insecure.d: expand and clarify

Closes #8017
This commit is contained in:
Daniel Stenberg 2021-11-15 15:07:01 +01:00
parent d1828b470f
commit f5f12331e5
No known key found for this signature in database
GPG key ID: 5CC908FDB71E12C2

View file

@ -2,19 +2,21 @@ Long: insecure
Short: k
Help: Allow insecure server connections when using SSL
Protocols: TLS
See-also: proxy-insecure cacert
See-also: proxy-insecure cacert capath
Category: tls
Example: --insecure $URL
Added: 7.10
---
By default, every SSL connection curl makes is verified to be secure. This
option allows curl to proceed and operate even for server connections
otherwise considered insecure.
By default, every SSL/TLS connection curl makes is verified to be secure
before the transfer takes place. This option makes curl skip the verification
step and proceed without checking.
The server connection is verified by making sure the server's certificate
contains the right name and verifies successfully using the cert store.
When this option is not used, curl verifies the server's TLS certificate
before it continues: that the certificate contains the right name which
matches the host name used in the URL and that the certificate has been signed
by a CA certificate present in the cert store.
See this online resource for further details:
https://curl.se/docs/sslcerts.html
**WARNING**: this makes the transfer insecure.
**WARNING**: using this option makes the transfer insecure.