bashANYcurlnetrcauth
bash
curl --netrc https://example.com/protectedUseful for automation when credentials should not appear directly in shell history.
cURL Auth, TLS, and Proxy Security
Authentication, cookies, TLS verification, client certs, pinned keys, and proxy-secured curl workflows.
Export
Copy the compact sheet, download it, or print it.
Download
`D` dense toggle · `C` copy all
Credentials and Sessions
Basic auth, netrc, bearer tokens, cookies, and session persistence.
bashANYcurlnetrcauth
bash
curl --netrc-file ./my.netrc https://example.com/protectedLets you isolate credentials per environment.
bashANYcurlauthdigest
bash
curl --digest -u 'user:password' https://example.com/protectedSome older systems still use Digest auth.
SPNEGO / Negotiate auth
Use Negotiate auth with credentials from the environment or Kerberos setup.
bashANYcurlauthnegotiate
bash
curl --negotiate -u : https://example.com/protectedOften used in enterprise SSO environments.
bashANYcurlauthhttp
bash
curl --anyauth -u 'user:password' https://example.com/protectedConvenient when you do not know the server's auth scheme ahead of time.
Follow redirects and send auth
Follow redirects and keep auth across hosts only when you explicitly trust it.
bashANYcurlredirectsauth
bash
curl -L --location-trusted -u 'user:password' https://example.com/startBe careful: this can forward credentials after redirects.
TLS and Certificates
TLS versions, CA stores, pinned keys, and client certificates.
bashANYcurltlssecurity
bash
curl --tlsv1.2 https://example.comUseful when testing compatibility or enforcing modern TLS.
bashANYcurltlssecurity
bash
curl --tls-max 1.3 https://example.comHelpful for compatibility testing.
bashANYcurltlsca
bash
curl --capath /etc/ssl/certs https://example.comSome systems prefer hashed CA certificate directories.
bashANYcurltlsmtlscert
bash
curl --cert client.p12:mypassword --cert-type P12 https://mtls.example.comCommon in enterprise and legacy integrations.
bashANYcurltlspinning
bash
curl --pinnedpubkey sha256//BASE64HASH https://example.comPinning is useful for high-trust integrations and internal systems.
bashANYcurltlscrl
bash
curl --crlfile revoked.pem https://example.comRelevant in stricter PKI environments.
Request certificate status checks
Require certificate status validation via TLS stapling when supported.
bashANYcurltlsocsp
bash
curl --cert-status https://example.comUseful when validating OCSP-stapled environments.
Skip TLS verification for HTTPS proxy
Disable certificate verification for the HTTPS proxy connection.
bashANYcurlproxytls
bash
curl --proxy-insecure -x https://proxy.example.com:8443 https://example.comProxy TLS and origin TLS are separate validation layers.
Proxy Auth and Tunnels
Proxy auth, HTTPS proxies, proxy certificates, and CONNECT tunnels.
bashANYcurlproxyauth
bash
curl -x http://proxy.example.com:8080 -U 'user:password' https://example.comUse `-U` / `--proxy-user` for proxy credentials.
bashANYcurlproxyhttps
bash
curl -x https://proxy.example.com:8443 https://example.comAn HTTPS proxy encrypts the hop to the proxy itself.
bashANYcurlproxytls
bash
curl --proxy-cacert proxy-ca.pem -x https://proxy.example.com:8443 https://example.comOrigin CA settings and proxy CA settings are independent.
bashANYcurlproxymtls
bash
curl --proxy-cert proxy-client.crt --proxy-key proxy-client.key -x https://proxy.example.com:8443 https://example.comUseful in locked-down corporate environments.
bashANYcurlproxytunnel
bash
curl --proxytunnel -x http://proxy.example.com:8080 ftp://example.com/file.txtCONNECT tunnels are not limited to HTTPS workflows.
More in cURL
cURL Debugging, Performance, and Scripting
Tracing, DNS overrides, proxies, protocol selection, config files, timeouts, and script-friendly curl patterns.
cURL Download and Upload Workflows
Comprehensive curl patterns for downloads, retries, upload flows, range requests, SMTP, SFTP, and batch transfers.
cURL HTTP and API Workflows
HTTP methods, auth, JSON APIs, headers, caching, compression, and response inspection with curl.
cURL Cheat Sheet
High-coverage curl commands for HTTP requests, APIs, downloads, uploads, cookies, redirects, and automation.