don't know how to build these paths: /nix/store/37q1j3i2hq7598rj3zc87f3arqc8xjaz-container-test-run-certificates.drv warning: ignoring the client-specified setting 'store', because it is a restricted setting and you are not a trusted user building '/nix/store/ghbm4ll57cqkbvvd6f5ywrw1m5m1bzb0-system-path.drv' on nix-store.geninf.io:50051 system-path> build-x86-01: building ghbm4ll57cqkbvvd6f5ywrw1m5m1bzb0-system-path.drv building '/nix/store/yba16zfg1p8v427rpxdk4l37y3g8sppf-system-path.drv' on nix-store.geninf.io:50051 system-path> build-x86-01: building yba16zfg1p8v427rpxdk4l37y3g8sppf-system-path.drv system-path> structuredAttrs is enabled system-path> structuredAttrs is enabled building '/nix/store/c5cjs2sqpidrqrlpkc7rm5pwid7qp70j-system-path.drv' on nix-store.geninf.io:50051 system-path> gi-build-x86-02: building c5cjs2sqpidrqrlpkc7rm5pwid7qp70j-system-path.drv system-path> created 1816 symlinks in user environment system-path> created 1816 symlinks in user environment building '/nix/store/zrjbj5zjmxcqwgidc46f41dhsghg0gg3-nginx.conf.drv' on nix-store.geninf.io:50051 nginx.conf> gi-build-x86-02: building zrjbj5zjmxcqwgidc46f41dhsghg0gg3-nginx.conf.drv building '/nix/store/nq3kkw9p1xcy5h98ga2qprss32yyjjw6-nginx.conf.drv' on nix-store.geninf.io:50051 nginx.conf> gi-build-x86-02: building nq3kkw9p1xcy5h98ga2qprss32yyjjw6-nginx.conf.drv system-path> structuredAttrs is enabled system-path> created 1816 symlinks in user environment nginx.conf> nginx.conf> nginx.conf> ==================== Results =================== nginx.conf> ==================== Results =================== nginx.conf> No issues found. nginx.conf> No issues found. nginx.conf> nginx.conf> nginx.conf> ==================== Summary =================== nginx.conf> ==================== Summary =================== nginx.conf> Total issues: nginx.conf> Unspecified: 0 nginx.conf> Low: 0 nginx.conf> Medium: 0 nginx.conf> Total issues: nginx.conf> High: 0 nginx.conf> nginx.conf> Unspecified: 0 nginx.conf> Low: 0 nginx.conf> Medium: 0 nginx.conf> High: 0 nginx.conf> building '/nix/store/4cvhr94fzcja2jg70001kqqfg4vdzbmm-dbus-1.drv' on nix-store.geninf.io:50051 dbus-1> build-x86-01: building 4cvhr94fzcja2jg70001kqqfg4vdzbmm-dbus-1.drv building '/nix/store/3nwbx7khjjw3v8rp7min1054j2zhg7lv-dbus-1.drv' on nix-store.geninf.io:50051 dbus-1> build-x86-01: building 3nwbx7khjjw3v8rp7min1054j2zhg7lv-dbus-1.drv building '/nix/store/xy1cpchdvxnbmbz47jjg5r1zqb5mp46d-X-Restart-Triggers-dbus-broker.drv' on nix-store.geninf.io:50051 X-Restart-Triggers-dbus-broker> build-x86-01: building xy1cpchdvxnbmbz47jjg5r1zqb5mp46d-X-Restart-Triggers-dbus-broker.drv building '/nix/store/59d1cwhq4f0fm2yqk7pbxdxrlhqarxq9-X-Restart-Triggers-dbus-broker.drv' on nix-store.geninf.io:50051 X-Restart-Triggers-dbus-broker> build-x86-01: building 59d1cwhq4f0fm2yqk7pbxdxrlhqarxq9-X-Restart-Triggers-dbus-broker.drv building '/nix/store/kwjl1c4dg8iwgrgfcw8j7lvg127hs9nr-unit-script-nginx-pre-start.drv' on nix-store.geninf.io:50051 unit-script-nginx-pre-start> build-x86-01: building kwjl1c4dg8iwgrgfcw8j7lvg127hs9nr-unit-script-nginx-pre-start.drv building '/nix/store/smb37bwxpkl9k0hdiazrvdydvah1kxrs-dbus-1.drv' on nix-store.geninf.io:50051 dbus-1> gi-build-x86-02: building smb37bwxpkl9k0hdiazrvdydvah1kxrs-dbus-1.drv building '/nix/store/4d2cklxj3d7mbli34na43vp7pcwz7074-unit-dbus-broker.service.drv' on nix-store.geninf.io:50051 unit-dbus-broker.service> build-x86-01: building 4d2cklxj3d7mbli34na43vp7pcwz7074-unit-dbus-broker.service.drv building '/nix/store/b51xpnmhsw3q48i8570ni0kj3mql8sls-unit-dbus-broker.service.drv' on nix-store.geninf.io:50051 unit-dbus-broker.service> build-x86-01: building b51xpnmhsw3q48i8570ni0kj3mql8sls-unit-dbus-broker.service.drv building '/nix/store/ynh4vfc2ccjksplrwz901pv65vb7sq10-unit-dbus-broker.service.drv' on nix-store.geninf.io:50051 unit-dbus-broker.service> build-x86-01: building ynh4vfc2ccjksplrwz901pv65vb7sq10-unit-dbus-broker.service.drv building '/nix/store/ql84mxb3zalmk54wh2l88n1qfdbq2frk-unit-script-nginx-pre-start.drv' on nix-store.geninf.io:50051 unit-script-nginx-pre-start> gi-build-x86-02: building ql84mxb3zalmk54wh2l88n1qfdbq2frk-unit-script-nginx-pre-start.drv building '/nix/store/69mjlmwl7zx3lqx6jsyd7l9sk3wc891z-unit-dbus-broker.service.drv' on nix-store.geninf.io:50051 unit-dbus-broker.service> gi-build-x86-02: building 69mjlmwl7zx3lqx6jsyd7l9sk3wc891z-unit-dbus-broker.service.drv building '/nix/store/1z1w3jgdkq1l8msnx5jz33pk97njp7nn-unit-nginx.service.drv' on nix-store.geninf.io:50051 unit-nginx.service> gi-build-x86-02: building 1z1w3jgdkq1l8msnx5jz33pk97njp7nn-unit-nginx.service.drv building '/nix/store/62xbndsysmzkqqa1jindh1a72fa8wwxy-user-units.drv' on nix-store.geninf.io:50051 user-units> build-x86-01: building 62xbndsysmzkqqa1jindh1a72fa8wwxy-user-units.drv building '/nix/store/l0jqq82xrd2xbpk7iazv6id03sxm17nz-user-units.drv' on nix-store.geninf.io:50051 user-units> build-x86-01: building l0jqq82xrd2xbpk7iazv6id03sxm17nz-user-units.drv building '/nix/store/sk00v8jy28a7abq67jyqr6il5id69caa-unit-nginx.service.drv' on nix-store.geninf.io:50051 unit-nginx.service> build-x86-01: building sk00v8jy28a7abq67jyqr6il5id69caa-unit-nginx.service.drv building '/nix/store/vfhp3fpn99ldhz0facixwph30ag39m1c-X-Restart-Triggers-dbus-broker.drv' on nix-store.geninf.io:50051 X-Restart-Triggers-dbus-broker> build-x86-01: building vfhp3fpn99ldhz0facixwph30ag39m1c-X-Restart-Triggers-dbus-broker.drv building '/nix/store/8kn4mpr74sxxn78a3a4axwmzjjl14zpq-system-units.drv' on nix-store.geninf.io:50051 system-units> build-x86-01: building 8kn4mpr74sxxn78a3a4axwmzjjl14zpq-system-units.drv building '/nix/store/mxiwl002xfakmkdsdfn81gzv9swrv9fp-unit-dbus-broker.service.drv' on nix-store.geninf.io:50051 unit-dbus-broker.service> build-x86-01: building mxiwl002xfakmkdsdfn81gzv9swrv9fp-unit-dbus-broker.service.drv building '/nix/store/71j1nihh546np26z8j9z79sf6a2f0avf-unit-dbus-broker.service.drv' on nix-store.geninf.io:50051 unit-dbus-broker.service> build-x86-01: building 71j1nihh546np26z8j9z79sf6a2f0avf-unit-dbus-broker.service.drv building '/nix/store/914sjcbvzrng6fpxgxds7zfvqakri94h-system-units.drv' on nix-store.geninf.io:50051 system-units> gi-build-x86-02: building 914sjcbvzrng6fpxgxds7zfvqakri94h-system-units.drv building '/nix/store/g53kqn4ffaz8h1qqzgib5a5dhvp1ncpv-user-units.drv' on nix-store.geninf.io:50051 user-units> build-x86-01: building g53kqn4ffaz8h1qqzgib5a5dhvp1ncpv-user-units.drv building '/nix/store/pa7gc7fbvq0zcbxa94cv000waycsqm77-system-units.drv' on nix-store.geninf.io:50051 system-units> build-x86-01: building pa7gc7fbvq0zcbxa94cv000waycsqm77-system-units.drv building '/nix/store/mkrx7admhaii9j4i1qdvb5jxx0b14z2d-etc.drv' on nix-store.geninf.io:50051 etc> build-x86-01: building mkrx7admhaii9j4i1qdvb5jxx0b14z2d-etc.drv building '/nix/store/xszdkdafmbgh606czcll6zna2mg14nxg-etc.drv' on nix-store.geninf.io:50051 etc> build-x86-01: building xszdkdafmbgh606czcll6zna2mg14nxg-etc.drv building '/nix/store/1zk6kqqrx21c99yp00ihcvc8b65x5v0j-activate.drv' on nix-store.geninf.io:50051 activate> build-x86-01: building 1zk6kqqrx21c99yp00ihcvc8b65x5v0j-activate.drv building '/nix/store/ph2pfg36c9g5qpakymf7wc9qkiwbwqsn-activate.drv' on nix-store.geninf.io:50051 activate> build-x86-01: building ph2pfg36c9g5qpakymf7wc9qkiwbwqsn-activate.drv building '/nix/store/axnys73g4xgf4jhgpgf1ipbmbvyg2nmy-etc.drv' on nix-store.geninf.io:50051 etc> gi-build-x86-02: building axnys73g4xgf4jhgpgf1ipbmbvyg2nmy-etc.drv building '/nix/store/68jv76751i60ygjca1xdjqhz3c75jils-nixos-system-ca-test.drv' on nix-store.geninf.io:50051 nixos-system-ca-test> build-x86-01: building 68jv76751i60ygjca1xdjqhz3c75jils-nixos-system-ca-test.drv nixos-system-ca-test> structuredAttrs is enabled building '/nix/store/77i191apm1c08a0fy19bh8lwbsc35lxr-nixos-system-client-test.drv' on nix-store.geninf.io:50051 nixos-system-client-test> build-x86-01: building 77i191apm1c08a0fy19bh8lwbsc35lxr-nixos-system-client-test.drv nixos-system-client-test> structuredAttrs is enabled building '/nix/store/pqmi1mhdc2fzakkv4fl9zak5faay523k-closure-info.drv' on nix-store.geninf.io:50051 closure-info> build-x86-01: building pqmi1mhdc2fzakkv4fl9zak5faay523k-closure-info.drv building '/nix/store/dq5vslhd7snkaid1m7bjmmmaf3v3qrvn-closure-info.drv' on nix-store.geninf.io:50051 closure-info> build-x86-01: building dq5vslhd7snkaid1m7bjmmmaf3v3qrvn-closure-info.drv closure-info> structuredAttrs is enabled closure-info> structuredAttrs is enabled building '/nix/store/2l4xvmj7k7jk247gzj4s699xgqgr6i7y-activate.drv' on nix-store.geninf.io:50051 activate> build-x86-01: building 2l4xvmj7k7jk247gzj4s699xgqgr6i7y-activate.drv building '/nix/store/j134ybfkmjzyhwwbvhs5gn9if5skzy60-nixos-system-server-test.drv' on nix-store.geninf.io:50051 nixos-system-server-test> build-x86-01: building j134ybfkmjzyhwwbvhs5gn9if5skzy60-nixos-system-server-test.drv nixos-system-server-test> structuredAttrs is enabled building '/nix/store/20qyd0fh2is9djnnlr9ybyf03pfbhscd-closure-info.drv' on nix-store.geninf.io:50051 closure-info> build-x86-01: building 20qyd0fh2is9djnnlr9ybyf03pfbhscd-closure-info.drv closure-info> structuredAttrs is enabled building '/nix/store/y9d7fxnk84il26c7hcxzwrbd8zvng4bl-nixos-test-driver-certificates.drv' on nix-store.geninf.io:50051 nixos-test-driver-certificates> build-x86-01: building y9d7fxnk84il26c7hcxzwrbd8zvng4bl-nixos-test-driver-certificates.drv nixos-test-driver-certificates> Running type check (enable/disable: config.skipTypeCheck) nixos-test-driver-certificates> See https://nixos.org/manual/nixos/stable/#test-opt-skipTypeCheck nixos-test-driver-certificates> Success: no issues found in 1 source file building '/nix/store/37q1j3i2hq7598rj3zc87f3arqc8xjaz-container-test-run-certificates.drv' on nix-store.geninf.io:50051 container-test-run-certificates> build-x86-01: building 37q1j3i2hq7598rj3zc87f3arqc8xjaz-container-test-run-certificates.drv container-test-run-certificates> additionally exposed symbols: container-test-run-certificates> ca, client, server, container-test-run-certificates> start_all, machines, driver, Machine, wait_for_signal container-test-run-certificates> Starting ca container-test-run-certificates> Starting client container-test-run-certificates> Starting server container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> <<< NixOS Stage 2 >>> container-test-run-certificates> container-test-run-certificates> booting system configuration /nix/store/5g12prhqhsy2dyrai5079vwakp0vbk5l-nixos-system-ca-test container-test-run-certificates> running activation script... container-test-run-certificates> setting up /etc... container-test-run-certificates> 2: host0@if3: mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000 container-test-run-certificates> link/ether 42:06:76:42:a9:8d brd ff:ff:ff:ff:ff:ff link-netnsid 0 container-test-run-certificates> setting up age secrets... container-test-run-certificates> starting systemd... container-test-run-certificates> systemd 260.5 running in system mode (+PAM +AUDIT -SELINUX +APPARMOR +IMA +IPE +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS +FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 +PWQUALITY +P11KIT +QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD +BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP +LIBARCHIVE) container-test-run-certificates> Detected virtualization systemd-nspawn. container-test-run-certificates> Detected architecture x86-64. container-test-run-certificates> Detected first boot. container-test-run-certificates> Initializing machine ID from container UUID. container-test-run-certificates> Applying preset policy. container-test-run-certificates> Populated /etc with preset unit settings. container-test-run-certificates> Queued start job for default target Multi-User System. container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> <<< Welcome to NixOS test (x86_64) - console >>> container-test-run-certificates> + systemd-run /bin/sh -c '/nix/store/bhv6xyvqw6gjs3j488gi1z6wdv18bdpa-coreutils-9.11/bin/sleep 999999999 && echo 34bab05b-7393-4277-97d4-4df6303b7a84' container-test-run-certificates> Running as unit: run-p447-i1575955.service; invocation ID: 229d81a905614d60b7bc2586c9634be8 container-test-run-certificates> To attach to container ca run on the same machine that runs the test: container-test-run-certificates> sudo nsenter --user --target $(\pgrep -f '^/bin/sh.*34bab05b-7393-4277-97d4-4df6303b7a84') --mount --uts --ipc --net --pid --cgroup /bin/sh -c bash container-test-run-certificates> container-test-run-certificates> To inject external network and continue test, run: container-test-run-certificates> sudo /nix/store/jy00n3jp5xj8s40n1fbldmkcr5n7avxc-python3-3.13.15/bin/python3.13 /nix/store/410clzrdvksxqd6ldmmbsf7z00208kgj-test-driver-0.0.1/lib/python3.13/site-packages/test_driver/inject_network.py 34bab05b-7393-4277-97d4-4df6303b7a84 container-test-run-certificates> container-test-run-certificates> <<< NixOS Stage 2 >>> container-test-run-certificates> container-test-run-certificates> booting system configuration /nix/store/8lqvv9zig5r0bh9bxd7fzmlac1gpvwl1-nixos-system-client-test container-test-run-certificates> running activation script... container-test-run-certificates> setting up /etc... container-test-run-certificates> 2: host0@if4: mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000 container-test-run-certificates> link/ether 2a:42:35:28:b1:2f brd ff:ff:ff:ff:ff:ff link-netnsid 0 container-test-run-certificates> setting up age secrets... container-test-run-certificates> starting systemd... container-test-run-certificates> systemd 260.5 running in system mode (+PAM +AUDIT -SELINUX +APPARMOR +IMA +IPE +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS +FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 +PWQUALITY +P11KIT +QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD +BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP +LIBARCHIVE) container-test-run-certificates> Detected virtualization systemd-nspawn. container-test-run-certificates> Detected architecture x86-64. container-test-run-certificates> Detected first boot. container-test-run-certificates> Initializing machine ID from container UUID. container-test-run-certificates> Applying preset policy. container-test-run-certificates> Populated /etc with preset unit settings. container-test-run-certificates> Queued start job for default target Multi-User System. container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> <<< Welcome to NixOS test (x86_64) - console >>> container-test-run-certificates> + systemd-run /bin/sh -c '/nix/store/bhv6xyvqw6gjs3j488gi1z6wdv18bdpa-coreutils-9.11/bin/sleep 999999999 && echo f1583e97-b8ab-43d1-8dcb-f14e64931fca' container-test-run-certificates> Running as unit: run-p304-i1575958.service; invocation ID: c391bd91b7104f80ba27ed0c976d2c34 container-test-run-certificates> To attach to container client run on the same machine that runs the test: container-test-run-certificates> sudo nsenter --user --target $(\pgrep -f '^/bin/sh.*f1583e97-b8ab-43d1-8dcb-f14e64931fca') --mount --uts --ipc --net --pid --cgroup /bin/sh -c bash container-test-run-certificates> container-test-run-certificates> To inject external network and continue test, run: container-test-run-certificates> sudo /nix/store/jy00n3jp5xj8s40n1fbldmkcr5n7avxc-python3-3.13.15/bin/python3.13 /nix/store/410clzrdvksxqd6ldmmbsf7z00208kgj-test-driver-0.0.1/lib/python3.13/site-packages/test_driver/inject_network.py f1583e97-b8ab-43d1-8dcb-f14e64931fca container-test-run-certificates> container-test-run-certificates> <<< NixOS Stage 2 >>> container-test-run-certificates> container-test-run-certificates> booting system configuration /nix/store/0w7rd45kcbb7gm6cj9jk0cnsk9wr0xjb-nixos-system-server-test container-test-run-certificates> running activation script... container-test-run-certificates> setting up /etc... container-test-run-certificates> 2: host0@if5: mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000 container-test-run-certificates> link/ether be:aa:dd:39:86:e7 brd ff:ff:ff:ff:ff:ff link-netnsid 0 container-test-run-certificates> setting up age secrets... container-test-run-certificates> starting systemd... container-test-run-certificates> systemd 260.5 running in system mode (+PAM +AUDIT -SELINUX +APPARMOR +IMA +IPE +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS +FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 +PWQUALITY +P11KIT +QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD +BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP +LIBARCHIVE) container-test-run-certificates> Detected virtualization systemd-nspawn. container-test-run-certificates> Detected architecture x86-64. container-test-run-certificates> Detected first boot. container-test-run-certificates> Initializing machine ID from container UUID. container-test-run-certificates> Applying preset policy. container-test-run-certificates> Populated /etc with preset unit settings. container-test-run-certificates> Queued start job for default target Multi-User System. container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> <<< Welcome to NixOS test (x86_64) - console >>> container-test-run-certificates> + systemd-run /bin/sh -c '/nix/store/bhv6xyvqw6gjs3j488gi1z6wdv18bdpa-coreutils-9.11/bin/sleep 999999999 && echo e816ac6c-cb45-4649-953a-9157ce797b25' container-test-run-certificates> Running as unit: run-p387-i1575961.service; invocation ID: 1cf812a156954468b24168bb2a995857 container-test-run-certificates> To attach to container server run on the same machine that runs the test: container-test-run-certificates> sudo nsenter --user --target $(\pgrep -f '^/bin/sh.*e816ac6c-cb45-4649-953a-9157ce797b25') --mount --uts --ipc --net --pid --cgroup /bin/sh -c bash container-test-run-certificates> container-test-run-certificates> To inject external network and continue test, run: container-test-run-certificates> sudo /nix/store/jy00n3jp5xj8s40n1fbldmkcr5n7avxc-python3-3.13.15/bin/python3.13 /nix/store/410clzrdvksxqd6ldmmbsf7z00208kgj-test-driver-0.0.1/lib/python3.13/site-packages/test_driver/inject_network.py e816ac6c-cb45-4649-953a-9157ce797b25 container-test-run-certificates> + systemctl restart acme-order-renew-ca.foo.service container-test-run-certificates> + systemctl restart acme-test.foo.service container-test-run-certificates> client: waiting for success: curl -v https://test.foo container-test-run-certificates> + curl -v https://test.foo container-test-run-certificates> * Host test.foo:443 was resolved. container-test-run-certificates> * IPv6: (none) container-test-run-certificates> * IPv4: 192.168.1.3 container-test-run-certificates> * Trying 192.168.1.3:443... container-test-run-certificates> * ALPN: curl offers h2,http/1.1 container-test-run-certificates> } [5 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Client hello (1): container-test-run-certificates> } [1552 bytes data] container-test-run-certificates> * SSL Trust Anchors: container-test-run-certificates> * OpenSSL default paths (fallback) container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Server hello (2): container-test-run-certificates> { [1210 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS change cipher, Change cipher spec (1): container-test-run-certificates> { [1 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): container-test-run-certificates> { [19 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Certificate (11): container-test-run-certificates> { [1009 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, CERT verify (15): container-test-run-certificates> { [111 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Finished (20): container-test-run-certificates> { [52 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): container-test-run-certificates> } [1 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Finished (20): container-test-run-certificates> } [52 bytes data] container-test-run-certificates> * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey container-test-run-certificates> * ALPN: server accepted h2 container-test-run-certificates> * Server certificate: container-test-run-certificates> * subject: CN=test.foo container-test-run-certificates> * start date: Oct 19 05:16:49 2026 GMT container-test-run-certificates> * expire date: Nov 18 05:16:49 2028 GMT container-test-run-certificates> * issuer: CN=minica root ca 7f3543 container-test-run-certificates> * Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * subjectAltName: "test.foo" matches cert's "test.foo" container-test-run-certificates> * OpenSSL verify result: 13 container-test-run-certificates> * SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> * closing connection #0 container-test-run-certificates> curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> More details here: https://curl.se/docs/sslcerts.html container-test-run-certificates> container-test-run-certificates> curl failed to verify the legitimacy of the server and therefore could not container-test-run-certificates> establish a secure connection to it. To learn more about this situation and container-test-run-certificates> how to fix it, please visit the webpage mentioned above. container-test-run-certificates> + curl -v https://test.foo container-test-run-certificates> * Host test.foo:443 was resolved. container-test-run-certificates> * IPv6: (none) container-test-run-certificates> * IPv4: 192.168.1.3 container-test-run-certificates> * Trying 192.168.1.3:443... container-test-run-certificates> * ALPN: curl offers h2,http/1.1 container-test-run-certificates> } [5 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Client hello (1): container-test-run-certificates> } [1552 bytes data] container-test-run-certificates> * SSL Trust Anchors: container-test-run-certificates> * OpenSSL default paths (fallback) container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Server hello (2): container-test-run-certificates> { [1210 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS change cipher, Change cipher spec (1): container-test-run-certificates> { [1 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): container-test-run-certificates> { [19 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Certificate (11): container-test-run-certificates> { [1009 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, CERT verify (15): container-test-run-certificates> { [110 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Finished (20): container-test-run-certificates> { [52 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): container-test-run-certificates> } [1 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Finished (20): container-test-run-certificates> } [52 bytes data] container-test-run-certificates> * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey container-test-run-certificates> * ALPN: server accepted h2 container-test-run-certificates> * Server certificate: container-test-run-certificates> * subject: CN=test.foo container-test-run-certificates> * start date: Oct 19 05:16:49 2026 GMT container-test-run-certificates> * expire date: Nov 18 05:16:49 2028 GMT container-test-run-certificates> * issuer: CN=minica root ca 7f3543 container-test-run-certificates> * Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * subjectAltName: "test.foo" matches cert's "test.foo" container-test-run-certificates> * OpenSSL verify result: 13 container-test-run-certificates> * SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> * closing connection #0 container-test-run-certificates> curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> More details here: https://curl.se/docs/sslcerts.html container-test-run-certificates> container-test-run-certificates> curl failed to verify the legitimacy of the server and therefore could not container-test-run-certificates> establish a secure connection to it. To learn more about this situation and container-test-run-certificates> how to fix it, please visit the webpage mentioned above. container-test-run-certificates> + curl -v https://test.foo container-test-run-certificates> * Host test.foo:443 was resolved. container-test-run-certificates> * IPv6: (none) container-test-run-certificates> * IPv4: 192.168.1.3 container-test-run-certificates> * Trying 192.168.1.3:443... container-test-run-certificates> * ALPN: curl offers h2,http/1.1 container-test-run-certificates> } [5 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Client hello (1): container-test-run-certificates> } [1552 bytes data] container-test-run-certificates> * SSL Trust Anchors: container-test-run-certificates> * OpenSSL default paths (fallback) container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Server hello (2): container-test-run-certificates> { [1210 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS change cipher, Change cipher spec (1): container-test-run-certificates> { [1 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): container-test-run-certificates> { [19 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Certificate (11): container-test-run-certificates> { [1009 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, CERT verify (15): container-test-run-certificates> { [111 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Finished (20): container-test-run-certificates> { [52 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): container-test-run-certificates> } [1 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Finished (20): container-test-run-certificates> } [52 bytes data] container-test-run-certificates> * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey container-test-run-certificates> * ALPN: server accepted h2 container-test-run-certificates> * Server certificate: container-test-run-certificates> * subject: CN=test.foo container-test-run-certificates> * start date: Oct 19 05:16:49 2026 GMT container-test-run-certificates> * expire date: Nov 18 05:16:49 2028 GMT container-test-run-certificates> * issuer: CN=minica root ca 7f3543 container-test-run-certificates> * Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * subjectAltName: "test.foo" matches cert's "test.foo" container-test-run-certificates> * OpenSSL verify result: 13 container-test-run-certificates> * SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> * closing connection #0 container-test-run-certificates> curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> More details here: https://curl.se/docs/sslcerts.html container-test-run-certificates> container-test-run-certificates> curl failed to verify the legitimacy of the server and therefore could not container-test-run-certificates> establish a secure connection to it. To learn more about this situation and container-test-run-certificates> how to fix it, please visit the webpage mentioned above. container-test-run-certificates> + curl -v https://test.foo container-test-run-certificates> * Host test.foo:443 was resolved. container-test-run-certificates> * IPv6: (none) container-test-run-certificates> * IPv4: 192.168.1.3 container-test-run-certificates> * Trying 192.168.1.3:443... container-test-run-certificates> * ALPN: curl offers h2,http/1.1 container-test-run-certificates> } [5 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Client hello (1): container-test-run-certificates> } [1552 bytes data] container-test-run-certificates> * SSL Trust Anchors: container-test-run-certificates> * OpenSSL default paths (fallback) container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Server hello (2): container-test-run-certificates> { [1210 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS change cipher, Change cipher spec (1): container-test-run-certificates> { [1 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): container-test-run-certificates> { [19 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Certificate (11): container-test-run-certificates> { [931 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, CERT verify (15): container-test-run-certificates> { [78 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Finished (20): container-test-run-certificates> { [52 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): container-test-run-certificates> } [1 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Finished (20): container-test-run-certificates> } [52 bytes data] container-test-run-certificates> * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey container-test-run-certificates> * ALPN: server accepted h2 container-test-run-certificates> * Server certificate: container-test-run-certificates> * subject: CN=test.foo container-test-run-certificates> * start date: Oct 19 05:16:01 2026 GMT container-test-run-certificates> * expire date: Jan 17 05:17:01 2027 GMT container-test-run-certificates> * issuer: CN=Clan Intermediate CA container-test-run-certificates> * Certificate level 0: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA256 container-test-run-certificates> * Certificate level 1: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA256 container-test-run-certificates> * Certificate level 2: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA256 container-test-run-certificates> * subjectAltName: "test.foo" matches cert's "test.foo" container-test-run-certificates> * OpenSSL verify result: 0 container-test-run-certificates> * SSL certificate verified via OpenSSL. container-test-run-certificates> * Established connection to test.foo (192.168.1.3 port 443) from 192.168.1.2 port 39024 container-test-run-certificates> % Total % Received % Xferd Average Speed Time Time Time Current container-test-run-certificates> Dload Upload Total Spent Left Speed container-test-run-certificates> 0 0 0 0 0 0 0 0 0* using HTTP/2 container-test-run-certificates> * [HTTP/2] [1] OPENED stream for https://test.foo/ container-test-run-certificates> * [HTTP/2] [1] [:method: GET] container-test-run-certificates> * [HTTP/2] [1] [:scheme: https] container-test-run-certificates> * [HTTP/2] [1] [:authority: test.foo] container-test-run-certificates> * [HTTP/2] [1] [:path: /] container-test-run-certificates> * [HTTP/2] [1] [user-agent: curl/8.22.0] container-test-run-certificates> * [HTTP/2] [1] [accept: */*] container-test-run-certificates> } [5 bytes data] container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> * Request completely sent off container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4): container-test-run-certificates> { [265 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4): container-test-run-certificates> { [265 bytes data] container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> { [5 bytes data] container-test-run-certificates> 100 20 100 20 0 0 1846 0 0 container-test-run-certificates> * Connection #0 to host test.foo:443 left intact container-test-run-certificates> (finished: waiting for success: curl -v https://test.foo, in 3.09 seconds) container-test-run-certificates> + openssl s_client -connect test.foo:443 -servername test.foo container-test-run-certificates> + openssl x509 -text -noout container-test-run-certificates> Certificate: container-test-run-certificates> Data: container-test-run-certificates> Version: 3 (0x2) container-test-run-certificates> Serial Number: container-test-run-certificates> 8b:97:3c:a2:00:8d:c8:0f:bd:81:9b:48:c5:b0:e2:b2 container-test-run-certificates> Signature Algorithm: ecdsa-with-SHA256 container-test-run-certificates> Issuer: CN=Clan Intermediate CA container-test-run-certificates> Validity container-test-run-certificates> Not Before: Oct 19 05:16:01 2026 GMT container-test-run-certificates> Not After : Jan 17 05:17:01 2027 GMT container-test-run-certificates> Subject: CN=test.foo container-test-run-certificates> Subject Public Key Info: container-test-run-certificates> Public Key Algorithm: id-ecPublicKey container-test-run-certificates> Public-Key: (256 bit) container-test-run-certificates> pub: container-test-run-certificates> 04:14:0f:79:06:fc:4f:29:9e:3a:72:a4:f0:3a:08: container-test-run-certificates> 4f:f0:65:24:89:c9:ff:49:ce:b6:15:5e:43:4b:d2: container-test-run-certificates> 01:cd:49:8d:e8:42:58:82:16:62:0b:35:e3:1f:7c: container-test-run-certificates> d0:ba:c6:2f:01:c9:a3:6d:a0:88:7a:40:79:e1:17: container-test-run-certificates> 0d:bd:11:8c:f3 container-test-run-certificates> ASN1 OID: prime256v1 container-test-run-certificates> NIST CURVE: P-256 container-test-run-certificates> X509v3 extensions: container-test-run-certificates> X509v3 Key Usage: critical container-test-run-certificates> Digital Signature container-test-run-certificates> X509v3 Extended Key Usage: container-test-run-certificates> TLS Web Server Authentication, TLS Web Client Authentication container-test-run-certificates> X509v3 Subject Key Identifier: container-test-run-certificates> B6:06:DE:70:E1:1A:2B:96:D7:D1:1C:23:1E:33:8A:B2:0E:40:C7:42 container-test-run-certificates> X509v3 Authority Key Identifier: container-test-run-certificates> AF:3D:FB:7F:3A:E2:22:0C:FC:17:43:CF:2B:14:28:42:1E:EC:D0:EF container-test-run-certificates> X509v3 Subject Alternative Name: container-test-run-certificates> DNS:test.foo container-test-run-certificates> 1.3.6.1.4.1.37476.9000.64.1: container-test-run-certificates> 0......acme.. container-test-run-certificates> Signature Algorithm: ecdsa-with-SHA256 container-test-run-certificates> Signature Value: container-test-run-certificates> 30:44:02:20:72:e7:ee:3e:bd:df:a8:fb:aa:40:1f:3c:3a:4e: container-test-run-certificates> 99:32:fe:b3:21:1b:12:09:26:91:f8:0c:58:ed:60:e1:40:ad: container-test-run-certificates> 02:20:09:8a:48:c5:d8:59:a4:7e:e0:24:6b:f6:a9:5d:2d:18: container-test-run-certificates> 0e:48:48:06:f6:5b:c8:5f:75:ad:ca:c5:70:45:43:11 container-test-run-certificates> container-test-run-certificates> container-test-run-certificates>