{"version":"2.1.307","anchor":"agent-proxy-ca-bundle-is-validated","canonical_anchor":"agent-proxy-ca-bundle-is-validated","heading":"Custom certificates for the agent proxy are checked, and bad ones are dropped","tier":"notice","area":"Network","scope":"org","heads_up":true,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.307\/e\/agent-proxy-ca-bundle-is-validated","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.307","markdown":"### Custom certificates for the agent proxy are checked, and bad ones are dropped\n\nClaude Code now validates your organization's extra certificates for the agent proxy and drops any bad one instead of failing on the whole set\n\n**What**\n\nSome organizations add their own certificates (files that tell a program which secure servers to trust) to the connection that Claude Code's agent proxy relays through. Claude Code now checks that set of certificates before using it, under the label \"agent proxy trust\".\n\n- If the whole set passes, it is used as before.\n\n- If the set fails as a whole, each certificate is checked on its own and the bad ones are dropped.\n\n- If there are no certificates at all, the result is empty.\n\n**Why**\n\nOne broken certificate no longer spoils the whole set, so the good certificates still work.\n\n- Area: Network\n- Tier: You'll notice\n- Useful: 2\/5\n- Signal: 2\/5\n- Scope: org\n- Heads-up: yes"}