2 .\" Copyright (c) 2000-2014 Dag-Erling Smørgrav
3 .\" Copyright (c) 2013 Michael Gmelin <freebsd@grem.de>
4 .\" All rights reserved.
5 .\" Portions Copyright (c) 1999 Massachusetts Institute of Technology; used
8 .\" Redistribution and use in source and binary forms, with or without
9 .\" modification, are permitted provided that the following conditions
11 .\" 1. Redistributions of source code must retain the above copyright
12 .\" notice, this list of conditions and the following disclaimer
13 .\" in this position and unchanged.
14 .\" 2. Redistributions in binary form must reproduce the above copyright
15 .\" notice, this list of conditions and the following disclaimer in the
16 .\" documentation and/or other materials provided with the distribution.
17 .\" 3. The name of the author may not be used to endorse or promote products
18 .\" derived from this software without specific prior written permission.
20 .\" THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
21 .\" IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
22 .\" OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
23 .\" IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
24 .\" INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
25 .\" NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
26 .\" DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
27 .\" THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
28 .\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
29 .\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
31 .\" $FreeBSD: head/usr.bin/fetch/fetch.1 261234 2014-01-28 14:32:04Z des $
38 .Nd retrieve a file by Uniform Resource Locator
41 .Op Fl 146AadFlMmnPpqRrsUv
44 .Op Fl -bind-address= Ns Ar host
45 .Op Fl -ca-cert= Ns Ar file
46 .Op Fl -ca-path= Ns Ar dir
47 .Op Fl -cert= Ns Ar file
48 .Op Fl -crl= Ns Ar file
50 .Op Fl -key= Ns Ar file
53 .Op Fl -no-proxy= Ns Ar list
56 .Op Fl -no-verify-hostname
57 .Op Fl -no-verify-peer
59 .Op Fl -referer= Ns Ar URL
62 .Op Fl -user-agent= Ns Ar agent-string
66 .Op Fl 146AadFlMmnPpqRrsUv
68 .Op Fl -bind-address= Ns Ar host
69 .Op Fl -ca-cert= Ns Ar file
70 .Op Fl -ca-path= Ns Ar dir
71 .Op Fl -cert= Ns Ar file
72 .Op Fl -crl= Ns Ar file
74 .Op Fl -key= Ns Ar file
77 .Op Fl -no-proxy= Ns Ar list
80 .Op Fl -no-verify-hostname
81 .Op Fl -no-verify-peer
83 .Op Fl -referer= Ns Ar URL
86 .Op Fl -user-agent= Ns Ar agent-string
88 .Fl h Ar host Fl f Ar file Oo Fl c Ar dir Oc
92 utility provides a command-line interface to the
95 Its purpose is to retrieve the file(s) pointed to by the URL(s) on the
98 The following options are available:
101 Stop and return exit code 0 at the first successfully retrieved file.
102 .It Fl 4 , -ipv4-only
105 to use IPv4 addresses only.
106 .It Fl 6 , -ipv6-only
109 to use IPv6 addresses only.
110 .It Fl A , -no-redirect
111 Do not automatically follow ``temporary'' (302) redirects.
112 Some broken Web sites will return a redirect instead of a not-found
113 error when the requested object does not exist.
115 Automatically retry the transfer upon soft failures.
118 Allow SSL version 2 when negotiating the connection.
119 .It Fl B Ar bytes , Fl -buffer-size= Ns Ar bytes
120 Specify the read buffer size in bytes.
121 The default is 16,384 bytes.
122 Attempts to set a buffer size lower than this will be silently
124 The number of reads actually performed is reported at verbosity level
125 two or higher (see the
128 .It Fl -bind-address= Ns Ar host
129 Specifies a hostname or IP address to which sockets used for outgoing
130 connections will be bound.
132 The file to retrieve is in directory
135 This option is deprecated and is provided for backward compatibility
137 .It Fl -ca-cert= Ns Ar file
139 Path to certificate bundle containing trusted CA certificates.
141 .Pa /etc/ssl/cert.pem
143 The file may contain multiple CA certificates. The port
144 .Pa security/ca_root_nss
145 is a common source of a current CA bundle.
146 .It Fl -ca-path= Ns Ar dir
150 contains trusted CA hashes.
151 .It Fl -cert= Ns Ar file
154 is a PEM encoded client certificate/key which will be used in
155 client certificate authentication.
156 .It Fl -crl= Ns Ar file
158 Points to certificate revocation list
160 which has to be in PEM format and may contain peer certificates that have
163 Use a direct connection even if a proxy is configured.
164 .It Fl F , -force-restart
165 In combination with the
167 flag, forces a restart even if the local and remote files have
168 different modification times.
172 The file to retrieve is named
175 This option is deprecated and is provided for backward compatibility
178 The file to retrieve is located on the host
180 This option is deprecated and is provided for backward compatibility
182 .It Fl i Ar file , Fl -if-modified-since= Ns Ar file
183 If-Modified-Since mode: the remote file will only be retrieved if it
188 .It Fl -key= Ns Ar file
191 is a PEM encoded client key that will be used in client certificate
192 authentication in case key and client certificate are stored separately.
194 If the target is a file-scheme URL, make a symbolic link to the target
195 rather than trying to copy it.
198 Mirror mode: if the file already exists locally and has the same size
199 and modification time as the remote file, it will not be fetched.
204 flags are mutually exclusive.
205 .It Fl N Ar file , Fl -netrc= Ns Ar file
210 to look up login names and passwords for FTP sites.
213 for a description of the file format.
214 This feature is experimental.
216 Do not preserve the modification time of the transferred file.
218 Forces the FTP code to use active mode.
219 .It Fl -no-proxy= Ns Ar list
220 Either a single asterisk, which disables the use of proxies
221 altogether, or a comma- or whitespace-separated list of hosts for
222 which proxies should not be used.
225 Don't allow SSL version 3 when negotiating the connection.
228 Don't allow TLS version 1 when negotiating the connection.
229 .It Fl -no-verify-hostname
231 Do not verify that the hostname matches the subject of the
232 certificate presented by the server.
233 .It Fl -no-verify-peer
235 Do not verify the peer certificate against trusted CAs.
236 .It Fl o Ar file , Fl output= Ns Ar file
237 Set the output file name to
239 By default, a ``pathname'' is extracted from the specified URI, and
240 its basename is used as the name of the output file.
245 indicates that results are to be directed to the standard output.
248 argument is a directory, fetched file(s) will be placed within the
249 directory, with name(s) selected as in the default behaviour.
253 These flags have no effect, since passive FTP is the default, but are
254 provided for compatibility with earlier versions where active FTP was
256 To force active mode, use the
260 environment variable to
262 .It Fl -referer= Ns Ar URL
263 Specifies the referrer URL to use for HTTP requests.
268 the document URL will be used as referrer URL.
271 .It Fl R , -keep-output
272 The output files are precious, and should not be deleted under any
273 circumstances, even if the transfer failed or was incomplete.
275 Restart a previously interrupted transfer.
280 flags are mutually exclusive.
281 .It Fl S Ar bytes , Fl -require-size= Ns Ar bytes
282 Require the file size reported by the server to match the specified
284 If it does not, a message is printed and the file is not fetched.
285 If the server does not support reporting file sizes, this option is
286 ignored and the file is fetched unconditionally.
287 .It Fl s , -print-size
288 Print the size in bytes of each requested file, without fetching it.
289 .It Fl T Ar seconds , Fl -timeout= Ns Ar seconds
292 Overrides the environment variables
296 for HTTP transfers if set.
297 .It Fl U , -passive-portrange-default
298 When using passive FTP, allocate the port for the data connection from
299 the low (default) port range.
302 for details on how to specify which port range this corresponds to.
303 .It Fl -user-agent= Ns Ar agent-string
304 Specifies the User-Agent string to use for HTTP requests.
305 This can be useful when working with HTTP origin or proxy servers that
306 differentiate between user agents.
308 Increase verbosity level.
309 .It Fl w Ar seconds , Fl -retry-delay= Ns Ar seconds
312 flag is specified, wait this many seconds between successive retries.
323 the current transfer rate statistics will be written to the
324 standard error output, in the same format as the standard completion
327 .Bl -tag -width HTTP_TIMEOUT
329 Maximum time, in seconds, to wait before aborting an FTP connection.
331 Maximum time, in seconds, to wait before aborting an HTTP connection.
336 for a description of additional environment variables, including
337 .Ev FETCH_BIND_ADDRESS ,
339 .Ev FTP_PASSIVE_MODE ,
347 .Ev HTTP_PROXY_AUTH ,
349 .Ev HTTP_USER_AGENT ,
354 .Ev SSL_CA_CERT_FILE ,
355 .Ev SSL_CA_CERT_PATH ,
356 .Ev SSL_CLIENT_CERT_FILE ,
357 .Ev SSL_CLIENT_KEY_FILE ,
361 .Ev SSL_NO_VERIFY_HOSTNAME
363 .Ev SSL_NO_VERIFY_PEER .
367 command returns zero on success, or one on failure.
368 If multiple URLs are listed on the command line,
370 will attempt to retrieve each one of them in turn, and will return
371 zero only if they were all successfully retrieved.
375 argument is used and the remote file is not newer than the
376 specified file then the command will still return success,
377 although no file is transferred.
385 This implementation first appeared in
389 The original implementation of
392 .An Jean-Marc Zucconi Aq Mt jmz@FreeBSD.org .
393 It was extensively re-worked for
396 .An Garrett Wollman Aq Mt wollman@FreeBSD.org ,
397 and later completely rewritten to use the
400 .An Dag-Erling Sm\(/orgrav Aq Mt des@FreeBSD.org
402 .An Michael Gmelin Aq Mt freebsd@grem.de .
408 options are no longer supported and will generate warnings.
409 They were workarounds for bugs in other OSes which this implementation
412 One cannot both use the
417 options and specify URLs on the command line.