these 35 derivations will be built: /nix/store/cfyywykga88r8ivmlrx0wi5w3w5ck2a5-system-path.drv /nix/store/g1gl8hdrhk9fxahhn4j2jbmgnpax8nkf-dbus-1.drv /nix/store/5ay2bl5472wk64ms74yvvr2l7a8iswmx-X-Restart-Triggers-dbus-broker.drv /nix/store/5f709d0vbgid1sgpfifmf9fvvxnci6pz-unit-dbus-broker.service.drv /nix/store/kpiaf181hy93w18ig9qv4pdz9dswb2g0-user-units.drv /nix/store/97sm66gvxkaiqwavj5a7q9ya17rrnv48-unit-dbus-broker.service.drv /nix/store/qdsij7v6v9f98fiss9q3hshf3nf3xhm6-system-units.drv /nix/store/0g040p2rr2rw9hn241kq9ci7rzwrva58-etc.drv /nix/store/diwvkwcj939dcknv3jjyd7v95n1iraix-activate.drv /nix/store/5q4ap0qzr81q7dcdhrdf8664zspcsay0-nixos-system-server-test.drv /nix/store/080vlsbdggc8hsvqm6fh3bn1130g86mf-closure-info.drv /nix/store/dlpvwjr8w1wwa6461lf1lpw6m06rdp37-system-path.drv /nix/store/lz4azdv9kwiri10iyb7nmsf84h72wc0r-dbus-1.drv /nix/store/zinagz3ylln5jjqbcrlip73f2v73vpgi-X-Restart-Triggers-dbus-broker.drv /nix/store/p29jl88qk2lb0b8dz77hpwhjaqnnagzh-unit-dbus-broker.service.drv /nix/store/bcg31y7cxf59xph21p7dkq9q0301b50b-user-units.drv /nix/store/2xmkprmbc0imspsfvgzlrbaxjm44h0d2-unit-dbus-broker.service.drv /nix/store/cfx1bhrcqjxjc2r3w0qvqf8lxhn4cb8v-system-units.drv /nix/store/v61czb8cg4ws6f09yy6kd3qc1m9lp10h-etc.drv /nix/store/pa2c8vrl4i7rx4d14v2ray2qjsqijqmy-activate.drv /nix/store/1v6ska7b3jprmi7jpr08zm0gyxq1965p-nixos-system-client-test.drv /nix/store/cy8ndc4a8fjw70p0kv3yn8pnlmba7p1x-system-path.drv /nix/store/j2c3ql0jydpkriw5dcgv75hqxja7vsmx-dbus-1.drv /nix/store/72snkz0hnxqms2cx48s1rxy8djg8gimb-X-Restart-Triggers-dbus-broker.drv /nix/store/pwscrfi5a22dnm51jrn21dxrp30m801z-unit-dbus-broker.service.drv /nix/store/55xd6iq019b0ryw61g4z8fc1m4ddqidr-user-units.drv /nix/store/72jq3kzw85z96shdf07fqj3w7z3n7072-closure-info.drv /nix/store/ljjky9zlmqa9kiw3z67kwv96svp9xpar-unit-dbus-broker.service.drv /nix/store/j7p8aciap31d29c9xs38h9zca9q0y78y-system-units.drv /nix/store/gzms0bwcy79m2jdvdzk968ckwyazngab-etc.drv /nix/store/78nqd5192nq2v66zqxisazhvmdxnazpx-activate.drv /nix/store/mzgsafg7fyk9kp9bpmcpng5jrsqyqlh8-nixos-system-ca-test.drv /nix/store/zdh7y4l2frinpj7yp3llwwjhlx3zwds7-closure-info.drv /nix/store/k20i54015hd5cdn9il8a36agsanyp5qx-nixos-test-driver-certificates.drv /nix/store/f2rrdbh7pkjxlp1yly9p8vn49c2dkay2-container-test-run-certificates.drv building '/nix/store/cfyywykga88r8ivmlrx0wi5w3w5ck2a5-system-path.drv' building '/nix/store/cy8ndc4a8fjw70p0kv3yn8pnlmba7p1x-system-path.drv' building '/nix/store/dlpvwjr8w1wwa6461lf1lpw6m06rdp37-system-path.drv' system-path> structuredAttrs is enabled system-path> structuredAttrs is enabled system-path> structuredAttrs is enabled system-path> created 1817 symlinks in user environment system-path> created 1817 symlinks in user environment system-path> created 1817 symlinks in user environment building '/nix/store/g1gl8hdrhk9fxahhn4j2jbmgnpax8nkf-dbus-1.drv' building '/nix/store/j2c3ql0jydpkriw5dcgv75hqxja7vsmx-dbus-1.drv' building '/nix/store/lz4azdv9kwiri10iyb7nmsf84h72wc0r-dbus-1.drv' building '/nix/store/5ay2bl5472wk64ms74yvvr2l7a8iswmx-X-Restart-Triggers-dbus-broker.drv' building '/nix/store/72snkz0hnxqms2cx48s1rxy8djg8gimb-X-Restart-Triggers-dbus-broker.drv' building '/nix/store/zinagz3ylln5jjqbcrlip73f2v73vpgi-X-Restart-Triggers-dbus-broker.drv' building '/nix/store/5f709d0vbgid1sgpfifmf9fvvxnci6pz-unit-dbus-broker.service.drv' building '/nix/store/97sm66gvxkaiqwavj5a7q9ya17rrnv48-unit-dbus-broker.service.drv' building '/nix/store/2xmkprmbc0imspsfvgzlrbaxjm44h0d2-unit-dbus-broker.service.drv' building '/nix/store/ljjky9zlmqa9kiw3z67kwv96svp9xpar-unit-dbus-broker.service.drv' building '/nix/store/p29jl88qk2lb0b8dz77hpwhjaqnnagzh-unit-dbus-broker.service.drv' building '/nix/store/pwscrfi5a22dnm51jrn21dxrp30m801z-unit-dbus-broker.service.drv' building '/nix/store/cfx1bhrcqjxjc2r3w0qvqf8lxhn4cb8v-system-units.drv' building '/nix/store/j7p8aciap31d29c9xs38h9zca9q0y78y-system-units.drv' building '/nix/store/qdsij7v6v9f98fiss9q3hshf3nf3xhm6-system-units.drv' building '/nix/store/bcg31y7cxf59xph21p7dkq9q0301b50b-user-units.drv' building '/nix/store/kpiaf181hy93w18ig9qv4pdz9dswb2g0-user-units.drv' building '/nix/store/55xd6iq019b0ryw61g4z8fc1m4ddqidr-user-units.drv' building '/nix/store/v61czb8cg4ws6f09yy6kd3qc1m9lp10h-etc.drv' building '/nix/store/0g040p2rr2rw9hn241kq9ci7rzwrva58-etc.drv' building '/nix/store/gzms0bwcy79m2jdvdzk968ckwyazngab-etc.drv' building '/nix/store/pa2c8vrl4i7rx4d14v2ray2qjsqijqmy-activate.drv' building '/nix/store/diwvkwcj939dcknv3jjyd7v95n1iraix-activate.drv' building '/nix/store/78nqd5192nq2v66zqxisazhvmdxnazpx-activate.drv' building '/nix/store/1v6ska7b3jprmi7jpr08zm0gyxq1965p-nixos-system-client-test.drv' building '/nix/store/5q4ap0qzr81q7dcdhrdf8664zspcsay0-nixos-system-server-test.drv' nixos-system-client-test> structuredAttrs is enabled building '/nix/store/mzgsafg7fyk9kp9bpmcpng5jrsqyqlh8-nixos-system-ca-test.drv' nixos-system-server-test> structuredAttrs is enabled building '/nix/store/72jq3kzw85z96shdf07fqj3w7z3n7072-closure-info.drv' nixos-system-ca-test> structuredAttrs is enabled building '/nix/store/080vlsbdggc8hsvqm6fh3bn1130g86mf-closure-info.drv' closure-info> structuredAttrs is enabled building '/nix/store/zdh7y4l2frinpj7yp3llwwjhlx3zwds7-closure-info.drv' closure-info> structuredAttrs is enabled closure-info> structuredAttrs is enabled building '/nix/store/k20i54015hd5cdn9il8a36agsanyp5qx-nixos-test-driver-certificates.drv' nixos-test-driver-certificates> Running type check (enable/disable: config.skipTypeCheck) nixos-test-driver-certificates> See https://nixos.org/manual/nixos/stable/#test-opt-skipTypeCheck nixos-test-driver-certificates> Success: no issues found in 1 source file building '/nix/store/f2rrdbh7pkjxlp1yly9p8vn49c2dkay2-container-test-run-certificates.drv' on 'ssh-ng://builder@build-x86-01.clan.lol' building '/nix/store/f2rrdbh7pkjxlp1yly9p8vn49c2dkay2-container-test-run-certificates.drv' container-test-run-certificates> additionally exposed symbols: container-test-run-certificates> ca, client, server, container-test-run-certificates> start_all, machines, driver, Machine, wait_for_signal container-test-run-certificates> Starting ca container-test-run-certificates> Starting client container-test-run-certificates> Starting server container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> <<< NixOS Stage 2 >>> container-test-run-certificates> container-test-run-certificates> booting system configuration /nix/store/nrxcy0kc8v6hh50mvq5nz2ccw84i7zbx-nixos-system-ca-test container-test-run-certificates> running activation script... container-test-run-certificates> setting up /etc... container-test-run-certificates> 2: host0@if3: mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000 container-test-run-certificates> link/ether 42:06:76:42:a9:8d brd ff:ff:ff:ff:ff:ff link-netnsid 0 container-test-run-certificates> setting up age secrets... container-test-run-certificates> starting systemd... container-test-run-certificates> systemd 260.2 running in system mode (+PAM +AUDIT -SELINUX +APPARMOR +IMA +IPE +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS +FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 +PWQUALITY +P11KIT +QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD +BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP +LIBARCHIVE) container-test-run-certificates> Detected virtualization systemd-nspawn. container-test-run-certificates> Detected architecture x86-64. container-test-run-certificates> Detected first boot. container-test-run-certificates> Initializing machine ID from container UUID. container-test-run-certificates> Applying preset policy. container-test-run-certificates> Populated /etc with preset unit settings. container-test-run-certificates> Queued start job for default target Multi-User System. container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> <<< Welcome to NixOS test (x86_64) - console >>> container-test-run-certificates> + systemd-run /bin/sh -c '/nix/store/gph17gb73p6qbrqqjnypfjj5npf0ldyx-coreutils-9.11/bin/sleep 999999999 && echo d0290a53-cfb8-451d-9d07-c6e16da143ba' container-test-run-certificates> Running as unit: run-p446-i80945283.service; invocation ID: f7c681f6767a405a8c5d41830de60a5c container-test-run-certificates> To attach to container ca run on the same machine that runs the test: container-test-run-certificates> sudo nsenter --user --target $(\pgrep -f '^/bin/sh.*d0290a53-cfb8-451d-9d07-c6e16da143ba') --mount --uts --ipc --net --pid --cgroup /bin/sh -c bash container-test-run-certificates> container-test-run-certificates> To inject external network and continue test, run: container-test-run-certificates> sudo /nix/store/xqnbm0vgqcq9b1b54c80qj9s0qhbwa08-python3-3.13.15/bin/python3.13 /nix/store/kyds13d9fxdrlcwyd1al9cjkwy8mplac-test-driver-0.0.1/lib/python3.13/site-packages/test_driver/inject_network.py d0290a53-cfb8-451d-9d07-c6e16da143ba container-test-run-certificates> container-test-run-certificates> <<< NixOS Stage 2 >>> container-test-run-certificates> container-test-run-certificates> booting system configuration /nix/store/jawzjya0z8jfm4dhgjiscpyy81lvvlkw-nixos-system-client-test container-test-run-certificates> running activation script... container-test-run-certificates> setting up /etc... container-test-run-certificates> 2: host0@if5: mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000 container-test-run-certificates> link/ether 2a:42:35:28:b1:2f brd ff:ff:ff:ff:ff:ff link-netnsid 0 container-test-run-certificates> setting up age secrets... container-test-run-certificates> starting systemd... container-test-run-certificates> systemd 260.2 running in system mode (+PAM +AUDIT -SELINUX +APPARMOR +IMA +IPE +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS +FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 +PWQUALITY +P11KIT +QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD +BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP +LIBARCHIVE) container-test-run-certificates> Detected virtualization systemd-nspawn. container-test-run-certificates> Detected architecture x86-64. container-test-run-certificates> Detected first boot. container-test-run-certificates> Initializing machine ID from container UUID. container-test-run-certificates> Applying preset policy. container-test-run-certificates> Populated /etc with preset unit settings. container-test-run-certificates> Queued start job for default target Multi-User System. container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> <<< Welcome to NixOS test (x86_64) - console >>> container-test-run-certificates> + systemd-run /bin/sh -c '/nix/store/gph17gb73p6qbrqqjnypfjj5npf0ldyx-coreutils-9.11/bin/sleep 999999999 && echo 417a544f-2d8d-4bc7-a6af-68458aa1ae54' container-test-run-certificates> Running as unit: run-p304-i80945286.service; invocation ID: f0fa055c26cd406ea6764ec841078e28 container-test-run-certificates> To attach to container client run on the same machine that runs the test: container-test-run-certificates> sudo nsenter --user --target $(\pgrep -f '^/bin/sh.*417a544f-2d8d-4bc7-a6af-68458aa1ae54') --mount --uts --ipc --net --pid --cgroup /bin/sh -c bash container-test-run-certificates> container-test-run-certificates> To inject external network and continue test, run: container-test-run-certificates> sudo /nix/store/xqnbm0vgqcq9b1b54c80qj9s0qhbwa08-python3-3.13.15/bin/python3.13 /nix/store/kyds13d9fxdrlcwyd1al9cjkwy8mplac-test-driver-0.0.1/lib/python3.13/site-packages/test_driver/inject_network.py 417a544f-2d8d-4bc7-a6af-68458aa1ae54 container-test-run-certificates> container-test-run-certificates> <<< NixOS Stage 2 >>> container-test-run-certificates> container-test-run-certificates> booting system configuration /nix/store/r6zs8dsv791p6d8y31if8f31frq5nf89-nixos-system-server-test container-test-run-certificates> running activation script... container-test-run-certificates> setting up /etc... container-test-run-certificates> 2: host0@if4: mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000 container-test-run-certificates> link/ether be:aa:dd:39:86:e7 brd ff:ff:ff:ff:ff:ff link-netnsid 0 container-test-run-certificates> setting up age secrets... container-test-run-certificates> starting systemd... container-test-run-certificates> systemd 260.2 running in system mode (+PAM +AUDIT -SELINUX +APPARMOR +IMA +IPE +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS +FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 +PWQUALITY +P11KIT +QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD +BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP +LIBARCHIVE) container-test-run-certificates> Detected virtualization systemd-nspawn. container-test-run-certificates> Detected architecture x86-64. container-test-run-certificates> Detected first boot. container-test-run-certificates> Initializing machine ID from container UUID. container-test-run-certificates> Applying preset policy. container-test-run-certificates> Populated /etc with preset unit settings. container-test-run-certificates> Queued start job for default target Multi-User System. container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> <<< Welcome to NixOS test (x86_64) - console >>> container-test-run-certificates> + systemd-run /bin/sh -c '/nix/store/gph17gb73p6qbrqqjnypfjj5npf0ldyx-coreutils-9.11/bin/sleep 999999999 && echo 26d212b1-3889-4a15-a14c-f7089184e210' container-test-run-certificates> Running as unit: run-p386-i80945290.service; invocation ID: 798f814cb0774d32bdf158d38c28271b container-test-run-certificates> To attach to container server run on the same machine that runs the test: container-test-run-certificates> sudo nsenter --user --target $(\pgrep -f '^/bin/sh.*26d212b1-3889-4a15-a14c-f7089184e210') --mount --uts --ipc --net --pid --cgroup /bin/sh -c bash container-test-run-certificates> container-test-run-certificates> To inject external network and continue test, run: container-test-run-certificates> sudo /nix/store/xqnbm0vgqcq9b1b54c80qj9s0qhbwa08-python3-3.13.15/bin/python3.13 /nix/store/kyds13d9fxdrlcwyd1al9cjkwy8mplac-test-driver-0.0.1/lib/python3.13/site-packages/test_driver/inject_network.py 26d212b1-3889-4a15-a14c-f7089184e210 container-test-run-certificates> + systemctl restart acme-order-renew-ca.foo.service container-test-run-certificates> + systemctl restart acme-test.foo.service container-test-run-certificates> client: waiting for success: curl -v https://test.foo container-test-run-certificates> + curl -v https://test.foo container-test-run-certificates> * Host test.foo:443 was resolved. container-test-run-certificates> * IPv6: (none) container-test-run-certificates> * IPv4: 192.168.1.3 container-test-run-certificates> * Trying 192.168.1.3:443... container-test-run-certificates> * ALPN: curl offers h2,http/1.1 container-test-run-certificates> } [5 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Client hello (1): container-test-run-certificates> } [1552 bytes data] container-test-run-certificates> * SSL Trust Anchors: container-test-run-certificates> * OpenSSL default paths (fallback) container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Server hello (2): container-test-run-certificates> { [1210 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS change cipher, Change cipher spec (1): container-test-run-certificates> { [1 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): container-test-run-certificates> { [19 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Certificate (11): container-test-run-certificates> { [1008 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, CERT verify (15): container-test-run-certificates> { [111 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Finished (20): container-test-run-certificates> { [52 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): container-test-run-certificates> } [1 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Finished (20): container-test-run-certificates> } [52 bytes data] container-test-run-certificates> * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey container-test-run-certificates> * ALPN: server accepted h2 container-test-run-certificates> * Server certificate: container-test-run-certificates> * subject: CN=test.foo container-test-run-certificates> * start date: Aug 19 15:08:17 2026 GMT container-test-run-certificates> * expire date: Sep 18 15:08:17 2028 GMT container-test-run-certificates> * issuer: CN=minica root ca 48b55f container-test-run-certificates> * Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * subjectAltName: "test.foo" matches cert's "test.foo" container-test-run-certificates> * OpenSSL verify result: 13 container-test-run-certificates> * SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> * closing connection #0 container-test-run-certificates> curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> More details here: https://curl.se/docs/sslcerts.html container-test-run-certificates> container-test-run-certificates> curl failed to verify the legitimacy of the server and therefore could not container-test-run-certificates> establish a secure connection to it. To learn more about this situation and container-test-run-certificates> how to fix it, please visit the webpage mentioned above. container-test-run-certificates> + curl -v https://test.foo container-test-run-certificates> * Host test.foo:443 was resolved. container-test-run-certificates> * IPv6: (none) container-test-run-certificates> * IPv4: 192.168.1.3 container-test-run-certificates> * Trying 192.168.1.3:443... container-test-run-certificates> * ALPN: curl offers h2,http/1.1 container-test-run-certificates> } [5 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Client hello (1): container-test-run-certificates> } [1552 bytes data] container-test-run-certificates> * SSL Trust Anchors: container-test-run-certificates> * OpenSSL default paths (fallback) container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Server hello (2): container-test-run-certificates> { [1210 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS change cipher, Change cipher spec (1): container-test-run-certificates> { [1 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): container-test-run-certificates> { [19 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Certificate (11): container-test-run-certificates> { [1008 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, CERT verify (15): container-test-run-certificates> { [111 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Finished (20): container-test-run-certificates> { [52 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): container-test-run-certificates> } [1 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Finished (20): container-test-run-certificates> } [52 bytes data] container-test-run-certificates> * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey container-test-run-certificates> * ALPN: server accepted h2 container-test-run-certificates> * Server certificate: container-test-run-certificates> * subject: CN=test.foo container-test-run-certificates> * start date: Aug 19 15:08:17 2026 GMT container-test-run-certificates> * expire date: Sep 18 15:08:17 2028 GMT container-test-run-certificates> * issuer: CN=minica root ca 48b55f container-test-run-certificates> * Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * subjectAltName: "test.foo" matches cert's "test.foo" container-test-run-certificates> * OpenSSL verify result: 13 container-test-run-certificates> * SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> * closing connection #0 container-test-run-certificates> curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> More details here: https://curl.se/docs/sslcerts.html container-test-run-certificates> container-test-run-certificates> curl failed to verify the legitimacy of the server and therefore could not container-test-run-certificates> establish a secure connection to it. To learn more about this situation and container-test-run-certificates> how to fix it, please visit the webpage mentioned above. container-test-run-certificates> + curl -v https://test.foo container-test-run-certificates> * Host test.foo:443 was resolved. container-test-run-certificates> * IPv6: (none) container-test-run-certificates> * IPv4: 192.168.1.3 container-test-run-certificates> * Trying 192.168.1.3:443... container-test-run-certificates> * ALPN: curl offers h2,http/1.1 container-test-run-certificates> } [5 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Client hello (1): container-test-run-certificates> } [1552 bytes data] container-test-run-certificates> * SSL Trust Anchors: container-test-run-certificates> * OpenSSL default paths (fallback) container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Server hello (2): container-test-run-certificates> { [1210 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS change cipher, Change cipher spec (1): container-test-run-certificates> { [1 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): container-test-run-certificates> { [19 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Certificate (11): container-test-run-certificates> { [1008 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, CERT verify (15): container-test-run-certificates> { [110 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Finished (20): container-test-run-certificates> { [52 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): container-test-run-certificates> } [1 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Finished (20): container-test-run-certificates> } [52 bytes data] container-test-run-certificates> * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey container-test-run-certificates> * ALPN: server accepted h2 container-test-run-certificates> * Server certificate: container-test-run-certificates> * subject: CN=test.foo container-test-run-certificates> * start date: Aug 19 15:08:17 2026 GMT container-test-run-certificates> * expire date: Sep 18 15:08:17 2028 GMT container-test-run-certificates> * issuer: CN=minica root ca 48b55f container-test-run-certificates> * Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * subjectAltName: "test.foo" matches cert's "test.foo" container-test-run-certificates> * OpenSSL verify result: 13 container-test-run-certificates> * SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> * closing connection #0 container-test-run-certificates> curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> More details here: https://curl.se/docs/sslcerts.html container-test-run-certificates> container-test-run-certificates> curl failed to verify the legitimacy of the server and therefore could not container-test-run-certificates> establish a secure connection to it. To learn more about this situation and container-test-run-certificates> how to fix it, please visit the webpage mentioned above. container-test-run-certificates> + curl -v https://test.foo container-test-run-certificates> * Host test.foo:443 was resolved. container-test-run-certificates> * IPv6: (none) container-test-run-certificates> * IPv4: 192.168.1.3 container-test-run-certificates> * Trying 192.168.1.3:443... container-test-run-certificates> * ALPN: curl offers h2,http/1.1 container-test-run-certificates> } [5 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Client hello (1): container-test-run-certificates> } [1552 bytes data] container-test-run-certificates> * SSL Trust Anchors: container-test-run-certificates> * OpenSSL default paths (fallback) container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Server hello (2): container-test-run-certificates> { [1210 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS change cipher, Change cipher spec (1): container-test-run-certificates> { [1 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): container-test-run-certificates> { [19 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Certificate (11): container-test-run-certificates> { [1008 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, CERT verify (15): container-test-run-certificates> { [112 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Finished (20): container-test-run-certificates> { [52 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): container-test-run-certificates> } [1 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Finished (20): container-test-run-certificates> } [52 bytes data] container-test-run-certificates> * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey container-test-run-certificates> * ALPN: server accepted h2 container-test-run-certificates> * Server certificate: container-test-run-certificates> * subject: CN=test.foo container-test-run-certificates> * start date: Aug 19 15:08:17 2026 GMT container-test-run-certificates> * expire date: Sep 18 15:08:17 2028 GMT container-test-run-certificates> * issuer: CN=minica root ca 48b55f container-test-run-certificates> * Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * subjectAltName: "test.foo" matches cert's "test.foo" container-test-run-certificates> * OpenSSL verify result: 13 container-test-run-certificates> * SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> * closing connection #0 container-test-run-certificates> curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> More details here: https://curl.se/docs/sslcerts.html container-test-run-certificates> container-test-run-certificates> curl failed to verify the legitimacy of the server and therefore could not container-test-run-certificates> establish a secure connection to it. To learn more about this situation and container-test-run-certificates> how to fix it, please visit the webpage mentioned above. container-test-run-certificates> + curl -v https://test.foo container-test-run-certificates> * Host test.foo:443 was resolved. container-test-run-certificates> * IPv6: (none) container-test-run-certificates> * IPv4: 192.168.1.3 container-test-run-certificates> * Trying 192.168.1.3:443... container-test-run-certificates> * ALPN: curl offers h2,http/1.1 container-test-run-certificates> } [5 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Client hello (1): container-test-run-certificates> } [1552 bytes data] container-test-run-certificates> * SSL Trust Anchors: container-test-run-certificates> * OpenSSL default paths (fallback) container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Server hello (2): container-test-run-certificates> { [1210 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS change cipher, Change cipher spec (1): container-test-run-certificates> { [1 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): container-test-run-certificates> { [19 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Certificate (11): container-test-run-certificates> { [933 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, CERT verify (15): container-test-run-certificates> { [79 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Finished (20): container-test-run-certificates> { [52 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): container-test-run-certificates> } [1 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Finished (20): container-test-run-certificates> } [52 bytes data] container-test-run-certificates> * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey container-test-run-certificates> * ALPN: server accepted h2 container-test-run-certificates> * Server certificate: container-test-run-certificates> * subject: CN=test.foo container-test-run-certificates> * start date: Aug 19 15:07:31 2026 GMT container-test-run-certificates> * expire date: Nov 17 15:08:31 2026 GMT container-test-run-certificates> * issuer: CN=Clan Intermediate CA container-test-run-certificates> * Certificate level 0: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA256 container-test-run-certificates> * Certificate level 1: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA256 container-test-run-certificates> * Certificate level 2: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA256 container-test-run-certificates> * subjectAltName: "test.foo" matches cert's "test.foo" container-test-run-certificates> * OpenSSL verify result: 0 container-test-run-certificates> * SSL certificate verified via OpenSSL. container-test-run-certificates> * Established connection to test.foo (192.168.1.3 port 443) from 192.168.1.2 port 49214 container-test-run-certificates> % Total % Received % Xferd Average Speed Time Time Time Current container-test-run-certificates> Dload Upload Total Spent Left Speed container-test-run-certificates> 0 0 0 0 0 0 0 0 0* using HTTP/2 container-test-run-certificates> * [HTTP/2] [1] OPENED stream for https://test.foo/ container-test-run-certificates> * [HTTP/2] [1] [:method: GET] container-test-run-certificates> * [HTTP/2] [1] [:scheme: https] container-test-run-certificates> * [HTTP/2] [1] [:authority: test.foo] container-test-run-certificates> * [HTTP/2] [1] [:path: /] container-test-run-certificates> * [HTTP/2] [1] [user-agent: curl/8.21.0] container-test-run-certificates> * [HTTP/2] [1] [accept: */*] container-test-run-certificates> } [5 bytes data] container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> * Request completely sent off container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4): container-test-run-certificates> { [265 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4): container-test-run-certificates> { [265 bytes data] container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> { [5 bytes data] container-test-run-certificates> 100 20 100 20 0 0 1731 0 0 container-test-run-certificates> * Connection #0 to host test.foo:443 left intact container-test-run-certificates> (finished: waiting for success: curl -v https://test.foo, in 4.12 seconds) container-test-run-certificates> + openssl s_client -connect test.foo:443 -servername test.foo container-test-run-certificates> + openssl x509 -text -noout container-test-run-certificates> Certificate: container-test-run-certificates> Data: container-test-run-certificates> Version: 3 (0x2) container-test-run-certificates> Serial Number: container-test-run-certificates> 89:48:4f:3e:8b:de:3d:17:97:9c:61:cc:cc:34:a2:2d container-test-run-certificates> Signature Algorithm: ecdsa-with-SHA256 container-test-run-certificates> Issuer: CN=Clan Intermediate CA container-test-run-certificates> Validity container-test-run-certificates> Not Before: Aug 19 15:07:31 2026 GMT container-test-run-certificates> Not After : Nov 17 15:08:31 2026 GMT container-test-run-certificates> Subject: CN=test.foo container-test-run-certificates> Subject Public Key Info: container-test-run-certificates> Public Key Algorithm: id-ecPublicKey container-test-run-certificates> Public-Key: (256 bit) container-test-run-certificates> pub: container-test-run-certificates> 04:b6:cd:d2:4a:40:b1:b8:cd:dd:97:a0:75:65:d5: container-test-run-certificates> 92:35:0f:d1:32:d8:93:d9:cd:dd:53:6c:1e:37:c9: container-test-run-certificates> f1:bd:07:ca:aa:a3:ce:34:49:b4:1f:cb:1c:dd:4a: container-test-run-certificates> 55:5f:bc:e3:e2:2f:9c:8c:01:86:26:6d:3d:fe:11: container-test-run-certificates> 24:67:ba:38:7c container-test-run-certificates> ASN1 OID: prime256v1 container-test-run-certificates> NIST CURVE: P-256 container-test-run-certificates> X509v3 extensions: container-test-run-certificates> X509v3 Key Usage: critical container-test-run-certificates> Digital Signature container-test-run-certificates> X509v3 Extended Key Usage: container-test-run-certificates> TLS Web Server Authentication, TLS Web Client Authentication container-test-run-certificates> X509v3 Subject Key Identifier: container-test-run-certificates> B2:E0:D1:ED:55:45:45:79:A4:77:0D:36:7E:99:4C:CD:E4:99:A7:12 container-test-run-certificates> X509v3 Authority Key Identifier: container-test-run-certificates> A9:C2:87:C0:4A:A5:93:35:B3:10:76:17:56:C1:1E:1D:BF:CC:49:FC container-test-run-certificates> X509v3 Subject Alternative Name: container-test-run-certificates> DNS:test.foo container-test-run-certificates> 1.3.6.1.4.1.37476.9000.64.1: container-test-run-certificates> 0......acme.. container-test-run-certificates> Signature Algorithm: ecdsa-with-SHA256 container-test-run-certificates> Signature Value: container-test-run-certificates> 30:45:02:21:00:96:b1:50:0f:45:a1:e6:25:b4:0f:17:dd:15: container-test-run-certificates> 24:97:35:f7:b0:e0:98:42:1c:9e:4d:ba:de:19:91:18:4c:80: container-test-run-certificates> bb:02:20:2e:1c:42:f6:2d:f9:9b:6f:10:c0:6b:a9:26:ae:24: container-test-run-certificates> 85:fa:98:25:84:68:eb:eb:9c:9f:53:51:78:55:af:93:2f container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> post-build step Upload to niks3: ok time=2026-08-19T15:08:35.019Z level=INFO msg="Uploading 0 paths to niks3.clan.lol (1 already cached)" time=2026-08-19T15:08:35.964Z level=INFO msg="Uploading 1 narinfos" time=2026-08-19T15:08:36.655Z level=INFO msg="Upload complete. (1.714s)"