 3.35) |
3 |
|
.\" |
4 |
|
.\" Standard preamble: |
5 |
|
.\" ======================================================================== |
47 |
|
.ie \n(.g .ds Aq \(aq |
48 |
|
.el .ds Aq ' |
49 |
|
.\" |
50 |
< |
.\" If the F register is turned on, we'll generate index entries on stderr for |
50 |
> |
.\" If the F register is >0, we'll generate index entries on stderr for |
51 |
|
.\" titles (.TH), headers (.SH), subsections (.SS), items (.Ip), and index |
52 |
|
.\" entries marked with X<> in POD. Of course, you'll have to process the |
53 |
|
.\" output yourself in some meaningful fashion. |
55 |
|
.\" Avoid warning from groff about undefined register 'F'. |
56 |
|
.de IX |
57 |
|
.. |
58 |
< |
.nr rF 0 |
59 |
< |
.if \n(.g .if rF .nr rF 1 |
60 |
< |
.if (\n(rF:(\n(.g==0)) \{ |
61 |
< |
. if \nF \{ |
62 |
< |
. de IX |
63 |
< |
. tm Index:\\$1\t\\n%\t"\\$2" |
58 |
> |
.if !\nF .nr F 0 |
59 |
> |
.if \nF>0 \{\ |
60 |
> |
. de IX |
61 |
> |
. tm Index:\\$1\t\\n%\t"\\$2" |
62 |
|
.. |
63 |
< |
. if !\nF==2 \{ |
64 |
< |
. nr % 0 |
65 |
< |
. nr F 2 |
68 |
< |
. \} |
63 |
> |
. if !\nF==2 \{\ |
64 |
> |
. nr % 0 |
65 |
> |
. nr F 2 |
66 |
|
. \} |
67 |
|
.\} |
71 |
– |
.rr rF |
68 |
|
.\" |
69 |
|
.\" Accent mark definitions (@(#)ms.acc 1.5 88/02/08 SMI; from UCB 4.2). |
70 |
|
.\" Fear. Run. Save yourself. No user-serviceable parts. |
130 |
|
.\" ======================================================================== |
131 |
|
.\" |
132 |
|
.IX Title "OCSP 1" |
133 |
< |
.TH OCSP 1 "2016-09-22" "1.0.1u" "OpenSSL" |
133 |
> |
.TH OCSP 1 "2018-11-20" "1.0.2q" "OpenSSL" |
134 |
|
.\" For nroff, turn off justification. Always turn off hyphenation; it makes |
135 |
|
.\" way too many mistakes in technical documents. |
136 |
|
.if n .ad l |
137 |
|
.nh |
138 |
|
.SH "NAME" |
139 |
+ |
openssl\-ocsp, |
140 |
|
ocsp \- Online Certificate Status Protocol utility |
141 |
|
.SH "SYNOPSIS" |
142 |
|
.IX Header "SYNOPSIS" |
160 |
|
[\fB\-no_nonce\fR] |
161 |
|
[\fB\-url \s-1URL\s0\fR] |
162 |
|
[\fB\-host host:n\fR] |
163 |
+ |
[\fB\-header name value\fR] |
164 |
|
[\fB\-path\fR] |
165 |
|
[\fB\-CApath dir\fR] |
166 |
|
[\fB\-CAfile file\fR] |
167 |
< |
[\fB\-no_alt_chains\fR]] |
167 |
> |
[\fB\-no_alt_chains\fR] |
168 |
|
[\fB\-VAfile file\fR] |
169 |
|
[\fB\-validity_period n\fR] |
170 |
|
[\fB\-status_age n\fR] |
248 |
|
with \fBserial\fR, \fBcert\fR and \fBhost\fR options). |
249 |
|
.IP "\fB\-url responder_url\fR" 4 |
250 |
|
.IX Item "-url responder_url" |
251 |
< |
specify the responder \s-1URL.\s0 Both \s-1HTTP\s0 and \s-1HTTPS \s0(\s-1SSL/TLS\s0) URLs can be specified. |
251 |
> |
specify the responder \s-1URL.\s0 Both \s-1HTTP\s0 and \s-1HTTPS\s0 (\s-1SSL/TLS\s0) URLs can be specified. |
252 |
|
.IP "\fB\-host hostname:port\fR, \fB\-path pathname\fR" 4 |
253 |
|
.IX Item "-host hostname:port, -path pathname" |
254 |
|
if the \fBhost\fR option is present then the \s-1OCSP\s0 request is sent to the host |
255 |
|
\&\fBhostname\fR on port \fBport\fR. \fBpath\fR specifies the \s-1HTTP\s0 path name to use |
256 |
|
or \*(L"/\*(R" by default. |
257 |
+ |
.IP "\fB\-header name value\fR" 4 |
258 |
+ |
.IX Item "-header name value" |
259 |
+ |
If sending a request to an \s-1OCSP\s0 server, then the specified header name and |
260 |
+ |
value are added to the \s-1HTTP\s0 request. Note that the \fBname\fR and \fBvalue\fR must |
261 |
+ |
be specified as two separate parameters, not as a single quoted string, and |
262 |
+ |
that the header name does not have the trailing colon. |
263 |
+ |
Some \s-1OCSP\s0 responders require a Host header; use this flag to provide it. |
264 |
|
.IP "\fB\-timeout seconds\fR" 4 |
265 |
|
.IX Item "-timeout seconds" |
266 |
|
connection timeout to the \s-1OCSP\s0 responder in seconds |
495 |
|
.Ve |
496 |
|
.SH "HISTORY" |
497 |
|
.IX Header "HISTORY" |
498 |
< |
The \-no_alt_chains options was first added to OpenSSL 1.0.1n and 1.0.2b. |
498 |
> |
The \-no_alt_chains options was first added to OpenSSL 1.0.2b. |