1 Long: cacert 2 Arg: <file> 3 Help: CA certificate to verify peer against 4 Protocols: TLS 5 Category: tls 6 Example: --cacert CA-file.txt $URL 7 Added: 7.5 8 --- 9 Tells curl to use the specified certificate file to verify the peer. The file 10 may contain multiple CA certificates. The certificate(s) must be in PEM 11 format. Normally curl is built to use a default file for this, so this option 12 is typically used to alter that default file. 13 14 curl recognizes the environment variable named 'CURL_CA_BUNDLE' if it is 15 set, and uses the given path as a path to a CA cert bundle. This option 16 overrides that variable. 17 18 The windows version of curl will automatically look for a CA certs file named 19 'curl-ca-bundle.crt', either in the same directory as curl.exe, or in the 20 Current Working Directory, or in any folder along your PATH. 21 22 If curl is built against the NSS SSL library, the NSS PEM PKCS#11 module 23 (libnsspem.so) needs to be available for this option to work properly. 24 25 (iOS and macOS only) If curl is built against Secure Transport, then this 26 option is supported for backward compatibility with other SSL engines, but it 27 should not be set. If the option is not set, then curl will use the 28 certificates in the system and user Keychain to verify the peer, which is the 29 preferred method of verifying the peer's certificate chain. 30 31 (Schannel only) This option is supported for Schannel in Windows 7 or later 32 with libcurl 7.60 or later. This option is supported for backward 33 compatibility with other SSL engines; instead it is recommended to use 34 Windows' store of root certificates (the default for Schannel). 35 36 If this option is used several times, the last one will be used. 37