From 7048d1d21165b0319a1e1e91210b0e5fe43f222f Mon Sep 17 00:00:00 2001 From: Tatsuhiro Tsujikawa Date: Fri, 27 Sep 2024 17:30:06 +0900 Subject: [PATCH] docs/cmdline-opts: GnuTLS supports PKCS#11 URI in --cert option Closes #15075 --- docs/cmdline-opts/cert.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/docs/cmdline-opts/cert.md b/docs/cmdline-opts/cert.md index 715fcb831a..d5d19a39d8 100644 --- a/docs/cmdline-opts/cert.md +++ b/docs/cmdline-opts/cert.md @@ -39,6 +39,10 @@ PKCS#11 URI. If a PKCS#11 URI is provided, then the --engine option is set as `pkcs11` if none was provided and the --cert-type option is set as `ENG` if none was provided. +If curl is built against GnuTLS library, a PKCS#11 URI can be used to specify +a certificate located in a PKCS#11 device. A string beginning with `pkcs11:` +is interpreted as a PKCS#11 URI. + (iOS and macOS only) If curl is built against Secure Transport, then the certificate string can either be the name of a certificate/private key in the system or user keychain, or the path to a PKCS#12-encoded certificate and -- 2.47.3