From 7b787f5995313d3f11557248e4ead36eb97dba66 Mon Sep 17 00:00:00 2001
From: Viktor Szakats <commit@vsz.me>
Date: Tue, 14 Apr 2026 01:37:50 +0200
Subject: [PATCH] KNOWN_BUGS: Native CA roots incomplete on Windows with
 OpenSSL/fork

Reported-by: finkjsc on github
Reported-by: nitrogene on github
Ref: #12303
Closes #20897

Closes #21305
---
 docs/KNOWN_BUGS.md | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/docs/KNOWN_BUGS.md b/docs/KNOWN_BUGS.md
index 5c747644c7..cb51bdc54b 100644
--- a/docs/KNOWN_BUGS.md
+++ b/docs/KNOWN_BUGS.md
@@ -53,6 +53,13 @@ fail, resulting in error SEC_E_BUFFER_TOO_SMALL or SEC_E_MESSAGE_ALTERED.
 
 [curl issue 15801](https://github.com/curl/curl/issues/15801)
 
+## Native CA roots incomplete on Windows with OpenSSL (or fork)
+
+Certain Windows installations may be missing CA roots.
+
+[curl issue 20897](https://github.com/curl/curl/issues/20897)
+[curl issue 12303](https://github.com/curl/curl/issues/12303)
+
 # Email protocols
 
 ## IMAP `SEARCH ALL` truncated response