{"version":"2.1.323","anchor":"agent-proxy-jvm-truststore-deny-list-filter","canonical_anchor":"agent-proxy-jvm-truststore-deny-list-filter","heading":"Java certificate stores that fail a deny-list check are skipped","tier":"internal","area":"Elsewhere","scope":"org","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.323\/e\/agent-proxy-jvm-truststore-deny-list-filter","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.323","markdown":"### Java certificate stores that fail a deny-list check are skipped\n\nIf checking a Java certificate store against a deny-list fails, Claude Code's agent proxy now skips that store and logs why\n\n**Unclear.** Which sessions use this proxy check, and so whether it affects yours.\n\n**What**\n\nA Java truststore is a file of certificates that Java programs use to decide which secure (TLS) connections to trust. Claude Code's agent proxy, which relays network traffic for agents, can now filter a Java truststore through a deny-list of certificates. If that check throws an error, the store is not used and a log line says so.\n\n**Why**\n\nThis affects which secure connections are trusted for agents whose traffic goes through the proxy.\n\n- Area: Elsewhere\n- Tier: Under the hood\n- Useful: 2\/5\n- Signal: 2\/5\n- Scope: org\n- Heads-up: no"}