2022-06-14 06:12:03 +08:00
|
|
|
c: Copyright (C) 1998 - 2022, Daniel Stenberg, <daniel@haxx.se>, et al.
|
|
|
|
SPDX-License-Identifier: curl
|
2016-11-16 06:44:58 +08:00
|
|
|
Long: cacert
|
2017-08-14 22:13:32 +08:00
|
|
|
Arg: <file>
|
2016-11-16 06:44:58 +08:00
|
|
|
Help: CA certificate to verify peer against
|
|
|
|
Protocols: TLS
|
2020-07-13 20:15:04 +08:00
|
|
|
Category: tls
|
2021-11-15 22:58:20 +08:00
|
|
|
See-also: capath insecure
|
2021-08-31 22:37:14 +08:00
|
|
|
Example: --cacert CA-file.txt $URL
|
2021-09-28 17:50:07 +08:00
|
|
|
Added: 7.5
|
2022-10-18 16:39:43 +08:00
|
|
|
Multi: single
|
2016-11-16 06:44:58 +08:00
|
|
|
---
|
|
|
|
Tells curl to use the specified certificate file to verify the peer. The file
|
|
|
|
may contain multiple CA certificates. The certificate(s) must be in PEM
|
|
|
|
format. Normally curl is built to use a default file for this, so this option
|
|
|
|
is typically used to alter that default file.
|
|
|
|
|
|
|
|
curl recognizes the environment variable named 'CURL_CA_BUNDLE' if it is
|
|
|
|
set, and uses the given path as a path to a CA cert bundle. This option
|
|
|
|
overrides that variable.
|
|
|
|
|
|
|
|
The windows version of curl will automatically look for a CA certs file named
|
2021-11-01 16:55:28 +08:00
|
|
|
'curl-ca-bundle.crt', either in the same directory as curl.exe, or in the
|
2016-11-16 06:44:58 +08:00
|
|
|
Current Working Directory, or in any folder along your PATH.
|
|
|
|
|
|
|
|
If curl is built against the NSS SSL library, the NSS PEM PKCS#11 module
|
|
|
|
(libnsspem.so) needs to be available for this option to work properly.
|
|
|
|
|
|
|
|
(iOS and macOS only) If curl is built against Secure Transport, then this
|
|
|
|
option is supported for backward compatibility with other SSL engines, but it
|
|
|
|
should not be set. If the option is not set, then curl will use the
|
|
|
|
certificates in the system and user Keychain to verify the peer, which is the
|
|
|
|
preferred method of verifying the peer's certificate chain.
|
|
|
|
|
2021-08-31 22:37:14 +08:00
|
|
|
(Schannel only) This option is supported for Schannel in Windows 7 or later
|
|
|
|
with libcurl 7.60 or later. This option is supported for backward
|
|
|
|
compatibility with other SSL engines; instead it is recommended to use
|
|
|
|
Windows' store of root certificates (the default for Schannel).
|