[BUG] Native Claude Code not using system certs on MacOS
Preflight Checklist
- [x] I have searched existing issues and this hasn't been reported yet
- [x] This is a single bug report (please file separate reports for different bugs)
- [x] I am using the latest version of Claude Code
What's Wrong?
Recently updated to the native installer after seeing the deprecation message, and started experiencing Claude Code hanging up with the message API Error: Error: unable to get issuer certificate, with a similar error trying to run the native installer.
Eventually I discovered that this was because my company is using Netskope to proxy all https traffic:
% curl -vI https://storage.googleapis.com/ 2>&1 | grep -A 6 "Server certificate"
* Server certificate:
* subject: CN=storage.googleapis.com
* start date: Dec 10 22:13:51 2025 GMT
* expire date: Jan 9 22:13:51 2027 GMT
* subjectAltName: host "storage.googleapis.com" matched cert's "storage.googleapis.com"
* issuer: emailAddress=certadmin@netskope.com; CN=ca.amperity.goskope.com; OU=<>; O=Amperity; L=Seattle; ST=WA; C=US
* SSL certificate verify ok.
Netskope adds a certificate to the MacOS root chain but this isn't being respected by CC. The docs mention an environment variable but it doesn't work - looks like from the pre-native era? Currently I can disable the Netskope client and still use CC but this isn't ideal.
What Should Happen?
Claude should use the system certificate chain for verification
Error Messages/Logs
% /Users/ras/.claude/downloads/claude-2.1.17-darwin-arm64 install
✘ Installation failed
Failed to fetch version from https://storage.googleapis.com/claude-code-dist-86c565f3-f756-42ad-8dfa-d59b1c
096819/claude-code-releases/latest: self signed certificate in certificate chain
Steps to Reproduce
- Install a MITM proxy for https traffic
- Try to use the native Claude Code
Claude Model
None
Is this a regression?
Yes, this worked in a previous version
Last Working Version
2.1.16
Claude Code Version
2.1.17
Platform
AWS Bedrock
Operating System
macOS
Terminal/Shell
Other
Additional Information
_No response_
This issue has 12 comments on GitHub. Read the full discussion on GitHub ↗