Skip to content

feat(network-proxy): add MITM support and gate limited-mode CONNECT #9859

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
viyatb-oai wants to merge 2 commits into
base: main
Choose a base branch
from
Open

feat(network-proxy): add MITM support and gate limited-mode CONNECT #9859

viyatb-oai wants to merge 2 commits into from
+931 −16

Conversation

@viyatb-oai
Copy link
Collaborator

@viyatb-oai viyatb-oai commented Jan 25, 2026

Description

  • Adds MITM support (CA load/issue, TLS termination, optional body inspection).
  • Adds codex-network-proxy init to create CODEX_HOME/network_proxy/mitm.
  • Enforces limited-mode HTTPS correctly: CONNECT requires MITM, otherwise blocked with mitm_required.
  • Keeps origin/main layering/reload semantics (managed layers included in reload checks).
  • Centralizes block reasons (REASON_MITM_REQUIRED) and removes println!.
  • Scope is MITM-only (no SOCKS changes).

Testing

  • just fmt
  • cargo test -p codex-network-proxy

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@viyatb-oai