Return to cacert.d CVS log

Up to [ELWIX - Embedded LightWeight unIX -] / embedaddon / curl / docs / cmdline-opts

curl

    1: Long: cacert
    2: Arg: <file>
    3: Help: CA certificate to verify peer against
    4: Protocols: TLS
    5: ---
    6: Tells curl to use the specified certificate file to verify the peer. The file
    7: may contain multiple CA certificates. The certificate(s) must be in PEM
    8: format. Normally curl is built to use a default file for this, so this option
    9: is typically used to alter that default file.
   10: 
   11: curl recognizes the environment variable named 'CURL_CA_BUNDLE' if it is
   12: set, and uses the given path as a path to a CA cert bundle. This option
   13: overrides that variable.
   14: 
   15: The windows version of curl will automatically look for a CA certs file named
   16: \'curl-ca-bundle.crt\', either in the same directory as curl.exe, or in the
   17: Current Working Directory, or in any folder along your PATH.
   18: 
   19: If curl is built against the NSS SSL library, the NSS PEM PKCS#11 module
   20: (libnsspem.so) needs to be available for this option to work properly.
   21: 
   22: (iOS and macOS only) If curl is built against Secure Transport, then this
   23: option is supported for backward compatibility with other SSL engines, but it
   24: should not be set. If the option is not set, then curl will use the
   25: certificates in the system and user Keychain to verify the peer, which is the
   26: preferred method of verifying the peer's certificate chain.
   27: 
   28: (Schannel only) This option is supported for Schannel in Windows 7 or later with
   29: libcurl 7.60 or later. This option is supported for backward compatibility
   30: with other SSL engines; instead it is recommended to use Windows' store of
   31: root certificates (the default for Schannel).
   32: 
   33: If this option is used several times, the last one will be used.