diff options
Diffstat (limited to 'docs/cmdline-opts/proxy-pinnedpubkey.d')
| -rw-r--r-- | docs/cmdline-opts/proxy-pinnedpubkey.d | 23 |
1 files changed, 23 insertions, 0 deletions
diff --git a/docs/cmdline-opts/proxy-pinnedpubkey.d b/docs/cmdline-opts/proxy-pinnedpubkey.d new file mode 100644 index 000000000..e4ed3d677 --- /dev/null +++ b/docs/cmdline-opts/proxy-pinnedpubkey.d @@ -0,0 +1,23 @@ +Long: proxy-pinnedpubkey +Arg: <hashes> +Help: FILE/HASHES public key to verify proxy with +Protocols: TLS +--- +Tells curl to use the specified public key file (or hashes) to verify the +proxy. This can be a path to a file which contains a single public key in PEM +or DER format, or any number of base64 encoded sha256 hashes preceded by +\'sha256//\' and separated by \';\' + +When negotiating a TLS or SSL connection, the server sends a certificate +indicating its identity. A public key is extracted from this certificate and +if it does not exactly match the public key provided to this option, curl will +abort the connection before sending or receiving any data. + +PEM/DER support: + OpenSSL, GnuTLS, GSKit, NSS, wolfSSL/CyaSSL, mbedtls and PolarSSL +sha256 support: + OpenSSL, GnuTLS, NSS, wolfSSL/CyaSSL, mbedtls and PolarSSL + +Other SSL backends not supported. + +If this option is used several times, the last one will be used. |