Skip to content

Commit 11dde6a

Browse files
committed
docs: update the comments about loading CA certs with NSS
Bug: https://bugzilla.redhat.com/696783
1 parent 0494da8 commit 11dde6a

File tree

2 files changed

+4
-7
lines changed

2 files changed

+4
-7
lines changed

docs/curl.1

Lines changed: 2 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -423,11 +423,8 @@ The windows version of curl will automatically look for a CA certs file named
423423
\'curl-ca-bundle.crt\', either in the same directory as curl.exe, or in the
424424
Current Working Directory, or in any folder along your PATH.
425425

426-
If curl is built against the NSS SSL library then this option tells
427-
curl the nickname of the CA certificate to use within the NSS database
428-
defined by the environment variable SSL_DIR (or by default /etc/pki/nssdb).
429-
If the NSS PEM PKCS#11 module (libnsspem.so) is available then PEM files
430-
may be loaded.
426+
If curl is built against the NSS SSL library, the NSS PEM PKCS#11 module
427+
(libnsspem.so) needs to be available for this option to work properly.
431428

432429
If this option is used several times, the last one will be used.
433430
.IP "--capath <CA certificate directory>"

docs/libcurl/curl_easy_setopt.3

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -2260,8 +2260,8 @@ even indicate an accessible file.
22602260
This option is by default set to the system path where libcurl's cacert bundle
22612261
is assumed to be stored, as established at build time.
22622262

2263-
When built against NSS, this is the directory that the NSS certificate
2264-
database resides in.
2263+
If curl is built against the NSS SSL library, the NSS PEM PKCS#11 module
2264+
(libnsspem.so) needs to be available for this option to work properly.
22652265
.IP CURLOPT_ISSUERCERT
22662266
Pass a char * to a zero terminated string naming a file holding a CA
22672267
certificate in PEM format. If the option is set, an additional check against

0 commit comments

Comments
 (0)