{"version":"2.1.232","anchor":"password-protected-client-keys-for-mtls","canonical_anchor":"password-protected-client-keys-for-mtls","heading":"Password-protected client keys for mTLS","tier":"use","area":"Network Security","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.232\/e\/password-protected-client-keys-for-mtls","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.232","markdown":"### Password-protected client keys for mTLS\n\nSet `CLAUDE_CODE_CLIENT_KEY_PASSPHRASE` so an encrypted client key file works for mutual TLS.\n\n**What**\n\nSet `CLAUDE_CODE_CLIENT_KEY_PASSPHRASE` and Claude Code decrypts the client private key with it when checking that the key matches the configured certificate chain, so an encrypted key file no longer fails the pairing check.\n\n**Evidence**\n\n`CLAUDE_CODE_CLIENT_KEY_PASSPHRASE`\n\n- Area: Network Security\n- Names: `CLAUDE_CODE_CLIENT_KEY_PASSPHRASE`\n- Tier: Use it now\n- Useful: 3\/5\n- Signal: 2\/5"}