Editing CURL (section)

=== curl ===
curl is a command-line tool for getting or sending data including files using [[URL]] syntax. curl provides an interface to the libcurl library; it supports every protocol libcurl supports.<ref name=curl1/>

curl supports [[HTTPS]] and performs SSL certificate verification by default when a secure protocol is specified such as HTTPS.  When curl connects to a remote server via HTTPS, it will obtain the remote server certificate, then check against its [[CA certificate]] store the validity of the remote server to ensure the remote server is the one it claims to be.  Some curl packages are bundled with CA certificate store file.  There are several options to specify a CA certificate such as {{mono|--cacert}} and {{mono|--capath}}. The {{mono|--cacert}} option can be used to specify the location of the CA certificate store file.  In the Windows platform, if a CA certificate file is not specified, curl will look for a CA certificate file name “curl-ca-bundle.crt” in the following order:
# Directory where the curl program is located.
# Current working directory.
# Windows system directory.
# Windows directory.
# Directories specified in the %PATH% environment variables.<ref name = "SSL, haxx.se" />

curl will return an error message if the remote server is using a self-signed certificate, or if the remote server certificate is not signed by a CA listed in the CA cert file. {{mono|-k}} or {{mono|--insecure}} option can be used to skip certificate verification.  Alternatively, if the remote server is trusted, the remote server CA certificate can be added to the CA certificate store file.