xref: /aosp_15_r20/external/curl/docs/cmdline-opts/ca-native.md (revision 6236dae45794135f37c4eb022389c904c8b0090d)
1*6236dae4SAndroid Build Coastguard Worker---
2*6236dae4SAndroid Build Coastguard Workerc: Copyright (C) Daniel Stenberg, <[email protected]>, et al.
3*6236dae4SAndroid Build Coastguard WorkerSPDX-License-Identifier: curl
4*6236dae4SAndroid Build Coastguard WorkerLong: ca-native
5*6236dae4SAndroid Build Coastguard WorkerHelp: Load CA certs from the OS
6*6236dae4SAndroid Build Coastguard WorkerProtocols: TLS
7*6236dae4SAndroid Build Coastguard WorkerCategory: tls
8*6236dae4SAndroid Build Coastguard WorkerAdded: 8.2.0
9*6236dae4SAndroid Build Coastguard WorkerMulti: boolean
10*6236dae4SAndroid Build Coastguard WorkerSee-also:
11*6236dae4SAndroid Build Coastguard Worker  - cacert
12*6236dae4SAndroid Build Coastguard Worker  - capath
13*6236dae4SAndroid Build Coastguard Worker  - dump-ca-embed
14*6236dae4SAndroid Build Coastguard Worker  - insecure
15*6236dae4SAndroid Build Coastguard WorkerExample:
16*6236dae4SAndroid Build Coastguard Worker  - --ca-native $URL
17*6236dae4SAndroid Build Coastguard Worker---
18*6236dae4SAndroid Build Coastguard Worker
19*6236dae4SAndroid Build Coastguard Worker# `--ca-native`
20*6236dae4SAndroid Build Coastguard Worker
21*6236dae4SAndroid Build Coastguard WorkerUse the CA store from the native operating system to verify the peer. By
22*6236dae4SAndroid Build Coastguard Workerdefault, curl otherwise uses a CA store provided in a single file or
23*6236dae4SAndroid Build Coastguard Workerdirectory, but when using this option it interfaces the operating system's own
24*6236dae4SAndroid Build Coastguard Workervault.
25*6236dae4SAndroid Build Coastguard Worker
26*6236dae4SAndroid Build Coastguard WorkerThis option works for curl on Windows when built to use OpenSSL, wolfSSL
27*6236dae4SAndroid Build Coastguard Worker(added in 8.3.0) or GnuTLS (added in 8.5.0). When curl on Windows is built to
28*6236dae4SAndroid Build Coastguard Workeruse Schannel, this feature is implied and curl then only uses the native CA
29*6236dae4SAndroid Build Coastguard Workerstore.
30