Windows "curl" command fails with certificate revocation checks error
search cancel

Windows "curl" command fails with certificate revocation checks error

book

Article ID: 394745

calendar_today

Updated On: 04-18-2025

Products

Cloud Secure Web Gateway - Cloud SWG

Issue/Introduction

Running Windows "curl" command via working WSS Agent (CloudSWG) is giving CRYPT_E_NO_REVOCATION_CHECK with https://

C:\Users\XXXXX\curl -v https://dl.google.com

schannel: next InitializeSecurityContext failed: CRYPT_E_NO_REVOCATION_CHECK (0x80092012) - The revocation function was unable to check revocation for the certificate.

 

1. It doesn't happen over the Windows browser

2. It doesn't happen over the macOS (command line or browser)

3. Issue doesn't exist for none https URLs over the WSS Agent

4. Issue doesn't exist for https URLs without WSS Agent enabled.

Environment

CloudSWG

WSS Agent

Resolution

1. It looks like the issue only occurs with "curl" Windows command

 

(potential workaround is to use --ssl-no-revoke)

C:\Users\XXXXX\curl  --ssl-no-revoke -v https://dl.google.com