openai/codex · error · BuildCustomCaTransportError

Failed to load CA certificates from {} selected by {}: {deta

Error message

Failed to load CA certificates from {} selected by {}: {detail}. {hint}

What it means

Error "Failed to load CA certificates from {} selected by {}: {detail}. {hint}" thrown in openai/codex.

Source

Thrown at codex-rs/http-client/src/custom_ca.rs:89

/// because the final reqwest client builder failed. Callers that do not care about the
/// distinction can rely on the `From<BuildCustomCaTransportError> for io::Error` conversion.
#[derive(Debug, Error)]
pub enum BuildCustomCaTransportError {
    /// Reading the selected CA file from disk failed before any PEM parsing could happen.
    #[error(
        "Failed to read CA certificate file {} selected by {}: {source}. {hint}",
        path.display(),
        source_env,
        hint = CA_CERT_HINT
    )]
    ReadCaFile {
        source_env: &'static str,
        path: PathBuf,
        source: io::Error,
    },

    /// The selected CA file was readable, but did not produce usable certificate material.
    #[error(
        "Failed to load CA certificates from {} selected by {}: {detail}. {hint}",
        path.display(),
        source_env,
        hint = CA_CERT_HINT
    )]
    InvalidCaFile {
        source_env: &'static str,
        path: PathBuf,
        detail: String,
    },

    /// One parsed certificate block could not be registered with the reqwest client builder.
    #[error(
        "Failed to parse certificate #{certificate_index} from {} selected by {}: {source}. {hint}",
        path.display(),
        source_env,
        hint = CA_CERT_HINT
    )]

View on GitHub (pinned to 339751715c)

When it happens

Trigger: Thrown at codex-rs/http-client/src/custom_ca.rs:89 when the library encounters an invalid state.

Common situations: See trigger scenarios.

Understand the failure class

AI-assisted analysis of openai/codex@339751715c (2026-08-25). Data as JSON: /api/errors/16e20f7623ec4a04. Report an issue: GitHub.