Benjamin Kaduk 21c6c50fc8 GH650: Minor tidying around the ocsp app ... The ocsp utility is something of a jack-of-all-trades; most anything related to the OCSP can be done with it. In particular, the manual page calls out that it can be used as either a client or a server of the protocol, but there are also a few things that it can do which do not quite fit into either role, such as encoding an OCSP request but not sending it, printing out a text form of an OCSP response (or request) from a file akin to the asn1parse utility, or performing a lookup into the server-side revocation database without actually sending a request or response. All three of these are documented as examples in the manual page, but the documentation prior to this commit is somewhat misleading, in that when printing the text form of an OCSP response, the code also attempts to verify the response, displaying an error message and returning failure if the response does not verify. (It is possible that the response would be able to verify with the given example, since the default trust roots are used for that verification, but OCSP responses frequently have alternate certification authorities that would require passing -CAfile or -CApath for verification.) Tidy up the documentation by passing -noverify for the case of converting from binary to textual representation, and also change a few instances of -respin to -reqin as appropriate, note that the -url option provides the same functionality as the -host and -path options, clarify that the example that saves an OCSP response to a file will also perform verification on that response, and fix a couple grammar nits in the manual page. Also remove an always-true conditional for rdb != NULL -- there are no codepaths in which it could be initialized at the time of this check. Signed-off-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Kurt Roeckx <kurt@openssl.org>		2016-02-13 09:12:07 -05:00
..
demoCA
demoSRP
app_rand.c
apps.c
apps.h
asn1pars.c
build.info
ca-cert.srl
ca-key.pem
ca-req.pem
ca.c
CA.pl.in
cert.pem
ciphers.c
client.pem
cms.c
crl2p7.c
crl.c
dgst.c
dh1024.pem
dh2048.pem
dh4096.pem
dhparam.c
dsa512.pem
dsa1024.pem
dsa-ca.pem
dsa-pca.pem
dsa.c
dsap.pem
dsaparam.c
ec.c
ecparam.c
enc.c
engine.c
errstr.c
gendsa.c
genpkey.c
genrsa.c
Makefile.in
nseq.c
ocsp.c	GH650: Minor tidying around the ocsp app	2016-02-13 09:12:07 -05:00
openssl-vms.cnf
openssl.c
openssl.cnf
opt.c
passwd.c
pca-cert.srl
pca-key.pem
pca-req.pem
pkcs7.c
pkcs8.c
pkcs12.c
pkey.c
pkeyparam.c
pkeyutl.c
prime.c
privkey.pem
progs.h
progs.pl
rand.c
rehash.c
req.c
req.pem
rsa8192.pem
rsa.c
rsautl.c
s512-key.pem
s512-req.pem
s1024key.pem
s1024req.pem
s_apps.h
s_cb.c
s_client.c
s_server.c
s_socket.c
s_time.c
server2.pem
server.pem
server.srl
sess_id.c
smime.c
speed.c
spkac.c
srp.c
testCA.pem
testdsa.h
testrsa.h
timeouts.h
ts.c
tsget
verify.c
version.c
vms_decc_init.c
winrand.c
x509.c