Static cURL 8.23.0 with HTTP3
Important
Security rebuild of cURL 8.23.0 — please upgrade from 8.23.0 and 8.22.0.
This release rebuilds cURL 8.23.0 with an updated embedded CA bundle from
curl.se. The previous bundle trusted the
emSign ECC Root CA - G3 root (eMudhra, India), which Mozilla removed from
NSS on 2026-10-20 after private keys of eight eMudhra intermediate CAs were
found to be compromised. With those keys, anyone could issue certificates that
the old bundle would accept for any domain.
- curl version is unchanged; only the build (and changes merged since
8.23.0) differ. --cacert/CURLOPT_CAINFOusers are not affected by the embedded bundle,
but should update their own CA files too.- Previous cacert.pem SHA256 (8.23.0):
a41b5d356aea97a529fe27e0f7316d2f9d946d75927476cf9cf1b90637d00505
Components
- libcurl/8.23.0
- OpenSSL/4.0.3
- zlib/1.3.1.zlib-ng
- brotli/1.2.1
- zstd/1.5.7
- c-ares/1.34.9
- libidn2/2.3.8
- libpsl/0.23.3
- libssh2/1.11.1
- nghttp2/1.70.0
- ngtcp2/1.25.0
- nghttp3/1.18.0
Protocols
dict file ftp ftps gopher gophers http https imap imaps ipfs ipns mqtt mqtts pop3 pop3s rtsp scp sftp smtp smtps telnet tftp ws wss
Features
alt-svc asyn-rr AsynchDNS brotli CAcert ECH HSTS HTTP2 HTTP3 HTTPS-proxy HTTPSIG HTTPSRR IDN IPv6 Largefile libz NTLM proxy-HTTP3 PSL SSL SSLS-EXPORT threadsafe UnixSockets zstd
License
This binary includes various open-source software such as curl, openssl, zlib (or zlib-ng), brotli, zstd, libidn2, libssh2, nghttp2, ngtcp2, nghttp3. Their license information has been compiled and is included in the dev package.
Build Info
Built by GitHub Actions
Checksums
Checksums of binaries
| File | Platform | Arch | LibC | SHA256 |
|---|---|---|---|---|
| curl | linux | aarch64 | glibc | 71780652d4e4de42bc0f2138cb764c90a7f8d4b64969450dd1dde5518cc5ff09 |
| curl | linux | aarch64 | musl | 3a7c6818343f1b5184047bb484cb3cff7d5ede35a2713a6ef61030b422d8d6fc |
| curl | linux | armv5 | glibc | b09ebdd299c35949808303810f17a3cc9f6b958115fe95ac7952d96a71b3c8c7 |
| curl | linux | armv5 | musl | e811fd0b9f9c4beff15c2f5a440f9b5bcb5a6bfdb2f18f2904e2550232445a16 |
| curl | linux | armv7 | glibc | f94b822bf8fd401cfa6c79e31d4f3870ab5ac8c70d9ea3e4998fcf08d7eeb15c |
| curl | linux | armv7 | musl | 990b46936967f134ac933724ae10266068a2adb5623a7d527620ee9bcd68405f |
| curl | linux | i686 | glibc | 35eb5a8c615b2826e7cd9942176dc0a431aee98ce72ce4223f38618a1c1920c9 |
| curl | linux | i686 | musl | 68d4796fc13047ff28931590a4e60725b0deddb8de5d797c83bfd8508a2bb0c3 |
| curl | linux | mips | glibc | 0ae039e879bc3b66fc12192717071dae6b37255075e5e5968cdf2a1c95358ce5 |
| curl | linux | mips | musl | 4de02ac43b42cdf042cc9f66a714af7f58f088951c7479a7e2b1610030cefa80 |
| curl | linux | mips64 | glibc | 0d6cbbf467e7337b0193794319e936c830184d23a262efc9581c9800e887f7a1 |
| curl | linux | mips64 | musl | d3fdac50b9444032a0a44bf27227a58f1ab8c0082a98f1b5f48a1e938a03acbd |
| curl | linux | mips64el | glibc | 567eb42451a88ba24569adbb64da61339107ac8a0cdf763490fa604e3f84dc78 |
| curl | linux | mips64el | musl | 7224d1d45a1673ae31154930a923d6a2172747ba196dc9b4c0369230dd80f1f6 |
| curl | linux | mipsel | glibc | 66af89a3ea7eec19e6e6e5aaa3ef9ed49578ec1d5b8bfa6cbe638739587ea3c8 |
| curl | linux | mipsel | musl | b23905e6f99a138d7d1238442379403646c14c215260e9ce65d670a286a08505 |
| curl | linux | powerpc | glibc | 58ba372a89b19bd0129682fd2f51297243d2dd33dc189d2c329cde3d1fe4b1e2 |
| curl | linux | powerpc | musl | 43f991511c4c6f8c1017299ddcc00d659fba50e11362d0ccb5af6b84baaf255b |
| curl | linux | powerpc64le | glibc | 1a04c97d23fc3c70696cfc963579898314507bb63dd65e75bab00e59a710b756 |
| curl | linux | powerpc64le | musl | e167e0160ef29bec8e0e7eceaaa2a9aa0ff6184fa39262319833f2cd7910e377 |
| curl | linux | riscv64 | glibc | 399f532b41d2be20b173ebdf551d4307c15c8450c49f7da09544623204d14827 |
| curl | linux | riscv64 | musl | 77ea8dc3a7821201e346e6bb68496402ce1e01fbf73a16825980385bec5f2c2b |
| curl | linux | s390x | glibc | 012c1937b341ab952423c7d91cf488c1463d800f2f0b93d098dab90e1d46149e |
| curl | linux | s390x | musl | 019222c3c6b1ee92d1d5296384a44f5cdfabd06126dacbf5ae0ff14cbd1f1786 |
| curl | linux | x86_64 | glibc | b19756efa22538f0af3bb293626841c9dbf0d168489a1924f0e3edec2f560ba6 |
| curl | linux | x86_64 | musl | 715f85aae6d9caeca203f7c1f8697b02193c53f8dd6112d54647f0777290f23e |
| curl | macos | arm64 | 86a92973fb5fab66f6ec3a9139c58459b56a030d0ff25e015665a83199c7beb2 | |
| curl | macos | x86_64 | 6bd27834f78b85fffba90cfd91b0c8fd57aae35775865d286268264d47ed1860 | |
| curl | windows | aarch64 | e1c9d9a825fa3d0e6a8839e1d11c1db8c15bc35533df931644e841f709265ab2 | |
| curl | windows | armv7 | e3b75ee6286a591a6158e46765d186e57fabce523adf56650bdc96f8fc3ddc78 | |
| curl | windows | i686 | 8607dcfa9f13e395cc21bc63d69dc3f213b73b43c55b7b13fd645359daefb440 | |
| curl | windows | x86_64 | 8ccc93e6b939110636411df05cbcbcb41b2fc522e6d6b5f2666f4a07bf0c10a3 |
Embedded CA Bundle
The binaries embed the curl.se CA certificate bundle at build time via --with-ca-embed.
- cacert.pem SHA256:
796f1389bfea13c0ed78f663b765baaff54a508e5483786bd6ece73c5e3e3cbe