1 Long: cacert 2 Arg: <file> 3 Help: CA certificate to verify peer against 4 Protocols: TLS 5 Category: tls 6 --- 7 Tells curl to use the specified certificate file to verify the peer. The file 8 may contain multiple CA certificates. The certificate(s) must be in PEM 9 format. Normally curl is built to use a default file for this, so this option 10 is typically used to alter that default file. 11 12 curl recognizes the environment variable named 'CURL_CA_BUNDLE' if it is 13 set, and uses the given path as a path to a CA cert bundle. This option 14 overrides that variable. 15 16 The windows version of curl will automatically look for a CA certs file named 17 \'curl-ca-bundle.crt\', either in the same directory as curl.exe, or in the 18 Current Working Directory, or in any folder along your PATH. 19 20 If curl is built against the NSS SSL library, the NSS PEM PKCS#11 module 21 (libnsspem.so) needs to be available for this option to work properly. 22 23 (iOS and macOS only) If curl is built against Secure Transport, then this 24 option is supported for backward compatibility with other SSL engines, but it 25 should not be set. If the option is not set, then curl will use the 26 certificates in the system and user Keychain to verify the peer, which is the 27 preferred method of verifying the peer's certificate chain. 28 29 (Schannel only) This option is supported for Schannel in Windows 7 or later with 30 libcurl 7.60 or later. This option is supported for backward compatibility 31 with other SSL engines; instead it is recommended to use Windows' store of 32 root certificates (the default for Schannel). 33 34 If this option is used several times, the last one will be used. 35