A new environment variable that gives users explicit control over which SSL/TLS certificate stores Claude Code uses, replacing the less flexible --use-system-ca flag approach.
Usage
# Use both bundled and system certificates (default)
export CLAUDE_CODE_CERT_STORE=bundled,system
# Use only system certificates
export CLAUDE_CODE_CERT_STORE=system
# Use only bundled certificates
export CLAUDE_CODE_CERT_STORE=bundled
Details
Accepts comma-separated values: bundled and/or system
Defaults to ["bundled", "system"] when not set
Falls back to the --use-system-ca / --use-openssl-ca flags if the env var is not present
Unrecognized sources are logged as warnings and ignored
The old --use-system-ca flag still works as a fallback
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
How sure we are
One source agreesOne thing we can check says the same as this entry.
Anthropic's release notes agreeAdded OS CA certificate store trust by default, so enterprise TLS proxies work without extra setup (set CLAUDE_CODE_CERT_STORE=bundled to…
