curl -X POST "https://www.storj.io/dcs-satellites" -F title="Sat list"
curl: (35) schannel: next InitializeSecurityContext failed: Unknown error (0x80092012) - The revocation function was unable to check revocation for the certificate.
Please correct me if I am wrong but does this error occur when CA servers are being contacted to check SSL certificate validity ?
I was able to overcome this error by using --ssl-no-revoke. I want to create an issue on github but I also want to learn what is causing it.
I am using it in my PS script. Even with GET I get the following result.
curl "https://www.storj.io/dcs-satellites"
curl: (35) schannel: next InitializeSecurityContext failed: Unknown error (0x80092012) - The revocation function was unable to check revocation for the certificate.
curl http://crls.pki.goog/gts1d4/BDUW5cT_UVM.crl --output crl.Der
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
100 138k 100 138k 0 0 524k 0 --:--:-- --:--:-- --:--:-- 527k
what did this command do ?
I have updated curl to latest version 7.87 it still gives this error
curl.exe "https://www.storj.io/dcs-satellites"
curl: (60) SSL certificate problem: unable to get local issuer certificate
More details here: https://curl.se/docs/sslcerts.html
curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.
It works perfectly on WSL2
Also tried using --capath, --with-ca-bundle flags resulting in
curl.exe --capath "D:\CAupdate\cacert.pem" "https://www.storj.io/dcs-satellites"
curl: (60) SSL certificate problem: unable to get local issuer certificate
More details here: https://curl.se/docs/sslcerts.html
curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.
1 article suggested to update all certificates by creating roots.sst but it showed adding 440+ certificates. Many of them were expired so I decided to not follow it. Certmgr showed I have 94 certificates.
Another trial and error method.
curl.exe --capath C:\Windows\System32\curl-ca-bundle.crt "https://www.storj.io/dcs-satellites"
curl: (60) SSL certificate problem: unable to get local issuer certificate
More details here: https://curl.se/docs/sslcerts.html
curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.
So for me it look like a problem with your Windows, may be it requires update?
My version is
PS C:\Users\Alex> systeminfo.exe
Host Name: DESKTOP-AHBSDQ
OS Name: Microsoft Windows 10 Pro
OS Version: 10.0.19045 N/A Build 19045
OS Manufacturer: Microsoft Corporation
OS Configuration: Standalone Workstation
...
I downloaded the SSL www.storj.io.crt from dcs page and installed the cert. It gives the same error message.
Our system info matches so I am updating Windows as of now.
What could have caused curl to start showing that message when everything was working fine ? I noticed it when my PS script started showing odd error messages.
Usually it’s related to the not updated root certificates or something is trying to intercept requests and substitute the certificate with a malicious one to be able to decrypt all your SSL traffic too.
If this is related to not updated certificates, then you need to install the root certificate from our issuer - Google Trust Services LLC:
You need to install the GTS Root R1 and GTS CA 1D4 certificates in the Root Certificates Authorities folder in the certificate manager for the machine, not for the user or personal (unless you run your commands only as your user, not as an administrator or as a system user).
Since it’s compiled with Schannel, it should use the built-in certificate store of Windows, according to curl - SSL CA Certificates. I think either the certificate may not be loaded as the right user, or there is still something missing…
curl -v "https://www.storj.io/dcs-satellites"
* Trying 34.120.119.150:443...
* Connected to www.storj.io (34.120.119.150) port 443 (#0)
* schannel: disabled automatic use of client certificate
* ALPN: offers http/1.1
* schannel: next InitializeSecurityContext failed: Unknown error (0x80092012) - The revocation function was unable to check revocation for the certificate.
* Closing connection 0
curl: (35) schannel: next InitializeSecurityContext failed: Unknown error (0x80092012) - The revocation function was unable to check revocation for the certificate.
what did this command do ?
