Claude Code 2.1.304 regression breaks Bedrock connections via private CAs
BigBd1 · ghdev · 2026-10-20
A reported regression in Claude Code 2.1.304: every request to Bedrock through an HTTPS gateway fails with 'UNABLETOGETISSUERCERT' SSL verification errors.
- The user's gateway uses a private CA chain (root + 2 intermediates); the root is in the Windows trust store and CLAUDECODECERTSTORE=bundled,system is set.
- Versions 2.1.295–2.1.303 work with identical config; reproduced on two machines.
- Debug logs show the CA list loads correctly (system store + extra PEM), yet verification fails — suggesting the custom CA list isn't used for Bedrock connections; bundled roots also dropped from 121 to 117.
- Labeled bug/has repro/regression. Enterprise users behind private-CA gateways may want to stay on 2.1.303.
More from coding & agent
- Index Network open-sources Social Discovery Protocol: agents negotiate fit on your behalf — carsonfarmer · 2026-10-23
- Installed a formal-verification skill: it silently installed Java, MacBook runs 10 degrees hotter — zealcaiden · 2026-10-23
- OpenAI's Decisions API hits GA: near real-time routing up to 10x faster than GPT-6 Luna — OpenAIDevs · 2026-10-23
- Ruff author warns: upgrade Node/Bun now — --use-system-ca still accepts the eMudhra cert — charliermarsh · 2026-10-23
- Proof of Agent: paste one prompt and your AI mines, grades, and self-governs — adamamcbride · 2026-10-23
- DeepLearning.AI weekly: GPT-6.1 hits 97.9% byte parity on COBOL migration — DeepLearningAI · 2026-10-23