{"version":"2.1.221","anchor":"windows-sandbox-no-longer-attempts-tls-termination-without-c","canonical_anchor":"windows-sandbox-no-longer-attempts-tls-termination-without-c","heading":"Windows sandbox no longer attempts TLS termination without CA material","tier":"use","area":"Sandbox","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.221\/e\/windows-sandbox-no-longer-attempts-tls-termination-without-c","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.221","markdown":"### Windows sandbox no longer attempts TLS termination without CA material\n\nOn Windows, TLS interception is skipped unless you supply both a CA cert and key path.\n\n**What**\n\n`network.tlsTerminate` is ignored on Windows unless CA material is supplied, so the sandbox stops trying to stand up interception it cannot back.\n\n**Details**\n\n- Requires both `caCertPath` and `caKeyPath`; without them the setting is dropped.\n- The installer's post-run failure classifier now also recognises `srt-win status` output when reporting a status probe failure, where it previously only matched wfp and user.\n- Windows only.\n\n**Evidence**\n\n`status_probe_failed`\n\n- Area: Sandbox\n- Names: `network.tlsTerminate`, `caCertPath`, `caKeyPath`\n- Tier: Use it now\n- Useful: 3\/5\n- Signal: 0\/5"}