From acebf346fe401f64bb3e393058c3004fdc9d94c3 Mon Sep 17 00:00:00 2001 From: Emmanuel Ugwu Date: Tue, 30 Jun 2026 21:07:17 +0100 Subject: [PATCH] schannel: shut off experimental TLS 1.3 support for Win 10 - Change minimum Windows version for TLS 1.3 support to Windows Server 2022. Prior to this change Windows Server 2022 was already used as the minimum version in some but not all of the checks for TLS 1.3 support. Ref: https://github.com/curl/curl/pull/21719#issuecomment-4520234306 Ref: https://github.com/curl/curl/issues/21702 Signed-off-by: Emmanuel Ugwu Closes https://github.com/curl/curl/pull/22231 --- lib/vtls/schannel.c | 7 +++---- 1 file changed, 3 insertions(+), 4 deletions(-) diff --git a/lib/vtls/schannel.c b/lib/vtls/schannel.c index 72aedabc7c..d322c755e8 100644 --- a/lib/vtls/schannel.c +++ b/lib/vtls/schannel.c @@ -593,11 +593,10 @@ static CURLcode acquire_sspi_handle(struct Curl_cfilter *cf, SECURITY_STATUS sspi_status = SEC_E_OK; CURLcode result; - /* We support TLS 1.3 starting in Windows 10 version 1809 (OS build 17763) as - long as the user did not set a legacy algorithm list - (CURLOPT_SSL_CIPHER_LIST). */ + /* We support TLS 1.3 starting in Windows Server 2022 or later + * (OS build 20348) */ if(!conn_config->cipher_list && - curlx_verify_windows_version(10, 0, 17763, PLATFORM_WINNT, + curlx_verify_windows_version(10, 0, 20348, PLATFORM_WINNT, VERSION_GREATER_THAN_EQUAL)) { SCH_CREDENTIALS credentials = { 0 };