Ask questionsTLS 1.0 support redirects to

$ curl -I | grep Location:
Location: does not work with TLS 1.0.

$ curl --tls-max 1.2
$ curl --tls-max 1.0
-curl: (35) error:14094410:SSL routines:ssl3_read_bytes:sslv3 alert handshake failure

However, works fine with TLS 1.0.

$ curl --tls-max 1.2
$ curl --tls-max 1.0

There have been a number of issues because PowerShell <v6 uses TLS 1.0 by default.

For example:


The default PowerShell version for Windows 8 is v4, for Windows 10 it is v5. So this impacts nearly all PowerShell users.

The following fixes are possible:

  • (1) Changing the one-line install command to use TLS 1.2
[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; iwr | iex
  • (2) Changing the one-line install command to point directly to GitHub
iwr | iex
  • (3) Enabling TLS 1.0 for

cc @ry


Answer questions MarkTiedemann

@ry I don't think this is fixed yet, or maybe it's a weird Windows issue...

C:\>curl --version
curl 7.55.1 (Windows) libcurl/7.55.1 WinSSL
Release-Date: [unreleased]
Protocols: dict file ftp ftps http https imap imaps pop3 pop3s smtp smtps telnet tftp
Features: AsynchDNS IPv6 Largefile SSPI Kerberos SPNEGO NTLM SSL

C:\>curl --tlsv1.0
curl: (35) schannel: next InitializeSecurityContext failed: SEC_E_ILLEGAL_MESSAGE (0x80090326) - This error usually occurs when a fatal SSL/TLS alert is received (e.g. handshake failed). More detail may be available in the Windows System event log.

C:\>powershell -c "$PSVersionTable"

Name                           Value
----                           -----
PSVersion                      5.1.17134.765
PSEdition                      Desktop
PSCompatibleVersions           {1.0, 2.0, 3.0, 4.0...}
BuildVersion                   10.0.17134.765
CLRVersion                     4.0.30319.42000
WSManStackVersion              3.0
PSRemotingProtocolVersion      2.3

C:\>powershell -c "iwr"
iwr : The request was aborted: Could not create SSL/TLS secure channel.
At line:1 char:1
+ iwr
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : InvalidOperation: (System.Net.HttpWebRequest:HttpWebRequest) [Invoke-WebRequest], WebExc
    + FullyQualifiedErrorId : WebCmdletWebResponseException,Microsoft.PowerShell.Commands.InvokeWebRequestCommand


Related questions

No questions were found.
Github User Rank List