Building curl with --with-openssl only changes the product if the agent build
actually compiles curl, and it does not: make deps pulls a precompiled
archive and the CMake short-circuits on it, which is the path
5_builderpackage_agent-windows.yml uses. Against 99-37702 the winagent kept
getting the Schannel curl built on 2026-05-19, so the flag was inert
everywhere except a local EXTERNAL_SRC_ONLY=yes build.
99-38163 is the first bundle built from this branch, so its windows curl
reports USE_OPENSSL. Verified by the default path -- no EXTERNAL_SRC_ONLY,
curl not recompiled:
external/curl/lib/curl_config.h
#define USE_OPENSSL 1
/* #undef USE_SCHANNEL */
and the agent built from it reaches a TLS 1.3-only manager from Windows 10,
where the github and office365 modules still validate against the machine's
certificate stores.
SOCIAL SHARE CARD GENERATOR