1 files changed, 6 insertions, 1 deletions
diff --git a/openvpn.8 b/openvpn.8
index 707b2ed..eb8fd42 100644
--- a/openvpn.8
+++ b/openvpn.8
@@ -5355,7 +5355,12 @@ where
 is the verification level.  Only set for TLS connections.  Set prior
 to execution of
 .B \-\-tls-verify
-script.
+script. This is in the form of a hex string like "37AB46E0", which is
+suitable for doing serial-based OCSP queries (with OpenSSL, you have
+to prepend "0x" to the string). If something goes wrong while reading
+the value from the certificate it will be an empty string, so your
+code should check that.
+See the contrib/OCSP_check/OCSP_check.sh script for an example.
 .\"*********************************************************
 .TP
 .B tun_mtu