- We provide binary packages in
.zipand.tar.xzformats,
signed with PGP key:002C 1689 65BA C220 2118 408B 4ED8 5DF9 BB3D 0DE8 - Standalone
curl.exeandlibcurl.dll. Static libraries included. - Vista with Universal CRT required.
- HTTP/3 and HTTP/2 support. Detailed feature list below.
- Transparent builds, using open source code, run in public, with auditable logs.
- Build environment is LLVM/Clang with
mingw-w64via Debian, Homebrew, MSYS2.llvm-mingwfor ARM64. - Cross-built and published from Linux via
AppVeyor CI. Using reproducible OS image
debian:testing-slimvia Docker. - Built with hardening options enabled.
- Binaries use SEH, except x86, which uses DWARF.
- We verify components using SHA-256 hashes and PGP signatures where provided.
- We build reproducible binaries, producing the same hash given the same input sources and C compiler.
- Patching policy: No locally maintained patches. We may apply patches if already merged upstream or — for showstoppers — had them submitted with fair confidence of getting merged.
- We plan to switch the default TLS backend to BoringSSL. This fixes a long-standing vulnerability. It also makes binaries 30% smaller. Downsides are no API/ABI guaranties, pthread dependence and missing TLS-SRP support.
- You can look up the correct distro hashes in lines starting with
SHAin the build log. - Packages built across host platforms do not have identical hashes.
The reason for this is slightly different build options and toolchain
builds/versions. Except
llvm-mingwbuilds, which are reproducible across build hosts. ARM64 and all BoringSSL builds are like that by default. - We code sign with a self-signed certificate, and intentionally not use trusted timestamps for reproducibility.
Default build with OpenSSL (QUIC fork), and Schannel runtime-selectable option:
Protocols: dict file ftp ftps gopher gophers http https imap imaps ldap ldaps mqtt pop3 pop3s rtsp scp sftp smb smbs smtp smtps telnet tftp ws wss
Features: alt-svc AsynchDNS brotli gsasl HSTS HTTP2 HTTP3 HTTPS-proxy IDN IPv6 Kerberos Largefile libz MultiSSL NTLM SPNEGO SSL SSPI threadsafe TLS-SRP UnixSockets zstd
Libs: -lcurl -lz -lcrypt32 -lbcrypt -lwldap32 -lnghttp2 -lssh2 -lgsasl -lssl -lcrypto -lbrotlidec -lbrotlicommon -lzstd -lnghttp3 -lngtcp2
Alternate configurations with different footprints:
"big":
Protocols: dict file ftp ftps gopher gophers http https imap imaps ldap ldaps mqtt pop3 pop3s rtsp scp sftp smb smbs smtp smtps telnet tftp ws wss
Features: alt-svc AsynchDNS brotli gsasl HSTS HTTP2 HTTP3 HTTPS-proxy IDN IPv6 Kerberos Largefile libz MultiSSL NTLM PSL SPNEGO SSL SSPI threadsafe UnixSockets zstd
Libs: -lcurl -lz -lcrypt32 -lbcrypt -lwldap32 -lnghttp2 -lssh2 -lgsasl -lssl -lcrypto -lbrotlidec -lbrotlicommon -lzstd -lnghttp3 -lngtcp2 -lidn2 -lpsl -liconv -lunistring
"boringssl":
Protocols: dict file ftp ftps gopher gophers http https imap imaps ldap ldaps mqtt pop3 pop3s rtsp scp sftp smb smbs smtp smtps telnet tftp ws wss
Features: alt-svc AsynchDNS brotli gsasl HSTS HTTP2 HTTP3 HTTPS-proxy IDN IPv6 Kerberos Largefile libz MultiSSL NTLM SPNEGO SSL SSPI threadsafe UnixSockets zstd
Libs: -lcurl -lz -lcrypt32 -lbcrypt -lwldap32 -lnghttp2 -lssh2 -lgsasl -lssl -lcrypto -lbrotlidec -lbrotlicommon -lzstd -lnghttp3 -lngtcp2
"noh3", HTTP/2:
Protocols: dict file ftp ftps gopher gophers http https imap imaps ldap ldaps mqtt pop3 pop3s rtsp scp sftp smb smbs smtp smtps telnet tftp ws wss
Features: alt-svc AsynchDNS brotli gsasl HSTS HTTP2 HTTPS-proxy IDN IPv6 Kerberos Largefile libz MultiSSL NTLM SPNEGO SSL SSPI threadsafe TLS-SRP UnixSockets zstd
Libs: -lcurl -lz -lcrypt32 -lbcrypt -lwldap32 -lnghttp2 -lssh2 -lgsasl -lssl -lcrypto -lbrotlidec -lbrotlicommon -lzstd
"mini", Schannel, without brotli and zstd:
Protocols: dict file ftp ftps gopher gophers http https imap imaps ldap ldaps mqtt pop3 pop3s rtsp scp sftp smb smbs smtp smtps telnet tftp ws wss
Features: alt-svc AsynchDNS gsasl HSTS HTTP2 IDN IPv6 Kerberos Largefile libz NTLM SPNEGO SSL SSPI threadsafe UnixSockets
Libs: -lcurl -lz -lcrypt32 -lbcrypt -lwldap32 -lnghttp2 -lssh2 -lgsasl
"micro", without libssh2 and gsasl:
Protocols: dict file ftp ftps gopher gophers http https imap imaps ldap ldaps mqtt pop3 pop3s rtsp smb smbs smtp smtps telnet tftp ws wss
Features: alt-svc AsynchDNS HSTS HTTP2 IDN IPv6 Kerberos Largefile libz NTLM SPNEGO SSL SSPI threadsafe UnixSockets
Libs: -lcurl -lz -lcrypt32 -lbcrypt -lwldap32 -lnghttp2
"nano", HTTP/1.1:
Protocols: dict file ftp ftps gopher gophers http https imap imaps ldap ldaps mqtt pop3 pop3s rtsp smb smbs smtp smtps telnet tftp ws wss
Features: AsynchDNS HSTS IDN IPv6 Kerberos Largefile libz NTLM SPNEGO SSL SSPI threadsafe UnixSockets
Libs: -lcurl -lz -lcrypt32 -lbcrypt -lwldap32
"pico", HTTP/1.1-only:
Protocols: http https
Features: AsynchDNS HSTS IPv6 Largefile libz SSL SSPI threadsafe UnixSockets
Libs: -lcurl -lz -lcrypt32 -lbcrypt
- Latest version:
https://curl.se/windows/ - Specific versions, back to 7.80.0:
https://curl.se/windows/dl-<curl-version>[_<build-number>]/
Examples:
https://curl.se/windows/dl-7.80.0/
https://curl.se/windows/dl-7.83.1_2/
https://ci.appveyor.com/project/curlorg/curl-for-win/history
See LICENSE.
Information in this document is subject to change without notice and does not represent or imply any future commitment by the participants of the project.
This document © 2014–present Viktor Szakats
