generic-library/curl
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

docs: update the comments about loading CA certs with NSS

Browse Source 
Bug: https://bugzilla.redhat.com/696783
This commit is contained in:
Kamil Dudka 2013-01-28 14:07:32 +01:00
parent 0494da830b
commit 11dde6ac72
2 changed files with 4 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
docs/curl.1
View File

@ -423,11 +423,8 @@ The windows version of curl will automatically look for a CA certs file named
\'curl-ca-bundle.crt\', either in the same directory as curl.exe, or in the \'curl-ca-bundle.crt\', either in the same directory as curl.exe, or in the
Current Working Directory, or in any folder along your PATH. Current Working Directory, or in any folder along your PATH.
If curl is built against the NSS SSL library then this option tells If curl is built against the NSS SSL library, the NSS PEM PKCS#11 module
curl the nickname of the CA certificate to use within the NSS database (libnsspem.so) needs to be available for this option to work properly.
defined by the environment variable SSL_DIR (or by default /etc/pki/nssdb).
If the NSS PEM PKCS#11 module (libnsspem.so) is available then PEM files
may be loaded.
If this option is used several times, the last one will be used. If this option is used several times, the last one will be used.
.IP "--capath <CA certificate directory>" .IP "--capath <CA certificate directory>"

4
docs/libcurl/curl_easy_setopt.3
View File

@ -2260,8 +2260,8 @@ even indicate an accessible file.
This option is by default set to the system path where libcurl's cacert bundle This option is by default set to the system path where libcurl's cacert bundle
is assumed to be stored, as established at build time. is assumed to be stored, as established at build time.
When built against NSS, this is the directory that the NSS certificate If curl is built against the NSS SSL library, the NSS PEM PKCS#11 module
database resides in. (libnsspem.so) needs to be available for this option to work properly.
.IP CURLOPT_ISSUERCERT .IP CURLOPT_ISSUERCERT
Pass a char * to a zero terminated string naming a file holding a CA Pass a char * to a zero terminated string naming a file holding a CA
certificate in PEM format. If the option is set, an additional check against certificate in PEM format. If the option is set, an additional check against