Re: Error on using git update-git-for-windows

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi Junio,

On Fri, 25 Apr 2025, Junio Luan Pereira wrote:

> I discovered that the problem lies in the schannel feature of the curl
> binary. More specifically, the problem is not in the curl itself, but
> in the feature "Safe Web" from Norton Antivirus in my PC that, in some
> way, blocks any attempt of curl to access sites with a public key
> validated by "Let's Encrypt". Turning off the Safe Web makes
> everything work properly.

Interesting.

One last question: do you have OpenSSL or Secure Channel configured as
your default HTTPS backend? You should be able to see this information in
C:\Program Files\Git\etc\install-options.txt, under the key "CURL option":
If it is "WinSSL", you chose Secure Channel, otherwise it is OpenSSL.

Ciao,
Johannes

> 
> I am no expert, but an AI I used suggested that replacing the curl
> executable by one without the schannel feature would solve the
> problem, but I was unable to do this.
> 
> Based on this, I believe this issue can be considered solved.
> 
> Sincerely
> 
> Em qui., 24 de abr. de 2025 às 10:05, Johannes Schindelin
> <Johannes.Schindelin@xxxxxx> escreveu:
> >
> > Hi Junio,
> >
> > On Wed, 9 Apr 2025, Junio Luan Pereira wrote:
> >
> > > I am using git-for-windows on a windows 11 laptop with the Brazilian
> > > Portuguese language.
> > >
> > > Recently, an error occur every time I execute the git
> > > update-git-for-windows in the following way:
> > >
> > > $ git update-git-for-windows
> > > curl: (35) schannel: next InitializeSecurityContext failed:
> > > CRYPT_E_NO_REVOCATION_CHECK (0x80092012) - A fun��o de revoga��o n�o
> > > p�de verificar a revoga��o do certificado.
> >
> > This command is implemented as a Unix shell script:
> >
> > https://github.com/git-for-windows/build-extra/blob/HEAD/git-extra/git-update-git-for-windows
> >
> > Could you edit (in elevated mode!) the file at
> > `C:\Program Files\Git\mingw64\bin\git-update-git-for-windows` and add the
> > `--ssl-revoke-best-effort` option (for a full explanation, see
> > https://curl.se/docs/manpage.html#--ssl-revoke-best-effort) to the two
> > `curl` invocations in that script, and then try it again?
> >
> > Thank you,
> > Johannes
> >
> > >
> > > Reinstalling completely the program apparently does not work.
> > >
> > > Is this some kind of bug on git-for-windows? Was it reported? Should
> > > it be reported?
> > >
> > > PS: I have no knowledge of programming, developing or debugging git.
> > > Ask me in case more information is needed.
> > >
> > > Sincerely
> > >
> > >
> 

[Index of Archives]     [Linux Kernel Development]     [Gcc Help]     [IETF Annouce]     [DCCP]     [Netdev]     [Networking]     [Security]     [V4L]     [Bugtraq]     [Yosemite]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Linux SCSI]     [Fedora Users]

  Powered by Linux