OCSP basic response verify. Very incomplete

[openssl.git] / FAQ

diff --git a/FAQ b/FAQ
index a45c545bf6d731d41f70f88fe60e0527e438698a..4de8bb8c1aadbcf4b40dbeae1bddf77fba30ad7b 100644 (file)
--- a/FAQ
+++ b/FAQ
@@ -25,6 +25,7 @@ OpenSSL  -  Frequently Asked Questions
 * Why can't I make an SSL connection using a DSA certificate?
 * How can I remove the passphrase on a private key?
 * Why can't I use OpenSSL certificates with SSL client authentication?
+* Why does my browser give a warning about a mismatched hostname?
 
 [BUILD] Questions about building and testing OpenSSL
 
@@ -277,7 +278,7 @@ print out the servers list of acceptable CAs using the OpenSSL s_client tool:
 
 openssl s_client -connect www.some.host:443 -prexit
 
-if your server only requests certificates on certain URLs then you may need
+If your server only requests certificates on certain URLs then you may need
 to manually issue an HTTP GET command to get the list when s_client connects:
 
 GET /some/page/needing/a/certificate.html