Return to pinnedpubkey.d CVS log

Up to [ELWIX - Embedded LightWeight unIX -] / embedaddon / curl / docs / cmdline-opts

Annotation of embedaddon/curl/docs/cmdline-opts/pinnedpubkey.d, revision 1.1.1.1

1.1       misho       1: Long: pinnedpubkey
                      2: Arg: <hashes>
                      3: Help: FILE/HASHES Public key to verify peer against
                      4: Protocols: TLS
                      5: ---
                      6: Tells curl to use the specified public key file (or hashes) to verify the
                      7: peer. This can be a path to a file which contains a single public key in PEM
                      8: or DER format, or any number of base64 encoded sha256 hashes preceded by
                      9: \'sha256//\' and separated by \';\'
                     10: 
                     11: When negotiating a TLS or SSL connection, the server sends a certificate
                     12: indicating its identity. A public key is extracted from this certificate and
                     13: if it does not exactly match the public key provided to this option, curl will
                     14: abort the connection before sending or receiving any data.
                     15: 
                     16: PEM/DER support:
                     17:   7.39.0: OpenSSL, GnuTLS and GSKit
                     18:   7.43.0: NSS and wolfSSL
                     19:   7.47.0: mbedtls
                     20: sha256 support:
                     21:   7.44.0: OpenSSL, GnuTLS, NSS and wolfSSL
                     22:   7.47.0: mbedtls
                     23: Other SSL backends not supported.
                     24: 
                     25: If this option is used several times, the last one will be used.