Wow, thanks everyone for the detailed replies! I had no idea the `-k` option in curl was such a double-edged sword. I tried it on a local server with a self-signed cert, and it worked like a charm, but I’ll definitely avoid using it for anything public.
I checked out SSL Labs and OpenSSL like some of you suggested, and they’re super helpful for understanding certs better. One quick follow-up: if I’m working with a self-signed cert, is there a way to make curl trust it without using `-k`? Like, can I add the cert to a trusted list or something?
Thanks again, you guys are awesome!
I checked out SSL Labs and OpenSSL like some of you suggested, and they’re super helpful for understanding certs better. One quick follow-up: if I’m working with a self-signed cert, is there a way to make curl trust it without using `-k`? Like, can I add the cert to a trusted list or something?
Thanks again, you guys are awesome!