summaryrefslogtreecommitdiff
path: root/src/ocsptool-args.def
diff options
context:
space:
mode:
Diffstat (limited to 'src/ocsptool-args.def')
-rw-r--r--src/ocsptool-args.def6
1 files changed, 5 insertions, 1 deletions
diff --git a/src/ocsptool-args.def b/src/ocsptool-args.def
index 274096cb75..54752b01ec 100644
--- a/src/ocsptool-args.def
+++ b/src/ocsptool-args.def
@@ -32,7 +32,7 @@ flag = {
arg-optional;
descrip = "Ask an OCSP/HTTP server on a certificate validity";
doc = "Connects to the specified HTTP OCSP server and queries on the validity of the loaded certificate.
-It can be combined with --load-chain, where it checks
+Its argument can be a URL or a plain server name. It can be combined with --load-chain, where it checks
all certificates in the provided chain, or with --load-cert and
--load-issuer options. The latter checks the provided certificate
against its specified issuer certificate.";
@@ -294,6 +294,10 @@ the certificates. It is possible to override the address of the
OCSP server as well as ask information on a particular certificate
using --load-cert and --load-issuer.
+@example
+$ ocsptool --ask http://ocsp.CAcert.org/ --load-chain chain.pem
+@end example
+
_EOF_;
};