You'll noticeTier: how much it should matter to you
2Useful: my rating, 1 to 5
2Signal: worth watching, 1 to 5
Gateway AuthArea: what it touches
ImprovementsKind: in v2.1.309,
ImprovementsSection of the release
What
When certificates in the gateway's oidc.ca_cert_pem setting are on Claude Code's deny list, the error and warning messages have been reworded. They now tell you to set oidc.ca_cert_pem to the identity provider's intermediate certificates plus the self-signed certificate of the root named as their issuer, with no cross-signed certificates. An identity provider is the service that signs people in. Before, the message only asked for the authority that issued the provider's current certificate.
Why
If your gateway sign-in setup trips this check, the message now tells you what to put in the setting to fix it.
