From b3a2ceec8a435f040be70820f06490c59c41db9f Mon Sep 17 00:00:00 2001
From: Alexander Davydov <nyddle@gmail.com>
Date: Mon, 16 Mar 2026 11:31:45 +0300
Subject: [PATCH] Commands: keep GigaChat TLS verification enabled by default

---
 src/commands/auth-choice.apply.api-providers.ts | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/commands/auth-choice.apply.api-providers.ts b/src/commands/auth-choice.apply.api-providers.ts
index e1524f39009..23bce7c36f5 100644
--- a/src/commands/auth-choice.apply.api-providers.ts
+++ b/src/commands/auth-choice.apply.api-providers.ts
@@ -439,7 +439,7 @@ export async function applyAuthChoiceApiProviders(
       const gigachatMetadata: Record<string, string> = {
         authMode: "oauth",
         scope: gigachatScope,
-        insecureTls: "true",
+        insecureTls: "false",
       };
 
       await ensureApiKeyFromOptionEnvOrPrompt({
@@ -523,7 +523,7 @@ export async function applyAuthChoiceApiProviders(
 
     const basicMetadata: Record<string, string> = {
       authMode: "basic",
-      insecureTls: "true",
+      insecureTls: "false",
       ...(gigachatBasicScope ? { scope: gigachatBasicScope } : {}),
     };