curl/docs/cmdline-opts/dump-ca-embed.md
Viktor Szakats 8a3740bc8e
curl: support embedding a CA bundle
Add the ability to embed a CA bundle into the curl binary. It is used
when no other runtime or build-time option set one.

This helps curl-for-win macOS and Linux builds to run standalone, and
also helps Windows builds to avoid picking up the CA bundle from an
arbitrary (possibly world-writable) location (though this behaviour is
not currently disablable).

Usage:
- cmake: `-DCURL_CA_EMBED=/path/to/curl-ca-bundle.crt`
- autotools: `--with-ca-embed=/path/to/curl-ca-bundle.crt`
- Makefile.mk: `CURL_CA_EMBED=/path/to/curl-ca-bundle.crt`

Also add new command-line option `--dump-ca-embed` to dump the embedded
CA bundle to standard output.

Closes #14059
2024-08-03 09:22:26 +02:00

537 B

c SPDX-License-Identifier Long Help Protocols Category Added Multi See-also Example
Copyright (C) Daniel Stenberg, <daniel@haxx.se>, et al. curl dump-ca-embed Write the embedded CA bundle to standard output TLS http proxy tls 8.10.0 single
ca-native
cacert
capath
proxy-ca-native
proxy-cacert
proxy-capath
--dump-ca-embed

--dump-ca-embed

Write the CA bundle embedded in curl to standard output, then quit.

If curl was not built with a default CA bundle embedded, the output is empty.