Curl the revocation function. For example, for host names starting with "ftp.

Curl the revocation function. New comments cannot be posted and votes cannot be cast. exe the issue vanished for 7 days (I think this is the validity of the revocation answer). Jul 30, 2024 · Ok,I will try it. 2 (+libidn2/2. Feb 26, 2020 · I'm trying to update my Git and by typing the command: $ git update-git-for-windows It displays the following error: curl: (60) SSL certificate problem: self signed certificate in certificate chain Apr 4, 2019 · If the schannel backend is used and the user specifies a bundle of certificates (eg CAINFO) then libcurl ignores the OS certificate store and uses the bundle with CERT_CHAIN_REVOCATION_CHECK_CHAIN which is basically the same thing, documented as "Revocation checking is done on all of the certificates in every chain. 0 Schannel zlib/1. Jul 30, 2024 · curl: (35) schannel: next InitializeSecurityContext failed: CRYPT_E_NO_REVOCATION_CHECK (0x80092012) Even when using WSL, the Linux environment also encounters the same issue. Issue abstract: cant verify local certificate tls/ssl, blocking curl Detailed description: My work usually use curl for get some package or anything i need. ppy. 3) libssh2/1. #2414 New issue Closed When installing a new certificate authority certificate, you get the error message "The revocation function was unable to check revocation for the certificate. Why are you showing the version output of a different curl than the one you used? Mar 31, 2024 · curl: (35) schannel: next InitializeSecurityContext failed: Unknown error (0x80092012) - The revocation function was unable to check revocation for the certificate. githubusercontent. Jan 4, 2019 · (NB: In English the error is probably "schannel: next InitializeSecurityContext failed: Unknown error (0x80092013) - The revocation function was unable to check revocation because the revocation server was offline. $ git update-git-for-windows curl: (35) schannel: next InitializeSecurityContext failed: CRYPT_E_NO_REVOCATION_CHECK (0x80092012) - A fun o de revoga o n o p de verificar a revoga o URL top The URL syntax is protocol-dependent. Aug 15, 2022 · GIT schannel: next InitializeSecurityContext failed: Unknown error (0x80092012) – The revocation function was unable to check revocation for the certificate. " Asked 2 years, 6 months ago Modified 1 month ago Viewed 34k times Oct 23, 2012 · any problems. Thank you Mar 3, 2021 · curl: (35) schannel: next InitializeSecurityContext failed: Unknown error (0x80092012) - The revocation function was unable to check revocation for the certificate. 2 (x86_64-w64-mingw32) libcurl/8. We rely on OCSP as our main revocation check protocol and since cURL is shipped with only parsing stapled OCSP responses, we have written our own custom OCSP response fetch/extract/parse Jun 28, 2023 · The revocation function was unable to check revocation because the revocation server was offline Carl94580345 41 Jun 28, 2023, 12:52 PM I tried to cURL an HTTPS recently and had a heck of a time trying to figure out how to get it to work. 2 Schannel zlib/1. Oct 9, 2023 · Setup cURL in Windows This guide covers how to properly setup curl in Windows and how you can get rid of most common certificate errors while using curl in Windows Jan 14, 2023 · If not checking the revocation as acceptable for you depends on the security requirements of your specific use case, i. Mar 23, 2016 · Re: schannel: next InitializeSecurityContext failed: Unknown error (0x80092013) The revocation function was unable to check revocation because the revocation server was offline. haxx. Nov 1, 2023 · I expected the following I want to know exactly which part of TLS has failed. Apr 11, 2024 · I need to use Curl for my project. This error can be caused by a variety of factors, including incorrect configuration of the curl client or server, or by a problem with the underlying network infrastructure. Apr 7, 2021 · Why is the Microsoft back-end give us "The revocation function was unable to check revocation for the certificate" if we know that there is no way to verify revocation of a self-signed certificate? Shouldn't libcurl offer a switch to disable revocation check of self-signed certificates? I am sorry if I sound confused, because I am. " May 22, 2022 · Windows 11 and 10 here - the bug is present on all my PCs running Avast Antivirus. Sep 7, 2024 · This issue is indeed a common bug, and many users have encountered curl-related errors while using Web Shield by Avast Antivirus. Apr 20, 2025 · the revocation function was unable to check revocation for the certificate TonyQuiring-7437 20 Apr 20, 2025, 1:15 PM Feb 28, 2019 · curl-library schannel - The revocation function was unable to check revocation for the certificate This message: [ Message body ] [ More options ] Related messages: [ Next message ] [ Previous message ] Sep 7, 2024 · curl: (35) schannel: next InitializeSecurityContext failed: CRYPT\_E\_NO\_REVOCATION\_CHECK (0x80092012) - The revocation function was unable to check revocation for the certificate. 9 zstd/1. 5. 8. ") > > How can I solve this please? Some people seem to be suggesting to > use the OpenSSL backend instead of schannel but is this really the > only way to go? Isn't this possible with in-house Windows solutions? > Oct 12, 2017 · Error in curl::curl_fetch_memory (url, handle = handle) : schannel: next InitializeSecurityContext failed: SEC_E_INVALID_TOKEN (0x80090308) - The token supplied to the function is invalid. Turning off the shields and then using curl works like a charm. Feb 19, 2023 · curl: (35) schannel: next InitializeSecurityContext failed: Unknown error (0x80092012) - The revocation function was unable to check revocation for the certificate. 21. Any ideas? Archived post. May 14, 2025 · "The revocation function was unable to check revocation because the revocation server was offline. windows. exe built by vcpkg. schannelcheckrevoke=false config option to git, but sometimes Oct 5, 2020 · curl: (35) schannel: next InitializeSecurityContext failed: Unknown error (0x80092012) - The revocation function was unable to check revocation for the certificate. io/dcs-satellites" -F title="Sat list" curl: (35) schannel: next InitializeSecurityContext failed: Unknown error (0x80092012) - The revocation function was unable to check revocation for the certificate. " Code for CERT_CHAIN_REVOCATION_CHECK_CHAIN Mar 23, 2016 · Next in thread: Ray Satiro via curl-library: "Re: schannel: next InitializeSecurityContext failed: Unknown error (0x80092013) The revocation function was unable to check revocation because the revocation server was offline. Jan 13, 2021 · Error: The revocation function was unable to check revocation, because revocation server was offline. 2. You can specify any amount of URLs on the command Sep 10, 2024 · curl: (35) schannel: next InitializeSecurityContext failed: CRYPT_E_REVOCATION_OFFLINE (0x80092013) - The revocation function was unable to check revocation because the revocation server was offline. Is there more log or any tools that can help me pinpoint this issue? curl/libcurl version curl 8. Jul 28, 2023 · For curl, use command line option --ssl-revoke-best-effort (see https://curl. url: (35) schannel: next InitializeSecurityContext failed: Unknown error (0x80092012) - The revocation function was unable to check revocation for the certificate. Jan 4, 2019 · >> (0x80092013) - The revocation function was unable to check >> revocation because the revocation server was offline. Aug 7, 2025 · Certificate revocation checking failures: Windows Schannel cannot verify if SSL/TLS certificates have been revoked DNS resolution problems: Cannot resolve revocation server addresses Dec 28, 2024 · Thread 'schannel: disabled automatic use of client certificate' Message boards : Questions and problems : schannel: disabled automatic use of client certificate Message board moderation May 4, 2000 · Forum discussion: I keep getting this error on Windows 11. 0x80092013 (-2146885613 CRYPT_E_REVOCATION_OFFLINE) CertUtil: The revocation function was unable to check revocation because the revocation server was offline. The error message indicates that curl failed when trying to initialize the security context because the certificate could not be checked for revocation status. Oct 18, 2024 · curl 8. I finally figured that curl needs a parameter telling it not to check certificate revocation, so the command looks something like this: The -x parameter passes the proxy details - you may not need this. curl: (35) schannel: next InitializeSecurityContext failed: Unknown error (0x80092012) - The revocation function was unable to check May 4, 2025 · Message boards : Questions and problems : schannel: disabled automatic use of client certificate - part 2 (with schannel: next InitializeSecurityContext failed: CRYPT_E_REVOCATION_OFFLINE (0x80092013)) In the Notifier log file we see this error when it attempts to use the custom set, update, or clear scripts that issue curl statements to SNOW. Still, checking for revocation is important for security. If you provide a URL without a leading protocol:// scheme, curl guesses what protocol you want. 13 brotli/1. 4 libpsl/0. cer among the trusted roots, and have used --ca-native. (the server-certificate was issued by GeoTrust) Feb 16, 2025 · curl: (35) schannel: next InitializeSecurityContext failed: CRYPT_E_NO_REVOCATION_CHECK (0x80092012) So i assume curl is the problem, something with finding the certificate. Mar 27, 2025 · Note: Please do not post Personally Identifiable Information like email address, personal phone number, physical home address, product key etc. > > > > There is not many leads, but maybe anyone has any hint what could have > gone wrong? > curl does revocation checking by default when schannel is used as the ssl backend. 0. 11. I don't see any of that in the PCAP. Feb 8, 2025 · Hi! I'm getting a high rate of failures on windows runners w/ curl: (35) schannel: next InitializeSecurityContext failed: CRYPT_E_REVOCATION_OFFLINE (0x80092013) - The revocation function was unable to check revocation because the revoca Mar 2, 2019 · > (0x80092012) - The revocation function was unable to check revocation > for the certificate > > > > Trusting User intermediate CA in Windows did not help also. It's a versatile tool for downloading files, testing APIs, and more. You find a detailed description in RFC 3986. The curl tool has - -ssl-no-revoke and git has http. Mar 3, 2018 · Using git version 2. schannelCheckRevoke false From the docs: We do not recommend setting this config value for normal Git usage. ") >> How can I solve this please? Some people seem to be suggesting to >> use the OpenSSL backend instead of schannel but is this really the >> only way to go? Isn't this possible with in-house Windows solutions? [dynamic analysis] certificate revocation (0x80092012) Hi everyone, I’m trying to reverse engineer a pocket executable that needs to connect to a no-longer existing website to work. Nov 1, 2023 · Certificate revocation up to the root is the default for Schannel. Jan 4, 2019 · > (0x80092013) - The revocation function was unable to check > revocation because the revocation server was offline. Nov 9, 2020 · ERROR: Verifying leaf certificate revocation status returned The revocation function was unable to check revocation because the revocation server was offline. For example, for host names starting with "ftp. Like you, I too had to check a variety of sources for information, but unfortunately, I did not find the part about having to download the cert file from the cURL site (I saw plenty of stuff about downloading the cert from the target site, but Apr 7, 2021 · Why is the Microsoft back-end give us "The revocation function was unable to check revocation for the certificate" if we know that there is no way to verify revocation of a self-signed certificate? Shouldn't libcurl offer a switch to disable revocation check of self-signed certificates? I am sorry if I sound confused, because I am. Dec 15, 2023 · The revocation function was unable to check the revocation because the revocation server was offline. Jul 13, 2024 · curl: (35) schannel: next InitializeSecurityContext failed: CRYPT_E_REVOCATION_OFFLINE (0x80092013) - The revocation function was unable to check revocation because the revocation server was offline. 0x80092013 (-2146885613 CRYPT_E_REVOCATION_OFFLINE). org/ghcup/# for windows, I consistently without fail get the error of the following. html) or add ssl-revoke-best-effort on a single line to the file . 0 Release-Date: 2023-05-30 Protocols: dict file ftp ftps gopher gophers http Apr 7, 2023 · SSL certificate validation fails with 'The revocation function was unable to check revocation because the revocation server was offline. Nov 17, 2024 · How to fix "curl: (35) schannel: next InitializeSecurityContext failed: CRYPT_E_NO_REVOCATION_CHECK (0x80092012)" while using curl in powershell on win11?. Jun 17, 2025 · I first got this error: "curl: (35) schannel: next InitializeSecurityContext failed: CRYPT_E_NO_REVOCATION_CHECK (0x80092012) - The revocation function was unable to check revocation for the certificate. But why did IDM could download the file,but curl couldn't. It then defaults to HTTP but assumes others based on often-used host name prefixes. I found that FastGithub caused the problem. Turning AV back on suddenly blocks them. --ca-native is not needed: "When curl on Windows is built to use Schannel, this feature is implied and curl then only uses the native CA store. Thank you Oct 9, 2022 · Hi All, I am trying to execute CURL command to get the ticket details but getting revocation error as mentioned below, quick and correct solution will be highly appreciated. 5 libidn2/2. This is intended to be an "escape hatch" for situations where the network administrator has restricted the normal usage of SChannel APIs on Windows that Git is trying to use. Aug 7, 2017 · Clone failed: The revocation function was unable to check revocation because the revocation server was offline. On Istio installation documentation page they have a curl command to download the installation script for Istioctl. I think that is something with our internal network. 3. Once I successfully run the Curl from command line, I can then call Curl from my Magic program for API calling. There is just one thing I discovered: When I checked the revocation using certutil. Apr 2, 2022 · “curl: (35) schannel: next InitializeSecurityContext failed: Unknown error (0x80092012) - The revocation function was unable to check revocation for the certificate” Oct 4, 2024 · disable SSL revocation function during crates index update in PIP install Asked 1 year ago Modified 1 year ago Viewed 129 times Dec 7, 2022 · I ran in command line curl -x http://my-proxy:port -i -L https://copilot-proxy. 1. i encounter tls/ssl local validation certificate that blocked. The problem is most certainly a missing/wrong/unreachable CRL URI in the server's certificate. e. 0x80092012 (-2146885614 CRYPT_E_NO_REVOCATION_CHECK)". Mar 1, 2021 · curl: (35) schannel: next InitializeSecurityContext failed: Unknown error (0x80092012) - The revocation function was unable to check revocation for the certificate. I've enabled MITM for the app via the android manifest file and it works fine with fiddler. Oct 9, 2023 · curl: (35) schannel: next InitializeSecurityContext failed: Unknown error (0x80092012) - The revocation function was unable to check revocation for the certificate. Cause Do you know TameMyCerts? TameMyCerts is an add-on for the Microsoft certification authority (Active Directory Certificate Services). Jun 10, 2023 · Using the command from https://www. Certificate 0 is the subordinate CA’s certificate, issued by the offline Root CA. Since this is self-signed and we are not hosting our CA, we will need to inform curl to not make this check. 0x80092013, CRYPT_E_REVOCATION_OFFLINE, The revocation function was unable to check revocation because the revocation server was offline Oct 19, 2021 · This tells curl to not check the CA for a revocation list. Sep 2, 2021 · Note: this is not the same curl. Jan 1, 2025 · All curl connections fail with the following error: curl: (35) schannel: next InitializeSecurityContext failed - The revocation function was unable to check revocation for the certificate Did not manage to pinpoint the source of the issue but managed to resolve it by adding the -k option on all curl calls inside the script Expected behavior Aug 29, 2020 · Saturday, 29 August 2020 CURL: The revocation function was unable to check revocation for the certificate Two days ago I was trying to install Istio on a Minikube installation on my personal laptop. 0 (Windows) libcurl/8. schannelCheckRevoke (which sets CURLSSLOPT_NO_REVOKE in libcurl). how likely a compromise of the specific server certificate is and what the impact is if you connect to an impersonated server or MITM. The obvious workaround is using the --ssl-no-revoke flag, but this is still annoying since other apps like git for Windows rely on curl for updates, so I have to disable my AV whenever I want to update. Can this change be made optional? Feb 6, 2025 · In my Brazilian Portuguese Windows Notebook with the newest stable version of git for windows installed, I get the following by executing the 'git update-git-for-windows' both in the Git Bash and in the terminal. Apr 12, 2023 · The revocation function was unable to check revocation because the revocation server was offline on application hosted on IIS Adrian Adamiak 15 Apr 12, 2023, 11:37 PM Jan 14, 2023 · Browser are somewhat better but not perfect - they usually check revocation on EV certificates and on domains deemed important by the browser vendor - see How well do current browsers handle certificate revocation?. CA server is standalone server CDP / CRL is pointing to LDAP. I don't know what else to do. i tried to fix the issue with Sep 7, 2020 · 0x80092012 - The revocation function was unable to check revocation for the certificate #8688 Open ghost opened on Sep 7, 2020 Oct 30, 2019 · From: Harsh Chaturvedi via curl-library <curl-library_at_cool. Mar 1, 2019 · I've been using curl through a mitm proxy for pen-testing and getting the same issue. haskell. " Then I changed the curl command around a bit to this: Oct 20, 2024 · curl: (35) schannel: next InitializeSecurityContext failed: CRYPT_E_NO_REVOCATION_CHECK (0x80092012) - The revocation function was unable to check revocation for the certificate. Feb 19, 2021 · curl: (35) schannel: next InitializeSecurityContext failed: Unknown error (0x80092012) - The revocation function was unable to check revocation for the certificate. The revocation function was unable to check revocation because the revocation server was offline Ask Question Asked 8 years, 4 months ago Modified 1 year, 2 months ago Apr 23, 2023 · curl: (35) schannel: next InitializeSecurityContext failed: Unknown error (0x80092012) - The revocation function was unable to check revocation for the certificate. Jan 4, 2019 · Reply: Andreas Falkenhahn via curl-library: "Re: schannel: next InitializeSecurityContext failed: Unknown error" Contemporary messages sorted: [ by date ] [ by thread ] [ by subject ] [ by author ] [ by messages with attachments ] Dec 28, 2024 · Thread 'schannel: disabled automatic use of client certificate' Message boards : Questions and problems : schannel: disabled automatic use of client certificate Message board moderation Aug 12, 2021 · Summary Gitlab-runner can't clone the repo because revocation server was offline. sh curl: (35) schannel: next InitializeSecurityContext failed: Unknown error (0x80092012) - The revocation function was unable to check revocation for the certificate. The obvious workaround is using the --ssl-no-revoke flag, but this doesnt Name curl - transfer a URL Synopsis curl [options / URLs] Description curl is a tool for transferring data from or to a server using URLs. But from time to time the SSL-handshake fails because the revocation server couldn't be reached. 24. C:\Users\casta>curl https://c5. It supports these protocols: DICT, FILE, FTP, FTPS, GOPHER, GOPHERS, HTTP, HTTPS, IMAP, IMAPS, LDAP, LDAPS, MQTT, POP3, POP3S, RTMP, RTMPS, RTSP, SCP, SFTP, SMB, SMBS, SMTP, SMTPS, TELNET, TFTP, WS and WSS. Oct 21, 2024 · curl: (35) schannel: next InitializeSecurityContext failed: CRYPT_E_NO_REVOCATION_CHECK (0x80092012) - The revocation function was unable to check revocation for the certificate. 3 WinIDN Release-Date: 2024-05-22 Protocols: dict file ftp ftps http https imap imaps ipfs ipns mqtt pop3 pop3s smb smbs smtp smtps telnet tftp Features: alt-svc AsynchDNS HSTS HTTPS-proxy IDN IPv6 Kerberos Largefile libz NTLM SPNEGO SSL SSPI threadsafe Unicode UnixSockets I run 3 commands, and I can't understand why the first one and the Feb 19, 2021 · curl: (35) schannel: next InitializeSecurityContext failed: Unknown error (0x80092012) - The revocation function was unable to check revocation for the certificate. #2 Jun 26, 2019 · Problem On Windows with Schannel, when: proxies are used firewalls block access to all other IPs apart from the proxy and curl is call by a Windows service (using the local system account) As a result: Curl can connect to the proxy, but Schannel attempts to access the CRL endpoint directly because it is not aware of the proxy configuration. Aug 8, 2017 · Unable to access :schannel: next InitializeSecurityContext failed: Unknown error (0x80092012) - The revocation function was unable to check revocation for the certificate. Apr 20, 2025 · This may happen if your client isn't able to access the listed CRL or certificate revocation list. curlrc in your user directory. se> Date: Wed, 30 Oct 2019 14:40:02 -0700 Hello All, Some context - cURL is the main communication library used in Snowflake's ODBC driver. I added http. " curl assumes you want FTP. " Try certutil -user -verify <servercert> as the same user that runs the curl command and look for errors other than revocation like "A certificate Oct 18, 2017 · but it fails The revocation function was unable to check revocation for the certificate. ” To begin my troubleshooting, I ran the command “certutil -setreg ca\CRLFlags +CRLF_REVCHECK_IGNORE_OFFLINE” so I could get the service running. 2, and this workaround is available: git config --global http. Any plans Feb 11, 2023 · curl -X POST "https://www. com/_ping and it says curl: (35) schannel: next InitializeSecurityContext failed: Unknown error (0x80092012) - The revocation function was unable to check revocation for the certificate. Error in download_file (url, file, mode = "wb") : ** Sep 12, 2022 · The revocation function was unable to check revocation because the revocation server was offline. When a certificate is issued there is a CRL created in the backend. 0x80092012 (-2146885614 CRYPT_E_NO_REVOCATION_CHECK) Revocation check skipped -- no revocation information available Cannot check leaf certificate revocation status CertUtil: -verify command completed successfully. Feb 2, 2025 · curl: (35) schannel: next InitializeSecurityContext failed: CRYPT_E_NO_REVOCATION_CHECK (0x80092012) - The revocation function was unable to check revocation for the certificate. Using the curl Command The curl command is used to transfer data from or to a server using various protocols like HTTP, HTTPS, FTP, and more. Aug 15, 2017 · The revocation function is unable to check revocation for the certificate. #2471 New issue Closed Sep 4, 2016 · The revocation function was unable to check revocation because the revocation server was offline. May 21, 2024 · fatal: unable to access '<github>/<projectURL>': schannel: next InitializeSecurityContext failed: CRYPT_E_NO_REVOCATION_CHECK (0x80092012) - The revocation function was unable to check revocation for the certificate. Aug 21, 2021 · I was trying to test if zap's https proxying works in my PC since I could not get it to intercept app https traffic in Android Simulator even after trusting the certificate in android. se/docs/manpage. Jan 9, 2025 · curl: (35) schannel: next InitializeSecurityContext failed: CRYPT_E_NO_REVOCATION_CHECK (0x80092012) - The revocation function was unable to check revocation for the certificate. storj. If you want you can always add the curl --ssl-no-revoke parameter to skip cert validation. curl is powered by libcurl for all transfer Dec 9, 2024 · @saghen Still occurs. Sep 7, 2024 · Good day, Enabling Avast Antivirus’ WebShield and then attempting to use the built-in cURL for Windows always results in the following error: curl: (35) schannel: next InitializeSecurityContext failed: CRYPT_E_NO_REVOCATION_CHECK (0x80092012) - The revocation function was unable to check revocation for the certificate. Curl schannel next initializesecuritycontext failed is a common error that can occur when using the curl command to transfer data over a secure channel. ") How can I solve this please? ADCS Labor Issuing CA 3 The revocation function was unable to check revocation because the revocation server was offline. I was able to solve adding an --insecure flag on the curl's parameters. Oct 17, 2024 · Why does the third command fails? I can see ca. " This indicates that there is some attempt (DNS traffic, TCP connection, ) from the client to connect to a revocation server. kp9 h9kgz mjh jqquf 5zfdp a46 00nuk gl7i cbsydz 3ghh6