xref: /curl/docs/cmdline-opts/ca-native.md (revision fe9f68fa)
1---
2c: Copyright (C) Daniel Stenberg, <daniel@haxx.se>, et al.
3SPDX-License-Identifier: curl
4Long: ca-native
5Help: Load CA certs from the OS
6Protocols: TLS
7Category: tls
8Added: 8.2.0
9Multi: boolean
10See-also:
11  - cacert
12  - capath
13  - insecure
14Example:
15  - --ca-native $URL
16---
17
18# `--ca-native`
19
20Use the CA store from the native operating system to verify the peer. By
21default, curl otherwise uses a CA store provided in a single file or
22directory, but when using this option it interfaces the operating system's own
23vault.
24
25This option works for curl on Windows when built to use OpenSSL, wolfSSL
26(added in 8.3.0) or GnuTLS (added in 8.5.0). When curl on Windows is built to
27use Schannel, this feature is implied and curl then only uses the native CA
28store.
29