Return to cacert.d CVS log

Up to [ELWIX - Embedded LightWeight unIX -] / embedaddon / curl / docs / cmdline-opts

Annotation of embedaddon/curl/docs/cmdline-opts/cacert.d, revision 1.1.1.1

1.1       misho       1: Long: cacert
                      2: Arg: <file>
                      3: Help: CA certificate to verify peer against
                      4: Protocols: TLS
                      5: ---
                      6: Tells curl to use the specified certificate file to verify the peer. The file
                      7: may contain multiple CA certificates. The certificate(s) must be in PEM
                      8: format. Normally curl is built to use a default file for this, so this option
                      9: is typically used to alter that default file.
                     10: 
                     11: curl recognizes the environment variable named 'CURL_CA_BUNDLE' if it is
                     12: set, and uses the given path as a path to a CA cert bundle. This option
                     13: overrides that variable.
                     14: 
                     15: The windows version of curl will automatically look for a CA certs file named
                     16: \'curl-ca-bundle.crt\', either in the same directory as curl.exe, or in the
                     17: Current Working Directory, or in any folder along your PATH.
                     18: 
                     19: If curl is built against the NSS SSL library, the NSS PEM PKCS#11 module
                     20: (libnsspem.so) needs to be available for this option to work properly.
                     21: 
                     22: (iOS and macOS only) If curl is built against Secure Transport, then this
                     23: option is supported for backward compatibility with other SSL engines, but it
                     24: should not be set. If the option is not set, then curl will use the
                     25: certificates in the system and user Keychain to verify the peer, which is the
                     26: preferred method of verifying the peer's certificate chain.
                     27: 
                     28: (Schannel only) This option is supported for Schannel in Windows 7 or later with
                     29: libcurl 7.60 or later. This option is supported for backward compatibility
                     30: with other SSL engines; instead it is recommended to use Windows' store of
                     31: root certificates (the default for Schannel).
                     32: 
                     33: If this option is used several times, the last one will be used.