You'll noticeTier: how much it should matter to you
3Useful: my rating, 1 to 5
2Signal: worth watching, 1 to 5
InternalsArea: what it touches
ImprovementsKind: in v2.1.288,
ImprovementsSection of the release
What
Claude Code now watches for changes to a security certificate supplied to it, called a CA certificate, which other programs use to decide which connections to trust. When the certificate changes, Claude Code rewrites its certificate file. It then updates the trust stores, meaning the lists of trusted certificates kept by the operating system and by tools such as Java.
If a trust store does not accept the new certificate, Claude Code retries a limited number of times. After that it logs a warning and stops trying until the certificate changes again.
Why
This makes certificate changes more reliable in managed or remote sessions, so connections keep working after a certificate is replaced.
How sure we are
Something disagreesSomething we can check disagrees with this entry, or the writer said they could not settle it.
The writer flagged doubtIt is not clear whether some of this certificate handling already existed in an earlier form.