{"version":"2.1.309","anchor":"ca-certificate-loading-can-refuse-to-fall-back-to-bundled-ro","canonical_anchor":"ca-certificate-loading-can-refuse-to-fall-back-to-bundled-ro","heading":"Startup fails clearly when the system certificate store is empty","tier":"notice","area":"Certificates","scope":"both","heads_up":true,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.309\/e\/ca-certificate-loading-can-refuse-to-fall-back-to-bundled-ro","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.309","markdown":"### Startup fails clearly when the system certificate store is empty\n\nWith CLAUDE_CODE_CERT_STORE=system, an empty or unreadable system store now stops startup instead of quietly using bundled certificates\n\n**What**\n\nClaude Code uses certificate authorities (the trusted organizations that vouch for websites) to check secure connections. If you tell it to trust only your operating system's store, it no longer falls back to its own bundled list when that store is empty or cannot be read. Startup stops with \"No certificate authority to trust\". You can choose the system store only in any of these ways:\n\n- `CLAUDE_CODE_CERT_STORE=system`\n\n- `NODE_OPTIONS` with `--use-system-ca`\n\n- `NODE_OPTIONS` with `--use-openssl-ca`\n\nIf the store is empty, the message suggests checking that Claude Code can read its certificate files. Expired certificates are now also left out.\n\n**Why**\n\nIf you rely on your company's system certificates, you may now see a hard error at startup where Claude Code used to carry on quietly with certificates you had chosen not to use.\n\n- Area: Certificates\n- Tier: You'll notice\n- Useful: 3\/5\n- Signal: 2\/5\n- Scope: both\n- Heads-up: yes"}