From: jmc <jmc@openbsd.org>
Date: Thu, 4 Jan 2018 20:38:12 +0000 (+0000)
Subject: from paul de weerd: provide a more helpful Xr to ocspcheck, and note
X-Git-Url: http://artulab.com/gitweb/?a=commitdiff_plain;h=a4817607f40c0864e090db0f62aaa0cc93356b93;p=openbsd

from paul de weerd: provide a more helpful Xr to ocspcheck, and note
that the path to "file" is not relative to the chroot;
---

diff --git a/usr.sbin/httpd/httpd.conf.5 b/usr.sbin/httpd/httpd.conf.5
index b8d76d80cd7..afda0ac132b 100644
--- a/usr.sbin/httpd/httpd.conf.5
+++ b/usr.sbin/httpd/httpd.conf.5
@@ -1,4 +1,4 @@
-.\"	$OpenBSD: httpd.conf.5,v 1.88 2017/12/21 21:03:49 jmc Exp $
+.\"	$OpenBSD: httpd.conf.5,v 1.89 2018/01/04 20:38:12 jmc Exp $
 .\"
 .\" Copyright (c) 2014, 2015 Reyk Floeter <reyk@openbsd.org>
 .\"
@@ -14,7 +14,7 @@
 .\" ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
 .\" OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
 .\"
-.Dd $Mdocdate: December 21 2017 $
+.Dd $Mdocdate: January 4 2018 $
 .Dt HTTPD.CONF 5
 .Os
 .Sh NAME
@@ -556,11 +556,16 @@ The
 should contain a DER-format OCSP response retrieved from an
 OCSP server for the
 .Ar certificate
-in use.
-The default is to not use OCSP stapling.
+in use,
+and can be created using
+.Xr ocspcheck 8 .
+The path to
+.Ar file
+is not relative to the chroot.
 If the OCSP response in
 .Ar file
 is empty, OCSP stapling will not be used.
+The default is to not use OCSP stapling.
 .It Ic protocols Ar string
 Specify the TLS protocols to enable for this server.
 If not specified, the value