xref: /curl/docs/cmdline-opts/capath.md (revision 8a3740bc)
1---
2c: Copyright (C) Daniel Stenberg, <daniel@haxx.se>, et al.
3SPDX-License-Identifier: curl
4Long: capath
5Arg: <dir>
6Help: CA directory to verify peer against
7Protocols: TLS
8Category: tls
9Added: 7.9.8
10Multi: single
11See-also:
12  - cacert
13  - dump-ca-embed
14  - insecure
15Example:
16  - --capath /local/directory $URL
17---
18
19# `--capath`
20
21Use the specified certificate directory to verify the peer. Multiple paths can
22be provided by separated with colon (`:`) (e.g. `path1:path2:path3`). The
23certificates must be in PEM format, and if curl is built against OpenSSL, the
24directory must have been processed using the c_rehash utility supplied with
25OpenSSL. Using --capath can allow OpenSSL-powered curl to make SSL-connections
26much more efficiently than using --cacert if the --cacert file contains many
27CA certificates.
28
29If this option is set, the default capath value is ignored.
30