diff options
| author | Archangel_SDY <Archangel.SDY@gmail.com> | 2018-04-18 21:01:14 +0800 |
|---|---|---|
| committer | Jay Satiro <raysatiro@yahoo.com> | 2018-04-23 03:16:52 -0400 |
| commit | f0819f99ae226c293c0f49ef5e715a44bdad618b (patch) | |
| tree | 5286b212ef2708d378d064ecd8d78d0b9b47929a | |
| parent | ab988caef66d75707fd43756906b9b9f42a89337 (diff) | |
| download | curl-f0819f99ae226c293c0f49ef5e715a44bdad618b.tar.gz | |
CURLOPT_SSLCERT.3: improve WinSSL-specific usage info
Ref: https://github.com/curl/curl/pull/2376#issuecomment-381858780
Closes https://github.com/curl/curl/pull/2504
| -rw-r--r-- | docs/cmdline-opts/cert.d | 11 | ||||
| -rw-r--r-- | docs/libcurl/opts/CURLOPT_SSLCERT.3 | 12 |
2 files changed, 21 insertions, 2 deletions
diff --git a/docs/cmdline-opts/cert.d b/docs/cmdline-opts/cert.d index 0cd5d535f..adf62fc7a 100644 --- a/docs/cmdline-opts/cert.d +++ b/docs/cmdline-opts/cert.d @@ -29,4 +29,15 @@ system or user keychain, or the path to a PKCS#12-encoded certificate and private key. If you want to use a file from the current directory, please precede it with "./" prefix, in order to avoid confusion with a nickname. +(Schannel/WinSSL only) Client certificates must be specified by a path +expression to a certificate store. (Loading PFX is not supported; you can +import it to a store first). You can use +"<store location>\\<store name>\\<thumbprint>" to refer to a certificate +in the system certificates store, for example, +"CurrentUser\\MY\\934a7ac6f8a5d579285a74fa61e19f23ddfe8d7a". Thumbprint is +usually a SHA-1 hex string which you can see in certificate details. Following +store locations are supported: CurrentUser, LocalMachine, CurrentService, +Services, CurrentUserGroupPolicy, LocalMachineGroupPolicy, +LocalMachineEnterprise. + If this option is used several times, the last one will be used. diff --git a/docs/libcurl/opts/CURLOPT_SSLCERT.3 b/docs/libcurl/opts/CURLOPT_SSLCERT.3 index 3f40b73b9..bd867772a 100644 --- a/docs/libcurl/opts/CURLOPT_SSLCERT.3 +++ b/docs/libcurl/opts/CURLOPT_SSLCERT.3 @@ -38,8 +38,16 @@ you wish to authenticate with as it is named in the security database. If you want to use a file from the current directory, please precede it with "./" prefix, in order to avoid confusion with a nickname. -With WinSSL, this can be expression like "CurrentUser\\MY\\<thumbprint>" to -refer to a certificate in the system certificates store. +(Schannel/WinSSL only) Client certificates must be specified by a path +expression to a certificate store. (Loading PFX is not supported; you can +import it to a store first). You can use +"<store location>\\<store name>\\<thumbprint>" to refer to a certificate +in the system certificates store, for example, +"CurrentUser\\MY\\934a7ac6f8a5d579285a74fa61e19f23ddfe8d7a". Thumbprint is +usually a SHA-1 hex string which you can see in certificate details. Following +store locations are supported: CurrentUser, LocalMachine, CurrentService, +Services, CurrentUserGroupPolicy, LocalMachineGroupPolicy, +LocalMachineEnterprise. When using a client certificate, you most likely also need to provide a private key with \fICURLOPT_SSLKEY(3)\fP. |