What
Claude Code can read the chain of certificates a server presents, which helps work out why a secure (TLS) connection is failing. Before, this read went through whatever proxy variable was set. Now it first checks whether any proxy variable is one it can actually use.
If the only proxy variables set are ones the read cannot use, for example ALL_PROXY, Claude Code skips the read and writes a note to its log. The note suggests either:
- setting
https_proxyto a completehttp://URL - adding the extra certificate to
NODE_EXTRA_CA_CERTS
The read can also now run after a request to the model.
Why
Behind a company proxy, secure connections often fail because of certificates the proxy adds. The log note points to the two settings that usually fix this, instead of the read failing quietly.