[BUG] running 'claude install' no longer works w/ system cert store

Preflight Checklist

• [x] I have searched existing issues and this hasn't been reported yet
• [x] This is a single bug report (please file separate reports for different bugs)
• [x] I am using the latest version of Claude Code

What's Wrong?

When I run claude install, I get an error related to getting local issuer certificates. I would expect to be able to run claude install and it respect the default of 'system,bundled' as laid out in the docs.

Below, I try swapping between the system store and the CA bundle, neither makes a difference. This worked up until sometime late last week, I do not remember the CC version it broke on, but it was released last week.

What Should Happen?

Claude install should update my CC installation

Error Messages/Logs

runway on  main [✘?] on ☁️  [snip]
❯ claude install

✘ Installation failed

Failed to fetch version from https://downloads.claude.ai/claude-code-releases/latest: unable to get local issuer certificate


Try running with --force to override checks



runway on  main [✘?] on ☁️  [snip] took 3s
❯ export CLAUDE_CODE_CERT_STORE=system



runway on  main [✘?] on ☁️  [snip]
❯ claude install

✘ Installation failed

Failed to fetch version from https://downloads.claude.ai/claude-code-releases/latest: unable to get local issuer certificate


Try running with --force to override checks



runway on  main [✘?] on ☁️  [snip] took 3s
❯ export CLAUDE_CODE_CERT_STORE=bundled



runway on  main [✘?] on ☁️  [snip]
❯ claude install

✘ Installation failed

Failed to fetch version from https://downloads.claude.ai/claude-code-releases/latest: unable to get local issuer certificate


Try running with --force to override checks



runway on  main [✘?] on ☁️  [snip] took 3s
❯ env | grep CLAUDE
CLAUDE_CODE_CERT_STORE=bundled



runway on  main [✘?] on ☁️  [snip]
❯ set --help



runway on  main [✘?] on ☁️  [snip] took 7s
❯ set -u CLAUDE_CODE_CERT_STORE

Steps to Reproduce

Have some sort of private CA in your trust store on MacOS, and something actively MITMing all your traffic with a certificate from that private CA (e.g. zScaler,) and then try to run claude install. My error messages show the combination of options showing neither work.

Claude Model

Opus

Is this a regression?

Yes, this worked in a previous version

Last Working Version

_No response_

Claude Code Version

2.1.117

Platform

AWS Bedrock

Operating System

macOS

Terminal/Shell

Other

Additional Information

_No response_