Windows curl command fails with error "failed: CRYPT_E_NO_REVOCATION_CHECK (0x80092012)"

Products

• Cloud Secure Web Gateway - Cloud SWG

Issue/Introduction

The Windows curl command via a working WSS Agent (CloudSWG) returns error:

schannel: next InitializeSecurityContext failed: CRYPT_E_NO_REVOCATION_CHECK (0x80092012) - The revocation function was unable to check revocation for the certificate.

• The issue does not occur with the Windows browser
• The issue does not occur with the macOS command line or browser
• The issue does not occur for non-https URLs with the WSS Agent
• The issue does not occur for https URLs without WSS Agent enabled

Environment

CloudSWG

WSS Agent

Resolution

The issue only occurs with the Windows curl command.

Workaround: Use the --ssl-no-revoke option:

C:\Users\XXXXX\curl --ssl-no-revoke -v https://dl.example.com