{"record":{"id":"64642ad400e803aa","repo":"openai/codex","slug":"failed-to-create-cert-params-err","errorCode":null,"errorMessage":"failed to create cert params: {err}","messagePattern":"failed to create cert params: (.+?)","errorType":"exception","errorClass":"anyhow::Error","httpStatus":null,"severity":"error","filePath":"codex-rs/network-proxy/src/certs.rs","lineNumber":126,"sourceCode":"                .with_no_client_auth()\n                .with_single_cert(vec![cert], key)\n                .context(\"failed to build rustls server config\")?;\n        server_config.alpn_protocols = vec![\n            ApplicationProtocol::HTTP_2.as_bytes().to_vec(),\n            ApplicationProtocol::HTTP_11.as_bytes().to_vec(),\n        ];\n\n        Ok(TlsAcceptorData::from(server_config))\n    }\n}\n\nfn issue_host_certificate_pem(\n    host: &str,\n    issuer: &Issuer<'_, KeyPair>,\n) -> Result<(String, String)> {\n    let mut params = if let Ok(ip) = host.parse::<IpAddr>() {\n        let mut params = CertificateParams::new(Vec::new())\n            .map_err(|err| anyhow!(\"failed to create cert params: {err}\"))?;\n        params.subject_alt_names.push(SanType::IpAddress(ip));\n        params\n    } else {\n        CertificateParams::new(vec![host.to_string()])\n            .map_err(|err| anyhow!(\"failed to create cert params: {err}\"))?\n    };\n\n    params.extended_key_usages = vec![ExtendedKeyUsagePurpose::ServerAuth];\n    params.key_usages = vec![\n        KeyUsagePurpose::DigitalSignature,\n        KeyUsagePurpose::KeyEncipherment,\n    ];\n\n    let key_pair = KeyPair::generate_for(&PKCS_ECDSA_P256_SHA256)\n        .map_err(|err| anyhow!(\"failed to generate host key pair: {err}\"))?;\n    let cert = params\n        .signed_by(&key_pair, issuer)\n        .map_err(|err| anyhow!(\"failed to sign host cert: {err}\"))?;","sourceCodeStart":108,"sourceCodeEnd":144,"githubUrl":"https://github.com/openai/codex/blob/339751715c64496cb86246bfb3935f40e309dd3d/codex-rs/network-proxy/src/certs.rs#L108-L144","documentation":"Error \"failed to create cert params: {err}\" thrown in openai/codex.","triggerScenarios":"Thrown at codex-rs/network-proxy/src/certs.rs:126 when the library encounters an invalid state.","commonSituations":"See trigger scenarios.","solutions":[],"exampleFix":null,"handlingStrategy":null,"validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"339751715c64496cb86246bfb3935f40e309dd3d","analyzedAt":"2026-08-25T05:35:09.876Z","schemaVersion":2},"datasetVersion":"2026-08-25T06:17:31.827Z"}