jif 80ad49e3b7 Coalesce overlapping native TLS root certificate loads (#54056) ...

## Why

Concurrent TLS client builds can independently load the same platform trust store. Share overlapping loads while preserving fresh trust reads for later builds.

## What changed

- Share one in-flight native root load without reusing completed loads.
- Bypass sharing when `SSL_CERT_FILE` or `SSL_CERT_DIR` is set, and continue reading custom CA bundles independently for every build.

## Testing

Add tests for overlapping loads, fresh trust after completion, and recovery from a panicking loader. Extend TLS handshake coverage to verify that replacing a custom CA file affects new configurations while existing configurations retain their trust, and that empty or removed files produce errors.

GitOrigin-RevId: 1465ef3faf82f53651d9dbfe314341b17346580b

2026-10-14 17:56:24 +00:00

..

bin

Extract shared HTTP transport into codex-http-client (#31323)

2026-07-07 01:12:24 +00:00

outbound_proxy

Improve codex doctor network diagnostics (#38918)

2026-08-17 00:09:44 +00:00

route_aware_client_pool

Enforce network policy throughout HTTP and WebSocket requests (#47389)

2026-09-22 23:37:39 +00:00

chatgpt_cloudflare_cookies.rs

Share ChatGPT cookies between HTTP and WebSocket transports (#46506)

2026-09-18 23:17:17 +00:00

chatgpt_hosts.rs

Extract shared HTTP transport into codex-http-client (#31323)

2026-07-07 01:12:24 +00:00

client_builder_tests.rs

Upgrade hyper to 1.11.1 and test connection closure (#52608)

2026-10-09 15:13:29 +00:00

client_builder.rs

Add a native gRPC client for cloud thread resume and attach (#50113)

2026-10-01 22:32:29 +00:00

client_tls.rs

Enforce application network policy across app-server requests (#47407)

2026-09-23 00:47:07 +00:00

client.rs

Enforce network policy throughout HTTP and WebSocket requests (#47389)

2026-09-22 23:37:39 +00:00

custom_ca_tls_tests.rs

Coalesce overlapping native TLS root certificate loads (#54056)

2026-10-14 17:56:24 +00:00

custom_ca.rs

Coalesce overlapping native TLS root certificate loads (#54056)

2026-10-14 17:56:24 +00:00

error.rs

Honor Retry-After and preserve server retry deadlines (#47641)

2026-09-23 19:53:11 +00:00

lib.rs

Coalesce overlapping native TLS root certificate loads (#54056)

2026-10-14 17:56:24 +00:00

native_roots_tests.rs

Coalesce overlapping native TLS root certificate loads (#54056)

2026-10-14 17:56:24 +00:00

native_roots.rs

Coalesce overlapping native TLS root certificate loads (#54056)

2026-10-14 17:56:24 +00:00

network_policy_tests.rs

Add revocable network policy primitives to the HTTP client (#45503)

2026-09-14 19:30:37 +00:00

network_policy.rs

Enforce application network policy across app-server requests (#47407)

2026-09-23 00:47:07 +00:00

outbound_proxy_redirect_coverage_tests.rs

Resolve proxy routes for standalone web search redirects (#47204)

2026-09-22 06:24:49 +00:00

outbound_proxy_tests.rs

Avoid blocking async proxy resolution on the system proxy cache (#47852)

2026-09-24 14:50:27 +00:00

outbound_proxy.rs

Avoid blocking async proxy resolution on the system proxy cache (#47852)

2026-09-24 14:50:27 +00:00

request_builder_tests.rs

Enforce network policy throughout HTTP and WebSocket requests (#47389)

2026-09-22 23:37:39 +00:00

request_builder.rs

Enforce network policy throughout HTTP and WebSocket requests (#47389)

2026-09-22 23:37:39 +00:00

request_draft.rs

Enforce network policy throughout HTTP and WebSocket requests (#47389)

2026-09-22 23:37:39 +00:00

request.rs

Add opt-in response body limits to the HTTP transport (#45822)

2026-09-16 01:01:57 +00:00

response.rs

Enforce application network policy across app-server requests (#47407)

2026-09-23 00:47:07 +00:00

retry_after_tests.rs

Honor Retry-After and preserve server retry deadlines (#47641)

2026-09-23 19:53:11 +00:00

retry_after.rs

Honor Retry-After and preserve server retry deadlines (#47641)

2026-09-23 19:53:11 +00:00

route_aware_client_pool_tests.rs

Honor network policy in remote control and recover remote execution (#47410)

2026-09-23 00:48:53 +00:00

route_aware_client_pool.rs

Honor network policy in remote control and recover remote execution (#47410)

2026-09-23 00:48:53 +00:00

route_aware_policy_tests.rs

Enforce network policy throughout HTTP and WebSocket requests (#47389)

2026-09-22 23:37:39 +00:00

route_aware_redirect_integration_tests.rs

Add revocable network policy primitives to the HTTP client (#45503)

2026-09-14 19:30:37 +00:00

route_aware_redirect_tests.rs

Add route-aware redirect test coverage (#34481)

2026-07-21 07:49:06 +00:00

route_aware_redirect.rs

Add route-aware redirect test coverage (#34481)

2026-07-21 07:49:06 +00:00

route_aware_tls_fallback_tests.rs

Enforce network policy throughout HTTP and WebSocket requests (#47389)

2026-09-22 23:37:39 +00:00

tls_backend_fallback_tests.rs

Enforce network policy throughout HTTP and WebSocket requests (#47389)

2026-09-22 23:37:39 +00:00

tls_backend_fallback.rs

Enforce network policy throughout HTTP and WebSocket requests (#47389)

2026-09-22 23:37:39 +00:00

transport_limit_tests.rs

Enforce network policy throughout HTTP and WebSocket requests (#47389)

2026-09-22 23:37:39 +00:00

transport_tests.rs

Enforce network policy throughout HTTP and WebSocket requests (#47389)

2026-09-22 23:37:39 +00:00

transport.rs

Honor Retry-After and preserve server retry deadlines (#47641)

2026-09-23 19:53:11 +00:00

windows_tls_tests.rs

Bundle native voice runtimes in Windows releases (#44922)

2026-09-11 21:59:24 +00:00

windows_tls.rs

Bundle native voice runtimes in Windows releases (#44922)

2026-09-11 21:59:24 +00:00