Build error in Codex due to certificate

[crstp]

Problem

When building a crate that depends on lindera inside Codex, it fails to download the files. I added a logging and got the following error

Command:

cargo build --features ipadic -vv

Output:

Round 3/3: Trying 1 URLs
Attempting to download from https://Lindera.dev/mecab-ipadic-2.7.0-20070801.tar.gz
Request error from https://Lindera.dev/mecab-ipadic-2.7.0-20070801.tar.gz: reqwest::Error { kind: Request, source: hyper_util::client::legacy::Error(Connect, Custom { kind: InvalidData, error: InvalidCertificate(UnknownIssuer) }) }
Caused by (1): client error (Connect)
Caused by (2): invalid peer certificate: UnknownIssuer

Codex restricts network access, so I added Lindera.dev to the whitelist domain, but it still cannot download the file. I confirmed that I can download it with wget inside Codex, so maybe reqwest client is more strict? Or it might be Codex's issue

Edit: Maybe Codex's proxy is doing something wrong...
I can still download it with wget, but when getting the header with curl, the issuer became OpenAI. But perhaps that certificate isn't installed to the Codex container.

subject:        CN = lindera.dev  
start date:     Jun 19 13:51:12 2025 GMT  
expire date:    Jun 19 13:52:12 2026 GMT  
subjectAltName: host "lindera.dev" matched cert's "lindera.dev"  
issuer:         C = US; ST = California; L = San Francisco; O = OpenAI; CN = egress-proxy