Upgrade chrome's OpenSSL to same version Android ships with.

openssl/doc/apps/ocsp.pod

 =pod
 
 =head1 NAME
 
 ocsp - Online Certificate Status Protocol utility
 
 =head1 SYNOPSIS
 
 B<openssl> B<ocsp>
 [B<-out file>]
@@ skipping 33 matching lines @@
 [B<-index file>]
 [B<-CA file>]
 [B<-rsigner file>]
 [B<-rkey file>]
 [B<-rother file>]
 [B<-resp_no_certs>]
 [B<-nmin n>]
 [B<-ndays n>]
 [B<-resp_key_id>]
 [B<-nrequest n>]
+[B<-md5|-sha1|...>]
 
 =head1 DESCRIPTION
 
 The Online Certificate Status Protocol (OCSP) enables applications to
 determine the (revocation) state of an identified certificate (RFC 2560).
 
 The B<ocsp> command performs many common OCSP tasks. It can be used
 to print out requests and responses, create requests and send queries
 to an OCSP responder and behave like a mini OCSP server itself.
 
@@ skipping 135 matching lines @@
 the interval between the two times may be only a few seconds. In practice the OCSP
 responder and clients clocks may not be precisely synchronised and so such a check
 may fail. To avoid this the B<-validity_period> option can be used to specify an
 acceptable error range in seconds, the default value is 5 minutes.
 
 If the B<notAfter> time is omitted from a response then this means that new status
 information is immediately available. In this case the age of the B<notBefore> field
 is checked to see it is not older than B<age> seconds old. By default this additional
 check is not performed.
 
+=item B<-md5|-sha1|-sha256|-ripemod160|...>
+
+this option sets digest algorithm to use for certificate identification
+in the OCSP request. By default SHA-1 is used. 
+
 =back
 
 =head1 OCSP SERVER OPTIONS
 
 =over 4
 
 =item B<-index indexfile>
 
 B<indexfile> is a text index file in B<ca> format containing certificate revocation
 information.
@@ skipping 137 matching lines @@
 Query status information using internally generated request:
 
  openssl ocsp -index demoCA/index.txt -rsigner rcert.pem -CA demoCA/cacert.pem
      -issuer demoCA/cacert.pem -serial 1
 
 Query status information using request read from a file, write response to a
 second file.
 
  openssl ocsp -index demoCA/index.txt -rsigner rcert.pem -CA demoCA/cacert.pem
      -reqin req.der -respout resp.der