don't know how to build these paths: /nix/store/57gv211g5adj8zlc9nqmxj017hg5cbfc-container-test-run-certificates.drv warning: ignoring the client-specified setting 'store', because it is a restricted setting and you are not a trusted user building '/nix/store/nkdx4d9xcmsj7d81l5igrswpsg5d0c1w-system-path.drv' on nix-store.geninf.io:50051 system-path> build-x86-01: building nkdx4d9xcmsj7d81l5igrswpsg5d0c1w-system-path.drv building '/nix/store/wzg7v5fnlq1fdvfrlgrg30i2zvyrav1z-system-path.drv' on nix-store.geninf.io:50051 system-path> build-x86-01: building wzg7v5fnlq1fdvfrlgrg30i2zvyrav1z-system-path.drv building '/nix/store/q1fixmsg1g0c04szbfyhg9am235zdg6c-nss-cacert-3.126.drv' on nix-store.geninf.io:50051 nss-cacert-3.126> build-x86-01: building q1fixmsg1g0c04szbfyhg9am235zdg6c-nss-cacert-3.126.drv building '/nix/store/vq4knp7mp80b19jgkivjsy8zxrwh4mxd-system-path.drv' on nix-store.geninf.io:50051 system-path> gi-build-x86-02: building vq4knp7mp80b19jgkivjsy8zxrwh4mxd-system-path.drv system-path> structuredAttrs is enabled system-path> structuredAttrs is enabled system-path> structuredAttrs is enabled system-path> created 1816 symlinks in user environment system-path> created 1816 symlinks in user environment system-path> created 1816 symlinks in user environment nss-cacert-3.126> Running phase: unpackPhase nss-cacert-3.126> Running phase: patchPhase nss-cacert-3.126> Running phase: updateAutotoolsGnuConfigScriptsPhase nss-cacert-3.126> Running phase: configurePhase nss-cacert-3.126> no configure script, doing nothing nss-cacert-3.126> Running phase: buildPhase nss-cacert-3.126> Running phase: installPhase nss-cacert-3.126> Running phase: fixupPhase nss-cacert-3.126> shrinking RPATHs of ELF executables and libraries in /nix/store/rzkf9fqgc98bs6b98wm5wndim6d429wm-nss-cacert-3.126 nss-cacert-3.126> checking for references to /build/ in /nix/store/rzkf9fqgc98bs6b98wm5wndim6d429wm-nss-cacert-3.126... nss-cacert-3.126> patching script interpreter paths in /nix/store/rzkf9fqgc98bs6b98wm5wndim6d429wm-nss-cacert-3.126 nss-cacert-3.126> shrinking RPATHs of ELF executables and libraries in /nix/store/rnp53l8higlkr0xnw1avwh1gdylbrrxy-nss-cacert-3.126-unbundled nss-cacert-3.126> checking for references to /build/ in /nix/store/rnp53l8higlkr0xnw1avwh1gdylbrrxy-nss-cacert-3.126-unbundled... nss-cacert-3.126> patching script interpreter paths in /nix/store/rnp53l8higlkr0xnw1avwh1gdylbrrxy-nss-cacert-3.126-unbundled nss-cacert-3.126> shrinking RPATHs of ELF executables and libraries in /nix/store/sd863wzl8myb45k7ng440kjg34ab2gff-nss-cacert-3.126-p11kit nss-cacert-3.126> checking for references to /build/ in /nix/store/sd863wzl8myb45k7ng440kjg34ab2gff-nss-cacert-3.126-p11kit... nss-cacert-3.126> patching script interpreter paths in /nix/store/sd863wzl8myb45k7ng440kjg34ab2gff-nss-cacert-3.126-p11kit nss-cacert-3.126> shrinking RPATHs of ELF executables and libraries in /nix/store/qz7vbay42h6nd71ma07qslsib09p1gsr-nss-cacert-3.126-hashed nss-cacert-3.126> checking for references to /build/ in /nix/store/qz7vbay42h6nd71ma07qslsib09p1gsr-nss-cacert-3.126-hashed... nss-cacert-3.126> patching script interpreter paths in /nix/store/qz7vbay42h6nd71ma07qslsib09p1gsr-nss-cacert-3.126-hashed building '/nix/store/yx9n0g1dm0axidccqhnxy0h9v8qi4vzf-dbus-1.drv' on nix-store.geninf.io:50051 dbus-1> build-x86-01: building yx9n0g1dm0axidccqhnxy0h9v8qi4vzf-dbus-1.drv building '/nix/store/waykxhwb58gyhhryda9lb1p0xrk1nxj8-dbus-1.drv' on nix-store.geninf.io:50051 dbus-1> gi-build-x86-02: building waykxhwb58gyhhryda9lb1p0xrk1nxj8-dbus-1.drv building '/nix/store/9sy11clv87016pdzd9w85f1p6nmdb44f-dbus-1.drv' on nix-store.geninf.io:50051 dbus-1> build-x86-01: building 9sy11clv87016pdzd9w85f1p6nmdb44f-dbus-1.drv building '/nix/store/na71f9486fhn93kfw78713qyvvrjihwj-X-Restart-Triggers-dbus-broker.drv' on nix-store.geninf.io:50051 X-Restart-Triggers-dbus-broker> build-x86-01: building na71f9486fhn93kfw78713qyvvrjihwj-X-Restart-Triggers-dbus-broker.drv building '/nix/store/wncjhzy5v3yp870fwv7a4a77lgz0ai1i-X-Restart-Triggers-dbus-broker.drv' on nix-store.geninf.io:50051 X-Restart-Triggers-dbus-broker> build-x86-01: building wncjhzy5v3yp870fwv7a4a77lgz0ai1i-X-Restart-Triggers-dbus-broker.drv building '/nix/store/4x3v8czmsavcb0ldr2dr16hjljx5hdv1-unit-dbus-broker.service.drv' on nix-store.geninf.io:50051 unit-dbus-broker.service> build-x86-01: building 4x3v8czmsavcb0ldr2dr16hjljx5hdv1-unit-dbus-broker.service.drv building '/nix/store/4dbxyzqyyrla13fnj2dq2mnjl3mw738z-unit-dbus-broker.service.drv' on nix-store.geninf.io:50051 unit-dbus-broker.service> build-x86-01: building 4dbxyzqyyrla13fnj2dq2mnjl3mw738z-unit-dbus-broker.service.drv building '/nix/store/j20r7071ahjsdb5ayisf1n9iqnr3932k-unit-dbus-broker.service.drv' on nix-store.geninf.io:50051 unit-dbus-broker.service> build-x86-01: building j20r7071ahjsdb5ayisf1n9iqnr3932k-unit-dbus-broker.service.drv building '/nix/store/qdqhj2s8n7j3bzxdg2g2r2sbqmfrvsbj-unit-nix-daemon.service.drv' on nix-store.geninf.io:50051 unit-nix-daemon.service> build-x86-01: building qdqhj2s8n7j3bzxdg2g2r2sbqmfrvsbj-unit-nix-daemon.service.drv building '/nix/store/bicfd279sbmgi4m9457d6iq0dk21sffi-unit-dbus-broker.service.drv' on nix-store.geninf.io:50051 unit-dbus-broker.service> gi-build-x86-02: building bicfd279sbmgi4m9457d6iq0dk21sffi-unit-dbus-broker.service.drv building '/nix/store/mwdfx3kjbjyslpadbp7bnpfd782ascc5-X-Restart-Triggers-dbus-broker.drv' on nix-store.geninf.io:50051 X-Restart-Triggers-dbus-broker> gi-build-x86-02: building mwdfx3kjbjyslpadbp7bnpfd782ascc5-X-Restart-Triggers-dbus-broker.drv building '/nix/store/k2xmddg43wacf94y0kj1bm8xi9j253fp-user-units.drv' on nix-store.geninf.io:50051 user-units> build-x86-01: building k2xmddg43wacf94y0kj1bm8xi9j253fp-user-units.drv building '/nix/store/mf5fsmc9y2ja0dszzbf3ksa49yzsd655-user-units.drv' on nix-store.geninf.io:50051 user-units> build-x86-01: building mf5fsmc9y2ja0dszzbf3ksa49yzsd655-user-units.drv building '/nix/store/72pfb8hzdlbbw40azvz4d7xg5wk2cfh6-system-units.drv' on nix-store.geninf.io:50051 system-units> build-x86-01: building 72pfb8hzdlbbw40azvz4d7xg5wk2cfh6-system-units.drv building '/nix/store/yp37kyddgq3sdpj2n0pzlhqzzmvf4094-system-units.drv' on nix-store.geninf.io:50051 system-units> build-x86-01: building yp37kyddgq3sdpj2n0pzlhqzzmvf4094-system-units.drv building '/nix/store/3rrjbs28qs7i464knrz5a09ghi9mvjh2-unit-dbus-broker.service.drv' on nix-store.geninf.io:50051 unit-dbus-broker.service> gi-build-x86-02: building 3rrjbs28qs7i464knrz5a09ghi9mvjh2-unit-dbus-broker.service.drv building '/nix/store/110rx2dvh1k1gnp540jcqdz19cnj4fgb-unit-dbus-broker.service.drv' on nix-store.geninf.io:50051 unit-dbus-broker.service> gi-build-x86-02: building 110rx2dvh1k1gnp540jcqdz19cnj4fgb-unit-dbus-broker.service.drv building '/nix/store/phsn6n8hwrf0933ba445bp2yglr35x59-system-units.drv' on nix-store.geninf.io:50051 system-units> build-x86-01: building phsn6n8hwrf0933ba445bp2yglr35x59-system-units.drv building '/nix/store/h9csx8whkji0i8agvz0p1662qg97ymnk-user-units.drv' on nix-store.geninf.io:50051 user-units> gi-build-x86-02: building h9csx8whkji0i8agvz0p1662qg97ymnk-user-units.drv building '/nix/store/n0x27j1n4126g5d2zjr1a4v576kfrixc-etc.drv' on nix-store.geninf.io:50051 etc> build-x86-01: building n0x27j1n4126g5d2zjr1a4v576kfrixc-etc.drv building '/nix/store/pgzg9sv89jfnhq7lylj1j9zw9zy59501-etc.drv' on nix-store.geninf.io:50051 etc> build-x86-01: building pgzg9sv89jfnhq7lylj1j9zw9zy59501-etc.drv building '/nix/store/78az11r668iwxnvabj4dzxgav4a2g4pj-etc.drv' on nix-store.geninf.io:50051 etc> build-x86-01: building 78az11r668iwxnvabj4dzxgav4a2g4pj-etc.drv building '/nix/store/n2c2r2c72i8qkylq947q528hrwf7nyn5-activate.drv' on nix-store.geninf.io:50051 activate> build-x86-01: building n2c2r2c72i8qkylq947q528hrwf7nyn5-activate.drv building '/nix/store/62rvlz0hbbvja8h3yvi8llgdnyz992d5-activate.drv' on nix-store.geninf.io:50051 activate> build-x86-01: building 62rvlz0hbbvja8h3yvi8llgdnyz992d5-activate.drv building '/nix/store/i4xnvd8824spxaqpbmgh1ddd6gkdy3i8-activate.drv' on nix-store.geninf.io:50051 activate> build-x86-01: building i4xnvd8824spxaqpbmgh1ddd6gkdy3i8-activate.drv building '/nix/store/28rcr1isj8cwbr4nrz46349ap2r7wdvv-nixos-system-client-test.drv' on nix-store.geninf.io:50051 nixos-system-client-test> build-x86-01: building 28rcr1isj8cwbr4nrz46349ap2r7wdvv-nixos-system-client-test.drv nixos-system-client-test> structuredAttrs is enabled building '/nix/store/02vy7p5i7q3sh0nclhlic4d52xfg3xj4-nixos-system-server-test.drv' on nix-store.geninf.io:50051 nixos-system-server-test> build-x86-01: building 02vy7p5i7q3sh0nclhlic4d52xfg3xj4-nixos-system-server-test.drv nixos-system-server-test> structuredAttrs is enabled building '/nix/store/2d6qdpwszs1dvsffv1yzkql2vgfai1w5-nixos-system-ca-test.drv' on nix-store.geninf.io:50051 nixos-system-ca-test> build-x86-01: building 2d6qdpwszs1dvsffv1yzkql2vgfai1w5-nixos-system-ca-test.drv nixos-system-ca-test> structuredAttrs is enabled building '/nix/store/p2visyhi3l0514srx4x1wb54vnd3wpw2-closure-info.drv' on nix-store.geninf.io:50051 closure-info> build-x86-01: building p2visyhi3l0514srx4x1wb54vnd3wpw2-closure-info.drv closure-info> structuredAttrs is enabled building '/nix/store/zmdjm0z062i62jk4p6nsqmkf1v7zhsqg-closure-info.drv' on nix-store.geninf.io:50051 closure-info> build-x86-01: building zmdjm0z062i62jk4p6nsqmkf1v7zhsqg-closure-info.drv building '/nix/store/diz0sy7lx1yashawn5l3k4z1bf1v1d6y-closure-info.drv' on nix-store.geninf.io:50051 closure-info> build-x86-01: building diz0sy7lx1yashawn5l3k4z1bf1v1d6y-closure-info.drv closure-info> structuredAttrs is enabled closure-info> structuredAttrs is enabled building '/nix/store/cq7djsgb1p80zbfa6iyvdw8vfsr7s558-nixos-test-driver-certificates.drv' on nix-store.geninf.io:50051 nixos-test-driver-certificates> build-x86-01: building cq7djsgb1p80zbfa6iyvdw8vfsr7s558-nixos-test-driver-certificates.drv nixos-test-driver-certificates> Running type check (enable/disable: config.skipTypeCheck) nixos-test-driver-certificates> See https://nixos.org/manual/nixos/stable/#test-opt-skipTypeCheck nixos-test-driver-certificates> Success: no issues found in 1 source file building '/nix/store/57gv211g5adj8zlc9nqmxj017hg5cbfc-container-test-run-certificates.drv' on nix-store.geninf.io:50051 container-test-run-certificates> build-x86-01: building 57gv211g5adj8zlc9nqmxj017hg5cbfc-container-test-run-certificates.drv container-test-run-certificates> additionally exposed symbols: container-test-run-certificates> ca, client, server, container-test-run-certificates> start_all, machines, driver, Machine, wait_for_signal container-test-run-certificates> Starting ca container-test-run-certificates> Starting client container-test-run-certificates> Starting server container-test-run-certificates> ░ Spawning container client on /build/tmpcas72wbp/client. container-test-run-certificates> ░ Spawning container ca on /build/tmpcas72wbp/ca. container-test-run-certificates> ░ Spawning container server on /build/tmpcas72wbp/server. container-test-run-certificates> container-test-run-certificates> <<< NixOS Stage 2 >>> container-test-run-certificates> container-test-run-certificates> booting system configuration /nix/store/da5pjv0b032af441qji6chzixxcfyrb6-nixos-system-ca-test container-test-run-certificates> running activation script... container-test-run-certificates> setting up /etc... container-test-run-certificates> 2: host0@if3: mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000 container-test-run-certificates> link/ether 42:06:76:42:a9:8d brd ff:ff:ff:ff:ff:ff link-netnsid 0 container-test-run-certificates> setting up age secrets... container-test-run-certificates> starting systemd... container-test-run-certificates> systemd 260.5 running in system mode (+PAM +AUDIT -SELINUX +APPARMOR +IMA +IPE +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS +FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 +PWQUALITY +P11KIT +QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD +BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP +LIBARCHIVE) container-test-run-certificates> Detected virtualization systemd-nspawn. container-test-run-certificates> Detected architecture x86-64. container-test-run-certificates> Detected first boot. container-test-run-certificates> Initializing machine ID from container UUID. container-test-run-certificates> Applying preset policy. container-test-run-certificates> Populated /etc with preset unit settings. container-test-run-certificates> Queued start job for default target Multi-User System. container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> <<< Welcome to NixOS test (x86_64) - console >>> container-test-run-certificates> + systemd-run /bin/sh -c '/nix/store/bhv6xyvqw6gjs3j488gi1z6wdv18bdpa-coreutils-9.11/bin/sleep 999999999 && echo eb92be6a-5fca-4e10-9d0c-73c1a6da52c6' container-test-run-certificates> Running as unit: run-p447-i4981994.service; invocation ID: 566eb6685927420f80d167727c015ed5 container-test-run-certificates> To attach to container ca run on the same machine that runs the test: container-test-run-certificates> sudo nsenter --user --target $(\pgrep -f '^/bin/sh.*eb92be6a-5fca-4e10-9d0c-73c1a6da52c6') --mount --uts --ipc --net --pid --cgroup /bin/sh -c bash container-test-run-certificates> container-test-run-certificates> To inject external network and continue test, run: container-test-run-certificates> sudo /nix/store/jy00n3jp5xj8s40n1fbldmkcr5n7avxc-python3-3.13.15/bin/python3.13 /nix/store/410clzrdvksxqd6ldmmbsf7z00208kgj-test-driver-0.0.1/lib/python3.13/site-packages/test_driver/inject_network.py eb92be6a-5fca-4e10-9d0c-73c1a6da52c6 container-test-run-certificates> container-test-run-certificates> <<< NixOS Stage 2 >>> container-test-run-certificates> container-test-run-certificates> booting system configuration /nix/store/zbf6yijvs1kc7yx58qn59mp1486lpvrm-nixos-system-client-test container-test-run-certificates> running activation script... container-test-run-certificates> setting up /etc... container-test-run-certificates> 2: host0@if4: mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000 container-test-run-certificates> link/ether 2a:42:35:28:b1:2f brd ff:ff:ff:ff:ff:ff link-netnsid 0 container-test-run-certificates> setting up age secrets... container-test-run-certificates> starting systemd... container-test-run-certificates> systemd 260.5 running in system mode (+PAM +AUDIT -SELINUX +APPARMOR +IMA +IPE +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS +FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 +PWQUALITY +P11KIT +QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD +BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP +LIBARCHIVE) container-test-run-certificates> Detected virtualization systemd-nspawn. container-test-run-certificates> Detected architecture x86-64. container-test-run-certificates> Detected first boot. container-test-run-certificates> Initializing machine ID from container UUID. container-test-run-certificates> Applying preset policy. container-test-run-certificates> Populated /etc with preset unit settings. container-test-run-certificates> Queued start job for default target Multi-User System. container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> <<< Welcome to NixOS test (x86_64) - console >>> container-test-run-certificates> + systemd-run /bin/sh -c '/nix/store/bhv6xyvqw6gjs3j488gi1z6wdv18bdpa-coreutils-9.11/bin/sleep 999999999 && echo 28c12e4f-06a7-497e-8cd8-bc64a68f8e58' container-test-run-certificates> Running as unit: run-p304-i4982005.service; invocation ID: c4d7d67979f64ff18885ab348d2c951c container-test-run-certificates> To attach to container client run on the same machine that runs the test: container-test-run-certificates> sudo nsenter --user --target $(\pgrep -f '^/bin/sh.*28c12e4f-06a7-497e-8cd8-bc64a68f8e58') --mount --uts --ipc --net --pid --cgroup /bin/sh -c bash container-test-run-certificates> container-test-run-certificates> To inject external network and continue test, run: container-test-run-certificates> sudo /nix/store/jy00n3jp5xj8s40n1fbldmkcr5n7avxc-python3-3.13.15/bin/python3.13 /nix/store/410clzrdvksxqd6ldmmbsf7z00208kgj-test-driver-0.0.1/lib/python3.13/site-packages/test_driver/inject_network.py 28c12e4f-06a7-497e-8cd8-bc64a68f8e58 container-test-run-certificates> container-test-run-certificates> <<< NixOS Stage 2 >>> container-test-run-certificates> container-test-run-certificates> booting system configuration /nix/store/bx7l95ivdv7zmihzq8jpldkbima8p3l4-nixos-system-server-test container-test-run-certificates> running activation script... container-test-run-certificates> setting up /etc... container-test-run-certificates> 2: host0@if5: mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000 container-test-run-certificates> link/ether be:aa:dd:39:86:e7 brd ff:ff:ff:ff:ff:ff link-netnsid 0 container-test-run-certificates> setting up age secrets... container-test-run-certificates> starting systemd... container-test-run-certificates> systemd 260.5 running in system mode (+PAM +AUDIT -SELINUX +APPARMOR +IMA +IPE +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS +FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 +PWQUALITY +P11KIT +QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD +BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP +LIBARCHIVE) container-test-run-certificates> Detected virtualization systemd-nspawn. container-test-run-certificates> Detected architecture x86-64. container-test-run-certificates> Detected first boot. container-test-run-certificates> Initializing machine ID from container UUID. container-test-run-certificates> Applying preset policy. container-test-run-certificates> Populated /etc with preset unit settings. container-test-run-certificates> Queued start job for default target Multi-User System. container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> <<< Welcome to NixOS test (x86_64) - console >>> container-test-run-certificates> + systemd-run /bin/sh -c '/nix/store/bhv6xyvqw6gjs3j488gi1z6wdv18bdpa-coreutils-9.11/bin/sleep 999999999 && echo e65d73ad-2363-490f-9fd7-58ae8d35983f' container-test-run-certificates> Running as unit: run-p386-i4982015.service; invocation ID: f81df4c177fb43b3999bf03846ff5dba container-test-run-certificates> To attach to container server run on the same machine that runs the test: container-test-run-certificates> sudo nsenter --user --target $(\pgrep -f '^/bin/sh.*e65d73ad-2363-490f-9fd7-58ae8d35983f') --mount --uts --ipc --net --pid --cgroup /bin/sh -c bash container-test-run-certificates> container-test-run-certificates> To inject external network and continue test, run: container-test-run-certificates> sudo /nix/store/jy00n3jp5xj8s40n1fbldmkcr5n7avxc-python3-3.13.15/bin/python3.13 /nix/store/410clzrdvksxqd6ldmmbsf7z00208kgj-test-driver-0.0.1/lib/python3.13/site-packages/test_driver/inject_network.py e65d73ad-2363-490f-9fd7-58ae8d35983f container-test-run-certificates> + systemctl restart acme-order-renew-ca.foo.service container-test-run-certificates> + systemctl restart acme-test.foo.service container-test-run-certificates> client: waiting for success: curl -v https://test.foo container-test-run-certificates> + curl -v https://test.foo container-test-run-certificates> * Host test.foo:443 was resolved. container-test-run-certificates> * IPv6: (none) container-test-run-certificates> * IPv4: 192.168.1.3 container-test-run-certificates> * Trying 192.168.1.3:443... container-test-run-certificates> * ALPN: curl offers h2,http/1.1 container-test-run-certificates> } [5 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Client hello (1): container-test-run-certificates> } [1552 bytes data] container-test-run-certificates> * SSL Trust Anchors: container-test-run-certificates> * OpenSSL default paths (fallback) container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Server hello (2): container-test-run-certificates> { [1210 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS change cipher, Change cipher spec (1): container-test-run-certificates> { [1 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): container-test-run-certificates> { [19 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Certificate (11): container-test-run-certificates> { [1009 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, CERT verify (15): container-test-run-certificates> { [111 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Finished (20): container-test-run-certificates> { [52 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): container-test-run-certificates> } [1 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Finished (20): container-test-run-certificates> } [52 bytes data] container-test-run-certificates> * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey container-test-run-certificates> * ALPN: server accepted h2 container-test-run-certificates> * Server certificate: container-test-run-certificates> * subject: CN=test.foo container-test-run-certificates> * start date: Oct 20 20:11:40 2026 GMT container-test-run-certificates> * expire date: Nov 19 20:11:40 2028 GMT container-test-run-certificates> * issuer: CN=minica root ca 49318e container-test-run-certificates> * Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * subjectAltName: "test.foo" matches cert's "test.foo" container-test-run-certificates> * OpenSSL verify result: 13 container-test-run-certificates> * SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> * closing connection #0 container-test-run-certificates> curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> More details here: https://curl.se/docs/sslcerts.html container-test-run-certificates> container-test-run-certificates> curl failed to verify the legitimacy of the server and therefore could not container-test-run-certificates> establish a secure connection to it. To learn more about this situation and container-test-run-certificates> how to fix it, please visit the webpage mentioned above. container-test-run-certificates> + curl -v https://test.foo container-test-run-certificates> * Host test.foo:443 was resolved. container-test-run-certificates> * IPv6: (none) container-test-run-certificates> * IPv4: 192.168.1.3 container-test-run-certificates> * Trying 192.168.1.3:443... container-test-run-certificates> * ALPN: curl offers h2,http/1.1 container-test-run-certificates> } [5 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Client hello (1): container-test-run-certificates> } [1552 bytes data] container-test-run-certificates> * SSL Trust Anchors: container-test-run-certificates> * OpenSSL default paths (fallback) container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Server hello (2): container-test-run-certificates> { [1210 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS change cipher, Change cipher spec (1): container-test-run-certificates> { [1 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): container-test-run-certificates> { [19 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Certificate (11): container-test-run-certificates> { [1009 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, CERT verify (15): container-test-run-certificates> { [111 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Finished (20): container-test-run-certificates> { [52 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): container-test-run-certificates> } [1 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Finished (20): container-test-run-certificates> } [52 bytes data] container-test-run-certificates> * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey container-test-run-certificates> * ALPN: server accepted h2 container-test-run-certificates> * Server certificate: container-test-run-certificates> * subject: CN=test.foo container-test-run-certificates> * start date: Oct 20 20:11:40 2026 GMT container-test-run-certificates> * expire date: Nov 19 20:11:40 2028 GMT container-test-run-certificates> * issuer: CN=minica root ca 49318e container-test-run-certificates> * Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * subjectAltName: "test.foo" matches cert's "test.foo" container-test-run-certificates> * OpenSSL verify result: 13 container-test-run-certificates> * SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> * closing connection #0 container-test-run-certificates> curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> More details here: https://curl.se/docs/sslcerts.html container-test-run-certificates> container-test-run-certificates> curl failed to verify the legitimacy of the server and therefore could not container-test-run-certificates> establish a secure connection to it. To learn more about this situation and container-test-run-certificates> how to fix it, please visit the webpage mentioned above. container-test-run-certificates> + curl -v https://test.foo container-test-run-certificates> * Host test.foo:443 was resolved. container-test-run-certificates> * IPv6: (none) container-test-run-certificates> * IPv4: 192.168.1.3 container-test-run-certificates> * Trying 192.168.1.3:443... container-test-run-certificates> * ALPN: curl offers h2,http/1.1 container-test-run-certificates> } [5 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Client hello (1): container-test-run-certificates> } [1552 bytes data] container-test-run-certificates> * SSL Trust Anchors: container-test-run-certificates> * OpenSSL default paths (fallback) container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Server hello (2): container-test-run-certificates> { [1210 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS change cipher, Change cipher spec (1): container-test-run-certificates> { [1 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): container-test-run-certificates> { [19 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Certificate (11): container-test-run-certificates> { [933 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, CERT verify (15): container-test-run-certificates> { [79 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Finished (20): container-test-run-certificates> { [52 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): container-test-run-certificates> } [1 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Finished (20): container-test-run-certificates> } [52 bytes data] container-test-run-certificates> * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey container-test-run-certificates> * ALPN: server accepted h2 container-test-run-certificates> * Server certificate: container-test-run-certificates> * subject: CN=test.foo container-test-run-certificates> * start date: Oct 20 20:10:51 2026 GMT container-test-run-certificates> * expire date: Jan 18 20:11:51 2027 GMT container-test-run-certificates> * issuer: CN=Clan Intermediate CA container-test-run-certificates> * Certificate level 0: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA256 container-test-run-certificates> * Certificate level 1: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA256 container-test-run-certificates> * Certificate level 2: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA256 container-test-run-certificates> * subjectAltName: "test.foo" matches cert's "test.foo" container-test-run-certificates> * OpenSSL verify result: 0 container-test-run-certificates> * SSL certificate verified via OpenSSL. container-test-run-certificates> * Established connection to test.foo (192.168.1.3 port 443) from 192.168.1.2 port 59764 container-test-run-certificates> % Total % Received % Xferd Average Speed Time Time Time Current container-test-run-certificates> Dload Upload Total Spent Left Speed container-test-run-certificates> 0 0 0 0 0 0 0 0 0* using HTTP/2 container-test-run-certificates> * [HTTP/2] [1] OPENED stream for https://test.foo/ container-test-run-certificates> * [HTTP/2] [1] [:method: GET] container-test-run-certificates> * [HTTP/2] [1] [:scheme: https] container-test-run-certificates> * [HTTP/2] [1] [:authority: test.foo] container-test-run-certificates> * [HTTP/2] [1] [:path: /] container-test-run-certificates> * [HTTP/2] [1] [user-agent: curl/8.22.0] container-test-run-certificates> * [HTTP/2] [1] [accept: */*] container-test-run-certificates> } [5 bytes data] container-test-run-certificates> > GET / HTTP/2 container-test-run-certificates> > Host: test.foo container-test-run-certificates> > User-Agent: curl/8.22.0 container-test-run-certificates> > Accept: */* container-test-run-certificates> > container-test-run-certificates> * Request completely sent off container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4): container-test-run-certificates> { [265 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4): container-test-run-certificates> { [265 bytes data] container-test-run-certificates> < HTTP/2 200 container-test-run-certificates> < server: nginx container-test-run-certificates> < date: Tue, 20 Oct 2026 20:11:53 GMT container-test-run-certificates> < content-type: application/octet-stream container-test-run-certificates> < content-length: 20 container-test-run-certificates> < content-type: text/plain container-test-run-certificates> < container-test-run-certificates> { [5 bytes data] container-test-run-certificates> 100 20 100 20 0 0 1776 0 0 container-test-run-certificates> * Connection #0 to host test.foo:443 left intact container-test-run-certificates> (finished: waiting for success: curl -v https://test.foo, in 2.06 seconds) container-test-run-certificates> + openssl s_client -connect test.foo:443 -servername test.foo container-test-run-certificates> + openssl x509 -text -noout container-test-run-certificates> Certificate: container-test-run-certificates> Data: container-test-run-certificates> Version: 3 (0x2) container-test-run-certificates> Serial Number: container-test-run-certificates> e3:eb:d4:cc:66:54:03:7e:c4:0e:77:35:3b:99:f3:ed container-test-run-certificates> Signature Algorithm: ecdsa-with-SHA256 container-test-run-certificates> Issuer: CN=Clan Intermediate CA container-test-run-certificates> Validity container-test-run-certificates> Not Before: Oct 20 20:10:51 2026 GMT container-test-run-certificates> Not After : Jan 18 20:11:51 2027 GMT container-test-run-certificates> Subject: CN=test.foo container-test-run-certificates> Subject Public Key Info: container-test-run-certificates> Public Key Algorithm: id-ecPublicKey container-test-run-certificates> Public-Key: (256 bit) container-test-run-certificates> pub: container-test-run-certificates> 04:83:9b:01:d3:24:83:6c:10:73:0a:a2:0c:65:56: container-test-run-certificates> 29:77:0f:63:24:c6:3a:8d:5a:66:25:c4:bd:75:02: container-test-run-certificates> 39:5b:68:53:a0:af:99:2b:9a:1e:61:00:d6:36:09: container-test-run-certificates> e7:ef:49:19:f4:94:5a:fd:62:54:96:c3:23:47:f0: container-test-run-certificates> 6b:38:1a:0c:2e container-test-run-certificates> ASN1 OID: prime256v1 container-test-run-certificates> NIST CURVE: P-256 container-test-run-certificates> X509v3 extensions: container-test-run-certificates> X509v3 Key Usage: critical container-test-run-certificates> Digital Signature container-test-run-certificates> X509v3 Extended Key Usage: container-test-run-certificates> TLS Web Server Authentication, TLS Web Client Authentication container-test-run-certificates> X509v3 Subject Key Identifier: container-test-run-certificates> 84:2A:46:82:1F:C1:4A:A8:3D:AC:81:14:50:9A:C0:44:92:AE:78:E8 container-test-run-certificates> X509v3 Authority Key Identifier: container-test-run-certificates> AF:3D:FB:7F:3A:E2:22:0C:FC:17:43:CF:2B:14:28:42:1E:EC:D0:EF container-test-run-certificates> X509v3 Subject Alternative Name: container-test-run-certificates> DNS:test.foo container-test-run-certificates> 1.3.6.1.4.1.37476.9000.64.1: container-test-run-certificates> 0......acme.. container-test-run-certificates> Signature Algorithm: ecdsa-with-SHA256 container-test-run-certificates> Signature Value: container-test-run-certificates> 30:46:02:21:00:ce:7b:37:43:b3:9f:a3:e8:c7:3f:31:58:17: container-test-run-certificates> 91:30:2a:4b:d1:d8:6f:06:8e:ee:3f:e3:33:1a:71:49:0d:33: container-test-run-certificates> c7:02:21:00:b5:a8:3f:c1:1a:eb:e2:33:c6:e0:b4:82:66:bb: container-test-run-certificates> 53:e8:3b:85:8e:c3:56:14:85:64:94:3d:42:ef:98:27:40:fa container-test-run-certificates> Container ca terminated by signal KILL. container-test-run-certificates> Container client terminated by signal KILL. container-test-run-certificates> Container server terminated by signal KILL.