bash
curl --netrc https://example.com/protectedNotes
Useful for automation when credentials should not appear directly in shell history.
cURL Auth, TLS, and Proxy Security
Authentication, cookies, TLS verification, client certs, pinned keys, and proxy-secured curl workflows.
Export
Copy the compact sheet, download it, or print it.
Download
`D` dense toggle · `C` copy all
Credentials and Sessions
Basic auth, netrc, bearer tokens, cookies, and session persistence.
bash
curl --netrc-file ./my.netrc https://example.com/protectedNotes
Lets you isolate credentials per environment.
bash
curl --digest -u 'user:password' https://example.com/protectedNotes
Some older systems still use Digest auth.
SPNEGO / Negotiate auth
Use Negotiate auth with credentials from the environment or Kerberos setup.
bashANYcurlauthnegotiate
bash
curl --negotiate -u : https://example.com/protectedNotes
Often used in enterprise SSO environments.
bash
curl --anyauth -u 'user:password' https://example.com/protectedNotes
Convenient when you do not know the server's auth scheme ahead of time.
Follow redirects and send auth
Follow redirects and keep auth across hosts only when you explicitly trust it.
bashANYcurlredirectsauth
bash
curl -L --location-trusted -u 'user:password' https://example.com/startNotes
Be careful: this can forward credentials after redirects.
TLS and Certificates
TLS versions, CA stores, pinned keys, and client certificates.
bash
curl --tlsv1.2 https://example.comNotes
Useful when testing compatibility or enforcing modern TLS.
bash
curl --tls-max 1.3 https://example.comNotes
Helpful for compatibility testing.
Use a CA certificate directory
Use a directory of CA certificates instead of a single bundle file.
bashANYcurltlsca
bash
curl --capath /etc/ssl/certs https://example.comNotes
Some systems prefer hashed CA certificate directories.
Use a PKCS#12 client certificate
Authenticate with a P12 / PFX certificate bundle.
bashANYcurltlsmtlscert
bash
curl --cert client.p12:mypassword --cert-type P12 https://mtls.example.comNotes
Common in enterprise and legacy integrations.
bash
curl --pinnedpubkey sha256//BASE64HASH https://example.comNotes
Pinning is useful for high-trust integrations and internal systems.
bash
curl --crlfile revoked.pem https://example.comNotes
Relevant in stricter PKI environments.
Request certificate status checks
Require certificate status validation via TLS stapling when supported.
bashANYcurltlsocsp
bash
curl --cert-status https://example.comNotes
Useful when validating OCSP-stapled environments.
Skip TLS verification for HTTPS proxy
Disable certificate verification for the HTTPS proxy connection.
bashANYcurlproxytls
bash
curl --proxy-insecure -x https://proxy.example.com:8443 https://example.comNotes
Proxy TLS and origin TLS are separate validation layers.
Proxy Auth and Tunnels
Proxy auth, HTTPS proxies, proxy certificates, and CONNECT tunnels.
bash
curl -x http://proxy.example.com:8080 -U 'user:password' https://example.comNotes
Use `-U` / `--proxy-user` for proxy credentials.
bash
curl -x https://proxy.example.com:8443 https://example.comNotes
An HTTPS proxy encrypts the hop to the proxy itself.
Trust a custom CA for proxy TLS
Use a custom CA certificate file for the HTTPS proxy.
bashANYcurlproxytls
bash
curl --proxy-cacert proxy-ca.pem -x https://proxy.example.com:8443 https://example.comNotes
Origin CA settings and proxy CA settings are independent.
Client cert for proxy authentication
Send a client certificate when the proxy requires mTLS.
bashANYcurlproxymtls
bash
curl --proxy-cert proxy-client.crt --proxy-key proxy-client.key -x https://proxy.example.com:8443 https://example.comNotes
Useful in locked-down corporate environments.
Tunnel through an HTTP proxy
Use CONNECT tunneling for non-HTTP protocols when needed.
bashANYcurlproxytunnel
bash
curl --proxytunnel -x http://proxy.example.com:8080 ftp://example.com/file.txtNotes
CONNECT tunnels are not limited to HTTPS workflows.
More in cURL
cURL Debugging, Performance, and Scripting
Tracing, DNS overrides, proxies, protocol selection, config files, timeouts, and script-friendly curl patterns.
cURL Download and Upload Workflows
Comprehensive curl patterns for downloads, retries, upload flows, range requests, SMTP, SFTP, and batch transfers.
cURL HTTP and API Workflows
HTTP methods, auth, JSON APIs, headers, caching, compression, and response inspection with curl.
cURL Cheat Sheet
High-coverage curl commands for HTTP requests, APIs, downloads, uploads, cookies, redirects, and automation.