CURLOPT\_USE\_SSL(3) Library Functions Manual CURLOPT\_USE\_SSL(3)

# [NAME](#NAME)

CURLOPT\_USE\_SSL - request using SSL / TLS for the transfer

# [SYNOPSIS](#SYNOPSIS)

```
#include <curl/curl.h>
CURLcode curl_easy_setopt(CURL *handle, CURLOPT_USE_SSL, long level);
```

# [DESCRIPTION](#DESCRIPTION)

Pass a long using one of the values from below, to make libcurl use your desired *level* of SSL for the transfer.

These are all protocols that start out plain text and get "upgraded" to SSL using the STARTTLS command.

This is for enabling SSL/TLS when you use FTP, SMTP, POP3, IMAP etc.

[CURLUSESSL\_NONE](#CURLUSESSL_NONE)

Do not attempt to use SSL.

[CURLUSESSL\_TRY](#CURLUSESSL_TRY)

Try using SSL, proceed as normal otherwise. Note that server may close the connection if the negotiation fails. This level is *insecure* and should be avoided since it allows the connection to remain unprotected.

[CURLUSESSL\_CONTROL](#CURLUSESSL_CONTROL)

Require SSL for the control connection or fail with *CURLE\_USE\_SSL\_FAILED*. This level is partially *insecure* and should be avoided since it lets the data connection remain unprotected.

This level is meant for FTP, since that is the only protocol with separate connections for control and data. If used for IMAP, POP3 or SMTP it equals *CURLUSESSL\_ALL*.

[CURLUSESSL\_ALL](#CURLUSESSL_ALL)

Require SSL for all communication or fail with *CURLE\_USE\_SSL\_FAILED*.

# [DEFAULT](#DEFAULT)

CURLUSESSL\_NONE

# [PROTOCOLS](#PROTOCOLS)

This functionality affects ftp, imap, pop3 and smtp

# [EXAMPLE](#EXAMPLE)

```
int main(void)
{


  CURL *curl = curl_easy_init();


  if(curl) {


    CURLcode result;


    curl_easy_setopt(curl, CURLOPT_URL, "ftp://example.com/dir/file.ext");


    /* require use of SSL for this, or fail */


    curl_easy_setopt(curl, CURLOPT_USE_SSL, CURLUSESSL_ALL);


    /* Perform the request */


    result = curl_easy_perform(curl);


    curl_easy_cleanup(curl);


  }
}
```

# [HISTORY](#HISTORY)

This option was known as CURLOPT\_FTP\_SSL up to 7.16.4. Supported by LDAP since 7.81.0. Fully supported by the OpenLDAP backend only.

**CURLUSESSL\_*** enums became *long* types in 8.13.0, prior to this version a *long* cast was necessary when passed to [*curl\_easy\_setopt(3)*](/man/os/curl/curl_easy_setopt.3).

# [AVAILABILITY](#AVAILABILITY)

Added in curl 7.17.0

# [RETURN VALUE](#RETURN_VALUE)

[*curl\_easy\_setopt(3)*](/man/os/curl/curl_easy_setopt.3) returns a CURLcode indicating success or error.

CURLE\_OK (0) means everything was OK, non-zero means an error occurred, see [*libcurl-errors(3)*](/man/os/curl/libcurl-errors.3).

# [SEE ALSO](#SEE_ALSO)

[**CURLOPT\_PROXY\_SSLVERSION**(3)](/man/os/curl/CURLOPT_PROXY_SSLVERSION.3), [**CURLOPT\_SSLVERSION**(3)](/man/os/curl/CURLOPT_SSLVERSION.3), [**CURLOPT\_SSL\_OPTIONS**(3)](/man/os/curl/CURLOPT_SSL_OPTIONS.3)

2026-10-14 libcurl

---

Document: CURLOPT_USE_SSL(3) from curl 8.23.0-r0 (Chainguard OS)
Source: https://github.com/curl/curl.git