{"thread":{"id":"63274","subject":"Error on using git update-git-for-windows","startedAt":"2025-04-09T19:52:44Z","lastAt":"2025-07-17T16:39:21Z","messageCount":7,"participants":["Junio Luan Pereira","brian m. carlson","Johannes Schindelin"],"isPatch":false,"patchVersion":null,"patchTotal":null},"messages":[{"id":"515937","messageId":"CA+7SsOdTiAocj7ZTV=OVw0tyKJxZ-H+m5S8soPfFy6zW=1ddzg@mail.gmail.com","threadId":"63274","inReplyTo":null,"subject":"Error on using git update-git-for-windows","fromName":"Junio Luan Pereira","fromEmail":"junioluanutfrma@gmail.com","sentAt":"2025-04-09T19:52:31Z","receivedAt":"2025-04-09T19:52:44Z","isPatch":false,"sender":{"key":"junioluanutfrma@gmail.com","avatar":null},"body":"Hello everyone,\n\nI am using git-for-windows on a windows 11 laptop with the Brazilian\nPortuguese language.\n\nRecently, an error occur every time I execute the git\nupdate-git-for-windows in the following way:\n\n$ git update-git-for-windows\ncurl: (35) schannel: next InitializeSecurityContext failed:\nCRYPT_E_NO_REVOCATION_CHECK (0x80092012) - A fun��o de revoga��o n�o\np�de verificar a revoga��o do certificado.\n\nReinstalling completely the program apparently does not work.\n\nIs this some kind of bug on git-for-windows? Was it reported? Should\nit be reported?\n\nPS: I have no knowledge of programming, developing or debugging git.\nAsk me in case more information is needed.\n\nSincerely\n"},{"id":"515938","messageId":"Z_bz9Os4AqjmL8LR@tapette.crustytoothpaste.net","threadId":"63274","inReplyTo":"CA+7SsOdTiAocj7ZTV=OVw0tyKJxZ-H+m5S8soPfFy6zW=1ddzg@mail.gmail.com","subject":"Re: Error on using git update-git-for-windows","fromName":"brian m. carlson","fromEmail":"sandals@crustytoothpaste.net","sentAt":"2025-04-09T22:25:56Z","receivedAt":"2025-04-09T22:32:04Z","isPatch":false,"sender":{"key":"sandals@crustytoothpaste.net","avatar":"https://avatars.githubusercontent.com/u/497054?v=4"},"body":"On 2025-04-09 at 19:52:31, Junio Luan Pereira wrote:\n> Hello everyone,\n\nHi,\n\n> I am using git-for-windows on a windows 11 laptop with the Brazilian\n> Portuguese language.\n> \n> Recently, an error occur every time I execute the git\n> update-git-for-windows in the following way:\n\nThis particular program is specific to Git for Windows, which is its own\nproject.  You'd probably want to report it at the Git for Windows\nproject's issue tracker at\nhttps://github.com/git-for-windows/git/issues.\n\n> $ git update-git-for-windows\n> curl: (35) schannel: next InitializeSecurityContext failed:\n> CRYPT_E_NO_REVOCATION_CHECK (0x80092012) - A fun��o de revoga��o n�o\n> p�de verificar a revoga��o do certificado.\n\nI don't use Windows, so I can't really be of much help here, but I will\nsay that some googling indicates that this error could happen if you\nhave a proxy (including a non-default antivirus or firewall), so you may\nwant to check that first before reporting.\n-- \nbrian m. carlson (they/them)\nToronto, Ontario, CA\n"},{"id":"516667","messageId":"ceb84ea7-6359-63c4-e02b-418d9d313b06@gmx.de","threadId":"63274","inReplyTo":"CA+7SsOdTiAocj7ZTV=OVw0tyKJxZ-H+m5S8soPfFy6zW=1ddzg@mail.gmail.com","subject":"Re: Error on using git update-git-for-windows","fromName":"Johannes Schindelin","fromEmail":"johannes.schindelin@gmx.de","sentAt":"2025-04-24T13:05:53Z","receivedAt":"2025-04-24T13:05:57Z","isPatch":false,"sender":{"key":"johannes.schindelin@gmx.de","avatar":"https://avatars.githubusercontent.com/u/127790?v=4"},"body":"Hi Junio,\n\nOn Wed, 9 Apr 2025, Junio Luan Pereira wrote:\n\n> I am using git-for-windows on a windows 11 laptop with the Brazilian\n> Portuguese language.\n> \n> Recently, an error occur every time I execute the git\n> update-git-for-windows in the following way:\n> \n> $ git update-git-for-windows\n> curl: (35) schannel: next InitializeSecurityContext failed:\n> CRYPT_E_NO_REVOCATION_CHECK (0x80092012) - A fun��o de revoga��o n�o\n> p�de verificar a revoga��o do certificado.\n\nThis command is implemented as a Unix shell script:\n\nhttps://github.com/git-for-windows/build-extra/blob/HEAD/git-extra/git-update-git-for-windows\n\nCould you edit (in elevated mode!) the file at\n`C:\\Program Files\\Git\\mingw64\\bin\\git-update-git-for-windows` and add the\n`--ssl-revoke-best-effort` option (for a full explanation, see\nhttps://curl.se/docs/manpage.html#--ssl-revoke-best-effort) to the two\n`curl` invocations in that script, and then try it again?\n\nThank you,\nJohannes\n\n> \n> Reinstalling completely the program apparently does not work.\n> \n> Is this some kind of bug on git-for-windows? Was it reported? Should\n> it be reported?\n> \n> PS: I have no knowledge of programming, developing or debugging git.\n> Ask me in case more information is needed.\n> \n> Sincerely\n> \n> \n"},{"id":"516843","messageId":"CA+7SsOd9jtjQT+zg8XttA-bfONG2Jpkg4uBTTdys87e_jEX1pw@mail.gmail.com","threadId":"63274","inReplyTo":"ceb84ea7-6359-63c4-e02b-418d9d313b06@gmx.de","subject":"Re: Error on using git update-git-for-windows","fromName":"Junio Luan Pereira","fromEmail":"junioluanutfrma@gmail.com","sentAt":"2025-04-25T22:15:47Z","receivedAt":"2025-04-25T22:15:59Z","isPatch":false,"sender":{"key":"junioluanutfrma@gmail.com","avatar":null},"body":"I discovered that the problem lies in the schannel feature of the curl\nbinary. More specifically, the problem is not in the curl itself, but\nin the feature \"Safe Web\" from Norton Antivirus in my PC that, in some\nway, blocks any attempt of curl to access sites with a public key\nvalidated by \"Let's Encrypt\". Turning off the Safe Web makes\neverything work properly.\n\nI am no expert, but an AI I used suggested that replacing the curl\nexecutable by one without the schannel feature would solve the\nproblem, but I was unable to do this.\n\nBased on this, I believe this issue can be considered solved.\n\nSincerely\n\nEm qui., 24 de abr. de 2025 às 10:05, Johannes Schindelin\n<Johannes.Schindelin@gmx.de> escreveu:\n>\n> Hi Junio,\n>\n> On Wed, 9 Apr 2025, Junio Luan Pereira wrote:\n>\n> > I am using git-for-windows on a windows 11 laptop with the Brazilian\n> > Portuguese language.\n> >\n> > Recently, an error occur every time I execute the git\n> > update-git-for-windows in the following way:\n> >\n> > $ git update-git-for-windows\n> > curl: (35) schannel: next InitializeSecurityContext failed:\n> > CRYPT_E_NO_REVOCATION_CHECK (0x80092012) - A fun��o de revoga��o n�o\n> > p�de verificar a revoga��o do certificado.\n>\n> This command is implemented as a Unix shell script:\n>\n> https://github.com/git-for-windows/build-extra/blob/HEAD/git-extra/git-update-git-for-windows\n>\n> Could you edit (in elevated mode!) the file at\n> `C:\\Program Files\\Git\\mingw64\\bin\\git-update-git-for-windows` and add the\n> `--ssl-revoke-best-effort` option (for a full explanation, see\n> https://curl.se/docs/manpage.html#--ssl-revoke-best-effort) to the two\n> `curl` invocations in that script, and then try it again?\n>\n> Thank you,\n> Johannes\n>\n> >\n> > Reinstalling completely the program apparently does not work.\n> >\n> > Is this some kind of bug on git-for-windows? Was it reported? Should\n> > it be reported?\n> >\n> > PS: I have no knowledge of programming, developing or debugging git.\n> > Ask me in case more information is needed.\n> >\n> > Sincerely\n> >\n> >\n"},{"id":"516889","messageId":"01e30386-028a-b115-6550-57d598ba93df@gmx.de","threadId":"63274","inReplyTo":"CA+7SsOd9jtjQT+zg8XttA-bfONG2Jpkg4uBTTdys87e_jEX1pw@mail.gmail.com","subject":"Re: Error on using git update-git-for-windows","fromName":"Johannes Schindelin","fromEmail":"johannes.schindelin@gmx.de","sentAt":"2025-04-28T11:22:01Z","receivedAt":"2025-04-28T11:22:03Z","isPatch":false,"sender":{"key":"johannes.schindelin@gmx.de","avatar":"https://avatars.githubusercontent.com/u/127790?v=4"},"body":"Hi Junio,\n\nOn Fri, 25 Apr 2025, Junio Luan Pereira wrote:\n\n> I discovered that the problem lies in the schannel feature of the curl\n> binary. More specifically, the problem is not in the curl itself, but\n> in the feature \"Safe Web\" from Norton Antivirus in my PC that, in some\n> way, blocks any attempt of curl to access sites with a public key\n> validated by \"Let's Encrypt\". Turning off the Safe Web makes\n> everything work properly.\n\nInteresting.\n\nOne last question: do you have OpenSSL or Secure Channel configured as\nyour default HTTPS backend? You should be able to see this information in\nC:\\Program Files\\Git\\etc\\install-options.txt, under the key \"CURL option\":\nIf it is \"WinSSL\", you chose Secure Channel, otherwise it is OpenSSL.\n\nCiao,\nJohannes\n\n> \n> I am no expert, but an AI I used suggested that replacing the curl\n> executable by one without the schannel feature would solve the\n> problem, but I was unable to do this.\n> \n> Based on this, I believe this issue can be considered solved.\n> \n> Sincerely\n> \n> Em qui., 24 de abr. de 2025 às 10:05, Johannes Schindelin\n> <Johannes.Schindelin@gmx.de> escreveu:\n> >\n> > Hi Junio,\n> >\n> > On Wed, 9 Apr 2025, Junio Luan Pereira wrote:\n> >\n> > > I am using git-for-windows on a windows 11 laptop with the Brazilian\n> > > Portuguese language.\n> > >\n> > > Recently, an error occur every time I execute the git\n> > > update-git-for-windows in the following way:\n> > >\n> > > $ git update-git-for-windows\n> > > curl: (35) schannel: next InitializeSecurityContext failed:\n> > > CRYPT_E_NO_REVOCATION_CHECK (0x80092012) - A fun��o de revoga��o n�o\n> > > p�de verificar a revoga��o do certificado.\n> >\n> > This command is implemented as a Unix shell script:\n> >\n> > https://github.com/git-for-windows/build-extra/blob/HEAD/git-extra/git-update-git-for-windows\n> >\n> > Could you edit (in elevated mode!) the file at\n> > `C:\\Program Files\\Git\\mingw64\\bin\\git-update-git-for-windows` and add the\n> > `--ssl-revoke-best-effort` option (for a full explanation, see\n> > https://curl.se/docs/manpage.html#--ssl-revoke-best-effort) to the two\n> > `curl` invocations in that script, and then try it again?\n> >\n> > Thank you,\n> > Johannes\n> >\n> > >\n> > > Reinstalling completely the program apparently does not work.\n> > >\n> > > Is this some kind of bug on git-for-windows? Was it reported? Should\n> > > it be reported?\n> > >\n> > > PS: I have no knowledge of programming, developing or debugging git.\n> > > Ask me in case more information is needed.\n> > >\n> > > Sincerely\n> > >\n> > >\n> \n"},{"id":"516910","messageId":"CA+7SsOeYhzBSTXt0V21ghqdzKBkT49GxZZU0k0MavmNrriv8pw@mail.gmail.com","threadId":"63274","inReplyTo":"01e30386-028a-b115-6550-57d598ba93df@gmx.de","subject":"Re: Error on using git update-git-for-windows","fromName":"Junio Luan Pereira","fromEmail":"junioluanutfrma@gmail.com","sentAt":"2025-04-28T20:02:01Z","receivedAt":"2025-04-28T20:02:14Z","isPatch":false,"sender":{"key":"junioluanutfrma@gmail.com","avatar":null},"body":"Hello\nThe \"Curl option\" is set to \"WinSSL\", but the problem persists even\nwhen it is switched to \"OpenSSL\". To confirm this, I reinstalled Git\nusing the Windows executable file (without uninstalling it first) and\nrestarted my laptop. Now the content of  \"C:\\Program\nFiles\\Git\\etc\\install-options.txt\" is as follows:\n\nEditor Option: Nano\nCustom Editor Path:\nDefault Branch Option:\nPath Option: Cmd\nSSH Option: OpenSSH\nTortoise Option: false\nCURL Option: OpenSSL\nCRLF Option: CRLFAlways\nBash Terminal Option: MinTTY\nGit Pull Behavior Option: Merge\nUse Credential Manager: Enabled\nPerformance Tweaks FSCache: Enabled\nEnable Symlinks: Disabled\nEnable FSMonitor: Disabled\n\nYet, the issues remained unchanged.\n\nIf this information is helpful to you, my current cURL version is\n\n$ curl --version\ncurl 8.12.1 (x86_64-w64-mingw32) libcurl/8.12.1 Schannel zlib/1.3.1\nbrotli/1.1.0 zstd/1.5.7 libidn2/2.3.7 libpsl/0.21.5 libssh2/1.11.1\nRelease-Date: 2025-02-13\nProtocols: dict file ftp ftps gopher gophers http https imap imaps\nipfs ipns ldap ldaps mqtt pop3 pop3s rtsp scp sftp smb smbs smtp smtps\ntelnet tftp ws wss\nFeatures: alt-svc AsynchDNS brotli HSTS HTTPS-proxy IDN IPv6 Kerberos\nLargefile libz NTLM PSL SPNEGO SSL SSPI threadsafe UnixSockets zstd\n\nThis is why I was unable to use a cURL binary without Schannel.\n\nSincerely\n\n\nEm seg., 28 de abr. de 2025 às 08:22, Johannes Schindelin\n<Johannes.Schindelin@gmx.de> escreveu:\n>\n> Hi Junio,\n>\n> On Fri, 25 Apr 2025, Junio Luan Pereira wrote:\n>\n> > I discovered that the problem lies in the schannel feature of the curl\n> > binary. More specifically, the problem is not in the curl itself, but\n> > in the feature \"Safe Web\" from Norton Antivirus in my PC that, in some\n> > way, blocks any attempt of curl to access sites with a public key\n> > validated by \"Let's Encrypt\". Turning off the Safe Web makes\n> > everything work properly.\n>\n> Interesting.\n>\n> One last question: do you have OpenSSL or Secure Channel configured as\n> your default HTTPS backend? You should be able to see this information in\n> C:\\Program Files\\Git\\etc\\install-options.txt, under the key \"CURL option\":\n> If it is \"WinSSL\", you chose Secure Channel, otherwise it is OpenSSL.\n>\n> Ciao,\n> Johannes\n>\n> >\n> > I am no expert, but an AI I used suggested that replacing the curl\n> > executable by one without the schannel feature would solve the\n> > problem, but I was unable to do this.\n> >\n> > Based on this, I believe this issue can be considered solved.\n> >\n> > Sincerely\n> >\n> > Em qui., 24 de abr. de 2025 às 10:05, Johannes Schindelin\n> > <Johannes.Schindelin@gmx.de> escreveu:\n> > >\n> > > Hi Junio,\n> > >\n> > > On Wed, 9 Apr 2025, Junio Luan Pereira wrote:\n> > >\n> > > > I am using git-for-windows on a windows 11 laptop with the Brazilian\n> > > > Portuguese language.\n> > > >\n> > > > Recently, an error occur every time I execute the git\n> > > > update-git-for-windows in the following way:\n> > > >\n> > > > $ git update-git-for-windows\n> > > > curl: (35) schannel: next InitializeSecurityContext failed:\n> > > > CRYPT_E_NO_REVOCATION_CHECK (0x80092012) - A fun��o de revoga��o n�o\n> > > > p�de verificar a revoga��o do certificado.\n> > >\n> > > This command is implemented as a Unix shell script:\n> > >\n> > > https://github.com/git-for-windows/build-extra/blob/HEAD/git-extra/git-update-git-for-windows\n> > >\n> > > Could you edit (in elevated mode!) the file at\n> > > `C:\\Program Files\\Git\\mingw64\\bin\\git-update-git-for-windows` and add the\n> > > `--ssl-revoke-best-effort` option (for a full explanation, see\n> > > https://curl.se/docs/manpage.html#--ssl-revoke-best-effort) to the two\n> > > `curl` invocations in that script, and then try it again?\n> > >\n> > > Thank you,\n> > > Johannes\n> > >\n> > > >\n> > > > Reinstalling completely the program apparently does not work.\n> > > >\n> > > > Is this some kind of bug on git-for-windows? Was it reported? Should\n> > > > it be reported?\n> > > >\n> > > > PS: I have no knowledge of programming, developing or debugging git.\n> > > > Ask me in case more information is needed.\n> > > >\n> > > > Sincerely\n> > > >\n> > > >\n> >\n"},{"id":"522214","messageId":"6c3ac456-ff03-6c74-ba86-967e258685a1@gmx.de","threadId":"63274","inReplyTo":"CA+7SsOeYhzBSTXt0V21ghqdzKBkT49GxZZU0k0MavmNrriv8pw@mail.gmail.com","subject":"Re: Error on using git update-git-for-windows","fromName":"Johannes Schindelin","fromEmail":"johannes.schindelin@gmx.de","sentAt":"2025-07-17T16:39:17Z","receivedAt":"2025-07-17T16:39:21Z","isPatch":false,"sender":{"key":"johannes.schindelin@gmx.de","avatar":"https://avatars.githubusercontent.com/u/127790?v=4"},"body":"Hi Juan,\n\nYes, the 'Curl option' is set, but that does not affect the `curl.exe`\nprogram... That will always use \"WinSSL\" (which means: Secure Channel),\ni.e. not OpenSSL. The reason is that Git for Windows needs to use a nasty\nhack to avoid depending on OpenSSL (which I want to limit to\n`git-remote-https.exe`), for full details see:\nhttps://github.com/git-for-windows/git/pull/4410\n\nCiao,\nJohannes\n\nOn Mon, 28 Apr 2025, Junio Luan Pereira wrote:\n\n> Hello\n> The \"Curl option\" is set to \"WinSSL\", but the problem persists even\n> when it is switched to \"OpenSSL\". To confirm this, I reinstalled Git\n> using the Windows executable file (without uninstalling it first) and\n> restarted my laptop. Now the content of  \"C:\\Program\n> Files\\Git\\etc\\install-options.txt\" is as follows:\n> \n> Editor Option: Nano\n> Custom Editor Path:\n> Default Branch Option:\n> Path Option: Cmd\n> SSH Option: OpenSSH\n> Tortoise Option: false\n> CURL Option: OpenSSL\n> CRLF Option: CRLFAlways\n> Bash Terminal Option: MinTTY\n> Git Pull Behavior Option: Merge\n> Use Credential Manager: Enabled\n> Performance Tweaks FSCache: Enabled\n> Enable Symlinks: Disabled\n> Enable FSMonitor: Disabled\n> \n> Yet, the issues remained unchanged.\n> \n> If this information is helpful to you, my current cURL version is\n> \n> $ curl --version\n> curl 8.12.1 (x86_64-w64-mingw32) libcurl/8.12.1 Schannel zlib/1.3.1\n> brotli/1.1.0 zstd/1.5.7 libidn2/2.3.7 libpsl/0.21.5 libssh2/1.11.1\n> Release-Date: 2025-02-13\n> Protocols: dict file ftp ftps gopher gophers http https imap imaps\n> ipfs ipns ldap ldaps mqtt pop3 pop3s rtsp scp sftp smb smbs smtp smtps\n> telnet tftp ws wss\n> Features: alt-svc AsynchDNS brotli HSTS HTTPS-proxy IDN IPv6 Kerberos\n> Largefile libz NTLM PSL SPNEGO SSL SSPI threadsafe UnixSockets zstd\n> \n> This is why I was unable to use a cURL binary without Schannel.\n> \n> Sincerely\n> \n> \n> Em seg., 28 de abr. de 2025 às 08:22, Johannes Schindelin\n> <Johannes.Schindelin@gmx.de> escreveu:\n> >\n> > Hi Junio,\n> >\n> > On Fri, 25 Apr 2025, Junio Luan Pereira wrote:\n> >\n> > > I discovered that the problem lies in the schannel feature of the curl\n> > > binary. More specifically, the problem is not in the curl itself, but\n> > > in the feature \"Safe Web\" from Norton Antivirus in my PC that, in some\n> > > way, blocks any attempt of curl to access sites with a public key\n> > > validated by \"Let's Encrypt\". Turning off the Safe Web makes\n> > > everything work properly.\n> >\n> > Interesting.\n> >\n> > One last question: do you have OpenSSL or Secure Channel configured as\n> > your default HTTPS backend? You should be able to see this information in\n> > C:\\Program Files\\Git\\etc\\install-options.txt, under the key \"CURL option\":\n> > If it is \"WinSSL\", you chose Secure Channel, otherwise it is OpenSSL.\n> >\n> > Ciao,\n> > Johannes\n> >\n> > >\n> > > I am no expert, but an AI I used suggested that replacing the curl\n> > > executable by one without the schannel feature would solve the\n> > > problem, but I was unable to do this.\n> > >\n> > > Based on this, I believe this issue can be considered solved.\n> > >\n> > > Sincerely\n> > >\n> > > Em qui., 24 de abr. de 2025 às 10:05, Johannes Schindelin\n> > > <Johannes.Schindelin@gmx.de> escreveu:\n> > > >\n> > > > Hi Junio,\n> > > >\n> > > > On Wed, 9 Apr 2025, Junio Luan Pereira wrote:\n> > > >\n> > > > > I am using git-for-windows on a windows 11 laptop with the Brazilian\n> > > > > Portuguese language.\n> > > > >\n> > > > > Recently, an error occur every time I execute the git\n> > > > > update-git-for-windows in the following way:\n> > > > >\n> > > > > $ git update-git-for-windows\n> > > > > curl: (35) schannel: next InitializeSecurityContext failed:\n> > > > > CRYPT_E_NO_REVOCATION_CHECK (0x80092012) - A fun��o de revoga��o n�o\n> > > > > p�de verificar a revoga��o do certificado.\n> > > >\n> > > > This command is implemented as a Unix shell script:\n> > > >\n> > > > https://github.com/git-for-windows/build-extra/blob/HEAD/git-extra/git-update-git-for-windows\n> > > >\n> > > > Could you edit (in elevated mode!) the file at\n> > > > `C:\\Program Files\\Git\\mingw64\\bin\\git-update-git-for-windows` and add the\n> > > > `--ssl-revoke-best-effort` option (for a full explanation, see\n> > > > https://curl.se/docs/manpage.html#--ssl-revoke-best-effort) to the two\n> > > > `curl` invocations in that script, and then try it again?\n> > > >\n> > > > Thank you,\n> > > > Johannes\n> > > >\n> > > > >\n> > > > > Reinstalling completely the program apparently does not work.\n> > > > >\n> > > > > Is this some kind of bug on git-for-windows? Was it reported? Should\n> > > > > it be reported?\n> > > > >\n> > > > > PS: I have no knowledge of programming, developing or debugging git.\n> > > > > Ask me in case more information is needed.\n> > > > >\n> > > > > Sincerely\n> > > > >\n> > > > >\n> > >\n> \n> \n"}]}