You'll noticeTier: how much it should matter to you
1Useful: my rating, 1 to 5
1Signal: worth watching, 1 to 5
CertificatesArea: what it touches
ImprovementsKind: in v2.1.323,
ImprovementsSection of the release
What
Claude Code checks the security certificate of the server it connects to. Some certificates carry name constraints, rules about which website names they are allowed to vouch for. Four errors about these rules now come with a plain explanation and a suggested fix:
PERMITTED_VIOLATION
EXCLUDED_VIOLATION
NAME_CONSTRAINTS_WITHOUT_SANS
UNSUPPORTED_CONSTRAINT_TYPE
Before, these showed only a generic "Unable to connect to API: SSL error" message.
Why
These errors often show up behind corporate networks that inspect secure traffic. The new message helps you see what went wrong and what to do about it.