diff --git a/doc/testssl.1 b/doc/testssl.1
index b1e3f94..13f152d 100644
--- a/doc/testssl.1
+++ b/doc/testssl.1
@@ -507,6 +507,12 @@ CA_BUNDLES_PATH: If you have an own set of CA bundles or you want to point tests
 .IP "\(bu" 4
 MAX_SOCKET_FAIL: A number which tells testssl\.sh how often a TCP socket connection may fail before the program gives up and terminates\. The default is 2\.
 .
+.IP "\(bu" 4
+MAX_OSSL_FAIL: A number which tells testssl\.sh how often an OpenSSL s_client connect may fail before the program gives up and terminates\. The default is 2\.
+.
+.IP "\(bu" 4
+MAX_HEADER_FAIL: A number which tells testssl\.sh how often a HTTP GET request over OpenSSL may return an empty file before the program gives up and terminates\. The default is 3\.
+.
 .IP "" 0
 .
 .SH "EXAMPLES"
diff --git a/doc/testssl.1.html b/doc/testssl.1.html
index 20faea3..3686707 100644
--- a/doc/testssl.1.html
+++ b/doc/testssl.1.html
@@ -440,6 +440,8 @@ The same can be achieved by setting the environment variable <code>WARNINGS</cod
 use. Please note that it overrides completely the builtin path of testssl.sh which means that you will only test against the bundles you point to. Also you might want to use ~/utils/create_ca_hashes.sh
 to create the hashes for HPKP.</li>
 <li>MAX_SOCKET_FAIL: A number which tells testssl.sh how often a TCP socket connection may fail before the program gives up and terminates. The default is 2.</li>
+<li>MAX_OSSL_FAIL: A number which tells testssl.sh how often an OpenSSL s_client connect may fail before the program gives up and terminates. The default is 2.</li>
+<li>MAX_HEADER_FAIL: A number which tells testssl.sh how often a HTTP GET request over OpenSSL may return an empty file before the program gives up and terminates. The default is 3.</li>
 </ul>
 
 
diff --git a/doc/testssl.1.md b/doc/testssl.1.md
index 6fe46c0..8482455 100644
--- a/doc/testssl.1.md
+++ b/doc/testssl.1.md
@@ -371,6 +371,8 @@ Except the environment variables mentioned above which replace command line opti
 use. Please note that it overrides completely the builtin path of testssl.sh which means that you will only test against the bundles you point to. Also you might want to use ~/utils/create_ca_hashes.sh
 to create the hashes for HPKP.
 * MAX_SOCKET_FAIL: A number which tells testssl.sh how often a TCP socket connection may fail before the program gives up and terminates. The default is 2.
+* MAX_OSSL_FAIL: A number which tells testssl.sh how often an OpenSSL s_client connect may fail before the program gives up and terminates. The default is 2.
+* MAX_HEADER_FAIL: A number which tells testssl.sh how often a HTTP GET request over OpenSSL may return an empty file before the program gives up and terminates. The default is 3.
 
 
 [comment]: # CAPATH