{"version":"2.1.242","anchor":"cloud-gateway-refuses-a-pinned-certificate-stored-in-a-symli","canonical_anchor":"cloud-gateway-refuses-a-pinned-certificate-stored-in-a-symli","heading":"Cloud gateway refuses a pinned certificate stored in a symlinked file","tier":"internal","area":"Internals","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.242\/e\/cloud-gateway-refuses-a-pinned-certificate-stored-in-a-symli","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.242","markdown":"### Cloud gateway refuses a pinned certificate stored in a symlinked file\n\nA symlinked TLS pin file makes the cloud gateway refuse outright rather than retry.\n\n**What**\n\nIf the credentials file holding the cloud gateway's TLS pin is a symlink, the connection is refused outright and not retried. An unreadable pin is now reported as its own separate failure.\n\n**Details**\n\n- Two distinct error kinds: `gateway_pin_refused` for the symlink case, `gateway_pin_unreadable` for a pin that cannot be read.\n- The symlink refusal suppresses retry; nothing turns this check off.\n\n**Evidence**\n\n`Cloud gateway TLS pin is in a symlinked credentials file`\n\n- Area: Internals\n- Tier: Under the hood\n- Useful: 2\/5\n- Signal: 2\/5"}