Downloading fails on w10 version 1803

[sskras]

(OS Build 17134.2026)

For some reason it fails for me:

PS C:\Users\USERNAME> iex(New-Object Net.WebClient).DownloadString('https://raw.githubusercontent.com/vulmon/Vulmap/master
/Vulmap-Windows/vulmap-windows.ps1')
>>
Exception calling "DownloadString" with "1" argument(s): "The request was aborted: Could not create SSL/TLS secure chan
nel."
At line:1 char:1
+ iex(New-Object Net.WebClient).DownloadString('https://raw.githubuserc ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : NotSpecified: (:) [], MethodInvocationException
    + FullyQualifiedErrorId : WebException

[sskras]

Builtin curl fails too (above in the pic below). But one coming from MSYS2 environment works fine (below in the pic below):

[yavuzatlas]

It seems you get error while connecting to github. Are you using it in your company? They may intercept your traffic.

[sskras]

Are you using it in your company?

Yes, I do. But if they intercept the traffice for one curl binary, why they aren't doing it for the second curl binary?

I would bet that it's about certificate pool bundled for each binary or something like that.

The first one (failing):

C:\Users\saukrs>curl --version
curl 7.55.1 (Windows) libcurl/7.55.1 WinSSL
Release-Date: [unreleased]
Protocols: dict file ftp ftps http https imap imaps pop3 pop3s smtp smtps telnet tftp
Features: AsynchDNS IPv6 Largefile SSPI Kerberos SPNEGO NTLM SSL

And the second one (working):

$ curl --version
curl 7.74.0 (x86_64-pc-msys) libcurl/7.74.0 OpenSSL/1.1.1i zlib/1.2.11 brotli/1.0.9 zstd/1.4.8 libidn2/2.3.0 libpsl/0.21.1 (+libidn2/2.3.0) libssh2/1.9.0 nghttp2/1.41.0
Release-Date: 2020-12-09
Protocols: dict file ftp ftps gopher http https imap imaps mqtt pop3 pop3s rtsp scp sftp smb smbs smtp smtps telnet tftp
Features: alt-svc AsynchDNS brotli GSS-API HTTP2 HTTPS-proxy IDN IPv6 Kerberos Largefile libz Metalink NTLM NTLM_WB PSL SPNEGO SSL TLS-SRP UnixSockets zstd