Skip to content

curl(schannel): increase renegotiation timeout to 60 seconds#192

Merged
dscho merged 1 commit intomainfrom
increase-schannel-timeout-to-1-minute
Apr 13, 2026
Merged

curl(schannel): increase renegotiation timeout to 60 seconds#192
dscho merged 1 commit intomainfrom
increase-schannel-timeout-to-1-minute

Conversation

@dscho
Copy link
Copy Markdown
Member

@dscho dscho commented Apr 13, 2026

As reported by Tim Omta in curl/curl#21270, the renegotiation timeout of 7 seconds caused serious problems in some scenarios, and was already increased to 60 seconds in cURL's main branch, in time for their v8.20.0 release on April 29th.

Unfortunately, this is too late for the patch to make it into Git for Windows v2.54.0, which is currently scheduled for April 20th (see https://gh.io/gitCal for details).

So let's backport the patch.

As reported by Tim Omta in curl/curl#21270,
the renegotiation timeout of 7 seconds caused serious problems in
some scenarios, and was already increased to 60 seconds in cURL's main
branch, in time for their v8.20.0 release on April 29th.

Unfortunately, this is too late for the patch to make it into Git for
Windows v2.54.0, which is currently scheduled for April 20th (see
https://gh.io/gitCal for details).

So let's backport the patch.

Signed-off-by: Johannes Schindelin <johannes.schindelin@gmx.de>
@dscho dscho self-assigned this Apr 13, 2026
@dscho dscho requested review from mjcheetham and rimrul April 13, 2026 10:44
@dscho
Copy link
Copy Markdown
Member Author

dscho commented Apr 13, 2026

/deploy mingw-w64-curl

The i686/x86_64 and the arm64 workflow runs were started.

@dscho

This comment was marked as outdated.

@dscho
Copy link
Copy Markdown
Member Author

dscho commented Apr 13, 2026

/add relnote bug When fetching/pushing via Secure Channel (the default TLS/SSL method), the timeout to renegotiate (e.g. using client certificates) was recently reduced to 7 seconds, which was too short. It has been extended to 60 seconds.

The workflow run was started

github-actions bot pushed a commit to git-for-windows/build-extra that referenced this pull request Apr 13, 2026
When fetching/pushing via Secure Channel (the default TLS/SSL method),
the timeout to renegotiate (e.g. using client certificates) was recently
reduced to 7 seconds, which was too short. It has been [extended to 60
seconds](git-for-windows/MINGW-packages#192).

Signed-off-by: gitforwindowshelper[bot] <gitforwindowshelper-bot@users.noreply.github.com>
@dscho dscho merged commit f2a9cc7 into main Apr 13, 2026
5 checks passed
@dscho dscho deleted the increase-schannel-timeout-to-1-minute branch April 13, 2026 13:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants