curl/docs/cmdline-opts/proxy-cert-type.md
Jakub Jelen 999cc818c5
openssl: add support to use keys and certificates from PKCS#11 provider
In OpenSSL < 3.0, the modularity was provided by mechanism called
"engines". This is supported in curl, but the engines got deprecated
with OpenSSL 3.0 in favor of more versatile providers.

This adds a support for OpenSSL Providers, to use PKCS#11 keys, namely
through the pkcs11 provider. This is done using similar approach as the
engines and this is automatically built in when the OpenSSL 3 and newer
is used.

Signed-off-by: Jakub Jelen <jjelen@redhat.com>

Closes #15587
2025-01-01 14:47:31 +01:00

761 B

c SPDX-License-Identifier Long Arg Added Help Category Multi See-also Example
Copyright (C) Daniel Stenberg, <daniel@haxx.se>, et al. curl proxy-cert-type <type> 7.52.0 Client certificate type for HTTPS proxy proxy tls single
proxy-cert
proxy-key
--proxy-cert-type PEM --proxy-cert file -x https://proxy $URL

--proxy-cert-type

Set type of the provided client certificate when using HTTPS proxy. PEM, DER, ENG, PROV and P12 are recognized types.

The default type depends on the TLS backend and is usually PEM, however for Secure Transport and Schannel it is P12. If --proxy-cert is a pkcs11: URI then ENG or PROV is the default type (depending on OpenSSL version).

Equivalent to --cert-type but used in HTTPS proxy context.