curl/docs/cmdline-opts/cert-type.md
Daniel Stenberg 08a3e8e19a
TLS: remove support for Secure Transport and BearSSL
These libraries do not support TLS 1.3 and have been marked for removal
for over a year. We want to help users select a TLS dependency that is
future-proof and reliable, and not supporting TLS 1.3 in 2025 does not
infer confidence. Users who build libcurl are likely to be served better
and get something more future-proof with a TLS library that supports
1.3.

Closes #16677
2025-06-11 07:54:19 +02:00

611 B

c SPDX-License-Identifier Long Protocols Arg Help Category Added Multi See-also Example
Copyright (C) Daniel Stenberg, <daniel@haxx.se>, et al. curl cert-type TLS <type> Certificate type (DER/PEM/ENG/PROV/P12) tls 7.9.3 single
cert
key
key-type
--cert-type PEM --cert file $URL

--cert-type

Set type of the provided client certificate. PEM, DER, ENG, PROV and P12 are recognized types.

The default type depends on the TLS backend and is usually PEM. For Schannel it is P12. If --cert is a pkcs11: URI then ENG or PROV is the default type (depending on OpenSSL version).