{"version":"2.1.309","anchor":"tls-verification-disabled-check-now-covers-a-list-of-env-var","canonical_anchor":"tls-verification-disabled-check-now-covers-a-list-of-env-var","heading":"Check for disabled certificate checking now looks at more environment variables","tier":"notice","area":"Certificates","scope":"individual","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.309\/e\/tls-verification-disabled-check-now-covers-a-list-of-env-var","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.309","markdown":"### Check for disabled certificate checking now looks at more environment variables\n\nClaude Code's check for switched-off security certificate checking now looks at a list of variables, not only NODE_TLS_REJECT_UNAUTHORIZED\n\n**Unclear.** It is not known which variables are in the list or what Claude Code does when the check trips.\n\n**What**\n\nTLS verification is the check that a server's security certificate is genuine. Claude Code has a check that spots when TLS verification is switched off. Before, it looked only at the `NODE_TLS_REJECT_UNAUTHORIZED` environment variable, a named value set before starting a program. It now looks at a list of variables, and any of them set to something other than `1` trips the check.\n\n**Why**\n\nMore environment settings may now count as switching off certificate checking.\n\n- Area: Certificates\n- Tier: You'll notice\n- Useful: 1\/5\n- Signal: 1\/5\n- Scope: individual\n- Heads-up: no"}