these 35 derivations will be built: /nix/store/rn3651hlmqw2rfspkbh4k4hwcvr80mh6-system-path.drv /nix/store/ymv5d88aalyn04nb1m8jz6mym1xlh6in-dbus-1.drv /nix/store/bsajx2011h0l9j8ca3qwh8ldd55q7fr6-X-Restart-Triggers-dbus-broker.drv /nix/store/7a0dlkyj3rr8lyyman0jbfvj1iz2n5dn-unit-dbus-broker.service.drv /nix/store/43lchq16lh6svm5qp4iz9isldf6ghjyy-system-units.drv /nix/store/1s84dja1g88aa0bsgkr6z5w5wd3gq0vx-unit-dbus-broker.service.drv /nix/store/gyv7sj97d6xzjbigiaa9pm9sv388c2g2-user-units.drv /nix/store/mxddq30xzp6ccr47j2q22r9i19pzjaz7-etc.drv /nix/store/q6b16iz1xj001k8bhck9b2p65sz70yq6-activate.drv /nix/store/0xc5jpcjgg2xsslai7jw81fd7d41v27i-nixos-system-server-test.drv /nix/store/3l92wgagprn7sgkrf76h3b3iijq8n68s-closure-info.drv /nix/store/dk69bx4gx9b6ckmfn2g9jbwrf5ymn4gk-system-path.drv /nix/store/kqc9gj138fphb4yfbva8nbcsii93kw6b-dbus-1.drv /nix/store/4ihszq2xjdhdpq75jj1djizg8zrg7pcf-X-Restart-Triggers-dbus-broker.drv /nix/store/vvl8jsharfixmzydbcshzp1qdx4kgi85-system-path.drv /nix/store/81d8j1s1jqfd94zqchjszm7xqnbva3rw-dbus-1.drv /nix/store/b8h711g3jb7d8s94w96g4qwi1glvibjq-X-Restart-Triggers-dbus-broker.drv /nix/store/i4gkaqj0x2xp8n1z6alg1nsyvhgvx1sr-unit-dbus-broker.service.drv /nix/store/mn4gzzczqa04ialmvjklv5q8m2vgynsc-system-units.drv /nix/store/r63f5gyfjd2rhp0gp8fqnydlgw66z83y-unit-dbus-broker.service.drv /nix/store/zidisygd300x8pkcyl9h0c2bf4rafqz9-user-units.drv /nix/store/7bdz72l6szmigizgcl9i4pq3f70kfr6d-etc.drv /nix/store/7x1s9s90yv7zl4nn7sf7y7nx6m2a6qml-unit-dbus-broker.service.drv /nix/store/n7f67xxwb8idvsz934k243zb7fafg6vw-activate.drv /nix/store/p0fz8p79yxgrwafwqcwh7cwvchx8yjgw-nixos-system-ca-test.drv /nix/store/w2rwikwhf2k9rnpih9b378i64ip1fb28-closure-info.drv /nix/store/kx2d3a5hlhcvy5v4p50ax9pbmpijn9s9-system-units.drv /nix/store/qfwk1ddhgsi5f305dsq4445w7mvwfxfz-unit-dbus-broker.service.drv /nix/store/pwlzn5dmx2axm1pcff2dpv33a3gby90a-user-units.drv /nix/store/qicamyvjc4g0rk31r2jad9znmlgvc7dh-etc.drv /nix/store/dl8s1lf8jb35daara3fdgswyzsa5n1wr-activate.drv /nix/store/xnymm2vvgnrylxffkbpyb8ily3k4hnbp-nixos-system-client-test.drv /nix/store/wbqf1vfragrzg9g0jpms6hcih862mj47-closure-info.drv /nix/store/b3s7xlj0f0wcab9h7vqi0x3p5c7hzdzp-nixos-test-driver-certificates.drv /nix/store/dcp2z54v7aj9lsl940davnkxzcwjhx1j-container-test-run-certificates.drv building '/nix/store/dk69bx4gx9b6ckmfn2g9jbwrf5ymn4gk-system-path.drv' building '/nix/store/rn3651hlmqw2rfspkbh4k4hwcvr80mh6-system-path.drv' building '/nix/store/vvl8jsharfixmzydbcshzp1qdx4kgi85-system-path.drv' system-path> structuredAttrs is enabled system-path> created 1822 symlinks in user environment system-path> structuredAttrs is enabled system-path> structuredAttrs is enabled system-path> created 1822 symlinks in user environment system-path> created 1822 symlinks in user environment building '/nix/store/kqc9gj138fphb4yfbva8nbcsii93kw6b-dbus-1.drv' building '/nix/store/81d8j1s1jqfd94zqchjszm7xqnbva3rw-dbus-1.drv' building '/nix/store/ymv5d88aalyn04nb1m8jz6mym1xlh6in-dbus-1.drv' building '/nix/store/4ihszq2xjdhdpq75jj1djizg8zrg7pcf-X-Restart-Triggers-dbus-broker.drv' building '/nix/store/b8h711g3jb7d8s94w96g4qwi1glvibjq-X-Restart-Triggers-dbus-broker.drv' building '/nix/store/bsajx2011h0l9j8ca3qwh8ldd55q7fr6-X-Restart-Triggers-dbus-broker.drv' building '/nix/store/7x1s9s90yv7zl4nn7sf7y7nx6m2a6qml-unit-dbus-broker.service.drv' building '/nix/store/qfwk1ddhgsi5f305dsq4445w7mvwfxfz-unit-dbus-broker.service.drv' unit-dbus-broker.service> structuredAttrs is enabled building '/nix/store/1s84dja1g88aa0bsgkr6z5w5wd3gq0vx-unit-dbus-broker.service.drv' building '/nix/store/7a0dlkyj3rr8lyyman0jbfvj1iz2n5dn-unit-dbus-broker.service.drv' building '/nix/store/i4gkaqj0x2xp8n1z6alg1nsyvhgvx1sr-unit-dbus-broker.service.drv' building '/nix/store/r63f5gyfjd2rhp0gp8fqnydlgw66z83y-unit-dbus-broker.service.drv' unit-dbus-broker.service> structuredAttrs is enabled unit-dbus-broker.service> structuredAttrs is enabled unit-dbus-broker.service> structuredAttrs is enabled unit-dbus-broker.service> structuredAttrs is enabled building '/nix/store/kx2d3a5hlhcvy5v4p50ax9pbmpijn9s9-system-units.drv' unit-dbus-broker.service> structuredAttrs is enabled building '/nix/store/43lchq16lh6svm5qp4iz9isldf6ghjyy-system-units.drv' building '/nix/store/mn4gzzczqa04ialmvjklv5q8m2vgynsc-system-units.drv' building '/nix/store/gyv7sj97d6xzjbigiaa9pm9sv388c2g2-user-units.drv' building '/nix/store/pwlzn5dmx2axm1pcff2dpv33a3gby90a-user-units.drv' building '/nix/store/zidisygd300x8pkcyl9h0c2bf4rafqz9-user-units.drv' building '/nix/store/qicamyvjc4g0rk31r2jad9znmlgvc7dh-etc.drv' building '/nix/store/mxddq30xzp6ccr47j2q22r9i19pzjaz7-etc.drv' building '/nix/store/7bdz72l6szmigizgcl9i4pq3f70kfr6d-etc.drv' building '/nix/store/dl8s1lf8jb35daara3fdgswyzsa5n1wr-activate.drv' building '/nix/store/q6b16iz1xj001k8bhck9b2p65sz70yq6-activate.drv' building '/nix/store/xnymm2vvgnrylxffkbpyb8ily3k4hnbp-nixos-system-client-test.drv' building '/nix/store/n7f67xxwb8idvsz934k243zb7fafg6vw-activate.drv' building '/nix/store/0xc5jpcjgg2xsslai7jw81fd7d41v27i-nixos-system-server-test.drv' nixos-system-client-test> structuredAttrs is enabled building '/nix/store/wbqf1vfragrzg9g0jpms6hcih862mj47-closure-info.drv' nixos-system-server-test> structuredAttrs is enabled building '/nix/store/p0fz8p79yxgrwafwqcwh7cwvchx8yjgw-nixos-system-ca-test.drv' closure-info> structuredAttrs is enabled building '/nix/store/3l92wgagprn7sgkrf76h3b3iijq8n68s-closure-info.drv' nixos-system-ca-test> structuredAttrs is enabled closure-info> structuredAttrs is enabled building '/nix/store/w2rwikwhf2k9rnpih9b378i64ip1fb28-closure-info.drv' closure-info> structuredAttrs is enabled building '/nix/store/b3s7xlj0f0wcab9h7vqi0x3p5c7hzdzp-nixos-test-driver-certificates.drv' nixos-test-driver-certificates> Running type check (enable/disable: config.skipTypeCheck) nixos-test-driver-certificates> See https://nixos.org/manual/nixos/stable/#test-opt-skipTypeCheck nixos-test-driver-certificates> Success: no issues found in 1 source file building '/nix/store/dcp2z54v7aj9lsl940davnkxzcwjhx1j-container-test-run-certificates.drv' on 'ssh-ng://builder@build-x86-01.clan.lol' building '/nix/store/dcp2z54v7aj9lsl940davnkxzcwjhx1j-container-test-run-certificates.drv' container-test-run-certificates> additionally exposed symbols: container-test-run-certificates> ca, client, server, container-test-run-certificates> start_all, machines, driver, Machine, wait_for_signal container-test-run-certificates> Starting ca container-test-run-certificates> Starting client container-test-run-certificates> Starting server container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> <<< NixOS Stage 2 >>> container-test-run-certificates> container-test-run-certificates> booting system configuration /nix/store/f52x9q90asyri91v1xzv14lslkpy0b58-nixos-system-ca-test container-test-run-certificates> running activation script... container-test-run-certificates> setting up /etc... container-test-run-certificates> 2: host0@if3: mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000 container-test-run-certificates> link/ether 42:06:76:42:a9:8d brd ff:ff:ff:ff:ff:ff link-netnsid 0 container-test-run-certificates> setting up age secrets... container-test-run-certificates> starting systemd... container-test-run-certificates> systemd 261.1 running in system mode (+PAM +AUDIT -SELINUX +APPARMOR +IMA +IPE +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS +FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 +PWQUALITY +P11KIT +QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD +BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP +LIBARCHIVE) container-test-run-certificates> Detected virtualization systemd-nspawn. container-test-run-certificates> Detected architecture x86-64. container-test-run-certificates> Detected first boot. container-test-run-certificates> Initializing machine ID from container UUID. container-test-run-certificates> Applying preset policy. container-test-run-certificates> Populated /etc with preset unit settings. container-test-run-certificates> Queued start job for default target Multi-User System. container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> <<< Welcome to NixOS test (x86_64) - console >>> container-test-run-certificates> + systemd-run /bin/sh -c '/nix/store/di26b1kkbammy0sj70nq5qzvfrh78wxl-coreutils-9.11/bin/sleep 999999999 && echo 2174c319-7777-4ead-8dee-aa0bb570c853' container-test-run-certificates> Running as unit: run-p448-i67959562.service; invocation ID: c3091f74a1f84c5cac1de2a56402f90f container-test-run-certificates> To attach to container ca run on the same machine that runs the test: container-test-run-certificates> sudo nsenter --user --target $(\pgrep -f '^/bin/sh.*2174c319-7777-4ead-8dee-aa0bb570c853') --mount --uts --ipc --net --pid --cgroup /bin/sh -c bash container-test-run-certificates> container-test-run-certificates> To inject external network and continue test, run: container-test-run-certificates> sudo /nix/store/gxzhl7aaiid7zp3y47jqqiq7zg5mqpwp-python3-3.14.6/bin/python3.14 /nix/store/s7xzzws7ckb1gzm2fpvx0j66bkbf1wws-test-driver-0.0.1/lib/python3.14/site-packages/test_driver/inject_network.py 2174c319-7777-4ead-8dee-aa0bb570c853 container-test-run-certificates> container-test-run-certificates> <<< NixOS Stage 2 >>> container-test-run-certificates> container-test-run-certificates> booting system configuration /nix/store/zaifgh4y6xpnlm959ihn6rnm36ay1pqr-nixos-system-client-test container-test-run-certificates> running activation script... container-test-run-certificates> setting up /etc... container-test-run-certificates> 2: host0@if4: mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000 container-test-run-certificates> link/ether 2a:42:35:28:b1:2f brd ff:ff:ff:ff:ff:ff link-netnsid 0 container-test-run-certificates> setting up age secrets... container-test-run-certificates> starting systemd... container-test-run-certificates> systemd 261.1 running in system mode (+PAM +AUDIT -SELINUX +APPARMOR +IMA +IPE +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS +FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 +PWQUALITY +P11KIT +QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD +BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP +LIBARCHIVE) container-test-run-certificates> Detected virtualization systemd-nspawn. container-test-run-certificates> Detected architecture x86-64. container-test-run-certificates> Detected first boot. container-test-run-certificates> Initializing machine ID from container UUID. container-test-run-certificates> Applying preset policy. container-test-run-certificates> Populated /etc with preset unit settings. container-test-run-certificates> Queued start job for default target Multi-User System. container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> <<< Welcome to NixOS test (x86_64) - console >>> container-test-run-certificates> + systemd-run /bin/sh -c '/nix/store/di26b1kkbammy0sj70nq5qzvfrh78wxl-coreutils-9.11/bin/sleep 999999999 && echo 8d2e9c90-c10a-48b4-b7b0-347243e62322' container-test-run-certificates> Running as unit: run-p305-i67959565.service; invocation ID: 43f34b29cb7948819f06394693a09293 container-test-run-certificates> To attach to container client run on the same machine that runs the test: container-test-run-certificates> sudo nsenter --user --target $(\pgrep -f '^/bin/sh.*8d2e9c90-c10a-48b4-b7b0-347243e62322') --mount --uts --ipc --net --pid --cgroup /bin/sh -c bash container-test-run-certificates> container-test-run-certificates> To inject external network and continue test, run: container-test-run-certificates> sudo /nix/store/gxzhl7aaiid7zp3y47jqqiq7zg5mqpwp-python3-3.14.6/bin/python3.14 /nix/store/s7xzzws7ckb1gzm2fpvx0j66bkbf1wws-test-driver-0.0.1/lib/python3.14/site-packages/test_driver/inject_network.py 8d2e9c90-c10a-48b4-b7b0-347243e62322 container-test-run-certificates> container-test-run-certificates> <<< NixOS Stage 2 >>> container-test-run-certificates> container-test-run-certificates> booting system configuration /nix/store/dlk5r8b6f3prl6bmmq9hp08d5pjycnyn-nixos-system-server-test container-test-run-certificates> running activation script... container-test-run-certificates> setting up /etc... container-test-run-certificates> 2: host0@if5: mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000 container-test-run-certificates> link/ether be:aa:dd:39:86:e7 brd ff:ff:ff:ff:ff:ff link-netnsid 0 container-test-run-certificates> setting up age secrets... container-test-run-certificates> starting systemd... container-test-run-certificates> systemd 261.1 running in system mode (+PAM +AUDIT -SELINUX +APPARMOR +IMA +IPE +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS +FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 +PWQUALITY +P11KIT +QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD +BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP +LIBARCHIVE) container-test-run-certificates> Detected virtualization systemd-nspawn. container-test-run-certificates> Detected architecture x86-64. container-test-run-certificates> Detected first boot. container-test-run-certificates> Initializing machine ID from container UUID. container-test-run-certificates> Applying preset policy. container-test-run-certificates> Populated /etc with preset unit settings. container-test-run-certificates> Queued start job for default target Multi-User System. container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> <<< Welcome to NixOS test (x86_64) - console >>> container-test-run-certificates> + systemd-run /bin/sh -c '/nix/store/di26b1kkbammy0sj70nq5qzvfrh78wxl-coreutils-9.11/bin/sleep 999999999 && echo c83368d1-2620-4d9e-9507-b25882452f68' container-test-run-certificates> Running as unit: run-p386-i67959568.service; invocation ID: d9a47e27a55a4d75a084ec4d921c7b0e container-test-run-certificates> To attach to container server run on the same machine that runs the test: container-test-run-certificates> sudo nsenter --user --target $(\pgrep -f '^/bin/sh.*c83368d1-2620-4d9e-9507-b25882452f68') --mount --uts --ipc --net --pid --cgroup /bin/sh -c bash container-test-run-certificates> container-test-run-certificates> To inject external network and continue test, run: container-test-run-certificates> sudo /nix/store/gxzhl7aaiid7zp3y47jqqiq7zg5mqpwp-python3-3.14.6/bin/python3.14 /nix/store/s7xzzws7ckb1gzm2fpvx0j66bkbf1wws-test-driver-0.0.1/lib/python3.14/site-packages/test_driver/inject_network.py c83368d1-2620-4d9e-9507-b25882452f68 container-test-run-certificates> + systemctl restart acme-order-renew-ca.foo.service container-test-run-certificates> + systemctl restart acme-test.foo.service container-test-run-certificates> client: waiting for success: curl -v https://test.foo container-test-run-certificates> + curl -v https://test.foo container-test-run-certificates> * Host test.foo:443 was resolved. container-test-run-certificates> * IPv6: (none) container-test-run-certificates> * IPv4: 192.168.1.3 container-test-run-certificates> * Trying 192.168.1.3:443... container-test-run-certificates> * ALPN: curl offers h2,http/1.1 container-test-run-certificates> } [5 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Client hello (1): container-test-run-certificates> } [1552 bytes data] container-test-run-certificates> * SSL Trust Anchors: container-test-run-certificates> * OpenSSL default paths (fallback) container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Server hello (2): container-test-run-certificates> { [1210 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS change cipher, Change cipher spec (1): container-test-run-certificates> { [1 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): container-test-run-certificates> { [19 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Certificate (11): container-test-run-certificates> { [1010 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, CERT verify (15): container-test-run-certificates> { [111 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Finished (20): container-test-run-certificates> { [52 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): container-test-run-certificates> } [1 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Finished (20): container-test-run-certificates> } [52 bytes data] container-test-run-certificates> * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey container-test-run-certificates> * ALPN: server accepted h2 container-test-run-certificates> * Server certificate: container-test-run-certificates> * subject: CN=test.foo container-test-run-certificates> * start date: Aug 10 10:11:03 2026 GMT container-test-run-certificates> * expire date: Sep 9 10:11:03 2028 GMT container-test-run-certificates> * issuer: CN=minica root ca 7ab8c3 container-test-run-certificates> * Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * subjectAltName: "test.foo" matches cert's "test.foo" container-test-run-certificates> * OpenSSL verify result: 13 container-test-run-certificates> * SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> * closing connection #0 container-test-run-certificates> curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> More details here: https://curl.se/docs/sslcerts.html container-test-run-certificates> container-test-run-certificates> curl failed to verify the legitimacy of the server and therefore could not container-test-run-certificates> establish a secure connection to it. To learn more about this situation and container-test-run-certificates> how to fix it, please visit the webpage mentioned above. container-test-run-certificates> + curl -v https://test.foo container-test-run-certificates> * Host test.foo:443 was resolved. container-test-run-certificates> * IPv6: (none) container-test-run-certificates> * IPv4: 192.168.1.3 container-test-run-certificates> * Trying 192.168.1.3:443... container-test-run-certificates> * ALPN: curl offers h2,http/1.1 container-test-run-certificates> } [5 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Client hello (1): container-test-run-certificates> } [1552 bytes data] container-test-run-certificates> * SSL Trust Anchors: container-test-run-certificates> * OpenSSL default paths (fallback) container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Server hello (2): container-test-run-certificates> { [1210 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS change cipher, Change cipher spec (1): container-test-run-certificates> { [1 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): container-test-run-certificates> { [19 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Certificate (11): container-test-run-certificates> { [1010 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, CERT verify (15): container-test-run-certificates> { [110 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Finished (20): container-test-run-certificates> { [52 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): container-test-run-certificates> } [1 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Finished (20): container-test-run-certificates> } [52 bytes data] container-test-run-certificates> * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey container-test-run-certificates> * ALPN: server accepted h2 container-test-run-certificates> * Server certificate: container-test-run-certificates> * subject: CN=test.foo container-test-run-certificates> * start date: Aug 10 10:11:03 2026 GMT container-test-run-certificates> * expire date: Sep 9 10:11:03 2028 GMT container-test-run-certificates> * issuer: CN=minica root ca 7ab8c3 container-test-run-certificates> * Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * subjectAltName: "test.foo" matches cert's "test.foo" container-test-run-certificates> * OpenSSL verify result: 13 container-test-run-certificates> * SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> * closing connection #0 container-test-run-certificates> curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> More details here: https://curl.se/docs/sslcerts.html container-test-run-certificates> container-test-run-certificates> curl failed to verify the legitimacy of the server and therefore could not container-test-run-certificates> establish a secure connection to it. To learn more about this situation and container-test-run-certificates> how to fix it, please visit the webpage mentioned above. container-test-run-certificates> + curl -v https://test.foo container-test-run-certificates> * Host test.foo:443 was resolved. container-test-run-certificates> * IPv6: (none) container-test-run-certificates> * IPv4: 192.168.1.3 container-test-run-certificates> * Trying 192.168.1.3:443... container-test-run-certificates> * ALPN: curl offers h2,http/1.1 container-test-run-certificates> } [5 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Client hello (1): container-test-run-certificates> } [1552 bytes data] container-test-run-certificates> * SSL Trust Anchors: container-test-run-certificates> * OpenSSL default paths (fallback) container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Server hello (2): container-test-run-certificates> { [1210 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS change cipher, Change cipher spec (1): container-test-run-certificates> { [1 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): container-test-run-certificates> { [19 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Certificate (11): container-test-run-certificates> { [1010 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, CERT verify (15): container-test-run-certificates> { [112 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Finished (20): container-test-run-certificates> { [52 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): container-test-run-certificates> } [1 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Finished (20): container-test-run-certificates> } [52 bytes data] container-test-run-certificates> * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey container-test-run-certificates> * ALPN: server accepted h2 container-test-run-certificates> * Server certificate: container-test-run-certificates> * subject: CN=test.foo container-test-run-certificates> * start date: Aug 10 10:11:03 2026 GMT container-test-run-certificates> * expire date: Sep 9 10:11:03 2028 GMT container-test-run-certificates> * issuer: CN=minica root ca 7ab8c3 container-test-run-certificates> * Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * subjectAltName: "test.foo" matches cert's "test.foo" container-test-run-certificates> * OpenSSL verify result: 13 container-test-run-certificates> * SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> * closing connection #0 container-test-run-certificates> curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> More details here: https://curl.se/docs/sslcerts.html container-test-run-certificates> container-test-run-certificates> curl failed to verify the legitimacy of the server and therefore could not container-test-run-certificates> establish a secure connection to it. To learn more about this situation and container-test-run-certificates> how to fix it, please visit the webpage mentioned above. container-test-run-certificates> + curl -v https://test.foo container-test-run-certificates> * Host test.foo:443 was resolved. container-test-run-certificates> * IPv6: (none) container-test-run-certificates> * IPv4: 192.168.1.3 container-test-run-certificates> * Trying 192.168.1.3:443... container-test-run-certificates> * ALPN: curl offers h2,http/1.1 container-test-run-certificates> } [5 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Client hello (1): container-test-run-certificates> } [1552 bytes data] container-test-run-certificates> * SSL Trust Anchors: container-test-run-certificates> * OpenSSL default paths (fallback) container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Server hello (2): container-test-run-certificates> { [1210 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS change cipher, Change cipher spec (1): container-test-run-certificates> { [1 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): container-test-run-certificates> { [19 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Certificate (11): container-test-run-certificates> { [932 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, CERT verify (15): container-test-run-certificates> { [78 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Finished (20): container-test-run-certificates> { [52 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): container-test-run-certificates> } [1 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Finished (20): container-test-run-certificates> } [52 bytes data] container-test-run-certificates> * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey container-test-run-certificates> * ALPN: server accepted h2 container-test-run-certificates> * Server certificate: container-test-run-certificates> * subject: CN=test.foo container-test-run-certificates> * start date: Aug 10 10:10:16 2026 GMT container-test-run-certificates> * expire date: Nov 8 10:11:16 2026 GMT container-test-run-certificates> * issuer: CN=Clan Intermediate CA container-test-run-certificates> * Certificate level 0: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA256 container-test-run-certificates> * Certificate level 1: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA256 container-test-run-certificates> * Certificate level 2: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA256 container-test-run-certificates> * subjectAltName: "test.foo" matches cert's "test.foo" container-test-run-certificates> * OpenSSL verify result: 0 container-test-run-certificates> * SSL certificate verified via OpenSSL. container-test-run-certificates> * Established connection to test.foo (192.168.1.3 port 443) from 192.168.1.2 port 34564 container-test-run-certificates> % Total % Received % Xferd Average Speed Time Time Time Current container-test-run-certificates> Dload Upload Total Spent Left Speed container-test-run-certificates> 0 0 0 0 0 0 0 0 0* using HTTP/2 container-test-run-certificates> * [HTTP/2] [1] OPENED stream for https://test.foo/ container-test-run-certificates> * [HTTP/2] [1] [:method: GET] container-test-run-certificates> * [HTTP/2] [1] [:scheme: https] container-test-run-certificates> * [HTTP/2] [1] [:authority: test.foo] container-test-run-certificates> * [HTTP/2] [1] [:path: /] container-test-run-certificates> * [HTTP/2] [1] [user-agent: curl/8.21.0] container-test-run-certificates> * [HTTP/2] [1] [accept: */*] container-test-run-certificates> } [5 bytes data] container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> * Request completely sent off container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4): container-test-run-certificates> { [265 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4): container-test-run-certificates> { [265 bytes data] container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> { [5 bytes data] container-test-run-certificates> 100 20 100 20 0 0 1614 0 0 container-test-run-certificates> * Connection #0 to host test.foo:443 left intact container-test-run-certificates> (finished: waiting for success: curl -v https://test.foo, in 3.08 seconds) container-test-run-certificates> + openssl s_client -connect test.foo:443 -servername test.foo container-test-run-certificates> + openssl x509 -text -noout container-test-run-certificates> Certificate: container-test-run-certificates> Data: container-test-run-certificates> Version: 3 (0x2) container-test-run-certificates> Serial Number: container-test-run-certificates> ae:a2:71:ec:bc:bf:f6:c8:11:25:57:06:f7:f9:19:12 container-test-run-certificates> Signature Algorithm: ecdsa-with-SHA256 container-test-run-certificates> Issuer: CN=Clan Intermediate CA container-test-run-certificates> Validity container-test-run-certificates> Not Before: Aug 10 10:10:16 2026 GMT container-test-run-certificates> Not After : Nov 8 10:11:16 2026 GMT container-test-run-certificates> Subject: CN=test.foo container-test-run-certificates> Subject Public Key Info: container-test-run-certificates> Public Key Algorithm: id-ecPublicKey container-test-run-certificates> Public-Key: (256 bit) container-test-run-certificates> pub: container-test-run-certificates> 04:0a:dc:aa:88:7c:8e:a4:43:24:51:78:af:ab:c3: container-test-run-certificates> e7:c5:6d:9b:a1:39:68:4b:03:ec:ee:3b:6a:7b:c6: container-test-run-certificates> 74:bd:a4:ec:3f:6a:83:45:3c:f6:74:3b:5d:cd:4d: container-test-run-certificates> 9d:91:99:14:e6:a9:11:4a:f9:f9:4f:41:90:22:8e: container-test-run-certificates> 02:2b:67:27:6f container-test-run-certificates> ASN1 OID: prime256v1 container-test-run-certificates> NIST CURVE: P-256 container-test-run-certificates> X509v3 extensions: container-test-run-certificates> X509v3 Key Usage: critical container-test-run-certificates> Digital Signature container-test-run-certificates> X509v3 Extended Key Usage: container-test-run-certificates> TLS Web Server Authentication, TLS Web Client Authentication container-test-run-certificates> X509v3 Subject Key Identifier: container-test-run-certificates> EC:9A:2A:47:F7:90:05:3D:B1:B7:6E:76:3F:14:E3:46:0F:7F:37:6A container-test-run-certificates> X509v3 Authority Key Identifier: container-test-run-certificates> 49:1F:8F:5C:2A:E1:84:70:95:97:E8:AA:84:F7:C1:BF:B5:F5:00:CC container-test-run-certificates> X509v3 Subject Alternative Name: container-test-run-certificates> DNS:test.foo container-test-run-certificates> 1.3.6.1.4.1.37476.9000.64.1: container-test-run-certificates> 0......acme.. container-test-run-certificates> Signature Algorithm: ecdsa-with-SHA256 container-test-run-certificates> Signature Value: container-test-run-certificates> 30:46:02:21:00:c5:94:27:b5:c4:e5:e0:7c:cd:3c:b9:82:95: container-test-run-certificates> d0:a2:bd:7f:48:1e:0e:4a:6f:b4:23:65:10:55:77:99:51:74: container-test-run-certificates> 00:02:21:00:8f:e7:93:64:17:5b:01:63:0f:b9:69:4d:88:f7: container-test-run-certificates> 84:1e:4c:c7:80:67:4f:ee:fc:d2:13:7a:50:6a:68:ac:c7:93 container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> post-build step Upload to niks3: ok time=2026-08-10T10:11:19.424Z level=INFO msg="Uploading 0 paths to niks3.clan.lol (1 already cached)" time=2026-08-10T10:11:19.589Z level=INFO msg="Uploading 1 narinfos" time=2026-08-10T10:11:19.845Z level=INFO msg="Upload complete. (508ms)"