these 32 derivations will be built: /nix/store/5msnyrdlkjvi0iz67c1ma5lyx385phqp-unit-nginx-config-reload.service.drv /nix/store/9dj3j2h6ibqy1qxmhl7ndcgx2wxjkvsd-unit-script-acme-order-renew-test.foo-start.drv /nix/store/6wwm5s2zbnc2v1lfdhq92450yxl6jhi2-unit-acme-order-renew-test.foo.service.drv /nix/store/cf24ix5n1i6bgcxkbq7740rah9xk97af-X-Restart-Triggers-dbus-broker.drv /nix/store/701pd9hvkxj93544cwzsk53psd8qf731-unit-dbus-broker.service.drv /nix/store/9fiz4ww034g2jg5xnprxphpsdjf428kl-unit-script-acme-test.foo-start.drv /nix/store/c12kaxrrs6dl0w8988s91q8i9wkwf5vl-X-Restart-Triggers-acme-test.foo.drv /nix/store/wkqyp75zfch5qbhdsw4lbylp4zirbvyx-unit-acme-test.foo.service.drv /nix/store/3zc1r3hzqgz49fknzhm0swij0yk26y7b-system-units.drv /nix/store/kp96zmpjiwnvvgnnqg4iavqy685dcb0k-unit-dbus-broker.service.drv /nix/store/z9akj4kidq3p8xnbff203fympisi02zv-user-units.drv /nix/store/n88z32pfwwy8x3f122942bbjj7p1k4az-etc.drv /nix/store/axsafyxvyfjb36dvpff80v2fsggvvnc8-activate.drv /nix/store/fzg7pcif3yj21amnds9n7dzqlmc8a223-nixos-system-server-test.drv /nix/store/4yygqrhcn9nrgjhr9w50ic9zifk0w75f-closure-info.drv /nix/store/7f87ai3ga263n309br30h59bszyx66hg-etc-hostname.drv /nix/store/84hdqh31508mw18hi4vfv0w44xm3pssv-X-Restart-Triggers-acme-ca.foo.drv /nix/store/zc8p8ljy34xv8abia76icgm21x6whvzz-unit-script-acme-ca.foo-start.drv /nix/store/gms8lcy8c9cl7n0vws2aj3mai1dma3rx-unit-acme-ca.foo.service.drv /nix/store/kd1wqbjdd6m67d1wbb5k0jl3ddg6x0ma-X-Restart-Triggers-step-ca.drv /nix/store/n6ym906qbdsbysmwmy44rna3k0bcq1bx-unit-step-ca.service.drv /nix/store/fspiwnjjmmx7iikaimq3fxqg688d3hy3-unit-script-nginx-pre-start.drv /nix/store/r0lxsvk46zyqnn2j9yskwl180qn21fsr-unit-nginx.service.drv /nix/store/33xshq6zwm1991fwq956ymrcafnjcdjb-unit-script-acme-order-renew-ca.foo-start.drv /nix/store/xx395p8rpb33bzspcpf3ncqd6gsq0hj7-unit-acme-order-renew-ca.foo.service.drv /nix/store/xpr8rc893sm4cvmcf9xfpaz8yy1lwksp-system-units.drv /nix/store/w75855sbb4qghq8h7mgw8wrkgdcnamrh-etc.drv /nix/store/cx5zf6sc9sn0jhk115m4ch7ayl16h8k3-activate.drv /nix/store/j816z6llmy4jmpwphqzwxyy73ckv25n7-nixos-system-ca-test.drv /nix/store/8nv8rmwrly2jarmhgbihkkwaagz52igl-closure-info.drv /nix/store/22pqrzwizkmjbvfvfxgjj9b3rbrxx1z7-nixos-test-driver-certificates.drv /nix/store/7d0s223mdfilqwn4423y6yy4ag45w9ya-container-test-run-certificates.drv this path will be fetched (8.1 KiB download, 24.5 KiB unpacked): /nix/store/10r8p4z3azh9jk6ya76x90ngrxd3jnzr-flock-0.4.0 building '/nix/store/7f87ai3ga263n309br30h59bszyx66hg-etc-hostname.drv' building '/nix/store/5msnyrdlkjvi0iz67c1ma5lyx385phqp-unit-nginx-config-reload.service.drv' building '/nix/store/cf24ix5n1i6bgcxkbq7740rah9xk97af-X-Restart-Triggers-dbus-broker.drv' building '/nix/store/kd1wqbjdd6m67d1wbb5k0jl3ddg6x0ma-X-Restart-Triggers-step-ca.drv' building '/nix/store/fspiwnjjmmx7iikaimq3fxqg688d3hy3-unit-script-nginx-pre-start.drv' building '/nix/store/701pd9hvkxj93544cwzsk53psd8qf731-unit-dbus-broker.service.drv' building '/nix/store/kp96zmpjiwnvvgnnqg4iavqy685dcb0k-unit-dbus-broker.service.drv' building '/nix/store/r0lxsvk46zyqnn2j9yskwl180qn21fsr-unit-nginx.service.drv' building '/nix/store/n6ym906qbdsbysmwmy44rna3k0bcq1bx-unit-step-ca.service.drv' building '/nix/store/84hdqh31508mw18hi4vfv0w44xm3pssv-X-Restart-Triggers-acme-ca.foo.drv' building '/nix/store/c12kaxrrs6dl0w8988s91q8i9wkwf5vl-X-Restart-Triggers-acme-test.foo.drv' building '/nix/store/zc8p8ljy34xv8abia76icgm21x6whvzz-unit-script-acme-ca.foo-start.drv' building '/nix/store/33xshq6zwm1991fwq956ymrcafnjcdjb-unit-script-acme-order-renew-ca.foo-start.drv' building '/nix/store/9dj3j2h6ibqy1qxmhl7ndcgx2wxjkvsd-unit-script-acme-order-renew-test.foo-start.drv' building '/nix/store/9fiz4ww034g2jg5xnprxphpsdjf428kl-unit-script-acme-test.foo-start.drv' building '/nix/store/gms8lcy8c9cl7n0vws2aj3mai1dma3rx-unit-acme-ca.foo.service.drv' building '/nix/store/z9akj4kidq3p8xnbff203fympisi02zv-user-units.drv' building '/nix/store/xx395p8rpb33bzspcpf3ncqd6gsq0hj7-unit-acme-order-renew-ca.foo.service.drv' building '/nix/store/6wwm5s2zbnc2v1lfdhq92450yxl6jhi2-unit-acme-order-renew-test.foo.service.drv' building '/nix/store/wkqyp75zfch5qbhdsw4lbylp4zirbvyx-unit-acme-test.foo.service.drv' building '/nix/store/3zc1r3hzqgz49fknzhm0swij0yk26y7b-system-units.drv' building '/nix/store/xpr8rc893sm4cvmcf9xfpaz8yy1lwksp-system-units.drv' building '/nix/store/n88z32pfwwy8x3f122942bbjj7p1k4az-etc.drv' building '/nix/store/w75855sbb4qghq8h7mgw8wrkgdcnamrh-etc.drv' building '/nix/store/axsafyxvyfjb36dvpff80v2fsggvvnc8-activate.drv' building '/nix/store/cx5zf6sc9sn0jhk115m4ch7ayl16h8k3-activate.drv' building '/nix/store/fzg7pcif3yj21amnds9n7dzqlmc8a223-nixos-system-server-test.drv' building '/nix/store/j816z6llmy4jmpwphqzwxyy73ckv25n7-nixos-system-ca-test.drv' nixos-system-server-test> structuredAttrs is enabled building '/nix/store/4yygqrhcn9nrgjhr9w50ic9zifk0w75f-closure-info.drv' nixos-system-ca-test> structuredAttrs is enabled building '/nix/store/8nv8rmwrly2jarmhgbihkkwaagz52igl-closure-info.drv' closure-info> structuredAttrs is enabled closure-info> structuredAttrs is enabled building '/nix/store/22pqrzwizkmjbvfvfxgjj9b3rbrxx1z7-nixos-test-driver-certificates.drv' nixos-test-driver-certificates> Running type check (enable/disable: config.skipTypeCheck) nixos-test-driver-certificates> See https://nixos.org/manual/nixos/stable/#test-opt-skipTypeCheck nixos-test-driver-certificates> Success: no issues found in 1 source file building '/nix/store/7d0s223mdfilqwn4423y6yy4ag45w9ya-container-test-run-certificates.drv' on 'ssh-ng://builder@build-x86-01.clan.lol' building '/nix/store/7d0s223mdfilqwn4423y6yy4ag45w9ya-container-test-run-certificates.drv' container-test-run-certificates> additionally exposed symbols: container-test-run-certificates> ca, client, server, container-test-run-certificates> start_all, machines, driver, Machine, wait_for_signal container-test-run-certificates> Starting ca container-test-run-certificates> Starting client container-test-run-certificates> Starting server container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> <<< NixOS Stage 2 >>> container-test-run-certificates> container-test-run-certificates> booting system configuration /nix/store/fr8qjv1130ks2ldy55rs5p4zs10mxd08-nixos-system-ca-test container-test-run-certificates> running activation script... container-test-run-certificates> setting up /etc... container-test-run-certificates> 2: host0@if4: mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000 container-test-run-certificates> link/ether 42:06:76:42:a9:8d brd ff:ff:ff:ff:ff:ff link-netnsid 0 container-test-run-certificates> setting up age secrets... container-test-run-certificates> starting systemd... container-test-run-certificates> systemd 260.2 running in system mode (+PAM +AUDIT -SELINUX +APPARMOR +IMA +IPE +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS +FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 +PWQUALITY +P11KIT +QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD +BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP +LIBARCHIVE) container-test-run-certificates> Detected virtualization systemd-nspawn. container-test-run-certificates> Detected architecture x86-64. container-test-run-certificates> Detected first boot. container-test-run-certificates> Initializing machine ID from container UUID. container-test-run-certificates> Applying preset policy. container-test-run-certificates> Populated /etc with preset unit settings. container-test-run-certificates> Queued start job for default target Multi-User System. container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> <<< Welcome to NixOS test (x86_64) - console >>> container-test-run-certificates> + systemd-run /bin/sh -c '/nix/store/61685rbaxmpigwi3z23i33sv3jyfl70q-coreutils-9.11/bin/sleep 999999999 && echo aca006a7-4f52-4d4c-a3fd-a13a67524d64' container-test-run-certificates> Running as unit: run-p448-i4059716.service; invocation ID: d70d07dd712d4866a5738a871a5b21f2 container-test-run-certificates> To attach to container ca run on the same machine that runs the test: container-test-run-certificates> sudo nsenter --user --target $(\pgrep -f '^/bin/sh.*aca006a7-4f52-4d4c-a3fd-a13a67524d64') --mount --uts --ipc --net --pid --cgroup /bin/sh -c bash container-test-run-certificates> container-test-run-certificates> To inject external network and continue test, run: container-test-run-certificates> sudo /nix/store/h3l4z7p6wny3phbckwwhy1i2g52pdnj4-python3-3.13.15/bin/python3.13 /nix/store/f960jm4nawb9zr6cb9d0vfpb7hifp96b-test-driver-0.0.1/lib/python3.13/site-packages/test_driver/inject_network.py aca006a7-4f52-4d4c-a3fd-a13a67524d64 container-test-run-certificates> container-test-run-certificates> <<< NixOS Stage 2 >>> container-test-run-certificates> container-test-run-certificates> booting system configuration /nix/store/0m0vvpadd9qsakk0a7z9jwhf315xxcb6-nixos-system-client-test container-test-run-certificates> running activation script... container-test-run-certificates> setting up /etc... container-test-run-certificates> 2: host0@if3: mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000 container-test-run-certificates> link/ether 2a:42:35:28:b1:2f brd ff:ff:ff:ff:ff:ff link-netnsid 0 container-test-run-certificates> setting up age secrets... container-test-run-certificates> starting systemd... container-test-run-certificates> systemd 260.2 running in system mode (+PAM +AUDIT -SELINUX +APPARMOR +IMA +IPE +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS +FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 +PWQUALITY +P11KIT +QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD +BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP +LIBARCHIVE) container-test-run-certificates> Detected virtualization systemd-nspawn. container-test-run-certificates> Detected architecture x86-64. container-test-run-certificates> Detected first boot. container-test-run-certificates> Initializing machine ID from container UUID. container-test-run-certificates> Applying preset policy. container-test-run-certificates> Populated /etc with preset unit settings. container-test-run-certificates> Queued start job for default target Multi-User System. container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> <<< Welcome to NixOS test (x86_64) - console >>> container-test-run-certificates> + systemd-run /bin/sh -c '/nix/store/61685rbaxmpigwi3z23i33sv3jyfl70q-coreutils-9.11/bin/sleep 999999999 && echo 6ed6cd38-fe9e-4b66-9129-3699a3d41a03' container-test-run-certificates> Running as unit: run-p304-i4059723.service; invocation ID: 43580e9878cf4fa789b64c4b10a183f2 container-test-run-certificates> To attach to container client run on the same machine that runs the test: container-test-run-certificates> sudo nsenter --user --target $(\pgrep -f '^/bin/sh.*6ed6cd38-fe9e-4b66-9129-3699a3d41a03') --mount --uts --ipc --net --pid --cgroup /bin/sh -c bash container-test-run-certificates> container-test-run-certificates> To inject external network and continue test, run: container-test-run-certificates> sudo /nix/store/h3l4z7p6wny3phbckwwhy1i2g52pdnj4-python3-3.13.15/bin/python3.13 /nix/store/f960jm4nawb9zr6cb9d0vfpb7hifp96b-test-driver-0.0.1/lib/python3.13/site-packages/test_driver/inject_network.py 6ed6cd38-fe9e-4b66-9129-3699a3d41a03 container-test-run-certificates> container-test-run-certificates> <<< NixOS Stage 2 >>> container-test-run-certificates> container-test-run-certificates> booting system configuration /nix/store/nazgk4c2i78x92n8qya5szjqypjb9w8b-nixos-system-server-test container-test-run-certificates> running activation script... container-test-run-certificates> setting up /etc... container-test-run-certificates> 2: host0@if5: mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000 container-test-run-certificates> link/ether be:aa:dd:39:86:e7 brd ff:ff:ff:ff:ff:ff link-netnsid 0 container-test-run-certificates> setting up age secrets... container-test-run-certificates> starting systemd... container-test-run-certificates> systemd 260.2 running in system mode (+PAM +AUDIT -SELINUX +APPARMOR +IMA +IPE +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS +FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 +PWQUALITY +P11KIT +QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD +BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP +LIBARCHIVE) container-test-run-certificates> Detected virtualization systemd-nspawn. container-test-run-certificates> Detected architecture x86-64. container-test-run-certificates> Detected first boot. container-test-run-certificates> Initializing machine ID from container UUID. container-test-run-certificates> Applying preset policy. container-test-run-certificates> Populated /etc with preset unit settings. container-test-run-certificates> Queued start job for default target Multi-User System. container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> <<< Welcome to NixOS test (x86_64) - console >>> container-test-run-certificates> + systemd-run /bin/sh -c '/nix/store/61685rbaxmpigwi3z23i33sv3jyfl70q-coreutils-9.11/bin/sleep 999999999 && echo 36a5273c-4da6-4653-9ab1-966ffa0e8bf7' container-test-run-certificates> Running as unit: run-p387-i4059732.service; invocation ID: ce42728e12684402b9d406072c009b4b container-test-run-certificates> To attach to container server run on the same machine that runs the test: container-test-run-certificates> sudo nsenter --user --target $(\pgrep -f '^/bin/sh.*36a5273c-4da6-4653-9ab1-966ffa0e8bf7') --mount --uts --ipc --net --pid --cgroup /bin/sh -c bash container-test-run-certificates> container-test-run-certificates> To inject external network and continue test, run: container-test-run-certificates> sudo /nix/store/h3l4z7p6wny3phbckwwhy1i2g52pdnj4-python3-3.13.15/bin/python3.13 /nix/store/f960jm4nawb9zr6cb9d0vfpb7hifp96b-test-driver-0.0.1/lib/python3.13/site-packages/test_driver/inject_network.py 36a5273c-4da6-4653-9ab1-966ffa0e8bf7 container-test-run-certificates> + systemctl restart acme-order-renew-ca.foo.service container-test-run-certificates> + systemctl restart acme-test.foo.service container-test-run-certificates> client: waiting for success: curl -v https://test.foo container-test-run-certificates> + curl -v https://test.foo container-test-run-certificates> * Host test.foo:443 was resolved. container-test-run-certificates> * IPv6: (none) container-test-run-certificates> * IPv4: 192.168.1.3 container-test-run-certificates> * Trying 192.168.1.3:443... container-test-run-certificates> * ALPN: curl offers h2,http/1.1 container-test-run-certificates> } [5 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Client hello (1): container-test-run-certificates> } [1552 bytes data] container-test-run-certificates> * SSL Trust Anchors: container-test-run-certificates> * OpenSSL default paths (fallback) container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Server hello (2): container-test-run-certificates> { [1210 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS change cipher, Change cipher spec (1): container-test-run-certificates> { [1 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): container-test-run-certificates> { [19 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Certificate (11): container-test-run-certificates> { [1007 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, CERT verify (15): container-test-run-certificates> { [112 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Finished (20): container-test-run-certificates> { [52 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): container-test-run-certificates> } [1 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Finished (20): container-test-run-certificates> } [52 bytes data] container-test-run-certificates> * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey container-test-run-certificates> * ALPN: server accepted h2 container-test-run-certificates> * Server certificate: container-test-run-certificates> * subject: CN=test.foo container-test-run-certificates> * start date: Sep 10 00:09:17 2026 GMT container-test-run-certificates> * expire date: Oct 10 00:09:17 2028 GMT container-test-run-certificates> * issuer: CN=minica root ca 59acb8 container-test-run-certificates> * Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * subjectAltName: "test.foo" matches cert's "test.foo" container-test-run-certificates> * OpenSSL verify result: 13 container-test-run-certificates> * SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> * closing connection #0 container-test-run-certificates> curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> More details here: https://curl.se/docs/sslcerts.html container-test-run-certificates> container-test-run-certificates> curl failed to verify the legitimacy of the server and therefore could not container-test-run-certificates> establish a secure connection to it. To learn more about this situation and container-test-run-certificates> how to fix it, please visit the webpage mentioned above. container-test-run-certificates> + curl -v https://test.foo container-test-run-certificates> * Host test.foo:443 was resolved. container-test-run-certificates> * IPv6: (none) container-test-run-certificates> * IPv4: 192.168.1.3 container-test-run-certificates> * Trying 192.168.1.3:443... container-test-run-certificates> * ALPN: curl offers h2,http/1.1 container-test-run-certificates> } [5 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Client hello (1): container-test-run-certificates> } [1552 bytes data] container-test-run-certificates> * SSL Trust Anchors: container-test-run-certificates> * OpenSSL default paths (fallback) container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Server hello (2): container-test-run-certificates> { [1210 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS change cipher, Change cipher spec (1): container-test-run-certificates> { [1 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): container-test-run-certificates> { [19 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Certificate (11): container-test-run-certificates> { [1007 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, CERT verify (15): container-test-run-certificates> { [112 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Finished (20): container-test-run-certificates> { [52 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): container-test-run-certificates> } [1 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Finished (20): container-test-run-certificates> } [52 bytes data] container-test-run-certificates> * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey container-test-run-certificates> * ALPN: server accepted h2 container-test-run-certificates> * Server certificate: container-test-run-certificates> * subject: CN=test.foo container-test-run-certificates> * start date: Sep 10 00:09:17 2026 GMT container-test-run-certificates> * expire date: Oct 10 00:09:17 2028 GMT container-test-run-certificates> * issuer: CN=minica root ca 59acb8 container-test-run-certificates> * Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * subjectAltName: "test.foo" matches cert's "test.foo" container-test-run-certificates> * OpenSSL verify result: 13 container-test-run-certificates> * SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> * closing connection #0 container-test-run-certificates> curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> More details here: https://curl.se/docs/sslcerts.html container-test-run-certificates> container-test-run-certificates> curl failed to verify the legitimacy of the server and therefore could not container-test-run-certificates> establish a secure connection to it. To learn more about this situation and container-test-run-certificates> how to fix it, please visit the webpage mentioned above. container-test-run-certificates> + curl -v https://test.foo container-test-run-certificates> * Host test.foo:443 was resolved. container-test-run-certificates> * IPv6: (none) container-test-run-certificates> * IPv4: 192.168.1.3 container-test-run-certificates> * Trying 192.168.1.3:443... container-test-run-certificates> * ALPN: curl offers h2,http/1.1 container-test-run-certificates> } [5 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Client hello (1): container-test-run-certificates> } [1552 bytes data] container-test-run-certificates> * SSL Trust Anchors: container-test-run-certificates> * OpenSSL default paths (fallback) container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Server hello (2): container-test-run-certificates> { [1210 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS change cipher, Change cipher spec (1): container-test-run-certificates> { [1 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): container-test-run-certificates> { [19 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Certificate (11): container-test-run-certificates> { [932 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, CERT verify (15): container-test-run-certificates> { [79 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Finished (20): container-test-run-certificates> { [52 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): container-test-run-certificates> } [1 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Finished (20): container-test-run-certificates> } [52 bytes data] container-test-run-certificates> * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey container-test-run-certificates> * ALPN: server accepted h2 container-test-run-certificates> * Server certificate: container-test-run-certificates> * subject: CN=test.foo container-test-run-certificates> * start date: Sep 10 00:08:30 2026 GMT container-test-run-certificates> * expire date: Dec 9 00:09:30 2026 GMT container-test-run-certificates> * issuer: CN=Clan Intermediate CA container-test-run-certificates> * Certificate level 0: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA256 container-test-run-certificates> * Certificate level 1: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA256 container-test-run-certificates> * Certificate level 2: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA256 container-test-run-certificates> * subjectAltName: "test.foo" matches cert's "test.foo" container-test-run-certificates> * OpenSSL verify result: 0 container-test-run-certificates> * SSL certificate verified via OpenSSL. container-test-run-certificates> * Established connection to test.foo (192.168.1.3 port 443) from 192.168.1.2 port 43086 container-test-run-certificates> % Total % Received % Xferd Average Speed Time Time Time Current container-test-run-certificates> Dload Upload Total Spent Left Speed container-test-run-certificates> 0 0 0 0 0 0 0 0 0* using HTTP/2 container-test-run-certificates> * [HTTP/2] [1] OPENED stream for https://test.foo/ container-test-run-certificates> * [HTTP/2] [1] [:method: GET] container-test-run-certificates> * [HTTP/2] [1] [:scheme: https] container-test-run-certificates> * [HTTP/2] [1] [:authority: test.foo] container-test-run-certificates> * [HTTP/2] [1] [:path: /] container-test-run-certificates> * [HTTP/2] [1] [user-agent: curl/8.21.0] container-test-run-certificates> * [HTTP/2] [1] [accept: */*] container-test-run-certificates> } [5 bytes data] container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> * Request completely sent off container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4): container-test-run-certificates> { [265 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4): container-test-run-certificates> { [265 bytes data] container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> { [5 bytes data] container-test-run-certificates> 100 20 100 20 0 0 1828 0 0 container-test-run-certificates> * Connection #0 to host test.foo:443 left intact container-test-run-certificates> (finished: waiting for success: curl -v https://test.foo, in 2.06 seconds) container-test-run-certificates> + openssl s_client -connect test.foo:443 -servername test.foo container-test-run-certificates> + openssl x509 -text -noout container-test-run-certificates> Certificate: container-test-run-certificates> Data: container-test-run-certificates> Version: 3 (0x2) container-test-run-certificates> Serial Number: container-test-run-certificates> 8e:99:b7:34:03:39:a9:6a:f7:5a:04:f3:6d:f3:6b:a8 container-test-run-certificates> Signature Algorithm: ecdsa-with-SHA256 container-test-run-certificates> Issuer: CN=Clan Intermediate CA container-test-run-certificates> Validity container-test-run-certificates> Not Before: Sep 10 00:08:30 2026 GMT container-test-run-certificates> Not After : Dec 9 00:09:30 2026 GMT container-test-run-certificates> Subject: CN=test.foo container-test-run-certificates> Subject Public Key Info: container-test-run-certificates> Public Key Algorithm: id-ecPublicKey container-test-run-certificates> Public-Key: (256 bit) container-test-run-certificates> pub: container-test-run-certificates> 04:70:0a:13:dc:0a:fa:69:e8:8c:df:87:52:00:6b: container-test-run-certificates> 51:6f:ea:dc:20:18:5c:16:e3:d0:c3:09:eb:e5:17: container-test-run-certificates> 99:2e:02:10:f8:33:51:68:8b:c4:42:1d:17:28:df: container-test-run-certificates> b8:05:ea:94:6e:17:86:7e:8a:6a:e8:1c:91:6c:9e: container-test-run-certificates> 5b:80:2b:00:07 container-test-run-certificates> ASN1 OID: prime256v1 container-test-run-certificates> NIST CURVE: P-256 container-test-run-certificates> X509v3 extensions: container-test-run-certificates> X509v3 Key Usage: critical container-test-run-certificates> Digital Signature container-test-run-certificates> X509v3 Extended Key Usage: container-test-run-certificates> TLS Web Server Authentication, TLS Web Client Authentication container-test-run-certificates> X509v3 Subject Key Identifier: container-test-run-certificates> D3:45:0A:30:E8:C2:74:E6:D7:7E:15:E5:FE:EA:CA:0C:91:FC:5B:6F container-test-run-certificates> X509v3 Authority Key Identifier: container-test-run-certificates> F2:6E:AD:43:4C:57:C5:04:D1:7D:E5:0C:97:88:BA:6F:32:E5:10:82 container-test-run-certificates> X509v3 Subject Alternative Name: container-test-run-certificates> DNS:test.foo container-test-run-certificates> 1.3.6.1.4.1.37476.9000.64.1: container-test-run-certificates> 0......acme.. container-test-run-certificates> Signature Algorithm: ecdsa-with-SHA256 container-test-run-certificates> Signature Value: container-test-run-certificates> 30:45:02:21:00:9c:9c:f4:ee:7e:0d:59:02:70:7d:e9:5e:32: container-test-run-certificates> 01:cf:71:55:02:49:b2:98:d9:5f:19:b0:11:10:13:97:8a:a4: container-test-run-certificates> 60:02:20:3b:c1:da:8c:1d:65:0d:fb:6d:0d:c7:10:bf:bb:82: container-test-run-certificates> 20:6f:4c:09:91:05:a7:7f:37:08:c1:54:91:1c:b2:a8:49 container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> upload niks3: failed time=2026-09-10T00:34:58.594Z level=WARN msg="Request returned retryable status, retrying" attempt=1 max_attempts=6 backoff=100ms status=502 url=https://niks3.clan.lol/api/pending_closures time=2026-09-10T00:36:03.546Z level=WARN msg="Request returned retryable status, retrying" attempt=2 max_attempts=6 backoff=187.155328ms status=502 url=https://niks3.clan.lol/api/pending_closures time=2026-09-10T00:41:38.531Z level=WARN msg="Request returned retryable status, retrying" attempt=1 max_attempts=6 backoff=100ms status=504 url=https://niks3.clan.lol/api/pending_closures time=2026-09-10T00:46:38.632Z level=WARN msg="Request returned retryable status, retrying" attempt=2 max_attempts=6 backoff=182.285456ms status=504 url=https://niks3.clan.lol/api/pending_closures time=2026-09-10T00:52:05.427Z level=WARN msg="Request returned retryable status, retrying" attempt=1 max_attempts=6 backoff=100ms status=504 url=https://niks3.clan.lol/api/pending_closures time=2026-09-10T00:57:05.530Z level=WARN msg="Request returned retryable status, retrying" attempt=2 max_attempts=6 backoff=216.110839ms status=504 url=https://niks3.clan.lol/api/pending_closures time=2026-09-10T01:02:05.748Z level=WARN msg="Request returned retryable status, retrying" attempt=3 max_attempts=6 backoff=374.38175ms status=504 url=https://niks3.clan.lol/api/pending_closures time=2026-09-10T01:07:06.123Z level=WARN msg="Request returned retryable status, retrying" attempt=4 max_attempts=6 backoff=789.765369ms status=504 url=https://niks3.clan.lol/api/pending_closures time=2026-09-10T01:12:06.915Z level=WARN msg="Request returned retryable status, retrying" attempt=5 max_attempts=6 backoff=1.610297597s status=504 url=https://niks3.clan.lol/api/pending_closures time=2026-09-10T01:17:08.527Z level=ERROR msg="Fatal error" error="pushing paths: creating pending closures: creating pending closure: server returned 504: "