Source Intelligence
Follow Discord

DisclaimerUnofficial, and not affiliated with Anthropic. Nearly all of this is read straight out of what ships: npm bundles, captured prompts, published docs. Anthropic's own notes go in verbatim, marked as theirs. The rest is my reading, and every entry carries the strings behind it. If one looks wrong, vote it down and say why.

← All of v2.1.232 Home All releases ←olderv2.1.231 v2.1.233newer→
Claude Code v2.1.232

Mismatched mTLS client certificate and key are ignored instead of installed

You'll notice
Useful2 Signal2
Internals not in their notes

A mismatched client certificate and key pair is now ignored and logged instead of installed.

CLAUDE_CODE_CLIENT_CERTCLAUDE_CODE_CLIENT_KEY
What

When CLAUDE_CODE_CLIENT_CERT and CLAUDE_CODE_CLIENT_KEY do not belong together, typically mid-rotation, the loader now logs "mTLS: Ignoring mismatched client cert/key pair" and keeps the previously loaded pair rather than installing a broken one.

Details
  • The pair is verified with Node's X509Certificate.checkPrivateKey, honouring CLAUDE_CODE_CLIENT_KEY_PASSPHRASE.
  • Certificate blocks are located with a new PEM block pattern, so a bundle containing several certificates is handled.
Evidence

mTLS: Ignoring mismatched client cert/key pair

Strings lifted out of the shipped bundle, so the claim above can be checked against them.

Related

Other releases about the same thing. Found by shared names or similar wording; neither means one caused the other.

See this entry in the whole of v2.1.232 →