{"version":"2.1.318","anchor":"much-longer-node-extra-ca-certs-diagnostics-two-new-cases","canonical_anchor":"much-longer-node-extra-ca-certs-diagnostics-two-new-cases","heading":"NODE_EXTRA_CA_CERTS: partial loading and clearer warnings","tier":"notice","area":"Internals","scope":"both","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.318\/e\/much-longer-node-extra-ca-certs-diagnostics-two-new-cases","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.318","markdown":"### NODE_EXTRA_CA_CERTS: partial loading and clearer warnings\n\nClaude Code now keeps the readable certificates from a partly broken NODE_EXTRA_CA_CERTS file and explains certificate problems in far more detail\n\n**What**\n\n`NODE_EXTRA_CA_CERTS` is an environment variable, a setting you give a program from your shell. It points at a file of extra certificates to trust, which is common on company networks that inspect secure traffic.\n\n- If the file cannot be loaded as one list, Claude Code now keeps the certificates it can load one by one and logs an error. Before, the whole file was either kept or ignored.\n\n- A new warning covers a file that loaded only partly.\n\n- A new warning covers a file with no readable certificate at all: \"Claude Code ignored all of the NODE_EXTRA_CA_CERTS file: it holds no certificate that Claude Code can read.\" Certificates must be in PEM format.\n\n- The warning about dropped self-named certificates (certificates that name themselves as their issuer) has been rewritten with detailed steps to fix the problem. It covers a renewed root certificate, explains that `NODE_EXTRA_CA_CERTS` only affects Claude Code's own connections, and names the escape hatch `CLAUDE_CODE_DISABLE_SELF_NAMED_CERT_DROP=1`, which keeps every such certificate whoever signed it.\n\n- The old version of that warning printed values that did not exist at that point, so it showed broken text. This is fixed.\n\n**Why**\n\nIf you use a company certificate bundle, one bad entry no longer throws away the good ones, and connection failures now come with a message that tells you what is wrong and what to do.\n\n- Area: Internals\n- Names: `NODE_EXTRA_CA_CERTS`\n- Tier: You'll notice\n- Useful: 2\/5\n- Signal: 1\/5\n- Scope: both\n- Heads-up: no"}