Cairn

Codex device login SSL/PQ TLS error handling fixes

NousResearch/hermes-agent · cluster 106384

Data as of

Nothing open on GitHub. Fix merged in #106517. Check it covers your case.

The short answer

0open issues
0open PRs
5items grouped
Known?
Yes. 5 related items grouped here, 1 issue already closed.
Fix event
A fix was merged to main in PR #106517. Check it covers your case. No release data is tracked.
Tracker
The maintainers' tracker marks this resolved, deciding PR #106517. That is separate from the fix event.
Still open
Nothing open on GitHub.

These items address a bug where Codex device login fails with SSL EOF errors related to post-quantum TLS groups in OpenSSL 3.5, and propose preserving SSL error details while surfacing hints about middlebox/PQ workarounds.

Open issues0

No open issues.

Open PRs0

No open pull requests.

Fixes on record

Merged to main. A stamp counts the issues a fix is linked to.

  • #106517 fix(cli): Codex device login keeps the SSL error and hints at the OpenSSL 3.5 PQ-group workaround (#106384, salvage #106394 #106389 #106409)

    merged to main

    files: hermes_cli/auth_codex.py, tests/hermes_cli/test_codex_device_login_ssl_hint.py, website/docs/integrations/providers.md, website/i18n/zh-Hans/docusaurus-plugin-content-docs/current/integrations/providers.md

3 PRs closed without merging

From the close comments: merged via another change 2 · superseded by another PR 1

  • #106389 fix(auth): hint Codex login SSL EOF middlebox/PQ TLS · merged via another change → d3dcc06, #106517, #106394
  • #106394 fix(cli): keep SSL detail and add middlebox hint on Codex device-login transport errors · merged via another change → d3dcc06, #106517, #106389
  • #106409 fix(auth): preserve SSL error + PQ-hint in Codex device-login failures · superseded by another PR → d3dcc06, #106517, #44392
Closed issues · 1
  • Closed#106384[Bug]: Codex device login fails with SSL EOF on Python/OpenSSL 3.5 when middleboxes reject PQ TLS groups
How this cluster was grouped
  • Link evidence (structural links throughout): every member is connected by structural evidence: shared changed files, or a closing/superseded reference.
  • Pairwise link density 0.40: the share of item pairs that carry a link, counting a structural link in full and a relevance-only link at 0.36. 1.00 means every pair is linked.

Pick up a Lab task

Check whether a fix covers the open issues here, with your own agent. Bring back evidence for maintainers.

Open the Lab

At a glance

Merged PRs
#106517
Closed issues
1
Attempts
3 PRs closed without merging
Fix link checked
9 Sep 2026

For your agent

The same facts, typed.

cluster/106384.json
cluster/106384.md