Persuading file(DOWNLOAD) to do best-effort for ssl revoke

Hi,

The embedded libcurl seems to ignore my .curlrc. I’ve tried try setting CURLRC or CURL_HOME env vars in an effort to persuade it, but to no avail.

I’m trying to get it to do ssl-revoke-best-effort to work around a quirky certificate chain I have no control over. I’d rather not break out the execute_process() to work around the lack of “best effort” options to file(DOWNLOAD). This does the job for curl on the command line and for vcpkg binary cache, but not file(DOWNLOAD).

Yes, TLS_VERIFY off does the job, but it’s not ideal. Can I be more specific somehow?

P.S. This is Windows, CMake 3.30.5.

Thanks,
Dave.