diff --git a/apps/ocsp.c b/apps/ocsp.c
index 44e8ba022..6f85c9340 100644
--- a/apps/ocsp.c
+++ b/apps/ocsp.c
@@ -649,6 +649,7 @@ int MAIN(int argc, char **argv)
 		BIO_printf (bio_err, "-resp_key_id       identify reponse by signing certificate key ID\n");
 		BIO_printf (bio_err, "-nrequest n        number of requests to accept (default unlimited)\n");
 		BIO_printf (bio_err, "-<dgst alg>     use specified digest in the request\n");
+		BIO_printf (bio_err, "-timeout n timeout connection to OCSP responder after n seconds\n");
 		goto end;
 		}
 
diff --git a/doc/apps/ocsp.pod b/doc/apps/ocsp.pod
index af2e12e41..38f026afc 100644
--- a/doc/apps/ocsp.pod
+++ b/doc/apps/ocsp.pod
@@ -133,6 +133,10 @@ if the B<host> option is present then the OCSP request is sent to the host
 B<hostname> on port B<port>. B<path> specifies the HTTP path name to use
 or "/" by default.
 
+=item B<-timeout seconds>
+
+connection timeout to the OCSP responder in seconds
+
 =item B<-CAfile file>, B<-CApath pathname>
 
 file or pathname containing trusted CA certificates. These are used to verify