summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorNikos Mavrogiannopoulos <nmav@redhat.com>2017-10-18 13:42:21 +0200
committerNikos Mavrogiannopoulos <nmav@redhat.com>2017-10-18 15:53:07 +0200
commit1779f48768a9cc8f030bb61ca003ecdfc5753bdf (patch)
treef2486a761332756a7909034f4eec55caa0b6f4c2
parentb0a5786f4a01900f2704db64be1323fb6771f331 (diff)
downloadgnutls-1779f48768a9cc8f030bb61ca003ecdfc5753bdf.tar.gz
ocsptool: doc update
Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
-rw-r--r--src/ocsptool-args.def6
1 files changed, 5 insertions, 1 deletions
diff --git a/src/ocsptool-args.def b/src/ocsptool-args.def
index 274096cb75..54752b01ec 100644
--- a/src/ocsptool-args.def
+++ b/src/ocsptool-args.def
@@ -32,7 +32,7 @@ flag = {
arg-optional;
descrip = "Ask an OCSP/HTTP server on a certificate validity";
doc = "Connects to the specified HTTP OCSP server and queries on the validity of the loaded certificate.
-It can be combined with --load-chain, where it checks
+Its argument can be a URL or a plain server name. It can be combined with --load-chain, where it checks
all certificates in the provided chain, or with --load-cert and
--load-issuer options. The latter checks the provided certificate
against its specified issuer certificate.";
@@ -294,6 +294,10 @@ the certificates. It is possible to override the address of the
OCSP server as well as ask information on a particular certificate
using --load-cert and --load-issuer.
+@example
+$ ocsptool --ask http://ocsp.CAcert.org/ --load-chain chain.pem
+@end example
+
_EOF_;
};