You can clone with
Cannot retrieve contributors at this time
.IP "\fB\-\-bootstrap\-ca\-cert=\fIcacert.pem\fR"When \fIcacert.pem\fR exists, this option has the same effect as\fB\-C\fR or \fB\-\-ca\-cert\fR. If it does not exist, then\fB\*(PN\fR will attempt to obtain the CA certificate from theSSL peer on its first SSL connection and save it to the named PEMfile. If it is successful, it will immediately drop the connectionand reconnect, and from then on all SSL connections must beauthenticated by a certificate signed by the CA certificate thusobtained..IP\fBThis option exposes the SSL connection to a man-in-the-middleattack obtaining the initial CA certificate\fR, but it may be usefulfor bootstrapping..IPThis option is only useful if the SSL peer sends its CA certificate aspart of the SSL certificate chain. The SSL protocol does not requirethe server to send the CA certificate, but\fB\*(SN\fR(8) can be configured to do so with the\fB\-\-peer\-ca\-cert\fR option..IPThis option is mutually exclusive with \fB\-C\fR and\fB\-\-ca\-cert\fR.