summaryrefslogtreecommitdiff
path: root/docs/cmdline-opts/ca-native.d
diff options
context:
space:
mode:
Diffstat (limited to 'docs/cmdline-opts/ca-native.d')
-rw-r--r--docs/cmdline-opts/ca-native.d21
1 files changed, 21 insertions, 0 deletions
diff --git a/docs/cmdline-opts/ca-native.d b/docs/cmdline-opts/ca-native.d
new file mode 100644
index 000000000..51e36918a
--- /dev/null
+++ b/docs/cmdline-opts/ca-native.d
@@ -0,0 +1,21 @@
+c: Copyright (C) Daniel Stenberg, <daniel@haxx.se>, et al.
+SPDX-License-Identifier: curl
+Long: ca-native
+Help: Use CA certificates from the native OS
+Protocols: TLS
+Category: tls
+See-also: cacert capath insecure
+Example: --ca-native $URL
+Added: 8.2.0
+Multi: boolean
+---
+Tells curl to use the CA store from the native operating system to verify the
+peer. By default, curl otherwise uses a CA store provided in a single file or
+directory, but when using this option it interfaces the operating system's
+own vault.
+
+This option only works for curl on Windows when built to use OpenSSL. When
+curl on Windows is built to use Schannel, this feature is implied and curl
+then only uses the native CA store.
+
+curl built with wolfSSL also supports this option (added in 8.3.0).