schannel: shut off experimental TLS 1.3 support for Win 10

- Change minimum Windows version for TLS 1.3 support to
  Windows Server 2022.

Prior to this change Windows Server 2022 was already used as the minimum
version in some but not all of the checks for TLS 1.3 support.

Ref: https://github.com/curl/curl/pull/21719#issuecomment-4520234306
Ref: https://github.com/curl/curl/issues/21702

Signed-off-by: Emmanuel Ugwu <emmanuelugwu121@gmail.com>

Closes https://github.com/curl/curl/pull/22231
This commit is contained in:
Emmanuel Ugwu 2026-06-30 21:07:17 +01:00 committed by Jay Satiro
parent c0cae1eba4
commit acebf346fe

View file

@ -593,11 +593,10 @@ static CURLcode acquire_sspi_handle(struct Curl_cfilter *cf,
SECURITY_STATUS sspi_status = SEC_E_OK;
CURLcode result;
/* We support TLS 1.3 starting in Windows 10 version 1809 (OS build 17763) as
long as the user did not set a legacy algorithm list
(CURLOPT_SSL_CIPHER_LIST). */
/* We support TLS 1.3 starting in Windows Server 2022 or later
* (OS build 20348) */
if(!conn_config->cipher_list &&
curlx_verify_windows_version(10, 0, 17763, PLATFORM_WINNT,
curlx_verify_windows_version(10, 0, 20348, PLATFORM_WINNT,
VERSION_GREATER_THAN_EQUAL)) {
SCH_CREDENTIALS credentials = { 0 };