docs/cmdline: change to .md for cmdline docs
- switch all invidual files documenting command line options into .md,
as the documentation is now markdown-looking.
- made the parser treat 4-space indents as quotes
- switch to building the curl.1 manpage using the "mainpage.idx" file,
which lists the files to include to generate it, instead of using the
previous page-footer/headers. Also, those files are now also .md
ones, using the same format. I gave them underscore prefixes to make
them sort separately:
_NAME.md, _SYNOPSIS.md, _DESCRIPTION.md, _URL.md, _GLOBBING.md,
_VARIABLES.md, _OUTPUT.md, _PROTOCOLS.md, _PROGRESS.md, _VERSION.md,
_OPTIONS.md, _FILES.md, _ENVIRONMENT.md, _PROXYPREFIX.md,
_EXITCODES.md, _BUGS.md, _AUTHORS.md, _WWW.md, _SEEALSO.md
- updated test cases accordingly
Closes #12751
2024-01-21 06:18:43 +08:00
|
|
|
---
|
2023-01-02 20:51:48 +08:00
|
|
|
c: Copyright (C) Daniel Stenberg, <daniel@haxx.se>, et al.
|
2022-06-14 06:12:03 +08:00
|
|
|
SPDX-License-Identifier: curl
|
2016-11-16 06:44:58 +08:00
|
|
|
Long: cacert
|
2017-08-14 22:13:32 +08:00
|
|
|
Arg: <file>
|
2016-11-16 06:44:58 +08:00
|
|
|
Help: CA certificate to verify peer against
|
|
|
|
Protocols: TLS
|
2020-07-13 20:15:04 +08:00
|
|
|
Category: tls
|
2021-09-28 17:50:07 +08:00
|
|
|
Added: 7.5
|
2022-10-18 16:39:43 +08:00
|
|
|
Multi: single
|
docs/cmdline: change to .md for cmdline docs
- switch all invidual files documenting command line options into .md,
as the documentation is now markdown-looking.
- made the parser treat 4-space indents as quotes
- switch to building the curl.1 manpage using the "mainpage.idx" file,
which lists the files to include to generate it, instead of using the
previous page-footer/headers. Also, those files are now also .md
ones, using the same format. I gave them underscore prefixes to make
them sort separately:
_NAME.md, _SYNOPSIS.md, _DESCRIPTION.md, _URL.md, _GLOBBING.md,
_VARIABLES.md, _OUTPUT.md, _PROTOCOLS.md, _PROGRESS.md, _VERSION.md,
_OPTIONS.md, _FILES.md, _ENVIRONMENT.md, _PROXYPREFIX.md,
_EXITCODES.md, _BUGS.md, _AUTHORS.md, _WWW.md, _SEEALSO.md
- updated test cases accordingly
Closes #12751
2024-01-21 06:18:43 +08:00
|
|
|
See-also:
|
|
|
|
- capath
|
2024-06-29 09:30:14 +08:00
|
|
|
- dump-ca-embed
|
docs/cmdline: change to .md for cmdline docs
- switch all invidual files documenting command line options into .md,
as the documentation is now markdown-looking.
- made the parser treat 4-space indents as quotes
- switch to building the curl.1 manpage using the "mainpage.idx" file,
which lists the files to include to generate it, instead of using the
previous page-footer/headers. Also, those files are now also .md
ones, using the same format. I gave them underscore prefixes to make
them sort separately:
_NAME.md, _SYNOPSIS.md, _DESCRIPTION.md, _URL.md, _GLOBBING.md,
_VARIABLES.md, _OUTPUT.md, _PROTOCOLS.md, _PROGRESS.md, _VERSION.md,
_OPTIONS.md, _FILES.md, _ENVIRONMENT.md, _PROXYPREFIX.md,
_EXITCODES.md, _BUGS.md, _AUTHORS.md, _WWW.md, _SEEALSO.md
- updated test cases accordingly
Closes #12751
2024-01-21 06:18:43 +08:00
|
|
|
- insecure
|
|
|
|
Example:
|
|
|
|
- --cacert CA-file.txt $URL
|
2016-11-16 06:44:58 +08:00
|
|
|
---
|
docs/cmdline: change to .md for cmdline docs
- switch all invidual files documenting command line options into .md,
as the documentation is now markdown-looking.
- made the parser treat 4-space indents as quotes
- switch to building the curl.1 manpage using the "mainpage.idx" file,
which lists the files to include to generate it, instead of using the
previous page-footer/headers. Also, those files are now also .md
ones, using the same format. I gave them underscore prefixes to make
them sort separately:
_NAME.md, _SYNOPSIS.md, _DESCRIPTION.md, _URL.md, _GLOBBING.md,
_VARIABLES.md, _OUTPUT.md, _PROTOCOLS.md, _PROGRESS.md, _VERSION.md,
_OPTIONS.md, _FILES.md, _ENVIRONMENT.md, _PROXYPREFIX.md,
_EXITCODES.md, _BUGS.md, _AUTHORS.md, _WWW.md, _SEEALSO.md
- updated test cases accordingly
Closes #12751
2024-01-21 06:18:43 +08:00
|
|
|
|
|
|
|
# `--cacert`
|
|
|
|
|
2024-03-12 17:34:58 +08:00
|
|
|
Use the specified certificate file to verify the peer. The file may contain
|
|
|
|
multiple CA certificates. The certificate(s) must be in PEM format. Normally
|
|
|
|
curl is built to use a default file for this, so this option is typically used
|
|
|
|
to alter that default file.
|
2016-11-16 06:44:58 +08:00
|
|
|
|
2024-01-16 06:39:55 +08:00
|
|
|
curl recognizes the environment variable named 'CURL_CA_BUNDLE' if it is set
|
|
|
|
and the TLS backend is not Schannel, and uses the given path as a path to a CA
|
|
|
|
cert bundle. This option overrides that variable.
|
2016-11-16 06:44:58 +08:00
|
|
|
|
tidy-up: OS names
Use these words and casing more consistently across text, comments and
one curl tool output:
AIX, ALPN, ANSI, BSD, Cygwin, Darwin, FreeBSD, GitHub, HP-UX, Linux,
macOS, MS-DOS, MSYS, MinGW, NTLM, POSIX, Solaris, UNIX, Unix, Unicode,
WINE, WebDAV, Win32, winbind, WinIDN, Windows, Windows CE, Winsock.
Mostly OS names and a few more.
Also a couple of other minor text fixups.
Closes #14360
2024-08-03 07:09:57 +08:00
|
|
|
The Windows version of curl automatically looks for a CA certs file named
|
2021-11-01 16:55:28 +08:00
|
|
|
'curl-ca-bundle.crt', either in the same directory as curl.exe, or in the
|
2016-11-16 06:44:58 +08:00
|
|
|
Current Working Directory, or in any folder along your PATH.
|
|
|
|
|
|
|
|
(iOS and macOS only) If curl is built against Secure Transport, then this
|
|
|
|
option is supported for backward compatibility with other SSL engines, but it
|
2023-09-08 20:32:29 +08:00
|
|
|
should not be set. If the option is not set, then curl uses the certificates
|
|
|
|
in the system and user Keychain to verify the peer, which is the preferred
|
|
|
|
method of verifying the peer's certificate chain.
|
2016-11-16 06:44:58 +08:00
|
|
|
|
2021-08-31 22:37:14 +08:00
|
|
|
(Schannel only) This option is supported for Schannel in Windows 7 or later
|
2023-09-08 20:03:59 +08:00
|
|
|
(added in 7.60.0). This option is supported for backward compatibility with
|
|
|
|
other SSL engines; instead it is recommended to use Windows' store of root
|
|
|
|
certificates (the default for Schannel).
|