When mentioning features that don't exist in current releases of

OpenSSL (such as the new undocumented '-prexit' option to s_client),
the FAQ should point out that they don't: The FAQ is not just part
of the release, it's current version is also published on the web.

diff --git a/FAQ b/FAQ
index a271e5b65896016df858d1be19336cfcaee32cc6..5bcc1b9b6774d5c422289cc5c1e7da3ba1b32308 100644 (file)
--- a/FAQ
+++ b/FAQ
@@ -278,7 +278,8 @@ print out the servers list of acceptable CAs using the OpenSSL s_client tool:
 
 openssl s_client -connect www.some.host:443 -prexit
 
-if your server only requests certificates on certain URLs then you may need
+[Note: The '-prexit' option appears in OpenSSL 0.9.8.]
+If your server only requests certificates on certain URLs then you may need
 to manually issue an HTTP GET command to get the list when s_client connects:
 
 GET /some/page/needing/a/certificate.html