mirror of
https://github.com/curl/curl.git
synced 2026-07-26 19:07:17 +03:00
2494b8dd51
- switch all invidual files documenting command line options into .md, as the documentation is now markdown-looking. - made the parser treat 4-space indents as quotes - switch to building the curl.1 manpage using the "mainpage.idx" file, which lists the files to include to generate it, instead of using the previous page-footer/headers. Also, those files are now also .md ones, using the same format. I gave them underscore prefixes to make them sort separately: _NAME.md, _SYNOPSIS.md, _DESCRIPTION.md, _URL.md, _GLOBBING.md, _VARIABLES.md, _OUTPUT.md, _PROTOCOLS.md, _PROGRESS.md, _VERSION.md, _OPTIONS.md, _FILES.md, _ENVIRONMENT.md, _PROXYPREFIX.md, _EXITCODES.md, _BUGS.md, _AUTHORS.md, _WWW.md, _SEEALSO.md - updated test cases accordingly Closes #12751
41 lines
1.4 KiB
Markdown
41 lines
1.4 KiB
Markdown
---
|
|
c: Copyright (C) Daniel Stenberg, <daniel@haxx.se>, et al.
|
|
SPDX-License-Identifier: curl
|
|
Long: insecure
|
|
Short: k
|
|
Help: Allow insecure server connections
|
|
Protocols: TLS SFTP SCP
|
|
Category: tls sftp scp
|
|
Added: 7.10
|
|
Multi: boolean
|
|
See-also:
|
|
- proxy-insecure
|
|
- cacert
|
|
- capath
|
|
Example:
|
|
- --insecure $URL
|
|
---
|
|
|
|
# `--insecure`
|
|
|
|
By default, every secure connection curl makes is verified to be secure before
|
|
the transfer takes place. This option makes curl skip the verification step
|
|
and proceed without checking.
|
|
|
|
When this option is not used for protocols using TLS, curl verifies the
|
|
server's TLS certificate before it continues: that the certificate contains
|
|
the right name which matches the host name used in the URL and that the
|
|
certificate has been signed by a CA certificate present in the cert store.
|
|
See this online resource for further details:
|
|
**https://curl.se/docs/sslcerts.html**
|
|
|
|
For SFTP and SCP, this option makes curl skip the *known_hosts* verification.
|
|
*known_hosts* is a file normally stored in the user's home directory in the
|
|
".ssh" subdirectory, which contains host names and their public keys.
|
|
|
|
**WARNING**: using this option makes the transfer insecure.
|
|
|
|
When curl uses secure protocols it trusts responses and allows for example
|
|
HSTS and Alt-Svc information to be stored and used subsequently. Using
|
|
--insecure can make curl trust and use such information from malicious
|
|
servers.
|