diff options
| author | Daniel Stenberg <daniel@haxx.se> | 2016-11-15 23:44:58 +0100 |
|---|---|---|
| committer | Daniel Stenberg <daniel@haxx.se> | 2016-11-16 10:42:51 +0100 |
| commit | 41b1f649bf63e3663fcf3d4a678fef37688e32b7 (patch) | |
| tree | 4fe54a49307d30025a67a5c83807d857f4bcbeba /docs/cmdline-opts/pinnedpubkey.d | |
| parent | 81e61cda396da7eefb15dcf20b9e8be7ada37283 (diff) | |
| download | gnurl-41b1f649bf63e3663fcf3d4a678fef37688e32b7.tar.gz gnurl-41b1f649bf63e3663fcf3d4a678fef37688e32b7.tar.bz2 gnurl-41b1f649bf63e3663fcf3d4a678fef37688e32b7.zip | |
cmdline-docs: more options converted over
Diffstat (limited to 'docs/cmdline-opts/pinnedpubkey.d')
| -rw-r--r-- | docs/cmdline-opts/pinnedpubkey.d | 27 |
1 files changed, 27 insertions, 0 deletions
diff --git a/docs/cmdline-opts/pinnedpubkey.d b/docs/cmdline-opts/pinnedpubkey.d new file mode 100644 index 000000000..0657e6e79 --- /dev/null +++ b/docs/cmdline-opts/pinnedpubkey.d @@ -0,0 +1,27 @@ +Long: pinnedpubkey +Arg: <hashes> +Help: FILE/HASHES Public key to verify peer against +Protocols: TLS +--- +Tells curl to use the specified public key file (or hashes) to verify the +peer. This can be a path to a file which contains a single public key in PEM +or DER format, or any number of base64 encoded sha256 hashes preceded by +\'sha256//\' and separated by \';\' + +When negotiating a TLS or SSL connection, the server sends a certificate +indicating its identity. A public key is extracted from this certificate and +if it does not exactly match the public key provided to this option, curl will +abort the connection before sending or receiving any data. + +PEM/DER support: + 7.39.0: OpenSSL, GnuTLS and GSKit + 7.43.0: NSS and wolfSSL/CyaSSL + 7.47.0: mbedtls + 7.49.0: PolarSSL +sha256 support: + 7.44.0: OpenSSL, GnuTLS, NSS and wolfSSL/CyaSSL. + 7.47.0: mbedtls + 7.49.0: PolarSSL +Other SSL backends not supported. + +If this option is used several times, the last one will be used. |