From f83c5e36a622c8f427778bceca9aab1414763a49 Mon Sep 17 00:00:00 2001 From: David Kocher Date: Tue, 20 Oct 2026 17:07:13 +0200 Subject: [PATCH] Document CLI option to select TLS client certificate. --- cli/index.md | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/cli/index.md b/cli/index.md index fdc8d29e..7e9eb7a8 100644 --- a/cli/index.md +++ b/cli/index.md @@ -327,6 +327,12 @@ On Linux, credentials are stored in plain text in the [application support direc When connecting with SFTP you can give a file path to a private key with `--identity` for use with public key authentication. +#### Client Certificate + +When the server requests a TLS client certificate, select it from the system certificate store with +`--certificate `. Without the option, the first certificate matching the server's request is used. The +certificate is only used for the TLS handshake. Login still requires a username, for example with `--username`. + #### Tenant Name When connecting with `OpenStack Swift` you can set the tenant name (*OpenStack Identity Service, Keystone 2.0*) or