these 35 derivations will be built: /nix/store/77nsg0hk0amirb6abvycv104jd29g4k1-system-path.drv /nix/store/z8l7niwhq5qv6v9vbjp2gch1afg1dx1l-dbus-1.drv /nix/store/xm4n9618ria2jkjkax9h8hcdgghsrd0c-X-Restart-Triggers-dbus-broker.drv /nix/store/00wdv4i7bfvnxaf9vcx7xl7dhxqm8pcb-unit-dbus-broker.service.drv /nix/store/1b18j2hrxd6k1yhqf3s2brvhifdf29f5-system-path.drv /nix/store/wrfcv3rzm1y28fmqr7hyjmyv3xq326j7-system-path.drv /nix/store/1hjdbjlgf632rzq70wgd88vi52iqwcqz-dbus-1.drv /nix/store/1x0bn4dk89176w307qfbjlgz91r17p6s-X-Restart-Triggers-dbus-broker.drv /nix/store/bk0xp04lan9s8gvj5yndiz22bdymic1l-dbus-1.drv /nix/store/ywg7ja5a66h6cmsq7gxbq9ic5sgxdnis-X-Restart-Triggers-dbus-broker.drv /nix/store/25zbmp6h0ymriswg29pw8f0p0sj3h54b-unit-dbus-broker.service.drv /nix/store/95f70bhm764qrfgmxz8jxmbnki200i79-unit-dbus-broker.service.drv /nix/store/35bm137c0k6zz7qf7rnfvsvrkrpk3rkh-user-units.drv /nix/store/bjg2m9m1flb0lwswkqpagxslb8vb9av8-system-units.drv /nix/store/m8mms48rpqvpcbkg8kxmq78dbz8g2gp4-unit-dbus-broker.service.drv /nix/store/yhy9hi0b4lr81gyh1v3clcbqvjyqy44z-user-units.drv /nix/store/5321rcp90c5ngh8cvybp18hcxrpsfqg3-etc.drv /nix/store/sag923js814vjyj5lic5dfqsp4ccj92c-unit-dbus-broker.service.drv /nix/store/5965lm8ni65al3sv2nkr7mmlk2xzbnds-system-units.drv /nix/store/c2ankywf6kbync1vaxdkggfcn8xm0riy-unit-dbus-broker.service.drv /nix/store/9mbnxhzzrvgv9jxb8y5hvfpayisb96ni-system-units.drv /nix/store/cnrb15q3mczpqwvbw9gmc4h40dn349g2-activate.drv /nix/store/sni5f8d6jda9ygwzh2ihb2yk502yc9cg-nixos-system-server-test.drv /nix/store/a1i1vbsj5a9yppnfddgyal2ib3nk6x83-closure-info.drv /nix/store/vmrl9cm7fggkrpd447bzbnklj42n4a9q-user-units.drv /nix/store/vrf2qyk04gcpzyv6b7npbnzzga1dkc99-etc.drv /nix/store/fr6sqj7is7qf0ha3030mlihpq3d2z8j1-activate.drv /nix/store/jk349r17icpa1sj9g12cvh3w6r82a7za-nixos-system-ca-test.drv /nix/store/bkx1cw7y8r9ipzq4plqnxl2l930dk6v9-closure-info.drv /nix/store/csk8mxwf76j7qhg0rwc8h3bv3xbpjazj-etc.drv /nix/store/m0868qjdn66pbb7av075vg62z3704136-activate.drv /nix/store/sxm40wr659xswgafm49x8l2dmd0djnal-nixos-system-client-test.drv /nix/store/nzkwdvgxw8mc33c2czrm2zqr8p6qg7mf-closure-info.drv /nix/store/sc06r4zyk76hmfqjwf5ay1vy5n3fv6gr-nixos-test-driver-certificates.drv /nix/store/hlzmmm47w6lpgsg3c6sk5ylriwkl9sm7-container-test-run-certificates.drv building '/nix/store/1b18j2hrxd6k1yhqf3s2brvhifdf29f5-system-path.drv' building '/nix/store/77nsg0hk0amirb6abvycv104jd29g4k1-system-path.drv' building '/nix/store/wrfcv3rzm1y28fmqr7hyjmyv3xq326j7-system-path.drv' system-path> structuredAttrs is enabled system-path> structuredAttrs is enabled system-path> structuredAttrs is enabled system-path> created 1817 symlinks in user environment system-path> created 1817 symlinks in user environment system-path> created 1817 symlinks in user environment building '/nix/store/bk0xp04lan9s8gvj5yndiz22bdymic1l-dbus-1.drv' building '/nix/store/1hjdbjlgf632rzq70wgd88vi52iqwcqz-dbus-1.drv' building '/nix/store/z8l7niwhq5qv6v9vbjp2gch1afg1dx1l-dbus-1.drv' building '/nix/store/ywg7ja5a66h6cmsq7gxbq9ic5sgxdnis-X-Restart-Triggers-dbus-broker.drv' building '/nix/store/1x0bn4dk89176w307qfbjlgz91r17p6s-X-Restart-Triggers-dbus-broker.drv' building '/nix/store/xm4n9618ria2jkjkax9h8hcdgghsrd0c-X-Restart-Triggers-dbus-broker.drv' building '/nix/store/25zbmp6h0ymriswg29pw8f0p0sj3h54b-unit-dbus-broker.service.drv' building '/nix/store/sag923js814vjyj5lic5dfqsp4ccj92c-unit-dbus-broker.service.drv' building '/nix/store/00wdv4i7bfvnxaf9vcx7xl7dhxqm8pcb-unit-dbus-broker.service.drv' building '/nix/store/95f70bhm764qrfgmxz8jxmbnki200i79-unit-dbus-broker.service.drv' building '/nix/store/c2ankywf6kbync1vaxdkggfcn8xm0riy-unit-dbus-broker.service.drv' building '/nix/store/m8mms48rpqvpcbkg8kxmq78dbz8g2gp4-unit-dbus-broker.service.drv' building '/nix/store/vmrl9cm7fggkrpd447bzbnklj42n4a9q-user-units.drv' building '/nix/store/5965lm8ni65al3sv2nkr7mmlk2xzbnds-system-units.drv' building '/nix/store/9mbnxhzzrvgv9jxb8y5hvfpayisb96ni-system-units.drv' building '/nix/store/bjg2m9m1flb0lwswkqpagxslb8vb9av8-system-units.drv' building '/nix/store/35bm137c0k6zz7qf7rnfvsvrkrpk3rkh-user-units.drv' building '/nix/store/yhy9hi0b4lr81gyh1v3clcbqvjyqy44z-user-units.drv' building '/nix/store/vrf2qyk04gcpzyv6b7npbnzzga1dkc99-etc.drv' building '/nix/store/csk8mxwf76j7qhg0rwc8h3bv3xbpjazj-etc.drv' building '/nix/store/5321rcp90c5ngh8cvybp18hcxrpsfqg3-etc.drv' building '/nix/store/fr6sqj7is7qf0ha3030mlihpq3d2z8j1-activate.drv' building '/nix/store/m0868qjdn66pbb7av075vg62z3704136-activate.drv' building '/nix/store/jk349r17icpa1sj9g12cvh3w6r82a7za-nixos-system-ca-test.drv' building '/nix/store/cnrb15q3mczpqwvbw9gmc4h40dn349g2-activate.drv' building '/nix/store/sxm40wr659xswgafm49x8l2dmd0djnal-nixos-system-client-test.drv' nixos-system-ca-test> structuredAttrs is enabled building '/nix/store/bkx1cw7y8r9ipzq4plqnxl2l930dk6v9-closure-info.drv' nixos-system-client-test> structuredAttrs is enabled building '/nix/store/sni5f8d6jda9ygwzh2ihb2yk502yc9cg-nixos-system-server-test.drv' closure-info> structuredAttrs is enabled building '/nix/store/nzkwdvgxw8mc33c2czrm2zqr8p6qg7mf-closure-info.drv' nixos-system-server-test> structuredAttrs is enabled closure-info> structuredAttrs is enabled building '/nix/store/a1i1vbsj5a9yppnfddgyal2ib3nk6x83-closure-info.drv' closure-info> structuredAttrs is enabled building '/nix/store/sc06r4zyk76hmfqjwf5ay1vy5n3fv6gr-nixos-test-driver-certificates.drv' nixos-test-driver-certificates> Running type check (enable/disable: config.skipTypeCheck) nixos-test-driver-certificates> See https://nixos.org/manual/nixos/stable/#test-opt-skipTypeCheck nixos-test-driver-certificates> Success: no issues found in 1 source file building '/nix/store/hlzmmm47w6lpgsg3c6sk5ylriwkl9sm7-container-test-run-certificates.drv' on 'ssh-ng://builder@build-x86-01.clan.lol' building '/nix/store/hlzmmm47w6lpgsg3c6sk5ylriwkl9sm7-container-test-run-certificates.drv' container-test-run-certificates> additionally exposed symbols: container-test-run-certificates> ca, client, server, container-test-run-certificates> start_all, machines, driver, Machine, wait_for_signal container-test-run-certificates> Starting ca container-test-run-certificates> Starting client container-test-run-certificates> Starting server container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> <<< NixOS Stage 2 >>> container-test-run-certificates> container-test-run-certificates> booting system configuration /nix/store/v1s6kip25d5xsbhkrn3icxyndj1jvxla-nixos-system-ca-test container-test-run-certificates> running activation script... container-test-run-certificates> setting up /etc... container-test-run-certificates> 2: host0@if3: mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000 container-test-run-certificates> link/ether 42:06:76:42:a9:8d brd ff:ff:ff:ff:ff:ff link-netnsid 0 container-test-run-certificates> setting up age secrets... container-test-run-certificates> starting systemd... container-test-run-certificates> systemd 260.2 running in system mode (+PAM +AUDIT -SELINUX +APPARMOR +IMA +IPE +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS +FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 +PWQUALITY +P11KIT +QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD +BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP +LIBARCHIVE) container-test-run-certificates> Detected virtualization systemd-nspawn. container-test-run-certificates> Detected architecture x86-64. container-test-run-certificates> Detected first boot. container-test-run-certificates> Initializing machine ID from container UUID. container-test-run-certificates> Applying preset policy. container-test-run-certificates> Populated /etc with preset unit settings. container-test-run-certificates> Queued start job for default target Multi-User System. container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> <<< Welcome to NixOS test (x86_64) - console >>> container-test-run-certificates> + systemd-run /bin/sh -c '/nix/store/gph17gb73p6qbrqqjnypfjj5npf0ldyx-coreutils-9.11/bin/sleep 999999999 && echo bd04c621-49b8-4172-808d-0443e1eac80f' container-test-run-certificates> Running as unit: run-p448-i85221712.service; invocation ID: 90e03481c2c04a9894ffa02e36c97e5a container-test-run-certificates> To attach to container ca run on the same machine that runs the test: container-test-run-certificates> sudo nsenter --user --target $(\pgrep -f '^/bin/sh.*bd04c621-49b8-4172-808d-0443e1eac80f') --mount --uts --ipc --net --pid --cgroup /bin/sh -c bash container-test-run-certificates> container-test-run-certificates> To inject external network and continue test, run: container-test-run-certificates> sudo /nix/store/xqnbm0vgqcq9b1b54c80qj9s0qhbwa08-python3-3.13.15/bin/python3.13 /nix/store/8299j9wl2ypxlnv8by75hp9lw3a7v2pr-test-driver-0.0.1/lib/python3.13/site-packages/test_driver/inject_network.py bd04c621-49b8-4172-808d-0443e1eac80f container-test-run-certificates> container-test-run-certificates> <<< NixOS Stage 2 >>> container-test-run-certificates> container-test-run-certificates> booting system configuration /nix/store/scyr1q741g9by48f4ghh2cld2xh7mqf8-nixos-system-client-test container-test-run-certificates> running activation script... container-test-run-certificates> setting up /etc... container-test-run-certificates> 2: host0@if4: mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000 container-test-run-certificates> link/ether 2a:42:35:28:b1:2f brd ff:ff:ff:ff:ff:ff link-netnsid 0 container-test-run-certificates> setting up age secrets... container-test-run-certificates> starting systemd... container-test-run-certificates> systemd 260.2 running in system mode (+PAM +AUDIT -SELINUX +APPARMOR +IMA +IPE +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS +FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 +PWQUALITY +P11KIT +QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD +BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP +LIBARCHIVE) container-test-run-certificates> Detected virtualization systemd-nspawn. container-test-run-certificates> Detected architecture x86-64. container-test-run-certificates> Detected first boot. container-test-run-certificates> Initializing machine ID from container UUID. container-test-run-certificates> Applying preset policy. container-test-run-certificates> Populated /etc with preset unit settings. container-test-run-certificates> Queued start job for default target Multi-User System. container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> <<< Welcome to NixOS test (x86_64) - console >>> container-test-run-certificates> + systemd-run /bin/sh -c '/nix/store/gph17gb73p6qbrqqjnypfjj5npf0ldyx-coreutils-9.11/bin/sleep 999999999 && echo ba388d63-a4ad-471c-8e8d-8355e9afa8d0' container-test-run-certificates> Running as unit: run-p304-i85221718.service; invocation ID: e6186853305e4c3a9da27d1d4b1b1078 container-test-run-certificates> To attach to container client run on the same machine that runs the test: container-test-run-certificates> sudo nsenter --user --target $(\pgrep -f '^/bin/sh.*ba388d63-a4ad-471c-8e8d-8355e9afa8d0') --mount --uts --ipc --net --pid --cgroup /bin/sh -c bash container-test-run-certificates> container-test-run-certificates> To inject external network and continue test, run: container-test-run-certificates> sudo /nix/store/xqnbm0vgqcq9b1b54c80qj9s0qhbwa08-python3-3.13.15/bin/python3.13 /nix/store/8299j9wl2ypxlnv8by75hp9lw3a7v2pr-test-driver-0.0.1/lib/python3.13/site-packages/test_driver/inject_network.py ba388d63-a4ad-471c-8e8d-8355e9afa8d0 container-test-run-certificates> container-test-run-certificates> <<< NixOS Stage 2 >>> container-test-run-certificates> container-test-run-certificates> booting system configuration /nix/store/f8kpd0j786a4nhvrxjv6r489gxw6bayi-nixos-system-server-test container-test-run-certificates> running activation script... container-test-run-certificates> setting up /etc... container-test-run-certificates> 2: host0@if5: mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000 container-test-run-certificates> link/ether be:aa:dd:39:86:e7 brd ff:ff:ff:ff:ff:ff link-netnsid 0 container-test-run-certificates> setting up age secrets... container-test-run-certificates> starting systemd... container-test-run-certificates> systemd 260.2 running in system mode (+PAM +AUDIT -SELINUX +APPARMOR +IMA +IPE +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS +FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 +PWQUALITY +P11KIT +QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD +BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP +LIBARCHIVE) container-test-run-certificates> Detected virtualization systemd-nspawn. container-test-run-certificates> Detected architecture x86-64. container-test-run-certificates> Detected first boot. container-test-run-certificates> Initializing machine ID from container UUID. container-test-run-certificates> Applying preset policy. container-test-run-certificates> Populated /etc with preset unit settings. container-test-run-certificates> Queued start job for default target Multi-User System. container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> <<< Welcome to NixOS test (x86_64) - console >>> container-test-run-certificates> + systemd-run /bin/sh -c '/nix/store/gph17gb73p6qbrqqjnypfjj5npf0ldyx-coreutils-9.11/bin/sleep 999999999 && echo 23461908-e0c3-4782-95c3-d050375743da' container-test-run-certificates> Running as unit: run-p386-i85221722.service; invocation ID: db57960361a449de97cd661792f6643d container-test-run-certificates> To attach to container server run on the same machine that runs the test: container-test-run-certificates> sudo nsenter --user --target $(\pgrep -f '^/bin/sh.*23461908-e0c3-4782-95c3-d050375743da') --mount --uts --ipc --net --pid --cgroup /bin/sh -c bash container-test-run-certificates> container-test-run-certificates> To inject external network and continue test, run: container-test-run-certificates> sudo /nix/store/xqnbm0vgqcq9b1b54c80qj9s0qhbwa08-python3-3.13.15/bin/python3.13 /nix/store/8299j9wl2ypxlnv8by75hp9lw3a7v2pr-test-driver-0.0.1/lib/python3.13/site-packages/test_driver/inject_network.py 23461908-e0c3-4782-95c3-d050375743da container-test-run-certificates> + systemctl restart acme-order-renew-ca.foo.service container-test-run-certificates> + systemctl restart acme-test.foo.service container-test-run-certificates> client: waiting for success: curl -v https://test.foo container-test-run-certificates> + curl -v https://test.foo container-test-run-certificates> * Host test.foo:443 was resolved. container-test-run-certificates> * IPv6: (none) container-test-run-certificates> * IPv4: 192.168.1.3 container-test-run-certificates> * Trying 192.168.1.3:443... container-test-run-certificates> * ALPN: curl offers h2,http/1.1 container-test-run-certificates> } [5 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Client hello (1): container-test-run-certificates> } [1552 bytes data] container-test-run-certificates> * SSL Trust Anchors: container-test-run-certificates> * OpenSSL default paths (fallback) container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Server hello (2): container-test-run-certificates> { [1210 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS change cipher, Change cipher spec (1): container-test-run-certificates> { [1 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): container-test-run-certificates> { [19 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Certificate (11): container-test-run-certificates> { [1008 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, CERT verify (15): container-test-run-certificates> { [111 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Finished (20): container-test-run-certificates> { [52 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): container-test-run-certificates> } [1 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Finished (20): container-test-run-certificates> } [52 bytes data] container-test-run-certificates> * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey container-test-run-certificates> * ALPN: server accepted h2 container-test-run-certificates> * Server certificate: container-test-run-certificates> * subject: CN=test.foo container-test-run-certificates> * start date: Aug 25 00:31:27 2026 GMT container-test-run-certificates> * expire date: Sep 24 00:31:27 2028 GMT container-test-run-certificates> * issuer: CN=minica root ca 62b51c container-test-run-certificates> * Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * subjectAltName: "test.foo" matches cert's "test.foo" container-test-run-certificates> * OpenSSL verify result: 13 container-test-run-certificates> * SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> * closing connection #0 container-test-run-certificates> curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> More details here: https://curl.se/docs/sslcerts.html container-test-run-certificates> container-test-run-certificates> curl failed to verify the legitimacy of the server and therefore could not container-test-run-certificates> establish a secure connection to it. To learn more about this situation and container-test-run-certificates> how to fix it, please visit the webpage mentioned above. container-test-run-certificates> + curl -v https://test.foo container-test-run-certificates> * Host test.foo:443 was resolved. container-test-run-certificates> * IPv6: (none) container-test-run-certificates> * IPv4: 192.168.1.3 container-test-run-certificates> * Trying 192.168.1.3:443... container-test-run-certificates> * ALPN: curl offers h2,http/1.1 container-test-run-certificates> } [5 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Client hello (1): container-test-run-certificates> } [1552 bytes data] container-test-run-certificates> * SSL Trust Anchors: container-test-run-certificates> * OpenSSL default paths (fallback) container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Server hello (2): container-test-run-certificates> { [1210 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS change cipher, Change cipher spec (1): container-test-run-certificates> { [1 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): container-test-run-certificates> { [19 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Certificate (11): container-test-run-certificates> { [1008 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, CERT verify (15): container-test-run-certificates> { [112 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Finished (20): container-test-run-certificates> { [52 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): container-test-run-certificates> } [1 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Finished (20): container-test-run-certificates> } [52 bytes data] container-test-run-certificates> * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey container-test-run-certificates> * ALPN: server accepted h2 container-test-run-certificates> * Server certificate: container-test-run-certificates> * subject: CN=test.foo container-test-run-certificates> * start date: Aug 25 00:31:27 2026 GMT container-test-run-certificates> * expire date: Sep 24 00:31:27 2028 GMT container-test-run-certificates> * issuer: CN=minica root ca 62b51c container-test-run-certificates> * Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * subjectAltName: "test.foo" matches cert's "test.foo" container-test-run-certificates> * OpenSSL verify result: 13 container-test-run-certificates> * SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> * closing connection #0 container-test-run-certificates> curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> More details here: https://curl.se/docs/sslcerts.html container-test-run-certificates> container-test-run-certificates> curl failed to verify the legitimacy of the server and therefore could not container-test-run-certificates> establish a secure connection to it. To learn more about this situation and container-test-run-certificates> how to fix it, please visit the webpage mentioned above. container-test-run-certificates> + curl -v https://test.foo container-test-run-certificates> * Host test.foo:443 was resolved. container-test-run-certificates> * IPv6: (none) container-test-run-certificates> * IPv4: 192.168.1.3 container-test-run-certificates> * Trying 192.168.1.3:443... container-test-run-certificates> * ALPN: curl offers h2,http/1.1 container-test-run-certificates> } [5 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Client hello (1): container-test-run-certificates> } [1552 bytes data] container-test-run-certificates> * SSL Trust Anchors: container-test-run-certificates> * OpenSSL default paths (fallback) container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Server hello (2): container-test-run-certificates> { [1210 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS change cipher, Change cipher spec (1): container-test-run-certificates> { [1 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): container-test-run-certificates> { [19 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Certificate (11): container-test-run-certificates> { [1008 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, CERT verify (15): container-test-run-certificates> { [111 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Finished (20): container-test-run-certificates> { [52 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): container-test-run-certificates> } [1 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Finished (20): container-test-run-certificates> } [52 bytes data] container-test-run-certificates> * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey container-test-run-certificates> * ALPN: server accepted h2 container-test-run-certificates> * Server certificate: container-test-run-certificates> * subject: CN=test.foo container-test-run-certificates> * start date: Aug 25 00:31:27 2026 GMT container-test-run-certificates> * expire date: Sep 24 00:31:27 2028 GMT container-test-run-certificates> * issuer: CN=minica root ca 62b51c container-test-run-certificates> * Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * subjectAltName: "test.foo" matches cert's "test.foo" container-test-run-certificates> * OpenSSL verify result: 13 container-test-run-certificates> * SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> * closing connection #0 container-test-run-certificates> curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> More details here: https://curl.se/docs/sslcerts.html container-test-run-certificates> container-test-run-certificates> curl failed to verify the legitimacy of the server and therefore could not container-test-run-certificates> establish a secure connection to it. To learn more about this situation and container-test-run-certificates> how to fix it, please visit the webpage mentioned above. container-test-run-certificates> + curl -v https://test.foo container-test-run-certificates> * Host test.foo:443 was resolved. container-test-run-certificates> * IPv6: (none) container-test-run-certificates> * IPv4: 192.168.1.3 container-test-run-certificates> * Trying 192.168.1.3:443... container-test-run-certificates> * ALPN: curl offers h2,http/1.1 container-test-run-certificates> } [5 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Client hello (1): container-test-run-certificates> } [1552 bytes data] container-test-run-certificates> * SSL Trust Anchors: container-test-run-certificates> * OpenSSL default paths (fallback) container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Server hello (2): container-test-run-certificates> { [1210 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS change cipher, Change cipher spec (1): container-test-run-certificates> { [1 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): container-test-run-certificates> { [19 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Certificate (11): container-test-run-certificates> { [930 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, CERT verify (15): container-test-run-certificates> { [79 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Finished (20): container-test-run-certificates> { [52 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): container-test-run-certificates> } [1 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Finished (20): container-test-run-certificates> } [52 bytes data] container-test-run-certificates> * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey container-test-run-certificates> * ALPN: server accepted h2 container-test-run-certificates> * Server certificate: container-test-run-certificates> * subject: CN=test.foo container-test-run-certificates> * start date: Aug 25 00:30:40 2026 GMT container-test-run-certificates> * expire date: Nov 23 00:31:40 2026 GMT container-test-run-certificates> * issuer: CN=Clan Intermediate CA container-test-run-certificates> * Certificate level 0: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA256 container-test-run-certificates> * Certificate level 1: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA256 container-test-run-certificates> * Certificate level 2: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA256 container-test-run-certificates> * subjectAltName: "test.foo" matches cert's "test.foo" container-test-run-certificates> * OpenSSL verify result: 0 container-test-run-certificates> * SSL certificate verified via OpenSSL. container-test-run-certificates> * Established connection to test.foo (192.168.1.3 port 443) from 192.168.1.2 port 50854 container-test-run-certificates> % Total % Received % Xferd Average Speed Time Time Time Current container-test-run-certificates> Dload Upload Total Spent Left Speed container-test-run-certificates> 0 0 0 0 0 0 0 0 0* using HTTP/2 container-test-run-certificates> * [HTTP/2] [1] OPENED stream for https://test.foo/ container-test-run-certificates> * [HTTP/2] [1] [:method: GET] container-test-run-certificates> * [HTTP/2] [1] [:scheme: https] container-test-run-certificates> * [HTTP/2] [1] [:authority: test.foo] container-test-run-certificates> * [HTTP/2] [1] [:path: /] container-test-run-certificates> * [HTTP/2] [1] [user-agent: curl/8.21.0] container-test-run-certificates> * [HTTP/2] [1] [accept: */*] container-test-run-certificates> } [5 bytes data] container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> * Request completely sent off container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4): container-test-run-certificates> { [265 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4): container-test-run-certificates> { [265 bytes data] container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> { [5 bytes data] container-test-run-certificates> 100 20 100 20 0 0 1829 0 0 container-test-run-certificates> * Connection #0 to host test.foo:443 left intact container-test-run-certificates> (finished: waiting for success: curl -v https://test.foo, in 3.08 seconds) container-test-run-certificates> + openssl s_client -connect test.foo:443 -servername test.foo container-test-run-certificates> + openssl x509 -text -noout container-test-run-certificates> Certificate: container-test-run-certificates> Data: container-test-run-certificates> Version: 3 (0x2) container-test-run-certificates> Serial Number: container-test-run-certificates> f7:3a:7c:17:57:43:28:57:99:b2:cb:ad:06:50:7f:da container-test-run-certificates> Signature Algorithm: ecdsa-with-SHA256 container-test-run-certificates> Issuer: CN=Clan Intermediate CA container-test-run-certificates> Validity container-test-run-certificates> Not Before: Aug 25 00:30:40 2026 GMT container-test-run-certificates> Not After : Nov 23 00:31:40 2026 GMT container-test-run-certificates> Subject: CN=test.foo container-test-run-certificates> Subject Public Key Info: container-test-run-certificates> Public Key Algorithm: id-ecPublicKey container-test-run-certificates> Public-Key: (256 bit) container-test-run-certificates> pub: container-test-run-certificates> 04:c2:d4:67:13:d4:2b:4e:cb:e6:f5:b7:75:c0:e7: container-test-run-certificates> ba:15:f7:52:21:42:53:6a:17:4e:c3:27:8c:68:a5: container-test-run-certificates> 49:28:8c:3d:78:11:d0:67:8b:fe:47:ce:73:7c:9b: container-test-run-certificates> bc:b7:e3:60:e6:84:b7:90:89:a4:71:31:79:df:8d: container-test-run-certificates> 1b:19:83:b6:62 container-test-run-certificates> ASN1 OID: prime256v1 container-test-run-certificates> NIST CURVE: P-256 container-test-run-certificates> X509v3 extensions: container-test-run-certificates> X509v3 Key Usage: critical container-test-run-certificates> Digital Signature container-test-run-certificates> X509v3 Extended Key Usage: container-test-run-certificates> TLS Web Server Authentication, TLS Web Client Authentication container-test-run-certificates> X509v3 Subject Key Identifier: container-test-run-certificates> 11:F6:A6:84:9B:FA:1A:E5:B3:24:0E:AF:E6:D4:94:BA:0A:3B:3B:29 container-test-run-certificates> X509v3 Authority Key Identifier: container-test-run-certificates> A8:D4:E7:C0:F3:FC:95:7F:05:C3:B6:9F:D5:A6:73:64:4F:37:99:CC container-test-run-certificates> X509v3 Subject Alternative Name: container-test-run-certificates> DNS:test.foo container-test-run-certificates> 1.3.6.1.4.1.37476.9000.64.1: container-test-run-certificates> 0......acme.. container-test-run-certificates> Signature Algorithm: ecdsa-with-SHA256 container-test-run-certificates> Signature Value: container-test-run-certificates> 30:46:02:21:00:97:e8:b0:ef:23:d4:bd:ab:74:de:78:94:73: container-test-run-certificates> ee:c5:2e:1b:bb:35:67:16:73:75:f4:26:5d:d6:fe:b3:da:55: container-test-run-certificates> 42:02:21:00:96:8d:87:f0:59:52:70:42:d4:ff:6d:85:a5:2a: container-test-run-certificates> f1:e6:17:59:9d:3f:7b:6a:e0:77:ed:a2:d2:e8:09:02:b3:12 container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> post-build step Upload to niks3: ok time=2026-08-25T00:31:43.242Z level=INFO msg="Uploading 0 paths to niks3.clan.lol (1 already cached)" time=2026-08-25T00:31:43.936Z level=INFO msg="Uploading 1 narinfos" time=2026-08-25T00:31:44.040Z level=INFO msg="Upload complete. (893ms)"