mirror of
https://github.com/curl/curl.git
synced 2024-12-21 06:50:10 +08:00
78d6232f1f
We remove support for building curl with gskit. - This is a niche TLS library, only running on some IBM systems - no regular curl contributors use this backend - no CI builds use or verify this backend - gskit, or the curl adaption for it, lacks many modern TLS features making it an inferior solution - build breakages in this code take weeks or more to get detected - fixing gskit code is mostly done "flying blind" This removal has been advertized in DEPRECATED in Jan 2, 2023 and it has been mentioned on the curl-library mailing list. It could be brought back, this is not a ban. Given proper effort and will, gskit support is welcome back into the curl TLS backend family. Closes #11460
39 lines
1.1 KiB
Makefile
39 lines
1.1 KiB
Makefile
c: Copyright (C) Daniel Stenberg, <daniel@haxx.se>, et al.
|
|
SPDX-License-Identifier: curl
|
|
Long: pinnedpubkey
|
|
Arg: <hashes>
|
|
Help: FILE/HASHES Public key to verify peer against
|
|
Protocols: TLS
|
|
Category: tls
|
|
Example: --pinnedpubkey keyfile $URL
|
|
Example: --pinnedpubkey 'sha256//ce118b51897f4452dc' $URL
|
|
Added: 7.39.0
|
|
See-also: hostpubsha256
|
|
Multi: single
|
|
---
|
|
Tells curl to use the specified public key file (or hashes) to verify the
|
|
peer. This can be a path to a file which contains a single public key in PEM
|
|
or DER format, or any number of base64 encoded sha256 hashes preceded by
|
|
'sha256//' and separated by ';'.
|
|
|
|
When negotiating a TLS or SSL connection, the server sends a certificate
|
|
indicating its identity. A public key is extracted from this certificate and
|
|
if it does not exactly match the public key provided to this option, curl will
|
|
abort the connection before sending or receiving any data.
|
|
|
|
PEM/DER support:
|
|
|
|
7.39.0: OpenSSL and GnuTLS
|
|
|
|
7.43.0: wolfSSL
|
|
|
|
7.47.0: mbedTLS
|
|
|
|
sha256 support:
|
|
|
|
7.44.0: OpenSSL, GnuTLS and wolfSSL
|
|
|
|
7.47.0: mbedTLS
|
|
|
|
Other SSL backends not supported.
|