Hi Junio,

On Fri, 25 Apr 2025, Junio Luan Pereira wrote:

I discovered that the problem lies in the schannel feature of the curl
binary. More specifically, the problem is not in the curl itself, but
in the feature "Safe Web" from Norton Antivirus in my PC that, in some
way, blocks any attempt of curl to access sites with a public key
validated by "Let's Encrypt". Turning off the Safe Web makes
everything work properly.

Interesting.

One last question: do you have OpenSSL or Secure Channel configured as
your default HTTPS backend? You should be able to see this information in
C:\Program Files\Git\etc\install-options.txt, under the key "CURL option":
If it is "WinSSL", you chose Secure Channel, otherwise it is OpenSSL.

Ciao,
Johannes

I am no expert, but an AI I used suggested that replacing the curl
executable by one without the schannel feature would solve the
problem, but I was unable to do this.

Based on this, I believe this issue can be considered solved.

Sincerely

Em qui., 24 de abr. de 2025 às 10:05, Johannes Schindelin
[off-list ref] escreveu:

quoted

Hi Junio,

On Wed, 9 Apr 2025, Junio Luan Pereira wrote:

quoted

I am using git-for-windows on a windows 11 laptop with the Brazilian
Portuguese language.

Recently, an error occur every time I execute the git
update-git-for-windows in the following way:

$ git update-git-for-windows
curl: (35) schannel: next InitializeSecurityContext failed:
CRYPT_E_NO_REVOCATION_CHECK (0x80092012) - A fun��o de revoga��o n�o
p�de verificar a revoga��o do certificado.

This command is implemented as a Unix shell script:

https://github.com/git-for-windows/build-extra/blob/HEAD/git-extra/git-update-git-for-windows

Could you edit (in elevated mode!) the file at
`C:\Program Files\Git\mingw64\bin\git-update-git-for-windows` and add the
`--ssl-revoke-best-effort` option (for a full explanation, see
https://curl.se/docs/manpage.html#--ssl-revoke-best-effort) to the two
`curl` invocations in that script, and then try it again?

Thank you,
Johannes

quoted

Reinstalling completely the program apparently does not work.

Is this some kind of bug on git-for-windows? Was it reported? Should
it be reported?

PS: I have no knowledge of programming, developing or debugging git.
Ask me in case more information is needed.

Sincerely