container-test-run-certificates
checks.aarch64-linux.certificates
· build #648
· raw
1Machine state will be reset. To keep it, pass --keep-machine-state2start all VLans3(finished: start all VLans, in 0.00 seconds)45Test will time out and terminate in 3600.0 seconds6run the VM test script7additionally exposed symbols:8 ca, client, server,9 vlan1,10 start_all, test_script, machines, machines_qemu, machines_nspawn, vlans, driver, log, os, create_machine, subtest, run_tests, join_all, retry, serial_stdout_off, serial_stdout_on, polling_condition, BaseMachine, QemuMachine, NspawnMachine, t, debug, dump_machine_ssh11start all VMs12ca: systemd-nspawn running (pid 52)13client: systemd-nspawn running (pid 54)14ca: Waiting for journal at /build/vm-state-ca/var/log/journal...15server: systemd-nspawn running (pid 56)16client: Waiting for journal at /build/vm-state-client/var/log/journal...17server: Waiting for journal at /build/vm-state-server/var/log/journal...18(finished: start all VMs, in 0.00 seconds)19nixos-nspawn(client): TAP vde-tap1 not found; container will be isolated from VDE20nixos-nspawn(client): A common reason for this is that /dev/net is not available in the Nix sandbox. Try adding /dev/net to extra-sandbox-paths.21nixos-nspawn(ca): TAP vde-tap1 not found; container will be isolated from VDE22nixos-nspawn(ca): A common reason for this is that /dev/net is not available in the Nix sandbox. Try adding /dev/net to extra-sandbox-paths.23nixos-nspawn(server): TAP vde-tap1 not found; container will be isolated from VDE24nixos-nspawn(server): A common reason for this is that /dev/net is not available in the Nix sandbox. Try adding /dev/net to extra-sandbox-paths.25Note: in a future version of systemd-nspawn the default set of permitted socket address families will be restricted to AF_INET, AF_INET6 and AF_UNIX. Use --restrict-address-families= to configure the set of permitted socket address families, or set RestrictAddressFamilies= in a .nspawn file.26Note: in a future version of systemd-nspawn the default set of permitted socket address families will be restricted to AF_INET, AF_INET6 and AF_UNIX. Use --restrict-address-families= to configure the set of permitted socket address families, or set RestrictAddressFamilies= in a .nspawn file.27Note: in a future version of systemd-nspawn the default set of permitted socket address families will be restricted to AF_INET, AF_INET6 and AF_UNIX. Use --restrict-address-families= to configure the set of permitted socket address families, or set RestrictAddressFamilies= in a .nspawn file.28░ Spawning container client on /build/vm-state-client.29░ Spawning container ca on /build/vm-state-ca.30░ Spawning container server on /build/vm-state-server.31client # No journal files were found.32client # No journal boot entry found for the specified boot (+0).33ca # No journal files were found.34ca # No journal boot entry found for the specified boot (+0).35server # No journal files were found.36server # No journal boot entry found for the specified boot (+0).37ca # [924796.342921] ca systemd-journald[81]: Journal started38ca # [924796.342977] ca systemd-journald[81]: Runtime Journal (/run/log/journal/c13f881f762c47f598f7e1821d9e38a9) is 8M, max 2.5G, 2.4G free.39ca # [924796.354266] ca systemd[1]: Finished Apply Kernel Variables.40ca # [924796.366549] ca systemd[1]: Finished Create Static Device Nodes in /dev gracefully.41ca # [924796.380722] ca systemd[1]: Starting Flush Journal to Persistent Storage...42ca # [924796.381662] ca systemd[1]: Starting Network Name Resolution...43ca # [924796.382751] ca systemd[1]: Starting Create Static Device Nodes in /dev...44client # [924796.342830] client systemd-journald[72]: Journal started45ca # [924796.390823] ca systemd-journald[81]: Time spent on flushing to /var/log/journal/c13f881f762c47f598f7e1821d9e38a9 is 1.595ms for 7 entries.46client # [924796.342885] client systemd-journald[72]: Runtime Journal (/run/log/journal/c286819d35864af98b41a4184a41611b) is 8M, max 2.5G, 2.4G free.47client # [924796.355365] client systemd[1]: Finished Apply Kernel Variables.48client # [924796.368846] client systemd[1]: Finished Create Static Device Nodes in /dev gracefully.49client # [924796.384995] client systemd[1]: Starting Flush Journal to Persistent Storage...50client # [924796.385748] client systemd[1]: Starting Network Name Resolution...51ca # [924796.390823] ca systemd-journald[81]: System Journal (/var/log/journal/c13f881f762c47f598f7e1821d9e38a9) is 8M, max 4G, 3.9G free.52client # [924796.386400] client systemd[1]: Starting Create Static Device Nodes in /dev...53client # [924796.395583] client systemd-journald[72]: Time spent on flushing to /var/log/journal/c286819d35864af98b41a4184a41611b is 1.802ms for 7 entries.54client # [924796.395583] client systemd-journald[72]: System Journal (/var/log/journal/c286819d35864af98b41a4184a41611b) is 8M, max 4G, 3.9G free.55client # [924796.423355] client systemd[1]: Finished Flush Journal to Persistent Storage.56ca # [924796.420737] ca systemd[1]: Finished Flush Journal to Persistent Storage.57client # [924796.423838] client systemd[1]: Finished Create Static Device Nodes in /dev.58ca # [924796.421094] ca systemd[1]: Finished Create Static Device Nodes in /dev.59client # [924796.424888] client systemd[1]: Reached target Preparation for Local File Systems.60ca # [924796.422135] ca systemd[1]: Reached target Preparation for Local File Systems.61server # [924796.342713] server systemd-journald[72]: Journal started62ca # [924796.422268] ca systemd[1]: Reached target Local File Systems.63server # [924796.342775] server systemd-journald[72]: Runtime Journal (/run/log/journal/f4460591e343476dab4381b1eda8b1f3) is 8M, max 2.5G, 2.4G free.64ca # [924796.423127] ca systemd[1]: Listening on Boot Loader Control Service Socket.65server # [924796.355556] server systemd[1]: Finished Apply Kernel Variables.66ca # [924796.423183] ca systemd[1]: Update Boot Loader Random Seed skipped, unmet condition check ConditionVirtualization=!container67server # [924796.368663] server systemd[1]: Finished Create Static Device Nodes in /dev gracefully.68client # [924796.425011] client systemd[1]: Reached target Local File Systems.69server # [924796.384520] server systemd[1]: Starting Flush Journal to Persistent Storage...70client # [924796.425847] client systemd[1]: Listening on Boot Loader Control Service Socket.71server # [924796.385332] server systemd[1]: Starting Network Name Resolution...72client # [924796.425899] client systemd[1]: Update Boot Loader Random Seed skipped, unmet condition check ConditionVirtualization=!container73server # [924796.385979] server systemd[1]: Starting Create Static Device Nodes in /dev...74client # [924796.426771] client systemd[1]: Starting Save Transient machine-id to Disk...75server # [924796.395507] server systemd-journald[72]: Time spent on flushing to /var/log/journal/f4460591e343476dab4381b1eda8b1f3 is 2.204ms for 7 entries.76client # [924796.427448] client systemd[1]: Starting Create System Files and Directories...77server # [924796.395507] server systemd-journald[72]: System Journal (/var/log/journal/f4460591e343476dab4381b1eda8b1f3) is 8M, max 4G, 3.9G free.78client # [924796.427481] client systemd[1]: Rule-based Manager for Device Events and Files skipped, unmet condition check ConditionPathIsReadWrite=/sys79server # [924796.422854] server systemd[1]: Finished Flush Journal to Persistent Storage.80client # [924796.444393] client systemd-tmpfiles[139]: Cannot set file attributes for '/var/empty', value=0x00000010, mask=0x00000010, ignoring: Operation not permitted81server # [924796.423359] server systemd[1]: Finished Create Static Device Nodes in /dev.82client # [924796.444630] client systemd-tmpfiles[139]: fchmod() of /var/log/journal failed: Operation not permitted83server # [924796.424382] server systemd[1]: Reached target Preparation for Local File Systems.84client # [924796.444798] client systemd-tmpfiles[139]: fchmod() of /var/log/journal/c286819d35864af98b41a4184a41611b failed: Operation not permitted85server # [924796.424521] server systemd[1]: Reached target Local File Systems.86client # [924796.445039] client systemd-tmpfiles[139]: fchmod() of /run/log/journal failed: Operation not permitted87server # [924796.425393] server systemd[1]: Listening on Boot Loader Control Service Socket.88client # [924796.446582] client systemd[1]: Finished Create System Files and Directories.89server # [924796.425444] server systemd[1]: Update Boot Loader Random Seed skipped, unmet condition check ConditionVirtualization=!container90client # [924796.447567] client systemd[1]: Starting Rebuild Journal Catalog...91server # [924796.426241] server systemd[1]: Starting Save Transient machine-id to Disk...92client # [924796.448324] client systemd[1]: Starting Record System Boot/Shutdown in UTMP...93server # [924796.427091] server systemd[1]: Starting Create System Files and Directories...94client # [924796.462475] client systemd[1]: Finished Record System Boot/Shutdown in UTMP.95server # [924796.427125] server systemd[1]: Rule-based Manager for Device Events and Files skipped, unmet condition check ConditionPathIsReadWrite=/sys96client # [924796.468028] client systemd[1]: Finished Save Transient machine-id to Disk.97server # [924796.445974] server systemd-tmpfiles[137]: Cannot set file attributes for '/var/empty', value=0x00000010, mask=0x00000010, ignoring: Operation not permitted98client # [924796.470792] client systemd[1]: Finished Rebuild Journal Catalog.99server # [924796.446215] server systemd-tmpfiles[137]: fchmod() of /var/log/journal failed: Operation not permitted100client # [924796.471823] client systemd[1]: Starting Update is Completed...101server # [924796.446385] server systemd-tmpfiles[137]: fchmod() of /var/log/journal/f4460591e343476dab4381b1eda8b1f3 failed: Operation not permitted102client # [924796.483319] client systemd[1]: Finished Update is Completed.103server # [924796.446631] server systemd-tmpfiles[137]: fchmod() of /run/log/journal failed: Operation not permitted104client # [924796.501861] client systemd[1]: Finished Firewall.105server # [924796.448349] server systemd[1]: Finished Create System Files and Directories.106client # [924796.502054] client systemd[1]: Reached target Preparation for Network.107server # [924796.449384] server systemd[1]: Starting Rebuild Journal Catalog...108client # [924796.502347] client systemd[1]: Listening on Network Management Resolve Hook Socket.109server # [924796.450125] server systemd[1]: Starting Record System Boot/Shutdown in UTMP...110client # [924796.503639] client systemd[1]: Starting Network Management...111server # [924796.464287] server systemd[1]: Finished Record System Boot/Shutdown in UTMP.112client # [924797.199732] client systemd-networkd[186]: Failed to increase receive buffer size for general netlink socket, ignoring: Operation not permitted113server # [924796.468015] server systemd[1]: Finished Save Transient machine-id to Disk.114client # [924797.199824] client systemd-networkd[186]: Failed to increase receive buffer size for nftables netlink socket, ignoring: Operation not permitted115server # [924796.474564] server systemd[1]: Finished Rebuild Journal Catalog.116client # [924797.210183] client systemd-networkd[186]: /etc/systemd/network/99-ethernet-default-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section.117server # [924796.475558] server systemd[1]: Starting Update is Completed...118client # [924797.210350] client systemd-networkd[186]: /etc/systemd/network/99-wireless-client-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section.119server # [924796.486334] server systemd[1]: Finished Update is Completed.120client # [924797.210484] client systemd-networkd[186]: lo: Link UP121server # [924796.514573] server systemd[1]: Finished Firewall.122client # [924797.210488] client systemd-networkd[186]: lo: Gained carrier123server # [924796.514761] server systemd[1]: Reached target Preparation for Network.124client # [924797.210679] client systemd-networkd[186]: eth1: Configuring with /etc/systemd/network/40-eth1.network.125server # [924796.515032] server systemd[1]: Listening on Network Management Resolve Hook Socket.126ca # [924796.424067] ca systemd[1]: Starting Save Transient machine-id to Disk...127server # [924796.516224] server systemd[1]: Starting Network Management...128ca # [924796.424803] ca systemd[1]: Starting Create System Files and Directories...129server # [924797.206387] server systemd-networkd[190]: Failed to increase receive buffer size for general netlink socket, ignoring: Operation not permitted130ca # [924796.424835] ca systemd[1]: Rule-based Manager for Device Events and Files skipped, unmet condition check ConditionPathIsReadWrite=/sys131server # [924797.206471] server systemd-networkd[190]: Failed to increase receive buffer size for nftables netlink socket, ignoring: Operation not permitted132client # [924797.211060] client systemd[1]: Started Network Management.133server # [924797.216436] server systemd-networkd[190]: /etc/systemd/network/99-ethernet-default-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section.134client # [924797.211178] client systemd-networkd[186]: eth1: Link UP135server # [924797.216606] server systemd-networkd[190]: /etc/systemd/network/99-wireless-client-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section.136client # [924797.211702] client systemd-networkd[186]: eth1: Gained carrier137server # [924797.216744] server systemd-networkd[190]: lo: Link UP138client # [924797.212670] client systemd[1]: Starting Enable Persistent Storage in systemd-networkd...139server # [924797.216749] server systemd-networkd[190]: lo: Gained carrier140client # [924797.253911] client systemd[1]: Finished Enable Persistent Storage in systemd-networkd.141server # [924797.216936] server systemd-networkd[190]: eth1: Configuring with /etc/systemd/network/40-eth1.network.142ca # [924796.444134] ca systemd-tmpfiles[144]: Cannot set file attributes for '/var/empty', value=0x00000010, mask=0x00000010, ignoring: Operation not permitted143server # [924797.217371] server systemd[1]: Started Network Management.144ca # [924796.444396] ca systemd-tmpfiles[144]: fchmod() of /var/log/journal failed: Operation not permitted145server # [924797.244327] server systemd-networkd[190]: eth1: Link UP146ca # [924796.444567] ca systemd-tmpfiles[144]: fchmod() of /var/log/journal/c13f881f762c47f598f7e1821d9e38a9 failed: Operation not permitted147server # [924797.244673] server systemd-networkd[190]: eth1: Gained carrier148ca # [924796.444825] ca systemd-tmpfiles[144]: fchmod() of /run/log/journal failed: Operation not permitted149server # [924797.244689] server systemd[1]: Starting Enable Persistent Storage in systemd-networkd...150ca # [924796.446315] ca systemd[1]: Finished Create System Files and Directories.151ca # [924796.447398] ca systemd[1]: Starting Rebuild Journal Catalog...152ca # [924796.448159] ca systemd[1]: Starting Record System Boot/Shutdown in UTMP...153ca # [924796.462503] ca systemd[1]: Finished Record System Boot/Shutdown in UTMP.154ca # [924796.468087] ca systemd[1]: Finished Save Transient machine-id to Disk.155ca # [924796.470854] ca systemd[1]: Finished Rebuild Journal Catalog.156ca # [924796.471938] ca systemd[1]: Starting Update is Completed...157ca # [924796.483519] ca systemd[1]: Finished Update is Completed.158ca # [924796.514690] ca systemd[1]: Finished Firewall.159ca # [924796.514882] ca systemd[1]: Reached target Preparation for Network.160ca # [924796.515173] ca systemd[1]: Listening on Network Management Resolve Hook Socket.161ca # [924796.516489] ca systemd[1]: Starting Network Management...162ca # [924797.199733] ca systemd-networkd[199]: Failed to increase receive buffer size for general netlink socket, ignoring: Operation not permitted163ca # [924797.199837] ca systemd-networkd[199]: Failed to increase receive buffer size for nftables netlink socket, ignoring: Operation not permitted164ca # [924797.210091] ca systemd-networkd[199]: /etc/systemd/network/99-ethernet-default-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section.165ca # [924797.210261] ca systemd-networkd[199]: /etc/systemd/network/99-wireless-client-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section.166ca # [924797.210440] ca systemd-networkd[199]: lo: Link UP167ca # [924797.210445] ca systemd-networkd[199]: lo: Gained carrier168ca # [924797.210620] ca systemd-networkd[199]: eth1: Configuring with /etc/systemd/network/40-eth1.network.169ca # [924797.211022] ca systemd[1]: Started Network Management.170ca # [924797.211115] ca systemd-networkd[199]: eth1: Link UP171ca # [924797.211686] ca systemd-networkd[199]: eth1: Gained carrier172ca # [924797.212159] ca systemd[1]: Starting Enable Persistent Storage in systemd-networkd...173ca # [924797.254036] ca systemd[1]: Finished Enable Persistent Storage in systemd-networkd.174client # [924797.354415] client systemd[1]: etc-machine\x2did.mount: Deactivated successfully.175ca # [924797.353797] ca systemd[1]: etc-machine\x2did.mount: Deactivated successfully.176server # [924797.314488] server systemd[1]: Finished Enable Persistent Storage in systemd-networkd.177server # [924797.354113] server systemd[1]: etc-machine\x2did.mount: Deactivated successfully.178ca # [924797.599556] ca systemd-resolved[117]: Positive Trust Anchors:179ca # [924797.599568] ca systemd-resolved[117]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d180ca # [924797.599570] ca systemd-resolved[117]: . IN DS 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16181ca # [924797.599607] ca systemd-resolved[117]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 170.0.0.192.in-addr.arpa 171.0.0.192.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa ipv4only.arpa resolver.arpa corp home internal intranet lan local private test182ca # [924797.621044] ca systemd-resolved[117]: Using system hostname 'ca'.183ca # [924797.622376] ca systemd[1]: Started Network Name Resolution.184ca # [924797.622498] ca systemd[1]: Reached target Network.185ca # [924797.622608] ca systemd[1]: Reached target Network is Online.186ca # [924797.622703] ca systemd[1]: Reached target System Initialization.187ca # [924797.623082] ca systemd[1]: Started Renew ACME Certificate for ca.foo.188ca # [924797.623136] ca systemd[1]: Discard unused filesystem blocks once a week skipped, unmet condition check ConditionVirtualization=!container189ca # [924797.623183] ca systemd[1]: Started Daily Cleanup of Temporary Directories.190ca # [924797.623224] ca systemd[1]: Reached target Timer Units.191ca # [924797.623448] ca systemd[1]: Listening on D-Bus System Message Bus Socket.192ca # [924797.623649] ca systemd[1]: Listening on Nix Daemon Socket.193ca # [924797.623866] ca systemd[1]: Listening on Virtual Machine and Container Registration Service Socket.194ca # [924797.623910] ca systemd[1]: Reached target Socket Units.195ca # [924797.623997] ca systemd[1]: Reached target Basic System.196ca # [924797.657090] ca systemd[1]: Starting Set up the ACME certificate renewal infrastructure...197ca # [924797.658473] ca systemd[1]: Starting Import lastlog data into lastlog2 database...198ca # [924797.658544] ca systemd[1]: nginx-config-reload.service skipped, unmet condition check ConditionPathExists=/var/lib/acme/ca.foo/fullchain.pem199ca # [924797.660141] ca systemd[1]: Starting Name Service Cache Daemon (nsncd)...200ca # [924797.662008] ca systemd[1]: Starting step-ca service...201ca # [924797.664382] ca systemd[1]: Starting D-Bus System Message Bus...202ca # [924797.760635] ca systemd[1]: Finished Import lastlog data into lastlog2 database.203ca # [924797.874167] ca acme-setup-privileged[204]: + set -euo pipefail204ca # [924797.874167] ca acme-setup-privileged[204]: + cd /var/lib/acme205ca # [924797.874167] ca acme-setup-privileged[204]: + chmod -R u=rwX,g=,o= .lego/accounts206client # [924797.594384] client systemd-resolved[111]: Positive Trust Anchors:207client # [924797.594395] client systemd-resolved[111]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d208client # [924797.594399] client systemd-resolved[111]: . IN DS 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16209client # [924797.594434] client systemd-resolved[111]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 170.0.0.192.in-addr.arpa 171.0.0.192.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa ipv4only.arpa resolver.arpa corp home internal intranet lan local private test210client # [924797.615845] client systemd-resolved[111]: Using system hostname 'client'.211client # [924797.617942] client systemd[1]: Started Network Name Resolution.212client # [924797.618066] client systemd[1]: Reached target Network.213client # [924797.618182] client systemd[1]: Reached target System Initialization.214client # [924797.618279] client systemd[1]: Discard unused filesystem blocks once a week skipped, unmet condition check ConditionVirtualization=!container215client # [924797.618333] client systemd[1]: Started Daily Cleanup of Temporary Directories.216client # [924797.618371] client systemd[1]: Reached target Timer Units.217client # [924797.618602] client systemd[1]: Listening on D-Bus System Message Bus Socket.218client # [924797.618809] client systemd[1]: Listening on Nix Daemon Socket.219client # [924797.619033] client systemd[1]: Listening on Virtual Machine and Container Registration Service Socket.220client # [924797.619080] client systemd[1]: Reached target Socket Units.221client # [924797.619166] client systemd[1]: Reached target Basic System.222client # [924797.656885] client systemd[1]: Starting Import lastlog data into lastlog2 database...223client # [924797.658597] client systemd[1]: Starting Name Service Cache Daemon (nsncd)...224client # [924797.660694] client systemd[1]: Starting D-Bus System Message Bus...225client # [924797.685258] client systemd[1]: Finished Import lastlog data into lastlog2 database.226client # [924797.904856] client systemd[1]: Started Name Service Cache Daemon (nsncd).227client # [924797.905063] client nsncd[192]: Sep 15 00:20:17.890 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket"228client # [924797.904968] client systemd[1]: Reached target Host and Network Name Lookups.229client # [924797.905078] client systemd[1]: Reached target User and Group Name Lookups.230server # [924797.586548] server systemd-resolved[110]: Positive Trust Anchors:231server # [924797.586560] server systemd-resolved[110]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d232server # [924797.586564] server systemd-resolved[110]: . IN DS 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16233server # [924797.586598] server systemd-resolved[110]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 170.0.0.192.in-addr.arpa 171.0.0.192.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa ipv4only.arpa resolver.arpa corp home internal intranet lan local private test234server # [924797.608521] server systemd-resolved[110]: Using system hostname 'server'.235server # [924797.609919] server systemd[1]: Started Network Name Resolution.236server # [924797.610040] server systemd[1]: Reached target Network.237server # [924797.610155] server systemd[1]: Reached target Network is Online.238server # [924797.610244] server systemd[1]: Reached target System Initialization.239server # [924797.610646] server systemd[1]: Started Renew ACME Certificate for test.foo.240server # [924797.610706] server systemd[1]: Discard unused filesystem blocks once a week skipped, unmet condition check ConditionVirtualization=!container241server # [924797.610747] server systemd[1]: Started Daily Cleanup of Temporary Directories.242server # [924797.610789] server systemd[1]: Reached target Timer Units.243server # [924797.611016] server systemd[1]: Listening on D-Bus System Message Bus Socket.244server # [924797.611206] server systemd[1]: Listening on Nix Daemon Socket.245server # [924797.611424] server systemd[1]: Listening on Virtual Machine and Container Registration Service Socket.246server # [924797.611471] server systemd[1]: Reached target Socket Units.247server # [924797.611550] server systemd[1]: Reached target Basic System.248server # [924797.614298] server systemd[1]: Starting Set up the ACME certificate renewal infrastructure...249server # [924797.615742] server systemd[1]: Starting Import lastlog data into lastlog2 database...250server # [924797.615810] server systemd[1]: nginx-config-reload.service skipped, unmet condition check ConditionPathExists=/var/lib/acme/test.foo/fullchain.pem251server # [924797.617376] server systemd[1]: Starting Name Service Cache Daemon (nsncd)...252server # [924797.619637] server systemd[1]: Starting D-Bus System Message Bus...253server # [924797.675851] server systemd[1]: Finished Import lastlog data into lastlog2 database.254server # [924797.917318] server acme-setup-privileged[195]: + set -euo pipefail255server # [924797.917318] server acme-setup-privileged[195]: + cd /var/lib/acme256server # [924797.917318] server acme-setup-privileged[195]: + chmod -R u=rwX,g=,o= .lego/accounts257ca # [924797.876216] ca acme-setup-privileged[204]: + chown -R acme .lego/accounts258ca # [924797.878341] ca acme-setup-privileged[204]: + for fixpath in ca.foo .lego/ca.foo259ca # [924797.878341] ca acme-setup-privileged[204]: + '[' -d ca.foo ']'260ca # [924797.878463] ca acme-setup-privileged[204]: + for fixpath in ca.foo .lego/ca.foo261ca # [924797.878463] ca acme-setup-privileged[204]: + '[' -d .lego/ca.foo ']'262ca # [924797.921992] ca nsncd[206]: Sep 15 00:20:17.907 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket"263ca # [924797.922100] ca systemd[1]: Started Name Service Cache Daemon (nsncd).264ca # [924797.922213] ca systemd[1]: Reached target Host and Network Name Lookups.265ca # [924797.922320] ca systemd[1]: Reached target User and Group Name Lookups.266ca # [924797.924656] ca systemd[1]: Starting User Login Management...267ca # [924797.926099] ca systemd[1]: Starting Permit User Sessions...268ca # [924797.936470] ca systemd[1]: Finished Permit User Sessions.269ca # [924797.937586] ca systemd[1]: Started Console Getty.270ca # [924797.937639] ca systemd[1]: Getty on tty1 skipped, unmet condition check ConditionPathExists=/dev/tty0271ca # [924797.937664] ca systemd[1]: Reached target Login Prompts.272ca # [924798.138109] ca dbus-broker-launch[208]: Looking up NSS user entry for 'systemd-timesync'...273server # [924797.918665] server systemd[1]: Started Name Service Cache Daemon (nsncd).274server # [924797.918758] server systemd[1]: Reached target Host and Network Name Lookups.275server # [924797.918906] server nsncd[197]: Sep 15 00:20:17.904 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket"276server # [924797.918850] server systemd[1]: Reached target User and Group Name Lookups.277server # [924797.919773] server acme-setup-privileged[195]: + chown -R acme .lego/accounts278server # [924797.920659] server systemd[1]: Starting User Login Management...279server # [924797.921872] server systemd[1]: Starting Permit User Sessions...280server # [924797.922008] server acme-setup-privileged[195]: + for fixpath in test.foo .lego/test.foo281server # [924797.922075] server acme-setup-privileged[195]: + '[' -d test.foo ']'282server # [924797.922075] server acme-setup-privileged[195]: + for fixpath in test.foo .lego/test.foo283server # [924797.922075] server acme-setup-privileged[195]: + '[' -d .lego/test.foo ']'284server # [924797.933189] server systemd[1]: Finished Permit User Sessions.285server # [924797.934543] server systemd[1]: Started Console Getty.286server # [924797.934595] server systemd[1]: Getty on tty1 skipped, unmet condition check ConditionPathExists=/dev/tty0287server # [924797.934619] server systemd[1]: Reached target Login Prompts.288server # [924798.183556] server dbus-broker-launch[198]: Looking up NSS user entry for 'systemd-timesync'...289client # [924797.917984] client systemd[1]: Starting User Login Management...290client # [924797.919697] client systemd[1]: Starting Permit User Sessions...291client # [924797.931749] client systemd[1]: Finished Permit User Sessions.292client # [924797.933735] client systemd[1]: Started Console Getty.293client # [924797.933811] client systemd[1]: Getty on tty1 skipped, unmet condition check ConditionPathExists=/dev/tty0294client # [924797.933850] client systemd[1]: Reached target Login Prompts.295client # [924798.080667] client dbus-broker-launch[193]: Looking up NSS user entry for 'systemd-timesync'...296client # [924798.081641] client dbus-broker-launch[193]: NSS returned no entry for 'systemd-timesync'297client # [924798.081641] client dbus-broker-launch[193]: Invalid user-name in /nix/store/ak6jm14y4rrbk0p85va0r227h6axnmg7-system-path/share/dbus-1/system.d/org.freedesktop.timesync1.conf +16: user="systemd-timesync"298client # [924798.082157] client systemd[1]: Started D-Bus System Message Bus.299client # [924798.090191] client dbus-broker-launch[193]: Ready300ca: must succeed: systemctl restart acme-order-renew-ca.foo.service 301ca # [924798.139760] ca dbus-broker-launch[208]: NSS returned no entry for 'systemd-timesync'302ca # [924798.139760] ca dbus-broker-launch[208]: Invalid user-name in /nix/store/x6jlwd0kiscnyqv1xpqc7i1nlj022546-system-path/share/dbus-1/system.d/org.freedesktop.timesync1.conf +16: user="systemd-timesync"303ca # [924798.140291] ca systemd[1]: Started D-Bus System Message Bus.304ca # [924798.149141] ca dbus-broker-launch[208]: Ready305server # [924798.184228] server dbus-broker-launch[198]: NSS returned no entry for 'systemd-timesync'306server # [924798.184228] server dbus-broker-launch[198]: Invalid user-name in /nix/store/jf1vwrhvri7nhrjal5d99dhzbv02jp4c-system-path/share/dbus-1/system.d/org.freedesktop.timesync1.conf +16: user="systemd-timesync"307server # [924798.184873] server systemd[1]: Started D-Bus System Message Bus.308server # [924798.193764] server dbus-broker-launch[198]: Ready309server # [924798.368352] server systemd-networkd[190]: eth1: Gained IPv6LL310server # [924798.791690] server systemd-logind[220]: New seat seat0.311server # [924798.791876] server systemd[1]: Started User Login Management.312server # [924798.794171] server systemd[1]: Starting linger-users.service...313server # [924798.838127] server systemd[1]: linger-users.service: Deactivated successfully.314server # [924798.838388] server systemd[1]: Finished linger-users.service.315server # [924798.920502] server acme-setup-start[224]: + set -euo pipefail316server # [924798.920872] server acme-setup-start[224]: + test -e ca/key.pem317server # [924798.920872] server acme-setup-start[224]: + minica --ca-key ca/key.pem --ca-cert ca/cert.pem --domains selfsigned.local318server # [924798.943815] server systemd[1]: Finished Set up the ACME certificate renewal infrastructure.319server # [924798.946631] server systemd[1]: Starting Ensure certificate for test.foo...320client # [924798.813158] client systemd-logind[208]: New seat seat0.321client # [924798.813359] client systemd[1]: Started User Login Management.322client # [924798.828768] client systemd[1]: Starting linger-users.service...323client # [924798.842345] client systemd[1]: linger-users.service: Deactivated successfully.324client # [924798.842490] client systemd[1]: Finished linger-users.service.325client # [924798.843287] client systemd[1]: Reached target Multi-User System.326client # [924798.843631] client systemd[1]: Startup finished in 2.972s.327ca # [924798.819386] ca systemd-logind[238]: New seat seat0.328ca # [924798.819562] ca systemd[1]: Started User Login Management.329ca # [924798.828832] ca systemd[1]: Starting linger-users.service...330ca # [924798.842740] ca systemd[1]: linger-users.service: Deactivated successfully.331ca # [924798.842832] ca systemd[1]: Finished linger-users.service.332ca # [924798.916296] ca acme-setup-start[222]: + set -euo pipefail333ca # [924798.916296] ca acme-setup-start[222]: + test -e ca/key.pem334ca # [924798.916921] ca acme-setup-start[222]: + minica --ca-key ca/key.pem --ca-cert ca/cert.pem --domains selfsigned.local335ca # [924798.944128] ca systemd-networkd[199]: eth1: Gained IPv6LL336ca # [924798.944843] ca systemd[1]: Finished Set up the ACME certificate renewal infrastructure.337ca # [924798.946664] ca systemd[1]: Starting Ensure certificate for ca.foo...338client # [924799.076138] client systemd-networkd[186]: eth1: Gained IPv6LL339ca # [924799.138308] ca step-ca[207]: badger 2026/09/15 00:20:19 INFO: All 0 tables opened in 0s340ca # [924799.144609] ca step-ca[207]: 2026/09/15 00:20:19 Building new tls configuration using step-ca x509 Signer Interface341ca # [924799.149541] ca step-ca[207]: 2026/09/15 00:20:19 Starting Smallstep CA/0.30.2 (linux/arm64)342ca # [924799.149541] ca step-ca[207]: 2026/09/15 00:20:19 Documentation: https://u.step.sm/docs/ca343ca # [924799.149541] ca step-ca[207]: 2026/09/15 00:20:19 Community Discord: https://u.step.sm/discord344ca # [924799.149541] ca step-ca[207]: 2026/09/15 00:20:19 Config file: /etc/smallstep/ca.json345ca # [924799.149541] ca step-ca[207]: 2026/09/15 00:20:19 The primary server URL is https://ca.foo:1443346ca # [924799.149541] ca step-ca[207]: 2026/09/15 00:20:19 Root certificates are available at https://ca.foo:1443/roots.pem347ca # [924799.149541] ca step-ca[207]: 2026/09/15 00:20:19 X.509 Root Fingerprint: 73a51e13ceeb202e4a617c48c0cd308f9567bdcba2ae26dbaab91234245a452e348ca # [924799.149863] ca systemd[1]: Started step-ca service.349ca # [924799.150212] ca step-ca[207]: 2026/09/15 00:20:19 Serving HTTPS on 0.0.0.0:1443 ...350ca # [924799.884434] ca acme-ca.foo-start[259]: Waiting to acquire lock in /run/acme/351ca # [924799.887627] ca acme-ca.foo-start[259]: + '[' -e out/acme-success ']'352ca # [924799.887713] ca acme-ca.foo-start[259]: + minica --ca-cert=ca/cert.pem --ca-key=ca/key.pem --domains=ca.foo --ip-addresses=353ca # [924799.902895] ca acme-ca.foo-start[296]: + cd ca.foo354ca # [924799.903433] ca acme-ca.foo-start[296]: + cp -vp cert.pem ../out/cert.pem355ca # [924799.904446] ca acme-ca.foo-start[297]: 'cert.pem' -> '../out/cert.pem'356ca # [924799.904788] ca acme-ca.foo-start[296]: + cp -vp key.pem ../out/key.pem357ca # [924799.906017] ca acme-ca.foo-start[296]: 'key.pem' -> '../out/key.pem'358ca # [924799.906261] ca acme-ca.foo-start[259]: + cat out/cert.pem ca/cert.pem359ca # [924799.908407] ca acme-ca.foo-start[259]: + cp ca/cert.pem out/chain.pem360ca # [924799.909973] ca acme-ca.foo-start[259]: + cat out/key.pem out/fullchain.pem361ca # [924799.911769] ca acme-ca.foo-start[259]: + for fixpath in out certificates362ca # [924799.911769] ca acme-ca.foo-start[259]: + '[' -d out ']'363ca # [924799.911872] ca acme-ca.foo-start[259]: + chmod -R u=rwX,g=rX,o= out364ca # [924799.913518] ca acme-ca.foo-start[259]: + chown -R acme:nginx out365ca # [924799.918792] ca acme-ca.foo-start[259]: + for fixpath in out certificates366ca # [924799.918792] ca acme-ca.foo-start[259]: + '[' -d certificates ']'367ca # [924799.922765] ca systemd[1]: Finished Ensure certificate for ca.foo.368ca # [924799.925943] ca systemd[1]: Starting Nginx Web Server...369server # [924799.879851] server acme-test.foo-start[248]: Waiting to acquire lock in /run/acme/370server # [924799.883770] server acme-test.foo-start[248]: + '[' -e out/acme-success ']'371server # [924799.883861] server acme-test.foo-start[248]: + minica --ca-cert=ca/cert.pem --ca-key=ca/key.pem --domains=test.foo --ip-addresses=372server # [924799.899323] server acme-test.foo-start[259]: + cd test.foo373server # [924799.899868] server acme-test.foo-start[259]: + cp -vp cert.pem ../out/cert.pem374server # [924799.901244] server acme-test.foo-start[260]: 'cert.pem' -> '../out/cert.pem'375server # [924799.901596] server acme-test.foo-start[259]: + cp -vp key.pem ../out/key.pem376server # [924799.902866] server acme-test.foo-start[259]: 'key.pem' -> '../out/key.pem'377server # [924799.903128] server acme-test.foo-start[248]: + cat out/cert.pem ca/cert.pem378server # [924799.905297] server acme-test.foo-start[248]: + cp ca/cert.pem out/chain.pem379server # [924799.906981] server acme-test.foo-start[248]: + cat out/key.pem out/fullchain.pem380server # [924799.908863] server acme-test.foo-start[248]: + for fixpath in out certificates381server # [924799.908863] server acme-test.foo-start[248]: + '[' -d out ']'382server # [924799.908969] server acme-test.foo-start[248]: + chmod -R u=rwX,g=rX,o= out383server # [924799.910614] server acme-test.foo-start[248]: + chown -R acme:nginx out384server # [924799.914269] server acme-test.foo-start[248]: + for fixpath in out certificates385server # [924799.914269] server acme-test.foo-start[248]: + '[' -d certificates ']'386server # [924799.919556] server systemd[1]: Finished Ensure certificate for test.foo.387server # [924799.922148] server systemd[1]: Starting Nginx Web Server...388ca # [924800.899565] ca nginx-pre-start[308]: nginx: the configuration file /nix/store/9xdq48zsmbzh971fy8df0q5bz7cca117-nginx.conf syntax is ok389ca # [924800.900099] ca nginx-pre-start[308]: nginx: configuration file /nix/store/9xdq48zsmbzh971fy8df0q5bz7cca117-nginx.conf test is successful390ca # [924800.905700] ca systemd[1]: Started Nginx Web Server.391ca # [924800.906466] ca systemd[1]: Reached target Multi-User System.392ca # [924800.908848] ca systemd[1]: Starting Order (and renew) ACME certificate for ca.foo...393server # [924800.896116] server nginx-pre-start[271]: nginx: the configuration file /nix/store/bw9jgq9jgvw8ia747pppjhkzskqcy6wl-nginx.conf syntax is ok394server # [924800.896695] server nginx-pre-start[271]: nginx: configuration file /nix/store/bw9jgq9jgvw8ia747pppjhkzskqcy6wl-nginx.conf test is successful395server # [924800.902725] server systemd[1]: Started Nginx Web Server.396server # [924800.903511] server systemd[1]: Reached target Multi-User System.397server # [924800.905857] server systemd[1]: Starting Order (and renew) ACME certificate for test.foo...398ca # [924801.852135] ca acme-order-renew-ca.foo-start[311]: Waiting to acquire lock in /run/acme/399ca # [924801.855628] ca acme-order-renew-ca.foo-start[311]: + set -euo pipefail400ca # [924801.855704] ca acme-order-renew-ca.foo-start[311]: + exec401ca # [924801.855766] ca acme-order-renew-ca.foo-start[311]: + /nix/store/fxkh6pl0y4nfbhdqdnhfkvsq7pbxq655-flock-0.4.0/bin/flock 11402ca # [924801.857502] ca acme-order-renew-ca.foo-start[322]: ++ find accounts -path '*/keys/*.key' -print -quit403ca # [924801.861414] ca acme-order-renew-ca.foo-start[311]: + '[' -n '' ']'404ca # [924801.861491] ca acme-order-renew-ca.foo-start[311]: + exec405ca # [924801.861541] ca acme-order-renew-ca.foo-start[311]: + '[' -e certificates/ca.foo.key ']'406ca # [924801.861604] ca acme-order-renew-ca.foo-start[311]: + lego run --accept-tos --path . --email none@none.tld --http --http.webroot /var/lib/acme/acme-challenge --server https://ca.foo:1443/acme/acme/directory --key-type ec256 -d ca.foo --no-random-sleep --renew-force --ari-disable --force-cert-domains407ca # [924801.937258] ca acme-order-renew-ca.foo-start[323]: 2026-09-15T00:20:21.923039941Z INFO Private key saved. filepath=accounts/ca.foo_1443/none@none.tld/none@none.tld.key408ca # [924801.975176] ca step-ca[207]: time="2026-09-15T00:20:21Z" level=info duration="290.204µs" duration-ns=290204 fields.time="2026-09-15T00:20:21Z" method=GET name=ca path=/acme/acme/directory protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=104ef10e-2c1c-458a-aa0e-f4e8643c1579 response="{\"newNonce\":\"https://ca.foo:1443/acme/acme/new-nonce\",\"newAccount\":\"https://ca.foo:1443/acme/acme/new-account\",\"newOrder\":\"https://ca.foo:1443/acme/acme/new-order\",\"revokeCert\":\"https://ca.foo:1443/acme/acme/revoke-cert\",\"keyChange\":\"https://ca.foo:1443/acme/acme/key-change\"}" size=277 status=200 user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; arm64)" user-id=409ca # [924801.975760] ca acme-order-renew-ca.foo-start[323]: 2026-09-15T00:20:21.961560351Z INFO Registering the account. email=none@none.tld410ca # [924801.977570] ca step-ca[207]: time="2026-09-15T00:20:21Z" level=info duration=1.522581ms duration-ns=1522581 fields.time="2026-09-15T00:20:21Z" method=HEAD name=ca nonce=eWRPelVzUjBBYlpZZEEzTVNwZ1gyaU1nNlJQaVhsSTg path=/acme/acme/new-nonce protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=83c463a4-a139-4df8-88d7-54bfe13b4f72 size=0 status=200 user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; arm64)" user-id=411ca # [924801.981462] ca step-ca[207]: time="2026-09-15T00:20:21Z" level=info duration=2.844239ms duration-ns=2844239 fields.time="2026-09-15T00:20:21Z" method=POST name=ca nonce=T05EcmZGM2RIVjN5cmFiOVBLcGl2RUhXZjd1WEMyZEM path=/acme/acme/new-account protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=a3f6845f-edaa-44aa-b7e9-b293ac6896eb response="{\"contact\":[\"mailto:none@none.tld\"],\"status\":\"valid\",\"orders\":\"https://ca.foo:1443/acme/acme/account/pNGVIrRIej5zQteYelDdlSc7FcNsdoqp/orders\"}" size=143 status=201 user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; arm64)" user-id=412ca # [924801.982093] ca acme-order-renew-ca.foo-start[323]: 2026-09-15T00:20:21.967901639Z WARN !!!! HEADS UP !!!!413ca # [924801.982093] ca acme-order-renew-ca.foo-start[323]: Your account credentials have been saved in your414ca # [924801.982093] ca acme-order-renew-ca.foo-start[323]: configuration directory at "accounts".415ca # [924801.982093] ca acme-order-renew-ca.foo-start[323]: You should make a secure backup of this folder now. This416ca # [924801.982093] ca acme-order-renew-ca.foo-start[323]: configuration directory will also contain private keys417ca # [924801.982093] ca acme-order-renew-ca.foo-start[323]: generated by lego and certificates obtained from the ACME418ca # [924801.982093] ca acme-order-renew-ca.foo-start[323]: server. Making regular backups of this folder is ideal.419ca # [924801.982357] ca acme-order-renew-ca.foo-start[323]: 2026-09-15T00:20:21.968049121Z INFO Obtaining bundled SAN certificate. domains=ca.foo420ca # [924801.987882] ca step-ca[207]: time="2026-09-15T00:20:21Z" level=info duration=5.08191ms duration-ns=5081910 fields.time="2026-09-15T00:20:21Z" method=POST name=ca nonce=WVhRN1pXVmlBQUVraWJhMUxFaTU1azNiTWgxWEJXdW8 path=/acme/acme/new-order protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=de2009b1-540b-4e45-8ab6-1b03739e11b2 response="{\"id\":\"LMRKsf8i2J1XfCcuawlUuaMgbs93BCbM\",\"status\":\"pending\",\"expires\":\"2026-09-16T00:20:21Z\",\"identifiers\":[{\"type\":\"dns\",\"value\":\"ca.foo\"}],\"notBefore\":\"2026-09-15T00:19:21Z\",\"notAfter\":\"2026-12-14T00:20:21Z\",\"authorizations\":[\"https://ca.foo:1443/acme/acme/authz/T2TXDAa60duVlOFbctHSP3yurrS7hXUW\"],\"finalize\":\"https://ca.foo:1443/acme/acme/order/LMRKsf8i2J1XfCcuawlUuaMgbs93BCbM/finalize\"}" size=392 status=201 user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; arm64)" user-id=421ca # [924802.047525] ca step-ca[207]: time="2026-09-15T00:20:22Z" level=info duration=2.343953ms duration-ns=2343953 fields.time="2026-09-15T00:20:22Z" method=POST name=ca nonce=dm5vOTdQWjVOVENYbGp5RU9iSUlldmJiSDJ2Q09BVU0 path=/acme/acme/authz/T2TXDAa60duVlOFbctHSP3yurrS7hXUW protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=0a527a0f-a619-4510-9cd7-db3b739d3ef6 response="{\"identifier\":{\"type\":\"dns\",\"value\":\"ca.foo\"},\"status\":\"pending\",\"challenges\":[{\"type\":\"dns-01\",\"status\":\"pending\",\"token\":\"ISeZbmL4ikgvGfejf2c031T9suDPQWJc\",\"url\":\"https://ca.foo:1443/acme/acme/challenge/T2TXDAa60duVlOFbctHSP3yurrS7hXUW/eZXsMR0YqAVhj63UGE9svTYxHBOhHqDQ\"},{\"type\":\"http-01\",\"status\":\"pending\",\"token\":\"ISeZbmL4ikgvGfejf2c031T9suDPQWJc\",\"url\":\"https://ca.foo:1443/acme/acme/challenge/T2TXDAa60duVlOFbctHSP3yurrS7hXUW/6XHah5v3cuVHLN0nFpSL2L1JatgeJ8GE\"},{\"type\":\"tls-alpn-01\",\"status\":\"pending\",\"token\":\"ISeZbmL4ikgvGfejf2c031T9suDPQWJc\",\"url\":\"https://ca.foo:1443/acme/acme/challenge/T2TXDAa60duVlOFbctHSP3yurrS7hXUW/HyY8EPM8z6i3vw08l8ZNN69BmMWCVSvV\"}],\"wildcard\":false,\"expires\":\"2026-09-16T00:20:21Z\"}" size=719 status=200 user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; arm64)" user-id=422ca # [924802.048373] ca acme-order-renew-ca.foo-start[323]: 2026-09-15T00:20:22.034170631Z INFO Use solver. domain=ca.foo type=http-01423ca # [924802.048451] ca acme-order-renew-ca.foo-start[323]: 2026-09-15T00:20:22.034217391Z INFO http01: Trying to solve HTTP-01. domain=ca.foo424ca # [924802.053799] ca step-ca[207]: time="2026-09-15T00:20:22Z" level=info duration=4.621863ms duration-ns=4621863 fields.time="2026-09-15T00:20:22Z" method=POST name=ca nonce=ODhrT1JMUGtXRGtFMWJVTVJqelFtenVxc2NFM3N4MFI path=/acme/acme/challenge/T2TXDAa60duVlOFbctHSP3yurrS7hXUW/6XHah5v3cuVHLN0nFpSL2L1JatgeJ8GE protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=59995895-f37c-41d6-ac74-8b2075fe5f06 response="{\"type\":\"http-01\",\"status\":\"valid\",\"token\":\"ISeZbmL4ikgvGfejf2c031T9suDPQWJc\",\"validated\":\"2026-09-15T00:20:22Z\",\"url\":\"https://ca.foo:1443/acme/acme/challenge/T2TXDAa60duVlOFbctHSP3yurrS7hXUW/6XHah5v3cuVHLN0nFpSL2L1JatgeJ8GE\"}" size=228 status=200 user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; arm64)" user-id=425ca # [924802.054216] ca acme-order-renew-ca.foo-start[323]: 2026-09-15T00:20:22.040008391Z INFO The server validated our request. domain=ca.foo426ca # [924802.054318] ca acme-order-renew-ca.foo-start[323]: 2026-09-15T00:20:22.040127353Z INFO Validations succeeded; requesting certificates. domains=ca.foo427ca # [924802.065056] ca step-ca[207]: time="2026-09-15T00:20:22Z" level=info duration=9.002204ms duration-ns=9002204 fields.time="2026-09-15T00:20:22Z" method=POST name=ca nonce=YWUxb0x0c0RUYk1yVTNNSFlXWHRMS0puQkhjQnZmMjU path=/acme/acme/order/LMRKsf8i2J1XfCcuawlUuaMgbs93BCbM/finalize protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=9ca45913-cbac-4def-8458-53585fda452b response="{\"id\":\"LMRKsf8i2J1XfCcuawlUuaMgbs93BCbM\",\"status\":\"valid\",\"expires\":\"2026-09-16T00:20:21Z\",\"identifiers\":[{\"type\":\"dns\",\"value\":\"ca.foo\"}],\"notBefore\":\"2026-09-15T00:19:21Z\",\"notAfter\":\"2026-12-14T00:20:21Z\",\"authorizations\":[\"https://ca.foo:1443/acme/acme/authz/T2TXDAa60duVlOFbctHSP3yurrS7hXUW\"],\"finalize\":\"https://ca.foo:1443/acme/acme/order/LMRKsf8i2J1XfCcuawlUuaMgbs93BCbM/finalize\",\"certificate\":\"https://ca.foo:1443/acme/acme/certificate/RViRy6K2oyOLo2alNYZI5VjpQ5Yz4WBy\"}" size=481 status=200 user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; arm64)" user-id=428ca # [924802.067846] ca step-ca[207]: time="2026-09-15T00:20:22Z" level=info certificate="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" duration=1.893346ms duration-ns=1893346 fields.time="2026-09-15T00:20:22Z" issuer="Clan Intermediate CA" method=POST name=ca nonce=UWlTU2o3NHZheTRqS1RxdnRWS0Z6Nldqc0lXMHk1WDk path=/acme/acme/certificate/RViRy6K2oyOLo2alNYZI5VjpQ5Yz4WBy protocol=HTTP/1.1 provisioner=acme public-key="ECDSA P-256" referer= remote-address="2001:db8:1::1" request-id=880a2c7d-4291-4a3b-8562-0c70c53c01ec sans="map[dns:[ca.foo]]" serial=286521497032480472893726596506564585584 size=1344 status=200 subject=ca.foo user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; arm64)" user-id= valid-from="2026-09-15T00:19:21Z" valid-to="2026-12-14T00:20:21Z"429ca # [924802.068166] ca acme-order-renew-ca.foo-start[323]: 2026-09-15T00:20:22.053965463Z INFO Server responded with a certificate. domains=ca.foo430ca # [924802.068231] ca acme-order-renew-ca.foo-start[323]: 2026-09-15T00:20:22.054057664Z INFO Writing file. filepath=certificates/ca.foo.crt431ca # [924802.068397] ca acme-order-renew-ca.foo-start[323]: 2026-09-15T00:20:22.054206706Z INFO Writing file. filepath=certificates/ca.foo.issuer.crt432ca # [924802.068475] ca acme-order-renew-ca.foo-start[323]: 2026-09-15T00:20:22.054284748Z INFO Writing file. filepath=certificates/ca.foo.key433ca # [924802.068608] ca acme-order-renew-ca.foo-start[323]: 2026-09-15T00:20:22.054419829Z INFO Writing file. filepath=certificates/ca.foo.json434ca # [924802.074841] ca acme-order-renew-ca.foo-start[311]: + touch out/acme-success435ca # [924802.076960] ca acme-order-renew-ca.foo-start[311]: + cmp -s certificates/ca.foo.crt out/fullchain.pem436ca # [924802.078671] ca acme-order-renew-ca.foo-start[311]: + touch out/renewed437ca # [924802.080282] ca acme-order-renew-ca.foo-start[311]: + echo Installing new certificate438ca # [924802.080282] ca acme-order-renew-ca.foo-start[311]: Installing new certificate439ca # [924802.080282] ca acme-order-renew-ca.foo-start[311]: + cp -vp certificates/ca.foo.crt out/fullchain.pem440ca # [924802.082147] ca acme-order-renew-ca.foo-start[354]: 'certificates/ca.foo.crt' -> 'out/fullchain.pem'441ca # [924802.082513] ca acme-order-renew-ca.foo-start[311]: + cp -vp certificates/ca.foo.key out/key.pem442ca # [924802.084275] ca acme-order-renew-ca.foo-start[355]: 'certificates/ca.foo.key' -> 'out/key.pem'443ca # [924802.084606] ca acme-order-renew-ca.foo-start[311]: + cp -vp certificates/ca.foo.issuer.crt out/chain.pem444ca # [924802.086394] ca acme-order-renew-ca.foo-start[356]: 'certificates/ca.foo.issuer.crt' -> 'out/chain.pem'445ca # [924802.086709] ca acme-order-renew-ca.foo-start[311]: + ln -sf fullchain.pem out/cert.pem446ca # [924802.088963] ca acme-order-renew-ca.foo-start[311]: + cat out/key.pem out/fullchain.pem447ca # [924802.090794] ca acme-order-renew-ca.foo-start[311]: + for fixpath in out certificates448ca # [924802.090794] ca acme-order-renew-ca.foo-start[311]: + '[' -d out ']'449ca # [924802.090794] ca acme-order-renew-ca.foo-start[311]: + chmod -R u=rwX,g=rX,o= out450ca # [924802.092471] ca acme-order-renew-ca.foo-start[311]: + chown -R acme:nginx out451ca # [924802.095653] ca acme-order-renew-ca.foo-start[311]: + for fixpath in out certificates452ca # [924802.095653] ca acme-order-renew-ca.foo-start[311]: + '[' -d certificates ']'453ca # [924802.095748] ca acme-order-renew-ca.foo-start[311]: + chmod -R u=rwX,g=rX,o= certificates454ca # [924802.097413] ca acme-order-renew-ca.foo-start[311]: + chown -R acme:nginx certificates455ca # [924802.100605] ca acme-order-renew-ca.foo-start[311]: + chmod -R u=rwX,g=,o= accounts/.456server # [924801.866992] server acme-order-renew-test.foo-start[274]: Waiting to acquire lock in /run/acme/457server # [924801.870414] server acme-order-renew-test.foo-start[274]: + set -euo pipefail458server # [924801.870495] server acme-order-renew-test.foo-start[274]: + exec459server # [924801.870562] server acme-order-renew-test.foo-start[274]: + /nix/store/fxkh6pl0y4nfbhdqdnhfkvsq7pbxq655-flock-0.4.0/bin/flock 11460server # [924801.871950] server acme-order-renew-test.foo-start[285]: ++ find accounts -path '*/keys/*.key' -print -quit461server # [924801.875607] server acme-order-renew-test.foo-start[274]: + '[' -n '' ']'462server # [924801.875684] server acme-order-renew-test.foo-start[274]: + exec463server # [924801.875735] server acme-order-renew-test.foo-start[274]: + '[' -e certificates/test.foo.key ']'464server # [924801.875787] server acme-order-renew-test.foo-start[274]: + lego run --accept-tos --path . --email none@none.tld --http --http.webroot /var/lib/acme/acme-challenge --server https://ca.foo/acme/acme/directory --key-type ec256 -d test.foo --no-random-sleep --renew-force --ari-disable --force-cert-domains465server # [924801.935523] server acme-order-renew-test.foo-start[286]: 2026-09-15T00:20:21.921306557Z INFO Private key saved. filepath=accounts/ca.foo/none@none.tld/none@none.tld.key466server # [924801.978563] server acme-order-renew-test.foo-start[286]: 2026-09-15T00:20:21.964339349Z ERROR Error error="registration: set up client: new client: get directory at 'https://ca.foo/acme/acme/directory': unable to communicate with the API server: error: Get \"https://ca.foo/acme/acme/directory\": GET https://ca.foo/acme/acme/directory giving up after 1 attempt(s): Get \"https://ca.foo/acme/acme/directory\": tls: failed to verify certificate: x509: certificate signed by unknown authority"467server # [924801.984658] server acme-order-renew-test.foo-start[274]: + echo Failed to fetch certificates. This may mean your DNS records are set up incorrectly. Self-signed certs are in place and dependant services will still start.468server # [924801.984658] server acme-order-renew-test.foo-start[274]: Failed to fetch certificates. This may mean your DNS records are set up incorrectly. Self-signed certs are in place and dependant services will still start.469server # [924801.984658] server acme-order-renew-test.foo-start[274]: + exit 10470server # [924801.989013] server systemd[1]: acme-order-renew-test.foo.service: Main process exited, code=exited, status=10/n/a471server # [924801.989173] server systemd[1]: acme-order-renew-test.foo.service: Failed with result 'exit-code'.472server # [924801.989539] server systemd[1]: Failed to start Order (and renew) ACME certificate for test.foo.473server # [924801.989950] server systemd[1]: Startup finished in 6.121s.474server # [924801.989982] server systemd[1]: acme-order-renew-test.foo.service: Consumed 1.026s CPU time over 1.083s wall clock time.475ca # [924802.313189] ca systemd[1]: Reloading Nginx Web Server...476ca # [924802.317883] ca systemd[1]: acme-order-renew-ca.foo.service: Deactivated successfully.477ca # [924802.318089] ca systemd[1]: Finished Order (and renew) ACME certificate for ca.foo.478ca # [924802.318303] ca systemd[1]: acme-order-renew-ca.foo.service: Consumed 1.200s CPU time over 1.409s wall clock time.479ca # [924803.242418] ca nginx[372]: nginx: the configuration file /nix/store/9xdq48zsmbzh971fy8df0q5bz7cca117-nginx.conf syntax is ok480ca # [924803.242912] ca nginx[372]: nginx: configuration file /nix/store/9xdq48zsmbzh971fy8df0q5bz7cca117-nginx.conf test is successful481ca # [924804.189555] ca systemd[1]: Reloaded Nginx Web Server.482ca # [924804.190247] ca systemd[1]: Startup finished in 8.307s.483ca # [924804.460682] ca systemd[1]: Starting Order (and renew) ACME certificate for ca.foo...484ca # [924805.436644] ca acme-order-renew-ca.foo-start[387]: Waiting to acquire lock in /run/acme/485ca # [924805.439997] ca acme-order-renew-ca.foo-start[387]: + set -euo pipefail486ca # [924805.440112] ca acme-order-renew-ca.foo-start[387]: + exec487ca # [924805.440112] ca acme-order-renew-ca.foo-start[387]: + /nix/store/fxkh6pl0y4nfbhdqdnhfkvsq7pbxq655-flock-0.4.0/bin/flock 11488ca # [924805.441579] ca acme-order-renew-ca.foo-start[395]: ++ find accounts -path '*/keys/*.key' -print -quit489ca # [924805.444833] ca acme-order-renew-ca.foo-start[387]: + '[' -n '' ']'490ca # [924805.444906] ca acme-order-renew-ca.foo-start[387]: + exec491ca # [924805.444955] ca acme-order-renew-ca.foo-start[387]: + '[' -e certificates/ca.foo.key ']'492ca # [924805.444955] ca acme-order-renew-ca.foo-start[387]: + '[' -e certificates/ca.foo.crt ']'493ca # [924805.445455] ca acme-order-renew-ca.foo-start[396]: ++ find accounts -name none@none.tld.key494ca # [924805.448562] ca acme-order-renew-ca.foo-start[387]: + '[' -n accounts/ca.foo_1443/none@none.tld/none@none.tld.key ']'495ca # [924805.448658] ca acme-order-renew-ca.foo-start[387]: + lego run --accept-tos --path . --email none@none.tld --http --http.webroot /var/lib/acme/acme-challenge --server https://ca.foo:1443/acme/acme/directory --key-type ec256 -d ca.foo --no-random-sleep --force-cert-domains496ca # [924805.469490] ca acme-order-renew-ca.foo-start[397]: 2026-09-15T00:20:25.455280320Z INFO Renewing certificate cert-name=ca.foo497ca # [924805.503699] ca step-ca[207]: time="2026-09-15T00:20:25Z" level=info duration="67.441µs" duration-ns=67441 fields.time="2026-09-15T00:20:25Z" method=GET name=ca path=/acme/acme/directory protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=0a8d0b48-e9c1-4000-a6d5-3685553f9c52 response="{\"newNonce\":\"https://ca.foo:1443/acme/acme/new-nonce\",\"newAccount\":\"https://ca.foo:1443/acme/acme/new-account\",\"newOrder\":\"https://ca.foo:1443/acme/acme/new-order\",\"revokeCert\":\"https://ca.foo:1443/acme/acme/revoke-cert\",\"keyChange\":\"https://ca.foo:1443/acme/acme/key-change\"}" size=277 status=200 user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; arm64)" user-id=498ca # [924805.504385] ca acme-order-renew-ca.foo-start[397]: 2026-09-15T00:20:25.490168600Z WARN The server does not advertise a renewal info endpoint. cert-name=ca.foo error="renewalInfo[get/post]: server does not advertise a renewal info endpoint"499ca # [924805.504485] ca acme-order-renew-ca.foo-start[397]: 2026-09-15T00:20:25.490258761Z INFO Skip renewal: The certificate expires at 2026-12-14T00:20:21Z, the renewal can be performed in 59d23h59m35s509757479ns. cert-name=ca.foo500ca # [924805.504955] ca acme-order-renew-ca.foo-start[387]: + touch out/acme-success501ca # [924805.506959] ca acme-order-renew-ca.foo-start[387]: + cmp -s certificates/ca.foo.crt out/fullchain.pem502ca # [924805.508523] ca acme-order-renew-ca.foo-start[387]: + for fixpath in out certificates503ca # [924805.508523] ca acme-order-renew-ca.foo-start[387]: + '[' -d out ']'504ca # [924805.508620] ca acme-order-renew-ca.foo-start[387]: + chmod -R u=rwX,g=rX,o= out505ca # [924805.510450] ca acme-order-renew-ca.foo-start[387]: + chown -R acme:nginx out506ca # [924805.513863] ca acme-order-renew-ca.foo-start[387]: + for fixpath in out certificates507ca # [924805.513918] ca acme-order-renew-ca.foo-start[387]: + '[' -d certificates ']'508ca # [924805.513918] ca acme-order-renew-ca.foo-start[387]: + chmod -R u=rwX,g=rX,o= certificates509ca # [924805.515668] ca acme-order-renew-ca.foo-start[387]: + chown -R acme:nginx certificates510ca # [924805.518507] ca acme-order-renew-ca.foo-start[387]: + chmod -R u=rwX,g=,o= accounts/.511ca: (finished: must succeed: systemctl restart acme-order-renew-ca.foo.service , in 7.46 seconds)512ca # [924805.734448] ca systemd[1]: acme-order-renew-ca.foo.service: Deactivated successfully.513ca # [924805.734811] ca systemd[1]: Finished Order (and renew) ACME certificate for ca.foo.514ca # [924805.735382] ca systemd[1]: acme-order-renew-ca.foo.service: Consumed 1.201s CPU time over 1.273s wall clock time.515server: must succeed: systemctl restart acme-test.foo.service516server # [924808.773672] server systemd[1]: acme-test.foo.service: Deactivated successfully.517server # [924808.773882] server systemd[1]: Stopped Ensure certificate for test.foo.518server # [924808.774863] server systemd[1]: Stopping Ensure certificate for test.foo...519server # [924808.776562] server systemd[1]: Starting Ensure certificate for test.foo...520server: (finished: must succeed: systemctl restart acme-test.foo.service, in 0.97 seconds)521client: waiting for success: curl -v https://test.foo522* Host test.foo:443 was resolved.523* IPv6: 2001:db8:1::3524* IPv4: 192.168.1.3525* Trying [2001:db8:1::3]:443...526* ALPN: curl offers h2,http/1.1527} [5 bytes data]528* TLSv1.3 (OUT), TLS handshake, Client hello (1):529} [1552 bytes data]530* SSL Trust Anchors:531* OpenSSL default paths (fallback)532{ [5 bytes data]533* TLSv1.3 (IN), TLS handshake, Server hello (2):534{ [1210 bytes data]535* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):536{ [1 bytes data]537* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):538{ [19 bytes data]539* TLSv1.3 (IN), TLS handshake, Certificate (11):540{ [1008 bytes data]541* TLSv1.3 (IN), TLS handshake, CERT verify (15):542{ [111 bytes data]543* TLSv1.3 (IN), TLS handshake, Finished (20):544{ [52 bytes data]545* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):546} [1 bytes data]547* TLSv1.3 (OUT), TLS handshake, Finished (20):548} [52 bytes data]549* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey550* ALPN: server accepted h2551* Server certificate:552* subject: CN=test.foo553* start date: Sep 15 00:20:19 2026 GMT554* expire date: Oct 15 00:20:19 2028 GMT555* issuer: CN=minica root ca 329600556* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384557* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384558* subjectAltName: "test.foo" matches cert's "test.foo"559* OpenSSL verify result: 13560* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)561* closing connection #0562curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)563More details here: https://curl.se/docs/sslcerts.html564565curl failed to verify the legitimacy of the server and therefore could not566establish a secure connection to it. To learn more about this situation and567how to fix it, please visit the webpage mentioned above.568server # [924809.692240] server acme-test.foo-start[320]: Waiting to acquire lock in /run/acme/569server # [924809.695470] server acme-test.foo-start[320]: + '[' -e out/acme-success ']'570server # [924809.695470] server acme-test.foo-start[320]: + minica --ca-cert=ca/cert.pem --ca-key=ca/key.pem --domains=test.foo --ip-addresses=571server # [924809.711019] server acme-test.foo-start[329]: + cd test.foo572server # [924809.711598] server acme-test.foo-start[329]: + cp -vp cert.pem ../out/cert.pem573server # [924809.712694] server acme-test.foo-start[330]: 'cert.pem' -> '../out/cert.pem'574server # [924809.713020] server acme-test.foo-start[329]: + cp -vp key.pem ../out/key.pem575server # [924809.714368] server acme-test.foo-start[329]: 'key.pem' -> '../out/key.pem'576server # [924809.714624] server acme-test.foo-start[320]: + cat out/cert.pem ca/cert.pem577server # [924809.716660] server acme-test.foo-start[320]: + cp ca/cert.pem out/chain.pem578server # [924809.718610] server acme-test.foo-start[320]: + cat out/key.pem out/fullchain.pem579server # [924809.720655] server acme-test.foo-start[320]: + for fixpath in out certificates580server # [924809.720655] server acme-test.foo-start[320]: + '[' -d out ']'581server # [924809.720749] server acme-test.foo-start[320]: + chmod -R u=rwX,g=rX,o= out582server # [924809.722332] server acme-test.foo-start[320]: + chown -R acme:nginx out583server # [924809.725160] server acme-test.foo-start[320]: + for fixpath in out certificates584server # [924809.725160] server acme-test.foo-start[320]: + '[' -d certificates ']'585server # [924809.729509] server systemd[1]: Finished Ensure certificate for test.foo.586server # [924809.734195] server systemd[1]: Starting Order (and renew) ACME certificate for test.foo...587* Host test.foo:443 was resolved.588* IPv6: 2001:db8:1::3589* IPv4: 192.168.1.3590* Trying [2001:db8:1::3]:443...591* ALPN: curl offers h2,http/1.1592} [5 bytes data]593* TLSv1.3 (OUT), TLS handshake, Client hello (1):594} [1552 bytes data]595* SSL Trust Anchors:596* OpenSSL default paths (fallback)597{ [5 bytes data]598* TLSv1.3 (IN), TLS handshake, Server hello (2):599{ [1210 bytes data]600* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):601{ [1 bytes data]602* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):603{ [19 bytes data]604* TLSv1.3 (IN), TLS handshake, Certificate (11):605{ [1008 bytes data]606* TLSv1.3 (IN), TLS handshake, CERT verify (15):607{ [112 bytes data]608* TLSv1.3 (IN), TLS handshake, Finished (20):609{ [52 bytes data]610* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):611} [1 bytes data]612* TLSv1.3 (OUT), TLS handshake, Finished (20):613} [52 bytes data]614* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey615* ALPN: server accepted h2616* Server certificate:617* subject: CN=test.foo618* start date: Sep 15 00:20:19 2026 GMT619* expire date: Oct 15 00:20:19 2028 GMT620* issuer: CN=minica root ca 329600621* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384622* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384623* subjectAltName: "test.foo" matches cert's "test.foo"624* OpenSSL verify result: 13625* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)626* closing connection #0627curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)628More details here: https://curl.se/docs/sslcerts.html629630curl failed to verify the legitimacy of the server and therefore could not631establish a secure connection to it. To learn more about this situation and632how to fix it, please visit the webpage mentioned above.633ca # [924810.714929] ca step-ca[207]: time="2026-09-15T00:20:30Z" level=info duration="113.002µs" duration-ns=113002 fields.time="2026-09-15T00:20:30Z" method=GET name=ca path=/acme/acme/directory protocol=HTTP/1.1 referer= remote-address="::1" request-id=139fd930-7e6f-4440-977e-0b75e88617b9 response="{\"newNonce\":\"https://ca.foo/acme/acme/new-nonce\",\"newAccount\":\"https://ca.foo/acme/acme/new-account\",\"newOrder\":\"https://ca.foo/acme/acme/new-order\",\"revokeCert\":\"https://ca.foo/acme/acme/revoke-cert\",\"keyChange\":\"https://ca.foo/acme/acme/key-change\"}" size=252 status=200 user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; arm64)" user-id=634ca # [924810.720143] ca step-ca[207]: time="2026-09-15T00:20:30Z" level=info duration=1.215417ms duration-ns=1215417 fields.time="2026-09-15T00:20:30Z" method=HEAD name=ca nonce=Y2JLa1kxQW42NWVybUluVXVEcXI0d0hhVnFsWTVZUjc path=/acme/acme/new-nonce protocol=HTTP/1.1 referer= remote-address=127.0.0.1 request-id=e10dccb8-1c4a-490a-aa0a-35395881a360 size=0 status=200 user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; arm64)" user-id=635ca # [924810.724383] ca step-ca[207]: time="2026-09-15T00:20:30Z" level=warning duration=1.506261ms duration-ns=1506261 error="account does not exist" fields.time="2026-09-15T00:20:30Z" method=POST name=ca nonce=UldrRnZYTmJ5RVIwdXhEYkdqUW9LS0hIUXdaT1JnMlA path=/acme/acme/new-account protocol=HTTP/1.1 referer= remote-address="::1" request-id=1b861030-ac2a-44d5-9548-be44feb9f896 response="{\"type\":\"urn:ietf:params:acme:error:accountDoesNotExist\",\"detail\":\"Account does not exist\"}" size=92 status=400 user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; arm64)" user-id=636server # [924810.651368] server acme-order-renew-test.foo-start[337]: Waiting to acquire lock in /run/acme/637server # [924810.654723] server acme-order-renew-test.foo-start[337]: + set -euo pipefail638server # [924810.654801] server acme-order-renew-test.foo-start[337]: + exec639server # [924810.654851] server acme-order-renew-test.foo-start[337]: + /nix/store/fxkh6pl0y4nfbhdqdnhfkvsq7pbxq655-flock-0.4.0/bin/flock 11640server # [924810.656245] server acme-order-renew-test.foo-start[345]: ++ find accounts -path '*/keys/*.key' -print -quit641server # [924810.659304] server acme-order-renew-test.foo-start[337]: + '[' -n '' ']'642server # [924810.659369] server acme-order-renew-test.foo-start[337]: + exec643server # [924810.659417] server acme-order-renew-test.foo-start[337]: + '[' -e certificates/test.foo.key ']'644server # [924810.659466] server acme-order-renew-test.foo-start[337]: + lego run --accept-tos --path . --email none@none.tld --http --http.webroot /var/lib/acme/acme-challenge --server https://ca.foo/acme/acme/directory --key-type ec256 -d test.foo --no-random-sleep --renew-force --ari-disable --force-cert-domains645server # [924810.715482] server acme-order-renew-test.foo-start[346]: 2026-09-15T00:20:30.701246528Z INFO Trying to resolve the account by key646server # [924810.724932] server acme-order-renew-test.foo-start[346]: 2026-09-15T00:20:30.710736658Z WARN retry: acme: error: 0 :: urn:ietf:params:acme:error:accountDoesNotExist :: Account does not exist647server # [924810.725171] server acme-order-renew-test.foo-start[346]: 2026-09-15T00:20:30.710971462Z ERROR Error error="registration: resolve account by key: unable to communicate with the API server: error: Post \"https://ca.foo/acme/acme/new-account\": POST https://ca.foo/acme/acme/new-account giving up after 1 attempt(s): acme: error: 0 :: urn:ietf:params:acme:error:accountDoesNotExist :: Account does not exist"648server # [924810.725641] server acme-order-renew-test.foo-start[337]: + echo Failed to fetch certificates. This may mean your DNS records are set up incorrectly. Self-signed certs are in place and dependant services will still start.649server # [924810.725641] server acme-order-renew-test.foo-start[337]: Failed to fetch certificates. This may mean your DNS records are set up incorrectly. Self-signed certs are in place and dependant services will still start.650server # [924810.725641] server acme-order-renew-test.foo-start[337]: + exit 10651server # [924810.729171] server systemd[1]: acme-order-renew-test.foo.service: Main process exited, code=exited, status=10/n/a652server # [924810.729371] server systemd[1]: acme-order-renew-test.foo.service: Failed with result 'exit-code'.653server # [924810.729716] server systemd[1]: Failed to start Order (and renew) ACME certificate for test.foo.654* Host test.foo:443 was resolved.655* IPv6: 2001:db8:1::3656* IPv4: 192.168.1.3657* Trying [2001:db8:1::3]:443...658* ALPN: curl offers h2,http/1.1659} [5 bytes data]660* TLSv1.3 (OUT), TLS handshake, Client hello (1):661} [1552 bytes data]662* SSL Trust Anchors:663* OpenSSL default paths (fallback)664{ [5 bytes data]665* TLSv1.3 (IN), TLS handshake, Server hello (2):666{ [1210 bytes data]667* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):668{ [1 bytes data]669* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):670{ [19 bytes data]671* TLSv1.3 (IN), TLS handshake, Certificate (11):672{ [1008 bytes data]673* TLSv1.3 (IN), TLS handshake, CERT verify (15):674{ [110 bytes data]675* TLSv1.3 (IN), TLS handshake, Finished (20):676{ [52 bytes data]677* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):678} [1 bytes data]679* TLSv1.3 (OUT), TLS handshake, Finished (20):680} [52 bytes data]681* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey682* ALPN: server accepted h2683* Server certificate:684* subject: CN=test.foo685* start date: Sep 15 00:20:19 2026 GMT686* expire date: Oct 15 00:20:19 2028 GMT687* issuer: CN=minica root ca 329600688* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384689* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384690* subjectAltName: "test.foo" matches cert's "test.foo"691* OpenSSL verify result: 13692* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)693* closing connection #0694curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)695More details here: https://curl.se/docs/sslcerts.html696697curl failed to verify the legitimacy of the server and therefore could not698establish a secure connection to it. To learn more about this situation and699how to fix it, please visit the webpage mentioned above.700* Host test.foo:443 was resolved.701* IPv6: 2001:db8:1::3702* IPv4: 192.168.1.3703* Trying [2001:db8:1::3]:443...704* ALPN: curl offers h2,http/1.1705} [5 bytes data]706* TLSv1.3 (OUT), TLS handshake, Client hello (1):707} [1552 bytes data]708* SSL Trust Anchors:709* OpenSSL default paths (fallback)710{ [5 bytes data]711* TLSv1.3 (IN), TLS handshake, Server hello (2):712{ [1210 bytes data]713* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):714{ [1 bytes data]715* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):716{ [19 bytes data]717* TLSv1.3 (IN), TLS handshake, Certificate (11):718{ [1008 bytes data]719* TLSv1.3 (IN), TLS handshake, CERT verify (15):720{ [112 bytes data]721* TLSv1.3 (IN), TLS handshake, Finished (20):722{ [52 bytes data]723* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):724} [1 bytes data]725* TLSv1.3 (OUT), TLS handshake, Finished (20):726} [52 bytes data]727* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey728* ALPN: server accepted h2729* Server certificate:730* subject: CN=test.foo731* start date: Sep 15 00:20:19 2026 GMT732* expire date: Oct 15 00:20:19 2028 GMT733* issuer: CN=minica root ca 329600734* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384735* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384736* subjectAltName: "test.foo" matches cert's "test.foo"737* OpenSSL verify result: 13738* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)739* closing connection #0740curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)741More details here: https://curl.se/docs/sslcerts.html742743curl failed to verify the legitimacy of the server and therefore could not744establish a secure connection to it. To learn more about this situation and745how to fix it, please visit the webpage mentioned above.746* Host test.foo:443 was resolved.747* IPv6: 2001:db8:1::3748* IPv4: 192.168.1.3749* Trying [2001:db8:1::3]:443...750* ALPN: curl offers h2,http/1.1751} [5 bytes data]752* TLSv1.3 (OUT), TLS handshake, Client hello (1):753} [1552 bytes data]754* SSL Trust Anchors:755* OpenSSL default paths (fallback)756{ [5 bytes data]757* TLSv1.3 (IN), TLS handshake, Server hello (2):758{ [1210 bytes data]759* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):760{ [1 bytes data]761* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):762{ [19 bytes data]763* TLSv1.3 (IN), TLS handshake, Certificate (11):764{ [1008 bytes data]765* TLSv1.3 (IN), TLS handshake, CERT verify (15):766{ [111 bytes data]767* TLSv1.3 (IN), TLS handshake, Finished (20):768{ [52 bytes data]769* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):770} [1 bytes data]771* TLSv1.3 (OUT), TLS handshake, Finished (20):772} [52 bytes data]773* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey774* ALPN: server accepted h2775* Server certificate:776* subject: CN=test.foo777* start date: Sep 15 00:20:19 2026 GMT778* expire date: Oct 15 00:20:19 2028 GMT779* issuer: CN=minica root ca 329600780* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384781* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384782* subjectAltName: "test.foo" matches cert's "test.foo"783* OpenSSL verify result: 13784* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)785* closing connection #0786curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)787More details here: https://curl.se/docs/sslcerts.html788789curl failed to verify the legitimacy of the server and therefore could not790establish a secure connection to it. To learn more about this situation and791how to fix it, please visit the webpage mentioned above.792* Host test.foo:443 was resolved.793* IPv6: 2001:db8:1::3794* IPv4: 192.168.1.3795* Trying [2001:db8:1::3]:443...796* ALPN: curl offers h2,http/1.1797} [5 bytes data]798* TLSv1.3 (OUT), TLS handshake, Client hello (1):799} [1552 bytes data]800* SSL Trust Anchors:801* OpenSSL default paths (fallback)802{ [5 bytes data]803* TLSv1.3 (IN), TLS handshake, Server hello (2):804{ [1210 bytes data]805* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):806{ [1 bytes data]807* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):808{ [19 bytes data]809* TLSv1.3 (IN), TLS handshake, Certificate (11):810{ [1008 bytes data]811* TLSv1.3 (IN), TLS handshake, CERT verify (15):812{ [110 bytes data]813* TLSv1.3 (IN), TLS handshake, Finished (20):814{ [52 bytes data]815* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):816} [1 bytes data]817* TLSv1.3 (OUT), TLS handshake, Finished (20):818} [52 bytes data]819* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey820* ALPN: server accepted h2821* Server certificate:822* subject: CN=test.foo823* start date: Sep 15 00:20:19 2026 GMT824* expire date: Oct 15 00:20:19 2028 GMT825* issuer: CN=minica root ca 329600826* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384827* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384828* subjectAltName: "test.foo" matches cert's "test.foo"829* OpenSSL verify result: 13830* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)831* closing connection #0832curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)833More details here: https://curl.se/docs/sslcerts.html834835curl failed to verify the legitimacy of the server and therefore could not836establish a secure connection to it. To learn more about this situation and837how to fix it, please visit the webpage mentioned above.838* Host test.foo:443 was resolved.839* IPv6: 2001:db8:1::3840* IPv4: 192.168.1.3841* Trying [2001:db8:1::3]:443...842* ALPN: curl offers h2,http/1.1843} [5 bytes data]844* TLSv1.3 (OUT), TLS handshake, Client hello (1):845} [1552 bytes data]846* SSL Trust Anchors:847* OpenSSL default paths (fallback)848{ [5 bytes data]849* TLSv1.3 (IN), TLS handshake, Server hello (2):850{ [1210 bytes data]851* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):852{ [1 bytes data]853* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):854{ [19 bytes data]855* TLSv1.3 (IN), TLS handshake, Certificate (11):856{ [1008 bytes data]857* TLSv1.3 (IN), TLS handshake, CERT verify (15):858{ [110 bytes data]859* TLSv1.3 (IN), TLS handshake, Finished (20):860{ [52 bytes data]861* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):862} [1 bytes data]863* TLSv1.3 (OUT), TLS handshake, Finished (20):864} [52 bytes data]865* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey866* ALPN: server accepted h2867* Server certificate:868* subject: CN=test.foo869* start date: Sep 15 00:20:19 2026 GMT870* expire date: Oct 15 00:20:19 2028 GMT871* issuer: CN=minica root ca 329600872* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384873* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384874* subjectAltName: "test.foo" matches cert's "test.foo"875* OpenSSL verify result: 13876* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)877* closing connection #0878curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)879More details here: https://curl.se/docs/sslcerts.html880881curl failed to verify the legitimacy of the server and therefore could not882establish a secure connection to it. To learn more about this situation and883how to fix it, please visit the webpage mentioned above.884* Host test.foo:443 was resolved.885* IPv6: 2001:db8:1::3886* IPv4: 192.168.1.3887* Trying [2001:db8:1::3]:443...888* ALPN: curl offers h2,http/1.1889} [5 bytes data]890* TLSv1.3 (OUT), TLS handshake, Client hello (1):891} [1552 bytes data]892* SSL Trust Anchors:893* OpenSSL default paths (fallback)894{ [5 bytes data]895* TLSv1.3 (IN), TLS handshake, Server hello (2):896{ [1210 bytes data]897* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):898{ [1 bytes data]899* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):900{ [19 bytes data]901* TLSv1.3 (IN), TLS handshake, Certificate (11):902{ [1008 bytes data]903* TLSv1.3 (IN), TLS handshake, CERT verify (15):904{ [112 bytes data]905* TLSv1.3 (IN), TLS handshake, Finished (20):906{ [52 bytes data]907* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):908} [1 bytes data]909* TLSv1.3 (OUT), TLS handshake, Finished (20):910} [52 bytes data]911* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey912* ALPN: server accepted h2913* Server certificate:914* subject: CN=test.foo915* start date: Sep 15 00:20:19 2026 GMT916* expire date: Oct 15 00:20:19 2028 GMT917* issuer: CN=minica root ca 329600918* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384919* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384920* subjectAltName: "test.foo" matches cert's "test.foo"921* OpenSSL verify result: 13922* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)923* closing connection #0924curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)925More details here: https://curl.se/docs/sslcerts.html926927curl failed to verify the legitimacy of the server and therefore could not928establish a secure connection to it. To learn more about this situation and929how to fix it, please visit the webpage mentioned above.930* Host test.foo:443 was resolved.931* IPv6: 2001:db8:1::3932* IPv4: 192.168.1.3933* Trying [2001:db8:1::3]:443...934* ALPN: curl offers h2,http/1.1935} [5 bytes data]936* TLSv1.3 (OUT), TLS handshake, Client hello (1):937} [1552 bytes data]938* SSL Trust Anchors:939* OpenSSL default paths (fallback)940{ [5 bytes data]941* TLSv1.3 (IN), TLS handshake, Server hello (2):942{ [1210 bytes data]943* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):944{ [1 bytes data]945* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):946{ [19 bytes data]947* TLSv1.3 (IN), TLS handshake, Certificate (11):948{ [1008 bytes data]949* TLSv1.3 (IN), TLS handshake, CERT verify (15):950{ [111 bytes data]951* TLSv1.3 (IN), TLS handshake, Finished (20):952{ [52 bytes data]953* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):954} [1 bytes data]955* TLSv1.3 (OUT), TLS handshake, Finished (20):956} [52 bytes data]957* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey958* ALPN: server accepted h2959* Server certificate:960* subject: CN=test.foo961* start date: Sep 15 00:20:19 2026 GMT962* expire date: Oct 15 00:20:19 2028 GMT963* issuer: CN=minica root ca 329600964* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384965* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384966* subjectAltName: "test.foo" matches cert's "test.foo"967* OpenSSL verify result: 13968* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)969* closing connection #0970curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)971More details here: https://curl.se/docs/sslcerts.html972973curl failed to verify the legitimacy of the server and therefore could not974establish a secure connection to it. To learn more about this situation and975how to fix it, please visit the webpage mentioned above.976* Trying [2001:db8:1::3]:443...977* Host test.foo:443 was resolved.978* IPv6: 2001:db8:1::3979* IPv4: 192.168.1.3980* ALPN: curl offers h2,http/1.1981} [5 bytes data]982* TLSv1.3 (OUT), TLS handshake, Client hello (1):983} [1552 bytes data]984* SSL Trust Anchors:985* OpenSSL default paths (fallback)986{ [5 bytes data]987* TLSv1.3 (IN), TLS handshake, Server hello (2):988{ [1210 bytes data]989* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):990{ [1 bytes data]991* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):992{ [19 bytes data]993* TLSv1.3 (IN), TLS handshake, Certificate (11):994{ [1008 bytes data]995* TLSv1.3 (IN), TLS handshake, CERT verify (15):996{ [112 bytes data]997* TLSv1.3 (IN), TLS handshake, Finished (20):998{ [52 bytes data]999* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1000} [1 bytes data]1001* TLSv1.3 (OUT), TLS handshake, Finished (20):1002} [52 bytes data]1003* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1004* ALPN: server accepted h21005* Server certificate:1006* subject: CN=test.foo1007* start date: Sep 15 00:20:19 2026 GMT1008* expire date: Oct 15 00:20:19 2028 GMT1009* issuer: CN=minica root ca 3296001010* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841011* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841012* subjectAltName: "test.foo" matches cert's "test.foo"1013* OpenSSL verify result: 131014* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1015* closing connection #01016curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1017More details here: https://curl.se/docs/sslcerts.html10181019curl failed to verify the legitimacy of the server and therefore could not1020establish a secure connection to it. To learn more about this situation and1021how to fix it, please visit the webpage mentioned above.1022* Trying [2001:db8:1::3]:443...1023* Host test.foo:443 was resolved.1024* IPv6: 2001:db8:1::31025* IPv4: 192.168.1.31026* ALPN: curl offers h2,http/1.11027} [5 bytes data]1028* TLSv1.3 (OUT), TLS handshake, Client hello (1):1029} [1552 bytes data]1030* SSL Trust Anchors:1031* OpenSSL default paths (fallback)1032{ [5 bytes data]1033* TLSv1.3 (IN), TLS handshake, Server hello (2):1034{ [1210 bytes data]1035* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1036{ [1 bytes data]1037* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1038{ [19 bytes data]1039* TLSv1.3 (IN), TLS handshake, Certificate (11):1040{ [1008 bytes data]1041* TLSv1.3 (IN), TLS handshake, CERT verify (15):1042{ [112 bytes data]1043* TLSv1.3 (IN), TLS handshake, Finished (20):1044{ [52 bytes data]1045* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1046} [1 bytes data]1047* TLSv1.3 (OUT), TLS handshake, Finished (20):1048} [52 bytes data]1049* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1050* ALPN: server accepted h21051* Server certificate:1052* subject: CN=test.foo1053* start date: Sep 15 00:20:19 2026 GMT1054* expire date: Oct 15 00:20:19 2028 GMT1055* issuer: CN=minica root ca 3296001056* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841057* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841058* subjectAltName: "test.foo" matches cert's "test.foo"1059* OpenSSL verify result: 131060* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1061* closing connection #01062curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1063More details here: https://curl.se/docs/sslcerts.html10641065curl failed to verify the legitimacy of the server and therefore could not1066establish a secure connection to it. To learn more about this situation and1067how to fix it, please visit the webpage mentioned above.1068* Host test.foo:443 was resolved.1069* IPv6: 2001:db8:1::31070* IPv4: 192.168.1.31071* Trying [2001:db8:1::3]:443...1072* ALPN: curl offers h2,http/1.11073} [5 bytes data]1074* TLSv1.3 (OUT), TLS handshake, Client hello (1):1075} [1552 bytes data]1076* SSL Trust Anchors:1077* OpenSSL default paths (fallback)1078{ [5 bytes data]1079* TLSv1.3 (IN), TLS handshake, Server hello (2):1080{ [1210 bytes data]1081* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1082{ [1 bytes data]1083* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1084{ [19 bytes data]1085* TLSv1.3 (IN), TLS handshake, Certificate (11):1086{ [1008 bytes data]1087* TLSv1.3 (IN), TLS handshake, CERT verify (15):1088{ [110 bytes data]1089* TLSv1.3 (IN), TLS handshake, Finished (20):1090{ [52 bytes data]1091* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1092} [1 bytes data]1093* TLSv1.3 (OUT), TLS handshake, Finished (20):1094} [52 bytes data]1095* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1096* ALPN: server accepted h21097* Server certificate:1098* subject: CN=test.foo1099* start date: Sep 15 00:20:19 2026 GMT1100* expire date: Oct 15 00:20:19 2028 GMT1101* issuer: CN=minica root ca 3296001102* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841103* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841104* subjectAltName: "test.foo" matches cert's "test.foo"1105* OpenSSL verify result: 131106* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1107* closing connection #01108curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1109More details here: https://curl.se/docs/sslcerts.html11101111curl failed to verify the legitimacy of the server and therefore could not1112establish a secure connection to it. To learn more about this situation and1113how to fix it, please visit the webpage mentioned above.1114* Host test.foo:443 was resolved.1115* IPv6: 2001:db8:1::31116* IPv4: 192.168.1.31117* Trying [2001:db8:1::3]:443...1118* ALPN: curl offers h2,http/1.11119} [5 bytes data]1120* TLSv1.3 (OUT), TLS handshake, Client hello (1):1121} [1552 bytes data]1122* SSL Trust Anchors:1123* OpenSSL default paths (fallback)1124{ [5 bytes data]1125* TLSv1.3 (IN), TLS handshake, Server hello (2):1126{ [1210 bytes data]1127* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1128{ [1 bytes data]1129* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1130{ [19 bytes data]1131* TLSv1.3 (IN), TLS handshake, Certificate (11):1132{ [1008 bytes data]1133* TLSv1.3 (IN), TLS handshake, CERT verify (15):1134{ [110 bytes data]1135* TLSv1.3 (IN), TLS handshake, Finished (20):1136{ [52 bytes data]1137* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1138} [1 bytes data]1139* TLSv1.3 (OUT), TLS handshake, Finished (20):1140} [52 bytes data]1141* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1142* ALPN: server accepted h21143* Server certificate:1144* subject: CN=test.foo1145* start date: Sep 15 00:20:19 2026 GMT1146* expire date: Oct 15 00:20:19 2028 GMT1147* issuer: CN=minica root ca 3296001148* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841149* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841150* subjectAltName: "test.foo" matches cert's "test.foo"1151* OpenSSL verify result: 131152* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1153* closing connection #01154curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1155More details here: https://curl.se/docs/sslcerts.html11561157curl failed to verify the legitimacy of the server and therefore could not1158establish a secure connection to it. To learn more about this situation and1159how to fix it, please visit the webpage mentioned above.1160* Host test.foo:443 was resolved.1161* IPv6: 2001:db8:1::31162* IPv4: 192.168.1.31163* Trying [2001:db8:1::3]:443...1164* ALPN: curl offers h2,http/1.11165} [5 bytes data]1166* TLSv1.3 (OUT), TLS handshake, Client hello (1):1167} [1552 bytes data]1168* SSL Trust Anchors:1169* OpenSSL default paths (fallback)1170{ [5 bytes data]1171* TLSv1.3 (IN), TLS handshake, Server hello (2):1172{ [1210 bytes data]1173* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1174{ [1 bytes data]1175* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1176{ [19 bytes data]1177* TLSv1.3 (IN), TLS handshake, Certificate (11):1178{ [1008 bytes data]1179* TLSv1.3 (IN), TLS handshake, CERT verify (15):1180{ [112 bytes data]1181* TLSv1.3 (IN), TLS handshake, Finished (20):1182{ [52 bytes data]1183* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1184} [1 bytes data]1185* TLSv1.3 (OUT), TLS handshake, Finished (20):1186} [52 bytes data]1187* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1188* ALPN: server accepted h21189* Server certificate:1190* subject: CN=test.foo1191* start date: Sep 15 00:20:19 2026 GMT1192* expire date: Oct 15 00:20:19 2028 GMT1193* issuer: CN=minica root ca 3296001194* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841195* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841196* subjectAltName: "test.foo" matches cert's "test.foo"1197* OpenSSL verify result: 131198* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1199* closing connection #01200curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1201More details here: https://curl.se/docs/sslcerts.html12021203curl failed to verify the legitimacy of the server and therefore could not1204establish a secure connection to it. To learn more about this situation and1205how to fix it, please visit the webpage mentioned above.1206* Host test.foo:443 was resolved.1207* IPv6: 2001:db8:1::31208* IPv4: 192.168.1.31209* Trying [2001:db8:1::3]:443...1210* ALPN: curl offers h2,http/1.11211} [5 bytes data]1212* TLSv1.3 (OUT), TLS handshake, Client hello (1):1213} [1552 bytes data]1214* SSL Trust Anchors:1215* OpenSSL default paths (fallback)1216{ [5 bytes data]1217* TLSv1.3 (IN), TLS handshake, Server hello (2):1218{ [1210 bytes data]1219* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1220{ [1 bytes data]1221* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1222{ [19 bytes data]1223* TLSv1.3 (IN), TLS handshake, Certificate (11):1224{ [1008 bytes data]1225* TLSv1.3 (IN), TLS handshake, CERT verify (15):1226{ [111 bytes data]1227* TLSv1.3 (IN), TLS handshake, Finished (20):1228{ [52 bytes data]1229* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1230} [1 bytes data]1231* TLSv1.3 (OUT), TLS handshake, Finished (20):1232} [52 bytes data]1233* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1234* ALPN: server accepted h21235* Server certificate:1236* subject: CN=test.foo1237* start date: Sep 15 00:20:19 2026 GMT1238* expire date: Oct 15 00:20:19 2028 GMT1239* issuer: CN=minica root ca 3296001240* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841241* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841242* subjectAltName: "test.foo" matches cert's "test.foo"1243* OpenSSL verify result: 131244* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1245* closing connection #01246curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1247More details here: https://curl.se/docs/sslcerts.html12481249curl failed to verify the legitimacy of the server and therefore could not1250establish a secure connection to it. To learn more about this situation and1251how to fix it, please visit the webpage mentioned above.1252* Host test.foo:443 was resolved.1253* IPv6: 2001:db8:1::31254* IPv4: 192.168.1.31255* Trying [2001:db8:1::3]:443...1256* ALPN: curl offers h2,http/1.11257} [5 bytes data]1258* TLSv1.3 (OUT), TLS handshake, Client hello (1):1259} [1552 bytes data]1260* SSL Trust Anchors:1261* OpenSSL default paths (fallback)1262{ [5 bytes data]1263* TLSv1.3 (IN), TLS handshake, Server hello (2):1264{ [1210 bytes data]1265* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1266{ [1 bytes data]1267* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1268{ [19 bytes data]1269* TLSv1.3 (IN), TLS handshake, Certificate (11):1270{ [1008 bytes data]1271* TLSv1.3 (IN), TLS handshake, CERT verify (15):1272{ [111 bytes data]1273* TLSv1.3 (IN), TLS handshake, Finished (20):1274{ [52 bytes data]1275* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1276} [1 bytes data]1277* TLSv1.3 (OUT), TLS handshake, Finished (20):1278} [52 bytes data]1279* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1280* ALPN: server accepted h21281* Server certificate:1282* subject: CN=test.foo1283* start date: Sep 15 00:20:19 2026 GMT1284* expire date: Oct 15 00:20:19 2028 GMT1285* issuer: CN=minica root ca 3296001286* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841287* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841288* subjectAltName: "test.foo" matches cert's "test.foo"1289* OpenSSL verify result: 131290* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1291* closing connection #01292curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1293More details here: https://curl.se/docs/sslcerts.html12941295curl failed to verify the legitimacy of the server and therefore could not1296establish a secure connection to it. To learn more about this situation and1297how to fix it, please visit the webpage mentioned above.1298* Host test.foo:443 was resolved.1299* IPv6: 2001:db8:1::31300* IPv4: 192.168.1.31301* Trying [2001:db8:1::3]:443...1302* ALPN: curl offers h2,http/1.11303} [5 bytes data]1304* TLSv1.3 (OUT), TLS handshake, Client hello (1):1305} [1552 bytes data]1306* SSL Trust Anchors:1307* OpenSSL default paths (fallback)1308{ [5 bytes data]1309* TLSv1.3 (IN), TLS handshake, Server hello (2):1310{ [1210 bytes data]1311* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1312{ [1 bytes data]1313* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1314{ [19 bytes data]1315* TLSv1.3 (IN), TLS handshake, Certificate (11):1316{ [1008 bytes data]1317* TLSv1.3 (IN), TLS handshake, CERT verify (15):1318{ [112 bytes data]1319* TLSv1.3 (IN), TLS handshake, Finished (20):1320{ [52 bytes data]1321* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1322} [1 bytes data]1323* TLSv1.3 (OUT), TLS handshake, Finished (20):1324} [52 bytes data]1325* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1326* ALPN: server accepted h21327* Server certificate:1328* subject: CN=test.foo1329* start date: Sep 15 00:20:19 2026 GMT1330* expire date: Oct 15 00:20:19 2028 GMT1331* issuer: CN=minica root ca 3296001332* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841333* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841334* subjectAltName: "test.foo" matches cert's "test.foo"1335* OpenSSL verify result: 131336* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1337* closing connection #01338curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1339More details here: https://curl.se/docs/sslcerts.html13401341curl failed to verify the legitimacy of the server and therefore could not1342establish a secure connection to it. To learn more about this situation and1343how to fix it, please visit the webpage mentioned above.1344* Host test.foo:443 was resolved.1345* IPv6: 2001:db8:1::31346* IPv4: 192.168.1.31347* Trying [2001:db8:1::3]:443...1348* ALPN: curl offers h2,http/1.11349} [5 bytes data]1350* TLSv1.3 (OUT), TLS handshake, Client hello (1):1351} [1552 bytes data]1352* SSL Trust Anchors:1353* OpenSSL default paths (fallback)1354{ [5 bytes data]1355* TLSv1.3 (IN), TLS handshake, Server hello (2):1356{ [1210 bytes data]1357* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1358{ [1 bytes data]1359* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1360{ [19 bytes data]1361* TLSv1.3 (IN), TLS handshake, Certificate (11):1362{ [1008 bytes data]1363* TLSv1.3 (IN), TLS handshake, CERT verify (15):1364{ [110 bytes data]1365* TLSv1.3 (IN), TLS handshake, Finished (20):1366{ [52 bytes data]1367* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1368} [1 bytes data]1369* TLSv1.3 (OUT), TLS handshake, Finished (20):1370} [52 bytes data]1371* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1372* ALPN: server accepted h21373* Server certificate:1374* subject: CN=test.foo1375* start date: Sep 15 00:20:19 2026 GMT1376* expire date: Oct 15 00:20:19 2028 GMT1377* issuer: CN=minica root ca 3296001378* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841379* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841380* subjectAltName: "test.foo" matches cert's "test.foo"1381* OpenSSL verify result: 131382* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1383* closing connection #01384curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1385More details here: https://curl.se/docs/sslcerts.html13861387curl failed to verify the legitimacy of the server and therefore could not1388establish a secure connection to it. To learn more about this situation and1389how to fix it, please visit the webpage mentioned above.1390* Host test.foo:443 was resolved.1391* IPv6: 2001:db8:1::31392* IPv4: 192.168.1.31393* Trying [2001:db8:1::3]:443...1394* ALPN: curl offers h2,http/1.11395} [5 bytes data]1396* TLSv1.3 (OUT), TLS handshake, Client hello (1):1397} [1552 bytes data]1398* SSL Trust Anchors:1399* OpenSSL default paths (fallback)1400{ [5 bytes data]1401* TLSv1.3 (IN), TLS handshake, Server hello (2):1402{ [1210 bytes data]1403* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1404{ [1 bytes data]1405* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1406{ [19 bytes data]1407* TLSv1.3 (IN), TLS handshake, Certificate (11):1408{ [1008 bytes data]1409* TLSv1.3 (IN), TLS handshake, CERT verify (15):1410{ [111 bytes data]1411* TLSv1.3 (IN), TLS handshake, Finished (20):1412{ [52 bytes data]1413* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1414} [1 bytes data]1415* TLSv1.3 (OUT), TLS handshake, Finished (20):1416} [52 bytes data]1417* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1418* ALPN: server accepted h21419* Server certificate:1420* subject: CN=test.foo1421* start date: Sep 15 00:20:19 2026 GMT1422* expire date: Oct 15 00:20:19 2028 GMT1423* issuer: CN=minica root ca 3296001424* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841425* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841426* subjectAltName: "test.foo" matches cert's "test.foo"1427* OpenSSL verify result: 131428* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1429* closing connection #01430curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1431More details here: https://curl.se/docs/sslcerts.html14321433curl failed to verify the legitimacy of the server and therefore could not1434establish a secure connection to it. To learn more about this situation and1435how to fix it, please visit the webpage mentioned above.1436* Host test.foo:443 was resolved.1437* IPv6: 2001:db8:1::31438* IPv4: 192.168.1.31439* Trying [2001:db8:1::3]:443...1440* ALPN: curl offers h2,http/1.11441} [5 bytes data]1442* TLSv1.3 (OUT), TLS handshake, Client hello (1):1443} [1552 bytes data]1444* SSL Trust Anchors:1445* OpenSSL default paths (fallback)1446{ [5 bytes data]1447* TLSv1.3 (IN), TLS handshake, Server hello (2):1448{ [1210 bytes data]1449* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1450{ [1 bytes data]1451* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1452{ [19 bytes data]1453* TLSv1.3 (IN), TLS handshake, Certificate (11):1454{ [1008 bytes data]1455* TLSv1.3 (IN), TLS handshake, CERT verify (15):1456{ [111 bytes data]1457* TLSv1.3 (IN), TLS handshake, Finished (20):1458{ [52 bytes data]1459* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1460} [1 bytes data]1461* TLSv1.3 (OUT), TLS handshake, Finished (20):1462} [52 bytes data]1463* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1464* ALPN: server accepted h21465* Server certificate:1466* subject: CN=test.foo1467* start date: Sep 15 00:20:19 2026 GMT1468* expire date: Oct 15 00:20:19 2028 GMT1469* issuer: CN=minica root ca 3296001470* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841471* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841472* subjectAltName: "test.foo" matches cert's "test.foo"1473* OpenSSL verify result: 131474* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1475* closing connection #01476curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1477More details here: https://curl.se/docs/sslcerts.html14781479curl failed to verify the legitimacy of the server and therefore could not1480establish a secure connection to it. To learn more about this situation and1481how to fix it, please visit the webpage mentioned above.1482* Trying [2001:db8:1::3]:443...1483* Host test.foo:443 was resolved.1484* IPv6: 2001:db8:1::31485* IPv4: 192.168.1.31486* ALPN: curl offers h2,http/1.11487} [5 bytes data]1488* TLSv1.3 (OUT), TLS handshake, Client hello (1):1489} [1552 bytes data]1490* SSL Trust Anchors:1491* OpenSSL default paths (fallback)1492{ [5 bytes data]1493* TLSv1.3 (IN), TLS handshake, Server hello (2):1494{ [1210 bytes data]1495* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1496{ [1 bytes data]1497* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1498{ [19 bytes data]1499* TLSv1.3 (IN), TLS handshake, Certificate (11):1500{ [1008 bytes data]1501* TLSv1.3 (IN), TLS handshake, CERT verify (15):1502{ [110 bytes data]1503* TLSv1.3 (IN), TLS handshake, Finished (20):1504{ [52 bytes data]1505* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1506} [1 bytes data]1507* TLSv1.3 (OUT), TLS handshake, Finished (20):1508} [52 bytes data]1509* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1510* ALPN: server accepted h21511* Server certificate:1512* subject: CN=test.foo1513* start date: Sep 15 00:20:19 2026 GMT1514* expire date: Oct 15 00:20:19 2028 GMT1515* issuer: CN=minica root ca 3296001516* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841517* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841518* subjectAltName: "test.foo" matches cert's "test.foo"1519* OpenSSL verify result: 131520* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1521* closing connection #01522curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1523More details here: https://curl.se/docs/sslcerts.html15241525curl failed to verify the legitimacy of the server and therefore could not1526establish a secure connection to it. To learn more about this situation and1527how to fix it, please visit the webpage mentioned above.1528* Host test.foo:443 was resolved.1529* IPv6: 2001:db8:1::31530* IPv4: 192.168.1.31531* Trying [2001:db8:1::3]:443...1532* ALPN: curl offers h2,http/1.11533} [5 bytes data]1534* TLSv1.3 (OUT), TLS handshake, Client hello (1):1535} [1552 bytes data]1536* SSL Trust Anchors:1537* OpenSSL default paths (fallback)1538{ [5 bytes data]1539* TLSv1.3 (IN), TLS handshake, Server hello (2):1540{ [1210 bytes data]1541* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1542{ [1 bytes data]1543* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1544{ [19 bytes data]1545* TLSv1.3 (IN), TLS handshake, Certificate (11):1546{ [1008 bytes data]1547* TLSv1.3 (IN), TLS handshake, CERT verify (15):1548{ [111 bytes data]1549* TLSv1.3 (IN), TLS handshake, Finished (20):1550{ [52 bytes data]1551* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1552} [1 bytes data]1553* TLSv1.3 (OUT), TLS handshake, Finished (20):1554} [52 bytes data]1555* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1556* ALPN: server accepted h21557* Server certificate:1558* subject: CN=test.foo1559* start date: Sep 15 00:20:19 2026 GMT1560* expire date: Oct 15 00:20:19 2028 GMT1561* issuer: CN=minica root ca 3296001562* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841563* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841564* subjectAltName: "test.foo" matches cert's "test.foo"1565* OpenSSL verify result: 131566* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1567* closing connection #01568curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1569More details here: https://curl.se/docs/sslcerts.html15701571curl failed to verify the legitimacy of the server and therefore could not1572establish a secure connection to it. To learn more about this situation and1573how to fix it, please visit the webpage mentioned above.1574* Host test.foo:443 was resolved.1575* IPv6: 2001:db8:1::31576* IPv4: 192.168.1.31577* Trying [2001:db8:1::3]:443...1578* ALPN: curl offers h2,http/1.11579} [5 bytes data]1580* TLSv1.3 (OUT), TLS handshake, Client hello (1):1581} [1552 bytes data]1582* SSL Trust Anchors:1583* OpenSSL default paths (fallback)1584{ [5 bytes data]1585* TLSv1.3 (IN), TLS handshake, Server hello (2):1586{ [1210 bytes data]1587* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1588{ [1 bytes data]1589* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1590{ [19 bytes data]1591* TLSv1.3 (IN), TLS handshake, Certificate (11):1592{ [1008 bytes data]1593* TLSv1.3 (IN), TLS handshake, CERT verify (15):1594{ [112 bytes data]1595* TLSv1.3 (IN), TLS handshake, Finished (20):1596{ [52 bytes data]1597* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1598} [1 bytes data]1599* TLSv1.3 (OUT), TLS handshake, Finished (20):1600} [52 bytes data]1601* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1602* ALPN: server accepted h21603* Server certificate:1604* subject: CN=test.foo1605* start date: Sep 15 00:20:19 2026 GMT1606* expire date: Oct 15 00:20:19 2028 GMT1607* issuer: CN=minica root ca 3296001608* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841609* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841610* subjectAltName: "test.foo" matches cert's "test.foo"1611* OpenSSL verify result: 131612* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1613* closing connection #01614curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1615More details here: https://curl.se/docs/sslcerts.html16161617curl failed to verify the legitimacy of the server and therefore could not1618establish a secure connection to it. To learn more about this situation and1619how to fix it, please visit the webpage mentioned above.1620* Trying [2001:db8:1::3]:443...1621* Host test.foo:443 was resolved.1622* IPv6: 2001:db8:1::31623* IPv4: 192.168.1.31624* ALPN: curl offers h2,http/1.11625} [5 bytes data]1626* TLSv1.3 (OUT), TLS handshake, Client hello (1):1627} [1552 bytes data]1628* SSL Trust Anchors:1629* OpenSSL default paths (fallback)1630{ [5 bytes data]1631* TLSv1.3 (IN), TLS handshake, Server hello (2):1632{ [1210 bytes data]1633* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1634{ [1 bytes data]1635* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1636{ [19 bytes data]1637* TLSv1.3 (IN), TLS handshake, Certificate (11):1638{ [1008 bytes data]1639* TLSv1.3 (IN), TLS handshake, CERT verify (15):1640{ [111 bytes data]1641* TLSv1.3 (IN), TLS handshake, Finished (20):1642{ [52 bytes data]1643* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1644} [1 bytes data]1645* TLSv1.3 (OUT), TLS handshake, Finished (20):1646} [52 bytes data]1647* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1648* ALPN: server accepted h21649* Server certificate:1650* subject: CN=test.foo1651* start date: Sep 15 00:20:19 2026 GMT1652* expire date: Oct 15 00:20:19 2028 GMT1653* issuer: CN=minica root ca 3296001654* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841655* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841656* subjectAltName: "test.foo" matches cert's "test.foo"1657* OpenSSL verify result: 131658* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1659* closing connection #01660curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1661More details here: https://curl.se/docs/sslcerts.html16621663curl failed to verify the legitimacy of the server and therefore could not1664establish a secure connection to it. To learn more about this situation and1665how to fix it, please visit the webpage mentioned above.1666* Host test.foo:443 was resolved.1667* IPv6: 2001:db8:1::31668* IPv4: 192.168.1.31669* Trying [2001:db8:1::3]:443...1670* ALPN: curl offers h2,http/1.11671} [5 bytes data]1672* TLSv1.3 (OUT), TLS handshake, Client hello (1):1673} [1552 bytes data]1674* SSL Trust Anchors:1675* OpenSSL default paths (fallback)1676{ [5 bytes data]1677* TLSv1.3 (IN), TLS handshake, Server hello (2):1678{ [1210 bytes data]1679* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1680{ [1 bytes data]1681* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1682{ [19 bytes data]1683* TLSv1.3 (IN), TLS handshake, Certificate (11):1684{ [1008 bytes data]1685* TLSv1.3 (IN), TLS handshake, CERT verify (15):1686{ [111 bytes data]1687* TLSv1.3 (IN), TLS handshake, Finished (20):1688{ [52 bytes data]1689* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1690} [1 bytes data]1691* TLSv1.3 (OUT), TLS handshake, Finished (20):1692} [52 bytes data]1693* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1694* ALPN: server accepted h21695* Server certificate:1696* subject: CN=test.foo1697* start date: Sep 15 00:20:19 2026 GMT1698* expire date: Oct 15 00:20:19 2028 GMT1699* issuer: CN=minica root ca 3296001700* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841701* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841702* subjectAltName: "test.foo" matches cert's "test.foo"1703* OpenSSL verify result: 131704* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1705* closing connection #01706curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1707More details here: https://curl.se/docs/sslcerts.html17081709curl failed to verify the legitimacy of the server and therefore could not1710establish a secure connection to it. To learn more about this situation and1711how to fix it, please visit the webpage mentioned above.1712* Host test.foo:443 was resolved.1713* IPv6: 2001:db8:1::31714* IPv4: 192.168.1.31715* Trying [2001:db8:1::3]:443...1716* ALPN: curl offers h2,http/1.11717} [5 bytes data]1718* TLSv1.3 (OUT), TLS handshake, Client hello (1):1719} [1552 bytes data]1720* SSL Trust Anchors:1721* OpenSSL default paths (fallback)1722{ [5 bytes data]1723* TLSv1.3 (IN), TLS handshake, Server hello (2):1724{ [1210 bytes data]1725* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1726{ [1 bytes data]1727* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1728{ [19 bytes data]1729* TLSv1.3 (IN), TLS handshake, Certificate (11):1730{ [1008 bytes data]1731* TLSv1.3 (IN), TLS handshake, CERT verify (15):1732{ [111 bytes data]1733* TLSv1.3 (IN), TLS handshake, Finished (20):1734{ [52 bytes data]1735* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1736} [1 bytes data]1737* TLSv1.3 (OUT), TLS handshake, Finished (20):1738} [52 bytes data]1739* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1740* ALPN: server accepted h21741* Server certificate:1742* subject: CN=test.foo1743* start date: Sep 15 00:20:19 2026 GMT1744* expire date: Oct 15 00:20:19 2028 GMT1745* issuer: CN=minica root ca 3296001746* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841747* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841748* subjectAltName: "test.foo" matches cert's "test.foo"1749* OpenSSL verify result: 131750* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1751* closing connection #01752curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1753More details here: https://curl.se/docs/sslcerts.html17541755curl failed to verify the legitimacy of the server and therefore could not1756establish a secure connection to it. To learn more about this situation and1757how to fix it, please visit the webpage mentioned above.1758* Trying [2001:db8:1::3]:443...1759* Host test.foo:443 was resolved.1760* IPv6: 2001:db8:1::31761* IPv4: 192.168.1.31762* ALPN: curl offers h2,http/1.11763} [5 bytes data]1764* TLSv1.3 (OUT), TLS handshake, Client hello (1):1765} [1552 bytes data]1766* SSL Trust Anchors:1767* OpenSSL default paths (fallback)1768{ [5 bytes data]1769* TLSv1.3 (IN), TLS handshake, Server hello (2):1770{ [1210 bytes data]1771* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1772{ [1 bytes data]1773* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1774{ [19 bytes data]1775* TLSv1.3 (IN), TLS handshake, Certificate (11):1776{ [1008 bytes data]1777* TLSv1.3 (IN), TLS handshake, CERT verify (15):1778{ [112 bytes data]1779* TLSv1.3 (IN), TLS handshake, Finished (20):1780{ [52 bytes data]1781* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1782} [1 bytes data]1783* TLSv1.3 (OUT), TLS handshake, Finished (20):1784} [52 bytes data]1785* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1786* ALPN: server accepted h21787* Server certificate:1788* subject: CN=test.foo1789* start date: Sep 15 00:20:19 2026 GMT1790* expire date: Oct 15 00:20:19 2028 GMT1791* issuer: CN=minica root ca 3296001792* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841793* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841794* subjectAltName: "test.foo" matches cert's "test.foo"1795* OpenSSL verify result: 131796* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1797* closing connection #01798curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1799More details here: https://curl.se/docs/sslcerts.html18001801curl failed to verify the legitimacy of the server and therefore could not1802establish a secure connection to it. To learn more about this situation and1803how to fix it, please visit the webpage mentioned above.1804* Trying [2001:db8:1::3]:443...1805* Host test.foo:443 was resolved.1806* IPv6: 2001:db8:1::31807* IPv4: 192.168.1.31808* ALPN: curl offers h2,http/1.11809} [5 bytes data]1810* TLSv1.3 (OUT), TLS handshake, Client hello (1):1811} [1552 bytes data]1812* SSL Trust Anchors:1813* OpenSSL default paths (fallback)1814{ [5 bytes data]1815* TLSv1.3 (IN), TLS handshake, Server hello (2):1816{ [1210 bytes data]1817* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1818{ [1 bytes data]1819* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1820{ [19 bytes data]1821* TLSv1.3 (IN), TLS handshake, Certificate (11):1822{ [1008 bytes data]1823* TLSv1.3 (IN), TLS handshake, CERT verify (15):1824{ [111 bytes data]1825* TLSv1.3 (IN), TLS handshake, Finished (20):1826{ [52 bytes data]1827* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1828} [1 bytes data]1829* TLSv1.3 (OUT), TLS handshake, Finished (20):1830} [52 bytes data]1831* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1832* ALPN: server accepted h21833* Server certificate:1834* subject: CN=test.foo1835* start date: Sep 15 00:20:19 2026 GMT1836* expire date: Oct 15 00:20:19 2028 GMT1837* issuer: CN=minica root ca 3296001838* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841839* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841840* subjectAltName: "test.foo" matches cert's "test.foo"1841* OpenSSL verify result: 131842* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1843* closing connection #01844curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1845More details here: https://curl.se/docs/sslcerts.html18461847curl failed to verify the legitimacy of the server and therefore could not1848establish a secure connection to it. To learn more about this situation and1849how to fix it, please visit the webpage mentioned above.1850* Host test.foo:443 was resolved.1851* IPv6: 2001:db8:1::31852* IPv4: 192.168.1.31853* Trying [2001:db8:1::3]:443...1854* ALPN: curl offers h2,http/1.11855} [5 bytes data]1856* TLSv1.3 (OUT), TLS handshake, Client hello (1):1857} [1552 bytes data]1858* SSL Trust Anchors:1859* OpenSSL default paths (fallback)1860{ [5 bytes data]1861* TLSv1.3 (IN), TLS handshake, Server hello (2):1862{ [1210 bytes data]1863* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1864{ [1 bytes data]1865* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1866{ [19 bytes data]1867* TLSv1.3 (IN), TLS handshake, Certificate (11):1868{ [1008 bytes data]1869* TLSv1.3 (IN), TLS handshake, CERT verify (15):1870{ [112 bytes data]1871* TLSv1.3 (IN), TLS handshake, Finished (20):1872{ [52 bytes data]1873* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1874} [1 bytes data]1875* TLSv1.3 (OUT), TLS handshake, Finished (20):1876} [52 bytes data]1877* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1878* ALPN: server accepted h21879* Server certificate:1880* subject: CN=test.foo1881* start date: Sep 15 00:20:19 2026 GMT1882* expire date: Oct 15 00:20:19 2028 GMT1883* issuer: CN=minica root ca 3296001884* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841885* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841886* subjectAltName: "test.foo" matches cert's "test.foo"1887* OpenSSL verify result: 131888* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1889* closing connection #01890curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1891More details here: https://curl.se/docs/sslcerts.html18921893curl failed to verify the legitimacy of the server and therefore could not1894establish a secure connection to it. To learn more about this situation and1895how to fix it, please visit the webpage mentioned above.1896* Host test.foo:443 was resolved.1897* IPv6: 2001:db8:1::31898* IPv4: 192.168.1.31899* Trying [2001:db8:1::3]:443...1900* ALPN: curl offers h2,http/1.11901} [5 bytes data]1902* TLSv1.3 (OUT), TLS handshake, Client hello (1):1903} [1552 bytes data]1904* SSL Trust Anchors:1905* OpenSSL default paths (fallback)1906{ [5 bytes data]1907* TLSv1.3 (IN), TLS handshake, Server hello (2):1908{ [1210 bytes data]1909* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1910{ [1 bytes data]1911* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1912{ [19 bytes data]1913* TLSv1.3 (IN), TLS handshake, Certificate (11):1914{ [1008 bytes data]1915* TLSv1.3 (IN), TLS handshake, CERT verify (15):1916{ [112 bytes data]1917* TLSv1.3 (IN), TLS handshake, Finished (20):1918{ [52 bytes data]1919* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1920} [1 bytes data]1921* TLSv1.3 (OUT), TLS handshake, Finished (20):1922} [52 bytes data]1923* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1924* ALPN: server accepted h21925* Server certificate:1926* subject: CN=test.foo1927* start date: Sep 15 00:20:19 2026 GMT1928* expire date: Oct 15 00:20:19 2028 GMT1929* issuer: CN=minica root ca 3296001930* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841931* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841932* subjectAltName: "test.foo" matches cert's "test.foo"1933* OpenSSL verify result: 131934* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1935* closing connection #01936curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1937More details here: https://curl.se/docs/sslcerts.html19381939curl failed to verify the legitimacy of the server and therefore could not1940establish a secure connection to it. To learn more about this situation and1941how to fix it, please visit the webpage mentioned above.1942* Host test.foo:443 was resolved.1943* IPv6: 2001:db8:1::31944* IPv4: 192.168.1.31945* Trying [2001:db8:1::3]:443...1946* ALPN: curl offers h2,http/1.11947} [5 bytes data]1948* TLSv1.3 (OUT), TLS handshake, Client hello (1):1949} [1552 bytes data]1950* SSL Trust Anchors:1951* OpenSSL default paths (fallback)1952{ [5 bytes data]1953* TLSv1.3 (IN), TLS handshake, Server hello (2):1954{ [1210 bytes data]1955* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1956{ [1 bytes data]1957* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1958{ [19 bytes data]1959* TLSv1.3 (IN), TLS handshake, Certificate (11):1960{ [1008 bytes data]1961* TLSv1.3 (IN), TLS handshake, CERT verify (15):1962{ [110 bytes data]1963* TLSv1.3 (IN), TLS handshake, Finished (20):1964{ [52 bytes data]1965* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1966} [1 bytes data]1967* TLSv1.3 (OUT), TLS handshake, Finished (20):1968} [52 bytes data]1969* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1970* ALPN: server accepted h21971* Server certificate:1972* subject: CN=test.foo1973* start date: Sep 15 00:20:19 2026 GMT1974* expire date: Oct 15 00:20:19 2028 GMT1975* issuer: CN=minica root ca 3296001976* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841977* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841978* subjectAltName: "test.foo" matches cert's "test.foo"1979* OpenSSL verify result: 131980* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1981* closing connection #01982curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1983More details here: https://curl.se/docs/sslcerts.html19841985curl failed to verify the legitimacy of the server and therefore could not1986establish a secure connection to it. To learn more about this situation and1987how to fix it, please visit the webpage mentioned above.1988* Trying [2001:db8:1::3]:443...1989* Host test.foo:443 was resolved.1990* IPv6: 2001:db8:1::31991* IPv4: 192.168.1.31992* ALPN: curl offers h2,http/1.11993} [5 bytes data]1994* TLSv1.3 (OUT), TLS handshake, Client hello (1):1995} [1552 bytes data]1996* SSL Trust Anchors:1997* OpenSSL default paths (fallback)1998{ [5 bytes data]1999* TLSv1.3 (IN), TLS handshake, Server hello (2):2000{ [1210 bytes data]
loading 35,097 hidden lines…
37098{ [1210 bytes data]37099* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37100{ [1 bytes data]37101* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37102{ [19 bytes data]37103* TLSv1.3 (IN), TLS handshake, Certificate (11):37104{ [1008 bytes data]37105* TLSv1.3 (IN), TLS handshake, CERT verify (15):37106{ [111 bytes data]37107* TLSv1.3 (IN), TLS handshake, Finished (20):37108{ [52 bytes data]37109* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37110} [1 bytes data]37111* TLSv1.3 (OUT), TLS handshake, Finished (20):37112} [52 bytes data]37113* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37114* ALPN: server accepted h237115* Server certificate:37116* subject: CN=test.foo37117* start date: Sep 15 00:20:19 2026 GMT37118* expire date: Oct 15 00:20:19 2028 GMT37119* issuer: CN=minica root ca 32960037120* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437121* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437122* subjectAltName: "test.foo" matches cert's "test.foo"37123* OpenSSL verify result: 1337124* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37125* closing connection #037126curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37127More details here: https://curl.se/docs/sslcerts.html3712837129curl failed to verify the legitimacy of the server and therefore could not37130establish a secure connection to it. To learn more about this situation and37131how to fix it, please visit the webpage mentioned above.37132* Host test.foo:443 was resolved.37133* IPv6: 2001:db8:1::337134* IPv4: 192.168.1.337135* Trying [2001:db8:1::3]:443...37136* ALPN: curl offers h2,http/1.137137} [5 bytes data]37138* TLSv1.3 (OUT), TLS handshake, Client hello (1):37139} [1552 bytes data]37140* SSL Trust Anchors:37141* OpenSSL default paths (fallback)37142{ [5 bytes data]37143* TLSv1.3 (IN), TLS handshake, Server hello (2):37144{ [1210 bytes data]37145* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37146{ [1 bytes data]37147* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37148{ [19 bytes data]37149* TLSv1.3 (IN), TLS handshake, Certificate (11):37150{ [1008 bytes data]37151* TLSv1.3 (IN), TLS handshake, CERT verify (15):37152{ [112 bytes data]37153* TLSv1.3 (IN), TLS handshake, Finished (20):37154{ [52 bytes data]37155* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37156} [1 bytes data]37157* TLSv1.3 (OUT), TLS handshake, Finished (20):37158} [52 bytes data]37159* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37160* ALPN: server accepted h237161* Server certificate:37162* subject: CN=test.foo37163* start date: Sep 15 00:20:19 2026 GMT37164* expire date: Oct 15 00:20:19 2028 GMT37165* issuer: CN=minica root ca 32960037166* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437167* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437168* subjectAltName: "test.foo" matches cert's "test.foo"37169* OpenSSL verify result: 1337170* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37171* closing connection #037172curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37173More details here: https://curl.se/docs/sslcerts.html3717437175curl failed to verify the legitimacy of the server and therefore could not37176establish a secure connection to it. To learn more about this situation and37177how to fix it, please visit the webpage mentioned above.37178* Host test.foo:443 was resolved.37179* IPv6: 2001:db8:1::337180* IPv4: 192.168.1.337181* Trying [2001:db8:1::3]:443...37182* ALPN: curl offers h2,http/1.137183} [5 bytes data]37184* TLSv1.3 (OUT), TLS handshake, Client hello (1):37185} [1552 bytes data]37186* SSL Trust Anchors:37187* OpenSSL default paths (fallback)37188{ [5 bytes data]37189* TLSv1.3 (IN), TLS handshake, Server hello (2):37190{ [1210 bytes data]37191* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37192{ [1 bytes data]37193* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37194{ [19 bytes data]37195* TLSv1.3 (IN), TLS handshake, Certificate (11):37196{ [1008 bytes data]37197* TLSv1.3 (IN), TLS handshake, CERT verify (15):37198{ [110 bytes data]37199* TLSv1.3 (IN), TLS handshake, Finished (20):37200{ [52 bytes data]37201* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37202} [1 bytes data]37203* TLSv1.3 (OUT), TLS handshake, Finished (20):37204} [52 bytes data]37205* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37206* ALPN: server accepted h237207* Server certificate:37208* subject: CN=test.foo37209* start date: Sep 15 00:20:19 2026 GMT37210* expire date: Oct 15 00:20:19 2028 GMT37211* issuer: CN=minica root ca 32960037212* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437213* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437214* subjectAltName: "test.foo" matches cert's "test.foo"37215* OpenSSL verify result: 1337216* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37217* closing connection #037218curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37219More details here: https://curl.se/docs/sslcerts.html3722037221curl failed to verify the legitimacy of the server and therefore could not37222establish a secure connection to it. To learn more about this situation and37223how to fix it, please visit the webpage mentioned above.37224* Trying [2001:db8:1::3]:443...37225* Host test.foo:443 was resolved.37226* IPv6: 2001:db8:1::337227* IPv4: 192.168.1.337228* ALPN: curl offers h2,http/1.137229} [5 bytes data]37230* TLSv1.3 (OUT), TLS handshake, Client hello (1):37231} [1552 bytes data]37232* SSL Trust Anchors:37233* OpenSSL default paths (fallback)37234{ [5 bytes data]37235* TLSv1.3 (IN), TLS handshake, Server hello (2):37236{ [1210 bytes data]37237* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37238{ [1 bytes data]37239* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37240{ [19 bytes data]37241* TLSv1.3 (IN), TLS handshake, Certificate (11):37242{ [1008 bytes data]37243* TLSv1.3 (IN), TLS handshake, CERT verify (15):37244{ [112 bytes data]37245* TLSv1.3 (IN), TLS handshake, Finished (20):37246{ [52 bytes data]37247* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37248} [1 bytes data]37249* TLSv1.3 (OUT), TLS handshake, Finished (20):37250} [52 bytes data]37251* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37252* ALPN: server accepted h237253* Server certificate:37254* subject: CN=test.foo37255* start date: Sep 15 00:20:19 2026 GMT37256* expire date: Oct 15 00:20:19 2028 GMT37257* issuer: CN=minica root ca 32960037258* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437259* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437260* subjectAltName: "test.foo" matches cert's "test.foo"37261* OpenSSL verify result: 1337262* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37263* closing connection #037264curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37265More details here: https://curl.se/docs/sslcerts.html3726637267curl failed to verify the legitimacy of the server and therefore could not37268establish a secure connection to it. To learn more about this situation and37269how to fix it, please visit the webpage mentioned above.37270* Host test.foo:443 was resolved.37271* IPv6: 2001:db8:1::337272* IPv4: 192.168.1.337273* Trying [2001:db8:1::3]:443...37274* ALPN: curl offers h2,http/1.137275} [5 bytes data]37276* TLSv1.3 (OUT), TLS handshake, Client hello (1):37277} [1552 bytes data]37278* SSL Trust Anchors:37279* OpenSSL default paths (fallback)37280{ [5 bytes data]37281* TLSv1.3 (IN), TLS handshake, Server hello (2):37282{ [1210 bytes data]37283* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37284{ [1 bytes data]37285* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37286{ [19 bytes data]37287* TLSv1.3 (IN), TLS handshake, Certificate (11):37288{ [1008 bytes data]37289* TLSv1.3 (IN), TLS handshake, CERT verify (15):37290{ [111 bytes data]37291* TLSv1.3 (IN), TLS handshake, Finished (20):37292{ [52 bytes data]37293* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37294} [1 bytes data]37295* TLSv1.3 (OUT), TLS handshake, Finished (20):37296} [52 bytes data]37297* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37298* ALPN: server accepted h237299* Server certificate:37300* subject: CN=test.foo37301* start date: Sep 15 00:20:19 2026 GMT37302* expire date: Oct 15 00:20:19 2028 GMT37303* issuer: CN=minica root ca 32960037304* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437305* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437306* subjectAltName: "test.foo" matches cert's "test.foo"37307* OpenSSL verify result: 1337308* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37309* closing connection #037310curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37311More details here: https://curl.se/docs/sslcerts.html3731237313curl failed to verify the legitimacy of the server and therefore could not37314establish a secure connection to it. To learn more about this situation and37315how to fix it, please visit the webpage mentioned above.37316* Host test.foo:443 was resolved.37317* IPv6: 2001:db8:1::337318* IPv4: 192.168.1.337319* Trying [2001:db8:1::3]:443...37320* ALPN: curl offers h2,http/1.137321} [5 bytes data]37322* TLSv1.3 (OUT), TLS handshake, Client hello (1):37323} [1552 bytes data]37324* SSL Trust Anchors:37325* OpenSSL default paths (fallback)37326{ [5 bytes data]37327* TLSv1.3 (IN), TLS handshake, Server hello (2):37328{ [1210 bytes data]37329* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37330{ [1 bytes data]37331* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37332{ [19 bytes data]37333* TLSv1.3 (IN), TLS handshake, Certificate (11):37334{ [1008 bytes data]37335* TLSv1.3 (IN), TLS handshake, CERT verify (15):37336{ [112 bytes data]37337* TLSv1.3 (IN), TLS handshake, Finished (20):37338{ [52 bytes data]37339* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37340} [1 bytes data]37341* TLSv1.3 (OUT), TLS handshake, Finished (20):37342} [52 bytes data]37343* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37344* ALPN: server accepted h237345* Server certificate:37346* subject: CN=test.foo37347* start date: Sep 15 00:20:19 2026 GMT37348* expire date: Oct 15 00:20:19 2028 GMT37349* issuer: CN=minica root ca 32960037350* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437351* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437352* subjectAltName: "test.foo" matches cert's "test.foo"37353* OpenSSL verify result: 1337354* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37355* closing connection #037356curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37357More details here: https://curl.se/docs/sslcerts.html3735837359curl failed to verify the legitimacy of the server and therefore could not37360establish a secure connection to it. To learn more about this situation and37361how to fix it, please visit the webpage mentioned above.37362* Host test.foo:443 was resolved.37363* IPv6: 2001:db8:1::337364* IPv4: 192.168.1.337365* Trying [2001:db8:1::3]:443...37366* ALPN: curl offers h2,http/1.137367} [5 bytes data]37368* TLSv1.3 (OUT), TLS handshake, Client hello (1):37369} [1552 bytes data]37370* SSL Trust Anchors:37371* OpenSSL default paths (fallback)37372{ [5 bytes data]37373* TLSv1.3 (IN), TLS handshake, Server hello (2):37374{ [1210 bytes data]37375* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37376{ [1 bytes data]37377* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37378{ [19 bytes data]37379* TLSv1.3 (IN), TLS handshake, Certificate (11):37380{ [1008 bytes data]37381* TLSv1.3 (IN), TLS handshake, CERT verify (15):37382{ [111 bytes data]37383* TLSv1.3 (IN), TLS handshake, Finished (20):37384{ [52 bytes data]37385* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37386} [1 bytes data]37387* TLSv1.3 (OUT), TLS handshake, Finished (20):37388} [52 bytes data]37389* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37390* ALPN: server accepted h237391* Server certificate:37392* subject: CN=test.foo37393* start date: Sep 15 00:20:19 2026 GMT37394* expire date: Oct 15 00:20:19 2028 GMT37395* issuer: CN=minica root ca 32960037396* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437397* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437398* subjectAltName: "test.foo" matches cert's "test.foo"37399* OpenSSL verify result: 1337400* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37401* closing connection #037402curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37403More details here: https://curl.se/docs/sslcerts.html3740437405curl failed to verify the legitimacy of the server and therefore could not37406establish a secure connection to it. To learn more about this situation and37407how to fix it, please visit the webpage mentioned above.37408* Host test.foo:443 was resolved.37409* IPv6: 2001:db8:1::337410* IPv4: 192.168.1.337411* Trying [2001:db8:1::3]:443...37412* ALPN: curl offers h2,http/1.137413} [5 bytes data]37414* TLSv1.3 (OUT), TLS handshake, Client hello (1):37415} [1552 bytes data]37416* SSL Trust Anchors:37417* OpenSSL default paths (fallback)37418{ [5 bytes data]37419* TLSv1.3 (IN), TLS handshake, Server hello (2):37420{ [1210 bytes data]37421* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37422{ [1 bytes data]37423* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37424{ [19 bytes data]37425* TLSv1.3 (IN), TLS handshake, Certificate (11):37426{ [1008 bytes data]37427* TLSv1.3 (IN), TLS handshake, CERT verify (15):37428{ [111 bytes data]37429* TLSv1.3 (IN), TLS handshake, Finished (20):37430{ [52 bytes data]37431* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37432} [1 bytes data]37433* TLSv1.3 (OUT), TLS handshake, Finished (20):37434} [52 bytes data]37435* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37436* ALPN: server accepted h237437* Server certificate:37438* subject: CN=test.foo37439* start date: Sep 15 00:20:19 2026 GMT37440* expire date: Oct 15 00:20:19 2028 GMT37441* issuer: CN=minica root ca 32960037442* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437443* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437444* subjectAltName: "test.foo" matches cert's "test.foo"37445* OpenSSL verify result: 1337446* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37447* closing connection #037448curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37449More details here: https://curl.se/docs/sslcerts.html3745037451curl failed to verify the legitimacy of the server and therefore could not37452establish a secure connection to it. To learn more about this situation and37453how to fix it, please visit the webpage mentioned above.37454* Host test.foo:443 was resolved.37455* IPv6: 2001:db8:1::337456* IPv4: 192.168.1.337457* Trying [2001:db8:1::3]:443...37458* ALPN: curl offers h2,http/1.137459} [5 bytes data]37460* TLSv1.3 (OUT), TLS handshake, Client hello (1):37461} [1552 bytes data]37462* SSL Trust Anchors:37463* OpenSSL default paths (fallback)37464{ [5 bytes data]37465* TLSv1.3 (IN), TLS handshake, Server hello (2):37466{ [1210 bytes data]37467* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37468{ [1 bytes data]37469* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37470{ [19 bytes data]37471* TLSv1.3 (IN), TLS handshake, Certificate (11):37472{ [1008 bytes data]37473* TLSv1.3 (IN), TLS handshake, CERT verify (15):37474{ [112 bytes data]37475* TLSv1.3 (IN), TLS handshake, Finished (20):37476{ [52 bytes data]37477* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37478} [1 bytes data]37479* TLSv1.3 (OUT), TLS handshake, Finished (20):37480} [52 bytes data]37481* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37482* ALPN: server accepted h237483* Server certificate:37484* subject: CN=test.foo37485* start date: Sep 15 00:20:19 2026 GMT37486* expire date: Oct 15 00:20:19 2028 GMT37487* issuer: CN=minica root ca 32960037488* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437489* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437490* subjectAltName: "test.foo" matches cert's "test.foo"37491* OpenSSL verify result: 1337492* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37493* closing connection #037494curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37495More details here: https://curl.se/docs/sslcerts.html3749637497curl failed to verify the legitimacy of the server and therefore could not37498establish a secure connection to it. To learn more about this situation and37499how to fix it, please visit the webpage mentioned above.37500* Host test.foo:443 was resolved.37501* IPv6: 2001:db8:1::337502* IPv4: 192.168.1.337503* Trying [2001:db8:1::3]:443...37504* ALPN: curl offers h2,http/1.137505} [5 bytes data]37506* TLSv1.3 (OUT), TLS handshake, Client hello (1):37507} [1552 bytes data]37508* SSL Trust Anchors:37509* OpenSSL default paths (fallback)37510{ [5 bytes data]37511* TLSv1.3 (IN), TLS handshake, Server hello (2):37512{ [1210 bytes data]37513* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37514{ [1 bytes data]37515* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37516{ [19 bytes data]37517* TLSv1.3 (IN), TLS handshake, Certificate (11):37518{ [1008 bytes data]37519* TLSv1.3 (IN), TLS handshake, CERT verify (15):37520{ [110 bytes data]37521* TLSv1.3 (IN), TLS handshake, Finished (20):37522{ [52 bytes data]37523* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37524} [1 bytes data]37525* TLSv1.3 (OUT), TLS handshake, Finished (20):37526} [52 bytes data]37527* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37528* ALPN: server accepted h237529* Server certificate:37530* subject: CN=test.foo37531* start date: Sep 15 00:20:19 2026 GMT37532* expire date: Oct 15 00:20:19 2028 GMT37533* issuer: CN=minica root ca 32960037534* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437535* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437536* subjectAltName: "test.foo" matches cert's "test.foo"37537* OpenSSL verify result: 1337538* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37539* closing connection #037540curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37541More details here: https://curl.se/docs/sslcerts.html3754237543curl failed to verify the legitimacy of the server and therefore could not37544establish a secure connection to it. To learn more about this situation and37545how to fix it, please visit the webpage mentioned above.37546* Host test.foo:443 was resolved.37547* IPv6: 2001:db8:1::337548* IPv4: 192.168.1.337549* Trying [2001:db8:1::3]:443...37550* ALPN: curl offers h2,http/1.137551} [5 bytes data]37552* TLSv1.3 (OUT), TLS handshake, Client hello (1):37553} [1552 bytes data]37554* SSL Trust Anchors:37555* OpenSSL default paths (fallback)37556{ [5 bytes data]37557* TLSv1.3 (IN), TLS handshake, Server hello (2):37558{ [1210 bytes data]37559* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37560{ [1 bytes data]37561* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37562{ [19 bytes data]37563* TLSv1.3 (IN), TLS handshake, Certificate (11):37564{ [1008 bytes data]37565* TLSv1.3 (IN), TLS handshake, CERT verify (15):37566{ [111 bytes data]37567* TLSv1.3 (IN), TLS handshake, Finished (20):37568{ [52 bytes data]37569* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37570} [1 bytes data]37571* TLSv1.3 (OUT), TLS handshake, Finished (20):37572} [52 bytes data]37573* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37574* ALPN: server accepted h237575* Server certificate:37576* subject: CN=test.foo37577* start date: Sep 15 00:20:19 2026 GMT37578* expire date: Oct 15 00:20:19 2028 GMT37579* issuer: CN=minica root ca 32960037580* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437581* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437582* subjectAltName: "test.foo" matches cert's "test.foo"37583* OpenSSL verify result: 1337584* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37585* closing connection #037586curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37587More details here: https://curl.se/docs/sslcerts.html3758837589curl failed to verify the legitimacy of the server and therefore could not37590establish a secure connection to it. To learn more about this situation and37591how to fix it, please visit the webpage mentioned above.37592* Host test.foo:443 was resolved.37593* IPv6: 2001:db8:1::337594* IPv4: 192.168.1.337595* Trying [2001:db8:1::3]:443...37596* ALPN: curl offers h2,http/1.137597} [5 bytes data]37598* TLSv1.3 (OUT), TLS handshake, Client hello (1):37599} [1552 bytes data]37600* SSL Trust Anchors:37601* OpenSSL default paths (fallback)37602{ [5 bytes data]37603* TLSv1.3 (IN), TLS handshake, Server hello (2):37604{ [1210 bytes data]37605* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37606{ [1 bytes data]37607* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37608{ [19 bytes data]37609* TLSv1.3 (IN), TLS handshake, Certificate (11):37610{ [1008 bytes data]37611* TLSv1.3 (IN), TLS handshake, CERT verify (15):37612{ [110 bytes data]37613* TLSv1.3 (IN), TLS handshake, Finished (20):37614{ [52 bytes data]37615* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37616} [1 bytes data]37617* TLSv1.3 (OUT), TLS handshake, Finished (20):37618} [52 bytes data]37619* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37620* ALPN: server accepted h237621* Server certificate:37622* subject: CN=test.foo37623* start date: Sep 15 00:20:19 2026 GMT37624* expire date: Oct 15 00:20:19 2028 GMT37625* issuer: CN=minica root ca 32960037626* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437627* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437628* subjectAltName: "test.foo" matches cert's "test.foo"37629* OpenSSL verify result: 1337630* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37631* closing connection #037632curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37633More details here: https://curl.se/docs/sslcerts.html3763437635curl failed to verify the legitimacy of the server and therefore could not37636establish a secure connection to it. To learn more about this situation and37637how to fix it, please visit the webpage mentioned above.37638* Host test.foo:443 was resolved.37639* IPv6: 2001:db8:1::337640* IPv4: 192.168.1.337641* Trying [2001:db8:1::3]:443...37642* ALPN: curl offers h2,http/1.137643} [5 bytes data]37644* TLSv1.3 (OUT), TLS handshake, Client hello (1):37645} [1552 bytes data]37646* SSL Trust Anchors:37647* OpenSSL default paths (fallback)37648{ [5 bytes data]37649* TLSv1.3 (IN), TLS handshake, Server hello (2):37650{ [1210 bytes data]37651* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37652{ [1 bytes data]37653* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37654{ [19 bytes data]37655* TLSv1.3 (IN), TLS handshake, Certificate (11):37656{ [1008 bytes data]37657* TLSv1.3 (IN), TLS handshake, CERT verify (15):37658{ [111 bytes data]37659* TLSv1.3 (IN), TLS handshake, Finished (20):37660{ [52 bytes data]37661* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37662} [1 bytes data]37663* TLSv1.3 (OUT), TLS handshake, Finished (20):37664} [52 bytes data]37665* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37666* ALPN: server accepted h237667* Server certificate:37668* subject: CN=test.foo37669* start date: Sep 15 00:20:19 2026 GMT37670* expire date: Oct 15 00:20:19 2028 GMT37671* issuer: CN=minica root ca 32960037672* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437673* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437674* subjectAltName: "test.foo" matches cert's "test.foo"37675* OpenSSL verify result: 1337676* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37677* closing connection #037678curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37679More details here: https://curl.se/docs/sslcerts.html3768037681curl failed to verify the legitimacy of the server and therefore could not37682establish a secure connection to it. To learn more about this situation and37683how to fix it, please visit the webpage mentioned above.37684* Host test.foo:443 was resolved.37685* IPv6: 2001:db8:1::337686* IPv4: 192.168.1.337687* Trying [2001:db8:1::3]:443...37688* ALPN: curl offers h2,http/1.137689} [5 bytes data]37690* TLSv1.3 (OUT), TLS handshake, Client hello (1):37691} [1552 bytes data]37692* SSL Trust Anchors:37693* OpenSSL default paths (fallback)37694{ [5 bytes data]37695* TLSv1.3 (IN), TLS handshake, Server hello (2):37696{ [1210 bytes data]37697* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37698{ [1 bytes data]37699* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37700{ [19 bytes data]37701* TLSv1.3 (IN), TLS handshake, Certificate (11):37702{ [1008 bytes data]37703* TLSv1.3 (IN), TLS handshake, CERT verify (15):37704{ [110 bytes data]37705* TLSv1.3 (IN), TLS handshake, Finished (20):37706{ [52 bytes data]37707* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37708} [1 bytes data]37709* TLSv1.3 (OUT), TLS handshake, Finished (20):37710} [52 bytes data]37711* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37712* ALPN: server accepted h237713* Server certificate:37714* subject: CN=test.foo37715* start date: Sep 15 00:20:19 2026 GMT37716* expire date: Oct 15 00:20:19 2028 GMT37717* issuer: CN=minica root ca 32960037718* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437719* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437720* subjectAltName: "test.foo" matches cert's "test.foo"37721* OpenSSL verify result: 1337722* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37723* closing connection #037724curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37725More details here: https://curl.se/docs/sslcerts.html3772637727curl failed to verify the legitimacy of the server and therefore could not37728establish a secure connection to it. To learn more about this situation and37729how to fix it, please visit the webpage mentioned above.37730* Host test.foo:443 was resolved.37731* IPv6: 2001:db8:1::337732* IPv4: 192.168.1.337733* Trying [2001:db8:1::3]:443...37734* ALPN: curl offers h2,http/1.137735} [5 bytes data]37736* TLSv1.3 (OUT), TLS handshake, Client hello (1):37737} [1552 bytes data]37738* SSL Trust Anchors:37739* OpenSSL default paths (fallback)37740{ [5 bytes data]37741* TLSv1.3 (IN), TLS handshake, Server hello (2):37742{ [1210 bytes data]37743* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37744{ [1 bytes data]37745* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37746{ [19 bytes data]37747* TLSv1.3 (IN), TLS handshake, Certificate (11):37748{ [1008 bytes data]37749* TLSv1.3 (IN), TLS handshake, CERT verify (15):37750{ [111 bytes data]37751* TLSv1.3 (IN), TLS handshake, Finished (20):37752{ [52 bytes data]37753* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37754} [1 bytes data]37755* TLSv1.3 (OUT), TLS handshake, Finished (20):37756} [52 bytes data]37757* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37758* ALPN: server accepted h237759* Server certificate:37760* subject: CN=test.foo37761* start date: Sep 15 00:20:19 2026 GMT37762* expire date: Oct 15 00:20:19 2028 GMT37763* issuer: CN=minica root ca 32960037764* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437765* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437766* subjectAltName: "test.foo" matches cert's "test.foo"37767* OpenSSL verify result: 1337768* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37769* closing connection #037770curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37771More details here: https://curl.se/docs/sslcerts.html3777237773curl failed to verify the legitimacy of the server and therefore could not37774establish a secure connection to it. To learn more about this situation and37775how to fix it, please visit the webpage mentioned above.37776* Host test.foo:443 was resolved.37777* IPv6: 2001:db8:1::337778* IPv4: 192.168.1.337779* Trying [2001:db8:1::3]:443...37780* ALPN: curl offers h2,http/1.137781} [5 bytes data]37782* TLSv1.3 (OUT), TLS handshake, Client hello (1):37783} [1552 bytes data]37784* SSL Trust Anchors:37785* OpenSSL default paths (fallback)37786{ [5 bytes data]37787* TLSv1.3 (IN), TLS handshake, Server hello (2):37788{ [1210 bytes data]37789* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37790{ [1 bytes data]37791* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37792{ [19 bytes data]37793* TLSv1.3 (IN), TLS handshake, Certificate (11):37794{ [1008 bytes data]37795* TLSv1.3 (IN), TLS handshake, CERT verify (15):37796{ [112 bytes data]37797* TLSv1.3 (IN), TLS handshake, Finished (20):37798{ [52 bytes data]37799* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37800} [1 bytes data]37801* TLSv1.3 (OUT), TLS handshake, Finished (20):37802} [52 bytes data]37803* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37804* ALPN: server accepted h237805* Server certificate:37806* subject: CN=test.foo37807* start date: Sep 15 00:20:19 2026 GMT37808* expire date: Oct 15 00:20:19 2028 GMT37809* issuer: CN=minica root ca 32960037810* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437811* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437812* subjectAltName: "test.foo" matches cert's "test.foo"37813* OpenSSL verify result: 1337814* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37815* closing connection #037816curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37817More details here: https://curl.se/docs/sslcerts.html3781837819curl failed to verify the legitimacy of the server and therefore could not37820establish a secure connection to it. To learn more about this situation and37821how to fix it, please visit the webpage mentioned above.37822* Trying [2001:db8:1::3]:443...37823* Host test.foo:443 was resolved.37824* IPv6: 2001:db8:1::337825* IPv4: 192.168.1.337826* ALPN: curl offers h2,http/1.137827} [5 bytes data]37828* TLSv1.3 (OUT), TLS handshake, Client hello (1):37829} [1552 bytes data]37830* SSL Trust Anchors:37831* OpenSSL default paths (fallback)37832{ [5 bytes data]37833* TLSv1.3 (IN), TLS handshake, Server hello (2):37834{ [1210 bytes data]37835* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37836{ [1 bytes data]37837* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37838{ [19 bytes data]37839* TLSv1.3 (IN), TLS handshake, Certificate (11):37840{ [1008 bytes data]37841* TLSv1.3 (IN), TLS handshake, CERT verify (15):37842{ [110 bytes data]37843* TLSv1.3 (IN), TLS handshake, Finished (20):37844{ [52 bytes data]37845* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37846} [1 bytes data]37847* TLSv1.3 (OUT), TLS handshake, Finished (20):37848} [52 bytes data]37849* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37850* ALPN: server accepted h237851* Server certificate:37852* subject: CN=test.foo37853* start date: Sep 15 00:20:19 2026 GMT37854* expire date: Oct 15 00:20:19 2028 GMT37855* issuer: CN=minica root ca 32960037856* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437857* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437858* subjectAltName: "test.foo" matches cert's "test.foo"37859* OpenSSL verify result: 1337860* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37861* closing connection #037862curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37863More details here: https://curl.se/docs/sslcerts.html3786437865curl failed to verify the legitimacy of the server and therefore could not37866establish a secure connection to it. To learn more about this situation and37867how to fix it, please visit the webpage mentioned above.37868* Host test.foo:443 was resolved.37869* IPv6: 2001:db8:1::337870* IPv4: 192.168.1.337871* Trying [2001:db8:1::3]:443...37872* ALPN: curl offers h2,http/1.137873} [5 bytes data]37874* TLSv1.3 (OUT), TLS handshake, Client hello (1):37875} [1552 bytes data]37876* SSL Trust Anchors:37877* OpenSSL default paths (fallback)37878{ [5 bytes data]37879* TLSv1.3 (IN), TLS handshake, Server hello (2):37880{ [1210 bytes data]37881* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37882{ [1 bytes data]37883* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37884{ [19 bytes data]37885* TLSv1.3 (IN), TLS handshake, Certificate (11):37886{ [1008 bytes data]37887* TLSv1.3 (IN), TLS handshake, CERT verify (15):37888{ [111 bytes data]37889* TLSv1.3 (IN), TLS handshake, Finished (20):37890{ [52 bytes data]37891* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37892} [1 bytes data]37893* TLSv1.3 (OUT), TLS handshake, Finished (20):37894} [52 bytes data]37895* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37896* ALPN: server accepted h237897* Server certificate:37898* subject: CN=test.foo37899* start date: Sep 15 00:20:19 2026 GMT37900* expire date: Oct 15 00:20:19 2028 GMT37901* issuer: CN=minica root ca 32960037902* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437903* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437904* subjectAltName: "test.foo" matches cert's "test.foo"37905* OpenSSL verify result: 1337906* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37907* closing connection #037908curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37909More details here: https://curl.se/docs/sslcerts.html3791037911curl failed to verify the legitimacy of the server and therefore could not37912establish a secure connection to it. To learn more about this situation and37913how to fix it, please visit the webpage mentioned above.37914* Host test.foo:443 was resolved.37915* IPv6: 2001:db8:1::337916* IPv4: 192.168.1.337917* Trying [2001:db8:1::3]:443...37918* ALPN: curl offers h2,http/1.137919} [5 bytes data]37920* TLSv1.3 (OUT), TLS handshake, Client hello (1):37921} [1552 bytes data]37922* SSL Trust Anchors:37923* OpenSSL default paths (fallback)37924{ [5 bytes data]37925* TLSv1.3 (IN), TLS handshake, Server hello (2):37926{ [1210 bytes data]37927* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37928{ [1 bytes data]37929* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37930{ [19 bytes data]37931* TLSv1.3 (IN), TLS handshake, Certificate (11):37932{ [1008 bytes data]37933* TLSv1.3 (IN), TLS handshake, CERT verify (15):37934{ [112 bytes data]37935* TLSv1.3 (IN), TLS handshake, Finished (20):37936{ [52 bytes data]37937* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37938} [1 bytes data]37939* TLSv1.3 (OUT), TLS handshake, Finished (20):37940} [52 bytes data]37941* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37942* ALPN: server accepted h237943* Server certificate:37944* subject: CN=test.foo37945* start date: Sep 15 00:20:19 2026 GMT37946* expire date: Oct 15 00:20:19 2028 GMT37947* issuer: CN=minica root ca 32960037948* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437949* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437950* subjectAltName: "test.foo" matches cert's "test.foo"37951* OpenSSL verify result: 1337952* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37953* closing connection #037954curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37955More details here: https://curl.se/docs/sslcerts.html3795637957curl failed to verify the legitimacy of the server and therefore could not37958establish a secure connection to it. To learn more about this situation and37959how to fix it, please visit the webpage mentioned above.37960* Host test.foo:443 was resolved.37961* IPv6: 2001:db8:1::337962* IPv4: 192.168.1.337963* Trying [2001:db8:1::3]:443...37964* ALPN: curl offers h2,http/1.137965} [5 bytes data]37966* TLSv1.3 (OUT), TLS handshake, Client hello (1):37967} [1552 bytes data]37968* SSL Trust Anchors:37969* OpenSSL default paths (fallback)37970{ [5 bytes data]37971* TLSv1.3 (IN), TLS handshake, Server hello (2):37972{ [1210 bytes data]37973* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37974{ [1 bytes data]37975* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37976{ [19 bytes data]37977* TLSv1.3 (IN), TLS handshake, Certificate (11):37978{ [1008 bytes data]37979* TLSv1.3 (IN), TLS handshake, CERT verify (15):37980{ [110 bytes data]37981* TLSv1.3 (IN), TLS handshake, Finished (20):37982{ [52 bytes data]37983* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37984} [1 bytes data]37985* TLSv1.3 (OUT), TLS handshake, Finished (20):37986} [52 bytes data]37987* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37988* ALPN: server accepted h237989* Server certificate:37990* subject: CN=test.foo37991* start date: Sep 15 00:20:19 2026 GMT37992* expire date: Oct 15 00:20:19 2028 GMT37993* issuer: CN=minica root ca 32960037994* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437995* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437996* subjectAltName: "test.foo" matches cert's "test.foo"37997* OpenSSL verify result: 1337998* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37999* closing connection #038000curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38001More details here: https://curl.se/docs/sslcerts.html3800238003curl failed to verify the legitimacy of the server and therefore could not38004establish a secure connection to it. To learn more about this situation and38005how to fix it, please visit the webpage mentioned above.38006* Host test.foo:443 was resolved.38007* IPv6: 2001:db8:1::338008* IPv4: 192.168.1.338009* Trying [2001:db8:1::3]:443...38010* ALPN: curl offers h2,http/1.138011} [5 bytes data]38012* TLSv1.3 (OUT), TLS handshake, Client hello (1):38013} [1552 bytes data]38014* SSL Trust Anchors:38015* OpenSSL default paths (fallback)38016{ [5 bytes data]38017* TLSv1.3 (IN), TLS handshake, Server hello (2):38018{ [1210 bytes data]38019* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38020{ [1 bytes data]38021* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38022{ [19 bytes data]38023* TLSv1.3 (IN), TLS handshake, Certificate (11):38024{ [1008 bytes data]38025* TLSv1.3 (IN), TLS handshake, CERT verify (15):38026{ [111 bytes data]38027* TLSv1.3 (IN), TLS handshake, Finished (20):38028{ [52 bytes data]38029* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38030} [1 bytes data]38031* TLSv1.3 (OUT), TLS handshake, Finished (20):38032} [52 bytes data]38033* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38034* ALPN: server accepted h238035* Server certificate:38036* subject: CN=test.foo38037* start date: Sep 15 00:20:19 2026 GMT38038* expire date: Oct 15 00:20:19 2028 GMT38039* issuer: CN=minica root ca 32960038040* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438041* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438042* subjectAltName: "test.foo" matches cert's "test.foo"38043* OpenSSL verify result: 1338044* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38045* closing connection #038046curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38047More details here: https://curl.se/docs/sslcerts.html3804838049curl failed to verify the legitimacy of the server and therefore could not38050establish a secure connection to it. To learn more about this situation and38051how to fix it, please visit the webpage mentioned above.38052* Host test.foo:443 was resolved.38053* IPv6: 2001:db8:1::338054* IPv4: 192.168.1.338055* Trying [2001:db8:1::3]:443...38056* ALPN: curl offers h2,http/1.138057} [5 bytes data]38058* TLSv1.3 (OUT), TLS handshake, Client hello (1):38059} [1552 bytes data]38060* SSL Trust Anchors:38061* OpenSSL default paths (fallback)38062{ [5 bytes data]38063* TLSv1.3 (IN), TLS handshake, Server hello (2):38064{ [1210 bytes data]38065* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38066{ [1 bytes data]38067* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38068{ [19 bytes data]38069* TLSv1.3 (IN), TLS handshake, Certificate (11):38070{ [1008 bytes data]38071* TLSv1.3 (IN), TLS handshake, CERT verify (15):38072{ [111 bytes data]38073* TLSv1.3 (IN), TLS handshake, Finished (20):38074{ [52 bytes data]38075* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38076} [1 bytes data]38077* TLSv1.3 (OUT), TLS handshake, Finished (20):38078} [52 bytes data]38079* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38080* ALPN: server accepted h238081* Server certificate:38082* subject: CN=test.foo38083* start date: Sep 15 00:20:19 2026 GMT38084* expire date: Oct 15 00:20:19 2028 GMT38085* issuer: CN=minica root ca 32960038086* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438087* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438088* subjectAltName: "test.foo" matches cert's "test.foo"38089* OpenSSL verify result: 1338090* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38091* closing connection #038092curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38093More details here: https://curl.se/docs/sslcerts.html3809438095curl failed to verify the legitimacy of the server and therefore could not38096establish a secure connection to it. To learn more about this situation and38097how to fix it, please visit the webpage mentioned above.38098* Host test.foo:443 was resolved.38099* IPv6: 2001:db8:1::338100* IPv4: 192.168.1.338101* Trying [2001:db8:1::3]:443...38102* ALPN: curl offers h2,http/1.138103} [5 bytes data]38104* TLSv1.3 (OUT), TLS handshake, Client hello (1):38105} [1552 bytes data]38106* SSL Trust Anchors:38107* OpenSSL default paths (fallback)38108{ [5 bytes data]38109* TLSv1.3 (IN), TLS handshake, Server hello (2):38110{ [1210 bytes data]38111* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38112{ [1 bytes data]38113* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38114{ [19 bytes data]38115* TLSv1.3 (IN), TLS handshake, Certificate (11):38116{ [1008 bytes data]38117* TLSv1.3 (IN), TLS handshake, CERT verify (15):38118{ [112 bytes data]38119* TLSv1.3 (IN), TLS handshake, Finished (20):38120{ [52 bytes data]38121* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38122} [1 bytes data]38123* TLSv1.3 (OUT), TLS handshake, Finished (20):38124} [52 bytes data]38125* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38126* ALPN: server accepted h238127* Server certificate:38128* subject: CN=test.foo38129* start date: Sep 15 00:20:19 2026 GMT38130* expire date: Oct 15 00:20:19 2028 GMT38131* issuer: CN=minica root ca 32960038132* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438133* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438134* subjectAltName: "test.foo" matches cert's "test.foo"38135* OpenSSL verify result: 1338136* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38137* closing connection #038138curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38139More details here: https://curl.se/docs/sslcerts.html3814038141curl failed to verify the legitimacy of the server and therefore could not38142establish a secure connection to it. To learn more about this situation and38143how to fix it, please visit the webpage mentioned above.38144* Host test.foo:443 was resolved.38145* IPv6: 2001:db8:1::338146* IPv4: 192.168.1.338147* Trying [2001:db8:1::3]:443...38148* ALPN: curl offers h2,http/1.138149} [5 bytes data]38150* TLSv1.3 (OUT), TLS handshake, Client hello (1):38151} [1552 bytes data]38152* SSL Trust Anchors:38153* OpenSSL default paths (fallback)38154{ [5 bytes data]38155* TLSv1.3 (IN), TLS handshake, Server hello (2):38156{ [1210 bytes data]38157* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38158{ [1 bytes data]38159* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38160{ [19 bytes data]38161* TLSv1.3 (IN), TLS handshake, Certificate (11):38162{ [1008 bytes data]38163* TLSv1.3 (IN), TLS handshake, CERT verify (15):38164{ [111 bytes data]38165* TLSv1.3 (IN), TLS handshake, Finished (20):38166{ [52 bytes data]38167* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38168} [1 bytes data]38169* TLSv1.3 (OUT), TLS handshake, Finished (20):38170} [52 bytes data]38171* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38172* ALPN: server accepted h238173* Server certificate:38174* subject: CN=test.foo38175* start date: Sep 15 00:20:19 2026 GMT38176* expire date: Oct 15 00:20:19 2028 GMT38177* issuer: CN=minica root ca 32960038178* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438179* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438180* subjectAltName: "test.foo" matches cert's "test.foo"38181* OpenSSL verify result: 1338182* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38183* closing connection #038184curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38185More details here: https://curl.se/docs/sslcerts.html3818638187curl failed to verify the legitimacy of the server and therefore could not38188establish a secure connection to it. To learn more about this situation and38189how to fix it, please visit the webpage mentioned above.38190* Host test.foo:443 was resolved.38191* IPv6: 2001:db8:1::338192* IPv4: 192.168.1.338193* Trying [2001:db8:1::3]:443...38194* ALPN: curl offers h2,http/1.138195} [5 bytes data]38196* TLSv1.3 (OUT), TLS handshake, Client hello (1):38197} [1552 bytes data]38198* SSL Trust Anchors:38199* OpenSSL default paths (fallback)38200{ [5 bytes data]38201* TLSv1.3 (IN), TLS handshake, Server hello (2):38202{ [1210 bytes data]38203* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38204{ [1 bytes data]38205* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38206{ [19 bytes data]38207* TLSv1.3 (IN), TLS handshake, Certificate (11):38208{ [1008 bytes data]38209* TLSv1.3 (IN), TLS handshake, CERT verify (15):38210{ [110 bytes data]38211* TLSv1.3 (IN), TLS handshake, Finished (20):38212{ [52 bytes data]38213* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38214} [1 bytes data]38215* TLSv1.3 (OUT), TLS handshake, Finished (20):38216} [52 bytes data]38217* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38218* ALPN: server accepted h238219* Server certificate:38220* subject: CN=test.foo38221* start date: Sep 15 00:20:19 2026 GMT38222* expire date: Oct 15 00:20:19 2028 GMT38223* issuer: CN=minica root ca 32960038224* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438225* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438226* subjectAltName: "test.foo" matches cert's "test.foo"38227* OpenSSL verify result: 1338228* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38229* closing connection #038230curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38231More details here: https://curl.se/docs/sslcerts.html3823238233curl failed to verify the legitimacy of the server and therefore could not38234establish a secure connection to it. To learn more about this situation and38235how to fix it, please visit the webpage mentioned above.38236* Host test.foo:443 was resolved.38237* IPv6: 2001:db8:1::338238* IPv4: 192.168.1.338239* Trying [2001:db8:1::3]:443...38240* ALPN: curl offers h2,http/1.138241} [5 bytes data]38242* TLSv1.3 (OUT), TLS handshake, Client hello (1):38243} [1552 bytes data]38244* SSL Trust Anchors:38245* OpenSSL default paths (fallback)38246{ [5 bytes data]38247* TLSv1.3 (IN), TLS handshake, Server hello (2):38248{ [1210 bytes data]38249* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38250{ [1 bytes data]38251* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38252{ [19 bytes data]38253* TLSv1.3 (IN), TLS handshake, Certificate (11):38254{ [1008 bytes data]38255* TLSv1.3 (IN), TLS handshake, CERT verify (15):38256{ [112 bytes data]38257* TLSv1.3 (IN), TLS handshake, Finished (20):38258{ [52 bytes data]38259* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38260} [1 bytes data]38261* TLSv1.3 (OUT), TLS handshake, Finished (20):38262} [52 bytes data]38263* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38264* ALPN: server accepted h238265* Server certificate:38266* subject: CN=test.foo38267* start date: Sep 15 00:20:19 2026 GMT38268* expire date: Oct 15 00:20:19 2028 GMT38269* issuer: CN=minica root ca 32960038270* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438271* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438272* subjectAltName: "test.foo" matches cert's "test.foo"38273* OpenSSL verify result: 1338274* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38275* closing connection #038276curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38277More details here: https://curl.se/docs/sslcerts.html3827838279curl failed to verify the legitimacy of the server and therefore could not38280establish a secure connection to it. To learn more about this situation and38281how to fix it, please visit the webpage mentioned above.38282* Trying [2001:db8:1::3]:443...38283* Host test.foo:443 was resolved.38284* IPv6: 2001:db8:1::338285* IPv4: 192.168.1.338286* ALPN: curl offers h2,http/1.138287} [5 bytes data]38288* TLSv1.3 (OUT), TLS handshake, Client hello (1):38289} [1552 bytes data]38290* SSL Trust Anchors:38291* OpenSSL default paths (fallback)38292{ [5 bytes data]38293* TLSv1.3 (IN), TLS handshake, Server hello (2):38294{ [1210 bytes data]38295* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38296{ [1 bytes data]38297* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38298{ [19 bytes data]38299* TLSv1.3 (IN), TLS handshake, Certificate (11):38300{ [1008 bytes data]38301* TLSv1.3 (IN), TLS handshake, CERT verify (15):38302{ [110 bytes data]38303* TLSv1.3 (IN), TLS handshake, Finished (20):38304{ [52 bytes data]38305* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38306} [1 bytes data]38307* TLSv1.3 (OUT), TLS handshake, Finished (20):38308} [52 bytes data]38309* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38310* ALPN: server accepted h238311* Server certificate:38312* subject: CN=test.foo38313* start date: Sep 15 00:20:19 2026 GMT38314* expire date: Oct 15 00:20:19 2028 GMT38315* issuer: CN=minica root ca 32960038316* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438317* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438318* subjectAltName: "test.foo" matches cert's "test.foo"38319* OpenSSL verify result: 1338320* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38321* closing connection #038322curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38323More details here: https://curl.se/docs/sslcerts.html3832438325curl failed to verify the legitimacy of the server and therefore could not38326establish a secure connection to it. To learn more about this situation and38327how to fix it, please visit the webpage mentioned above.38328* Host test.foo:443 was resolved.38329* IPv6: 2001:db8:1::338330* IPv4: 192.168.1.338331* Trying [2001:db8:1::3]:443...38332* ALPN: curl offers h2,http/1.138333} [5 bytes data]38334* TLSv1.3 (OUT), TLS handshake, Client hello (1):38335} [1552 bytes data]38336* SSL Trust Anchors:38337* OpenSSL default paths (fallback)38338{ [5 bytes data]38339* TLSv1.3 (IN), TLS handshake, Server hello (2):38340{ [1210 bytes data]38341* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38342{ [1 bytes data]38343* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38344{ [19 bytes data]38345* TLSv1.3 (IN), TLS handshake, Certificate (11):38346{ [1008 bytes data]38347* TLSv1.3 (IN), TLS handshake, CERT verify (15):38348{ [112 bytes data]38349* TLSv1.3 (IN), TLS handshake, Finished (20):38350{ [52 bytes data]38351* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38352} [1 bytes data]38353* TLSv1.3 (OUT), TLS handshake, Finished (20):38354} [52 bytes data]38355* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38356* ALPN: server accepted h238357* Server certificate:38358* subject: CN=test.foo38359* start date: Sep 15 00:20:19 2026 GMT38360* expire date: Oct 15 00:20:19 2028 GMT38361* issuer: CN=minica root ca 32960038362* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438363* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438364* subjectAltName: "test.foo" matches cert's "test.foo"38365* OpenSSL verify result: 1338366* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38367* closing connection #038368curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38369More details here: https://curl.se/docs/sslcerts.html3837038371curl failed to verify the legitimacy of the server and therefore could not38372establish a secure connection to it. To learn more about this situation and38373how to fix it, please visit the webpage mentioned above.38374* Host test.foo:443 was resolved.38375* IPv6: 2001:db8:1::338376* IPv4: 192.168.1.338377* Trying [2001:db8:1::3]:443...38378* ALPN: curl offers h2,http/1.138379} [5 bytes data]38380* TLSv1.3 (OUT), TLS handshake, Client hello (1):38381} [1552 bytes data]38382* SSL Trust Anchors:38383* OpenSSL default paths (fallback)38384{ [5 bytes data]38385* TLSv1.3 (IN), TLS handshake, Server hello (2):38386{ [1210 bytes data]38387* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38388{ [1 bytes data]38389* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38390{ [19 bytes data]38391* TLSv1.3 (IN), TLS handshake, Certificate (11):38392{ [1008 bytes data]38393* TLSv1.3 (IN), TLS handshake, CERT verify (15):38394{ [112 bytes data]38395* TLSv1.3 (IN), TLS handshake, Finished (20):38396{ [52 bytes data]38397* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38398} [1 bytes data]38399* TLSv1.3 (OUT), TLS handshake, Finished (20):38400} [52 bytes data]38401* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38402* ALPN: server accepted h238403* Server certificate:38404* subject: CN=test.foo38405* start date: Sep 15 00:20:19 2026 GMT38406* expire date: Oct 15 00:20:19 2028 GMT38407* issuer: CN=minica root ca 32960038408* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438409* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438410* subjectAltName: "test.foo" matches cert's "test.foo"38411* OpenSSL verify result: 1338412* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38413* closing connection #038414curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38415More details here: https://curl.se/docs/sslcerts.html3841638417curl failed to verify the legitimacy of the server and therefore could not38418establish a secure connection to it. To learn more about this situation and38419how to fix it, please visit the webpage mentioned above.38420* Host test.foo:443 was resolved.38421* IPv6: 2001:db8:1::338422* IPv4: 192.168.1.338423* Trying [2001:db8:1::3]:443...38424* ALPN: curl offers h2,http/1.138425} [5 bytes data]38426* TLSv1.3 (OUT), TLS handshake, Client hello (1):38427} [1552 bytes data]38428* SSL Trust Anchors:38429* OpenSSL default paths (fallback)38430{ [5 bytes data]38431* TLSv1.3 (IN), TLS handshake, Server hello (2):38432{ [1210 bytes data]38433* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38434{ [1 bytes data]38435* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38436{ [19 bytes data]38437* TLSv1.3 (IN), TLS handshake, Certificate (11):38438{ [1008 bytes data]38439* TLSv1.3 (IN), TLS handshake, CERT verify (15):38440{ [112 bytes data]38441* TLSv1.3 (IN), TLS handshake, Finished (20):38442{ [52 bytes data]38443* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38444} [1 bytes data]38445* TLSv1.3 (OUT), TLS handshake, Finished (20):38446} [52 bytes data]38447* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38448* ALPN: server accepted h238449* Server certificate:38450* subject: CN=test.foo38451* start date: Sep 15 00:20:19 2026 GMT38452* expire date: Oct 15 00:20:19 2028 GMT38453* issuer: CN=minica root ca 32960038454* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438455* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438456* subjectAltName: "test.foo" matches cert's "test.foo"38457* OpenSSL verify result: 1338458* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38459* closing connection #038460curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38461More details here: https://curl.se/docs/sslcerts.html3846238463curl failed to verify the legitimacy of the server and therefore could not38464establish a secure connection to it. To learn more about this situation and38465how to fix it, please visit the webpage mentioned above.38466* Host test.foo:443 was resolved.38467* IPv6: 2001:db8:1::338468* IPv4: 192.168.1.338469* Trying [2001:db8:1::3]:443...38470* ALPN: curl offers h2,http/1.138471} [5 bytes data]38472* TLSv1.3 (OUT), TLS handshake, Client hello (1):38473} [1552 bytes data]38474* SSL Trust Anchors:38475* OpenSSL default paths (fallback)38476{ [5 bytes data]38477* TLSv1.3 (IN), TLS handshake, Server hello (2):38478{ [1210 bytes data]38479* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38480{ [1 bytes data]38481* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38482{ [19 bytes data]38483* TLSv1.3 (IN), TLS handshake, Certificate (11):38484{ [1008 bytes data]38485* TLSv1.3 (IN), TLS handshake, CERT verify (15):38486{ [112 bytes data]38487* TLSv1.3 (IN), TLS handshake, Finished (20):38488{ [52 bytes data]38489* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38490} [1 bytes data]38491* TLSv1.3 (OUT), TLS handshake, Finished (20):38492} [52 bytes data]38493* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38494* ALPN: server accepted h238495* Server certificate:38496* subject: CN=test.foo38497* start date: Sep 15 00:20:19 2026 GMT38498* expire date: Oct 15 00:20:19 2028 GMT38499* issuer: CN=minica root ca 32960038500* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438501* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438502* subjectAltName: "test.foo" matches cert's "test.foo"38503* OpenSSL verify result: 1338504* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38505* closing connection #038506curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38507More details here: https://curl.se/docs/sslcerts.html3850838509curl failed to verify the legitimacy of the server and therefore could not38510establish a secure connection to it. To learn more about this situation and38511how to fix it, please visit the webpage mentioned above.38512* Host test.foo:443 was resolved.38513* IPv6: 2001:db8:1::338514* IPv4: 192.168.1.338515* Trying [2001:db8:1::3]:443...38516* ALPN: curl offers h2,http/1.138517} [5 bytes data]38518* TLSv1.3 (OUT), TLS handshake, Client hello (1):38519} [1552 bytes data]38520* SSL Trust Anchors:38521* OpenSSL default paths (fallback)38522{ [5 bytes data]38523* TLSv1.3 (IN), TLS handshake, Server hello (2):38524{ [1210 bytes data]38525* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38526{ [1 bytes data]38527* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38528{ [19 bytes data]38529* TLSv1.3 (IN), TLS handshake, Certificate (11):38530{ [1008 bytes data]38531* TLSv1.3 (IN), TLS handshake, CERT verify (15):38532{ [111 bytes data]38533* TLSv1.3 (IN), TLS handshake, Finished (20):38534{ [52 bytes data]38535* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38536} [1 bytes data]38537* TLSv1.3 (OUT), TLS handshake, Finished (20):38538} [52 bytes data]38539* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38540* ALPN: server accepted h238541* Server certificate:38542* subject: CN=test.foo38543* start date: Sep 15 00:20:19 2026 GMT38544* expire date: Oct 15 00:20:19 2028 GMT38545* issuer: CN=minica root ca 32960038546* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438547* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438548* subjectAltName: "test.foo" matches cert's "test.foo"38549* OpenSSL verify result: 1338550* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38551* closing connection #038552curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38553More details here: https://curl.se/docs/sslcerts.html3855438555curl failed to verify the legitimacy of the server and therefore could not38556establish a secure connection to it. To learn more about this situation and38557how to fix it, please visit the webpage mentioned above.38558* Host test.foo:443 was resolved.38559* IPv6: 2001:db8:1::338560* IPv4: 192.168.1.338561* Trying [2001:db8:1::3]:443...38562* ALPN: curl offers h2,http/1.138563} [5 bytes data]38564* TLSv1.3 (OUT), TLS handshake, Client hello (1):38565} [1552 bytes data]38566* SSL Trust Anchors:38567* OpenSSL default paths (fallback)38568{ [5 bytes data]38569* TLSv1.3 (IN), TLS handshake, Server hello (2):38570{ [1210 bytes data]38571* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38572{ [1 bytes data]38573* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38574{ [19 bytes data]38575* TLSv1.3 (IN), TLS handshake, Certificate (11):38576{ [1008 bytes data]38577* TLSv1.3 (IN), TLS handshake, CERT verify (15):38578{ [110 bytes data]38579* TLSv1.3 (IN), TLS handshake, Finished (20):38580{ [52 bytes data]38581* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38582} [1 bytes data]38583* TLSv1.3 (OUT), TLS handshake, Finished (20):38584} [52 bytes data]38585* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38586* ALPN: server accepted h238587* Server certificate:38588* subject: CN=test.foo38589* start date: Sep 15 00:20:19 2026 GMT38590* expire date: Oct 15 00:20:19 2028 GMT38591* issuer: CN=minica root ca 32960038592* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438593* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438594* subjectAltName: "test.foo" matches cert's "test.foo"38595* OpenSSL verify result: 1338596* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38597* closing connection #038598curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38599More details here: https://curl.se/docs/sslcerts.html3860038601curl failed to verify the legitimacy of the server and therefore could not38602establish a secure connection to it. To learn more about this situation and38603how to fix it, please visit the webpage mentioned above.38604* Host test.foo:443 was resolved.38605* IPv6: 2001:db8:1::338606* IPv4: 192.168.1.338607* Trying [2001:db8:1::3]:443...38608* ALPN: curl offers h2,http/1.138609} [5 bytes data]38610* TLSv1.3 (OUT), TLS handshake, Client hello (1):38611} [1552 bytes data]38612* SSL Trust Anchors:38613* OpenSSL default paths (fallback)38614{ [5 bytes data]38615* TLSv1.3 (IN), TLS handshake, Server hello (2):38616{ [1210 bytes data]38617* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38618{ [1 bytes data]38619* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38620{ [19 bytes data]38621* TLSv1.3 (IN), TLS handshake, Certificate (11):38622{ [1008 bytes data]38623* TLSv1.3 (IN), TLS handshake, CERT verify (15):38624{ [112 bytes data]38625* TLSv1.3 (IN), TLS handshake, Finished (20):38626{ [52 bytes data]38627* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38628} [1 bytes data]38629* TLSv1.3 (OUT), TLS handshake, Finished (20):38630} [52 bytes data]38631* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38632* ALPN: server accepted h238633* Server certificate:38634* subject: CN=test.foo38635* start date: Sep 15 00:20:19 2026 GMT38636* expire date: Oct 15 00:20:19 2028 GMT38637* issuer: CN=minica root ca 32960038638* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438639* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438640* subjectAltName: "test.foo" matches cert's "test.foo"38641* OpenSSL verify result: 1338642* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38643* closing connection #038644curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38645More details here: https://curl.se/docs/sslcerts.html3864638647curl failed to verify the legitimacy of the server and therefore could not38648establish a secure connection to it. To learn more about this situation and38649how to fix it, please visit the webpage mentioned above.38650* Host test.foo:443 was resolved.38651* IPv6: 2001:db8:1::338652* IPv4: 192.168.1.338653* Trying [2001:db8:1::3]:443...38654* ALPN: curl offers h2,http/1.138655} [5 bytes data]38656* TLSv1.3 (OUT), TLS handshake, Client hello (1):38657} [1552 bytes data]38658* SSL Trust Anchors:38659* OpenSSL default paths (fallback)38660{ [5 bytes data]38661* TLSv1.3 (IN), TLS handshake, Server hello (2):38662{ [1210 bytes data]38663* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38664{ [1 bytes data]38665* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38666{ [19 bytes data]38667* TLSv1.3 (IN), TLS handshake, Certificate (11):38668{ [1008 bytes data]38669* TLSv1.3 (IN), TLS handshake, CERT verify (15):38670{ [111 bytes data]38671* TLSv1.3 (IN), TLS handshake, Finished (20):38672{ [52 bytes data]38673* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38674} [1 bytes data]38675* TLSv1.3 (OUT), TLS handshake, Finished (20):38676} [52 bytes data]38677* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38678* ALPN: server accepted h238679* Server certificate:38680* subject: CN=test.foo38681* start date: Sep 15 00:20:19 2026 GMT38682* expire date: Oct 15 00:20:19 2028 GMT38683* issuer: CN=minica root ca 32960038684* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438685* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438686* subjectAltName: "test.foo" matches cert's "test.foo"38687* OpenSSL verify result: 1338688* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38689* closing connection #038690curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38691More details here: https://curl.se/docs/sslcerts.html3869238693curl failed to verify the legitimacy of the server and therefore could not38694establish a secure connection to it. To learn more about this situation and38695how to fix it, please visit the webpage mentioned above.38696* Host test.foo:443 was resolved.38697* IPv6: 2001:db8:1::338698* IPv4: 192.168.1.338699* Trying [2001:db8:1::3]:443...38700* ALPN: curl offers h2,http/1.138701} [5 bytes data]38702* TLSv1.3 (OUT), TLS handshake, Client hello (1):38703} [1552 bytes data]38704* SSL Trust Anchors:38705* OpenSSL default paths (fallback)38706{ [5 bytes data]38707* TLSv1.3 (IN), TLS handshake, Server hello (2):38708{ [1210 bytes data]38709* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38710{ [1 bytes data]38711* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38712{ [19 bytes data]38713* TLSv1.3 (IN), TLS handshake, Certificate (11):38714{ [1008 bytes data]38715* TLSv1.3 (IN), TLS handshake, CERT verify (15):38716{ [112 bytes data]38717* TLSv1.3 (IN), TLS handshake, Finished (20):38718{ [52 bytes data]38719* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38720} [1 bytes data]38721* TLSv1.3 (OUT), TLS handshake, Finished (20):38722} [52 bytes data]38723* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38724* ALPN: server accepted h238725* Server certificate:38726* subject: CN=test.foo38727* start date: Sep 15 00:20:19 2026 GMT38728* expire date: Oct 15 00:20:19 2028 GMT38729* issuer: CN=minica root ca 32960038730* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438731* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438732* subjectAltName: "test.foo" matches cert's "test.foo"38733* OpenSSL verify result: 1338734* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38735* closing connection #038736curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38737More details here: https://curl.se/docs/sslcerts.html3873838739curl failed to verify the legitimacy of the server and therefore could not38740establish a secure connection to it. To learn more about this situation and38741how to fix it, please visit the webpage mentioned above.38742* Host test.foo:443 was resolved.38743* IPv6: 2001:db8:1::338744* IPv4: 192.168.1.338745* Trying [2001:db8:1::3]:443...38746* ALPN: curl offers h2,http/1.138747} [5 bytes data]38748* TLSv1.3 (OUT), TLS handshake, Client hello (1):38749} [1552 bytes data]38750* SSL Trust Anchors:38751* OpenSSL default paths (fallback)38752{ [5 bytes data]38753* TLSv1.3 (IN), TLS handshake, Server hello (2):38754{ [1210 bytes data]38755* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38756{ [1 bytes data]38757* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38758{ [19 bytes data]38759* TLSv1.3 (IN), TLS handshake, Certificate (11):38760{ [1008 bytes data]38761* TLSv1.3 (IN), TLS handshake, CERT verify (15):38762{ [111 bytes data]38763* TLSv1.3 (IN), TLS handshake, Finished (20):38764{ [52 bytes data]38765* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38766} [1 bytes data]38767* TLSv1.3 (OUT), TLS handshake, Finished (20):38768} [52 bytes data]38769* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38770* ALPN: server accepted h238771* Server certificate:38772* subject: CN=test.foo38773* start date: Sep 15 00:20:19 2026 GMT38774* expire date: Oct 15 00:20:19 2028 GMT38775* issuer: CN=minica root ca 32960038776* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438777* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438778* subjectAltName: "test.foo" matches cert's "test.foo"38779* OpenSSL verify result: 1338780* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38781* closing connection #038782curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38783More details here: https://curl.se/docs/sslcerts.html3878438785curl failed to verify the legitimacy of the server and therefore could not38786establish a secure connection to it. To learn more about this situation and38787how to fix it, please visit the webpage mentioned above.38788* Host test.foo:443 was resolved.38789* IPv6: 2001:db8:1::338790* IPv4: 192.168.1.338791* Trying [2001:db8:1::3]:443...38792* ALPN: curl offers h2,http/1.138793} [5 bytes data]38794* TLSv1.3 (OUT), TLS handshake, Client hello (1):38795} [1552 bytes data]38796* SSL Trust Anchors:38797* OpenSSL default paths (fallback)38798{ [5 bytes data]38799* TLSv1.3 (IN), TLS handshake, Server hello (2):38800{ [1210 bytes data]38801* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38802{ [1 bytes data]38803* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38804{ [19 bytes data]38805* TLSv1.3 (IN), TLS handshake, Certificate (11):38806{ [1008 bytes data]38807* TLSv1.3 (IN), TLS handshake, CERT verify (15):38808{ [111 bytes data]38809* TLSv1.3 (IN), TLS handshake, Finished (20):38810{ [52 bytes data]38811* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38812} [1 bytes data]38813* TLSv1.3 (OUT), TLS handshake, Finished (20):38814} [52 bytes data]38815* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38816* ALPN: server accepted h238817* Server certificate:38818* subject: CN=test.foo38819* start date: Sep 15 00:20:19 2026 GMT38820* expire date: Oct 15 00:20:19 2028 GMT38821* issuer: CN=minica root ca 32960038822* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438823* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438824* subjectAltName: "test.foo" matches cert's "test.foo"38825* OpenSSL verify result: 1338826* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38827* closing connection #038828curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38829More details here: https://curl.se/docs/sslcerts.html3883038831curl failed to verify the legitimacy of the server and therefore could not38832establish a secure connection to it. To learn more about this situation and38833how to fix it, please visit the webpage mentioned above.38834* Host test.foo:443 was resolved.38835* IPv6: 2001:db8:1::338836* IPv4: 192.168.1.338837* Trying [2001:db8:1::3]:443...38838* ALPN: curl offers h2,http/1.138839} [5 bytes data]38840* TLSv1.3 (OUT), TLS handshake, Client hello (1):38841} [1552 bytes data]38842* SSL Trust Anchors:38843* OpenSSL default paths (fallback)38844{ [5 bytes data]38845* TLSv1.3 (IN), TLS handshake, Server hello (2):38846{ [1210 bytes data]38847* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38848{ [1 bytes data]38849* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38850{ [19 bytes data]38851* TLSv1.3 (IN), TLS handshake, Certificate (11):38852{ [1008 bytes data]38853* TLSv1.3 (IN), TLS handshake, CERT verify (15):38854{ [112 bytes data]38855* TLSv1.3 (IN), TLS handshake, Finished (20):38856{ [52 bytes data]38857* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38858} [1 bytes data]38859* TLSv1.3 (OUT), TLS handshake, Finished (20):38860} [52 bytes data]38861* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38862* ALPN: server accepted h238863* Server certificate:38864* subject: CN=test.foo38865* start date: Sep 15 00:20:19 2026 GMT38866* expire date: Oct 15 00:20:19 2028 GMT38867* issuer: CN=minica root ca 32960038868* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438869* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438870* subjectAltName: "test.foo" matches cert's "test.foo"38871* OpenSSL verify result: 1338872* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38873* closing connection #038874curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38875More details here: https://curl.se/docs/sslcerts.html3887638877curl failed to verify the legitimacy of the server and therefore could not38878establish a secure connection to it. To learn more about this situation and38879how to fix it, please visit the webpage mentioned above.38880* Host test.foo:443 was resolved.38881* IPv6: 2001:db8:1::338882* IPv4: 192.168.1.338883* Trying [2001:db8:1::3]:443...38884* ALPN: curl offers h2,http/1.138885} [5 bytes data]38886* TLSv1.3 (OUT), TLS handshake, Client hello (1):38887} [1552 bytes data]38888* SSL Trust Anchors:38889* OpenSSL default paths (fallback)38890{ [5 bytes data]38891* TLSv1.3 (IN), TLS handshake, Server hello (2):38892{ [1210 bytes data]38893* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38894{ [1 bytes data]38895* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38896{ [19 bytes data]38897* TLSv1.3 (IN), TLS handshake, Certificate (11):38898{ [1008 bytes data]38899* TLSv1.3 (IN), TLS handshake, CERT verify (15):38900{ [111 bytes data]38901* TLSv1.3 (IN), TLS handshake, Finished (20):38902{ [52 bytes data]38903* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38904} [1 bytes data]38905* TLSv1.3 (OUT), TLS handshake, Finished (20):38906} [52 bytes data]38907* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38908* ALPN: server accepted h238909* Server certificate:38910* subject: CN=test.foo38911* start date: Sep 15 00:20:19 2026 GMT38912* expire date: Oct 15 00:20:19 2028 GMT38913* issuer: CN=minica root ca 32960038914* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438915* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438916* subjectAltName: "test.foo" matches cert's "test.foo"38917* OpenSSL verify result: 1338918* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38919* closing connection #038920curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38921More details here: https://curl.se/docs/sslcerts.html3892238923curl failed to verify the legitimacy of the server and therefore could not38924establish a secure connection to it. To learn more about this situation and38925how to fix it, please visit the webpage mentioned above.38926* Host test.foo:443 was resolved.38927* IPv6: 2001:db8:1::338928* IPv4: 192.168.1.338929* Trying [2001:db8:1::3]:443...38930* ALPN: curl offers h2,http/1.138931} [5 bytes data]38932* TLSv1.3 (OUT), TLS handshake, Client hello (1):38933} [1552 bytes data]38934* SSL Trust Anchors:38935* OpenSSL default paths (fallback)38936{ [5 bytes data]38937* TLSv1.3 (IN), TLS handshake, Server hello (2):38938{ [1210 bytes data]38939* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38940{ [1 bytes data]38941* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38942{ [19 bytes data]38943* TLSv1.3 (IN), TLS handshake, Certificate (11):38944{ [1008 bytes data]38945* TLSv1.3 (IN), TLS handshake, CERT verify (15):38946{ [112 bytes data]38947* TLSv1.3 (IN), TLS handshake, Finished (20):38948{ [52 bytes data]38949* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38950} [1 bytes data]38951* TLSv1.3 (OUT), TLS handshake, Finished (20):38952} [52 bytes data]38953* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38954* ALPN: server accepted h238955* Server certificate:38956* subject: CN=test.foo38957* start date: Sep 15 00:20:19 2026 GMT38958* expire date: Oct 15 00:20:19 2028 GMT38959* issuer: CN=minica root ca 32960038960* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438961* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438962* subjectAltName: "test.foo" matches cert's "test.foo"38963* OpenSSL verify result: 1338964* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38965* closing connection #038966curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38967More details here: https://curl.se/docs/sslcerts.html3896838969curl failed to verify the legitimacy of the server and therefore could not38970establish a secure connection to it. To learn more about this situation and38971how to fix it, please visit the webpage mentioned above.38972* Host test.foo:443 was resolved.38973* IPv6: 2001:db8:1::338974* IPv4: 192.168.1.338975* Trying [2001:db8:1::3]:443...38976* ALPN: curl offers h2,http/1.138977} [5 bytes data]38978* TLSv1.3 (OUT), TLS handshake, Client hello (1):38979} [1552 bytes data]38980* SSL Trust Anchors:38981* OpenSSL default paths (fallback)38982{ [5 bytes data]38983* TLSv1.3 (IN), TLS handshake, Server hello (2):38984{ [1210 bytes data]38985* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38986{ [1 bytes data]38987* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38988{ [19 bytes data]38989* TLSv1.3 (IN), TLS handshake, Certificate (11):38990{ [1008 bytes data]38991* TLSv1.3 (IN), TLS handshake, CERT verify (15):38992{ [111 bytes data]38993* TLSv1.3 (IN), TLS handshake, Finished (20):38994{ [52 bytes data]38995* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38996} [1 bytes data]38997* TLSv1.3 (OUT), TLS handshake, Finished (20):38998} [52 bytes data]38999* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39000* ALPN: server accepted h239001* Server certificate:39002* subject: CN=test.foo39003* start date: Sep 15 00:20:19 2026 GMT39004* expire date: Oct 15 00:20:19 2028 GMT39005* issuer: CN=minica root ca 32960039006* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439007* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439008* subjectAltName: "test.foo" matches cert's "test.foo"39009* OpenSSL verify result: 1339010* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39011* closing connection #039012curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39013More details here: https://curl.se/docs/sslcerts.html3901439015curl failed to verify the legitimacy of the server and therefore could not39016establish a secure connection to it. To learn more about this situation and39017how to fix it, please visit the webpage mentioned above.39018* Host test.foo:443 was resolved.39019* IPv6: 2001:db8:1::339020* IPv4: 192.168.1.339021* Trying [2001:db8:1::3]:443...39022* ALPN: curl offers h2,http/1.139023} [5 bytes data]39024* TLSv1.3 (OUT), TLS handshake, Client hello (1):39025} [1552 bytes data]39026* SSL Trust Anchors:39027* OpenSSL default paths (fallback)39028{ [5 bytes data]39029* TLSv1.3 (IN), TLS handshake, Server hello (2):39030{ [1210 bytes data]39031* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39032{ [1 bytes data]39033* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39034{ [19 bytes data]39035* TLSv1.3 (IN), TLS handshake, Certificate (11):39036{ [1008 bytes data]39037* TLSv1.3 (IN), TLS handshake, CERT verify (15):39038{ [111 bytes data]39039* TLSv1.3 (IN), TLS handshake, Finished (20):39040{ [52 bytes data]39041* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39042} [1 bytes data]39043* TLSv1.3 (OUT), TLS handshake, Finished (20):39044} [52 bytes data]39045* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39046* ALPN: server accepted h239047* Server certificate:39048* subject: CN=test.foo39049* start date: Sep 15 00:20:19 2026 GMT39050* expire date: Oct 15 00:20:19 2028 GMT39051* issuer: CN=minica root ca 32960039052* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439053* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439054* subjectAltName: "test.foo" matches cert's "test.foo"39055* OpenSSL verify result: 1339056* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39057* closing connection #039058curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39059More details here: https://curl.se/docs/sslcerts.html3906039061curl failed to verify the legitimacy of the server and therefore could not39062establish a secure connection to it. To learn more about this situation and39063how to fix it, please visit the webpage mentioned above.39064* Host test.foo:443 was resolved.39065* IPv6: 2001:db8:1::339066* IPv4: 192.168.1.339067* Trying [2001:db8:1::3]:443...39068* ALPN: curl offers h2,http/1.139069} [5 bytes data]39070* TLSv1.3 (OUT), TLS handshake, Client hello (1):39071} [1552 bytes data]39072* SSL Trust Anchors:39073* OpenSSL default paths (fallback)39074{ [5 bytes data]39075* TLSv1.3 (IN), TLS handshake, Server hello (2):39076{ [1210 bytes data]39077* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39078{ [1 bytes data]39079* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39080{ [19 bytes data]39081* TLSv1.3 (IN), TLS handshake, Certificate (11):39082{ [1008 bytes data]39083* TLSv1.3 (IN), TLS handshake, CERT verify (15):39084{ [111 bytes data]39085* TLSv1.3 (IN), TLS handshake, Finished (20):39086{ [52 bytes data]39087* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39088} [1 bytes data]39089* TLSv1.3 (OUT), TLS handshake, Finished (20):39090} [52 bytes data]39091* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39092* ALPN: server accepted h239093* Server certificate:39094* subject: CN=test.foo39095* start date: Sep 15 00:20:19 2026 GMT39096* expire date: Oct 15 00:20:19 2028 GMT39097* issuer: CN=minica root ca 32960039098* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439099* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439100* subjectAltName: "test.foo" matches cert's "test.foo"39101* OpenSSL verify result: 1339102* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39103* closing connection #039104curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39105More details here: https://curl.se/docs/sslcerts.html3910639107curl failed to verify the legitimacy of the server and therefore could not39108establish a secure connection to it. To learn more about this situation and39109how to fix it, please visit the webpage mentioned above.39110* Host test.foo:443 was resolved.39111* IPv6: 2001:db8:1::339112* IPv4: 192.168.1.339113* Trying [2001:db8:1::3]:443...39114* ALPN: curl offers h2,http/1.139115} [5 bytes data]39116* TLSv1.3 (OUT), TLS handshake, Client hello (1):39117} [1552 bytes data]39118* SSL Trust Anchors:39119* OpenSSL default paths (fallback)39120{ [5 bytes data]39121* TLSv1.3 (IN), TLS handshake, Server hello (2):39122{ [1210 bytes data]39123* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39124{ [1 bytes data]39125* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39126{ [19 bytes data]39127* TLSv1.3 (IN), TLS handshake, Certificate (11):39128{ [1008 bytes data]39129* TLSv1.3 (IN), TLS handshake, CERT verify (15):39130{ [110 bytes data]39131* TLSv1.3 (IN), TLS handshake, Finished (20):39132{ [52 bytes data]39133* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39134} [1 bytes data]39135* TLSv1.3 (OUT), TLS handshake, Finished (20):39136} [52 bytes data]39137* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39138* ALPN: server accepted h239139* Server certificate:39140* subject: CN=test.foo39141* start date: Sep 15 00:20:19 2026 GMT39142* expire date: Oct 15 00:20:19 2028 GMT39143* issuer: CN=minica root ca 32960039144* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439145* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439146* subjectAltName: "test.foo" matches cert's "test.foo"39147* OpenSSL verify result: 1339148* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39149* closing connection #039150curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39151More details here: https://curl.se/docs/sslcerts.html3915239153curl failed to verify the legitimacy of the server and therefore could not39154establish a secure connection to it. To learn more about this situation and39155how to fix it, please visit the webpage mentioned above.39156* Host test.foo:443 was resolved.39157* IPv6: 2001:db8:1::339158* IPv4: 192.168.1.339159* Trying [2001:db8:1::3]:443...39160* ALPN: curl offers h2,http/1.139161} [5 bytes data]39162* TLSv1.3 (OUT), TLS handshake, Client hello (1):39163} [1552 bytes data]39164* SSL Trust Anchors:39165* OpenSSL default paths (fallback)39166{ [5 bytes data]39167* TLSv1.3 (IN), TLS handshake, Server hello (2):39168{ [1210 bytes data]39169* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39170{ [1 bytes data]39171* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39172{ [19 bytes data]39173* TLSv1.3 (IN), TLS handshake, Certificate (11):39174{ [1008 bytes data]39175* TLSv1.3 (IN), TLS handshake, CERT verify (15):39176{ [111 bytes data]39177* TLSv1.3 (IN), TLS handshake, Finished (20):39178{ [52 bytes data]39179* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39180} [1 bytes data]39181* TLSv1.3 (OUT), TLS handshake, Finished (20):39182} [52 bytes data]39183* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39184* ALPN: server accepted h239185* Server certificate:39186* subject: CN=test.foo39187* start date: Sep 15 00:20:19 2026 GMT39188* expire date: Oct 15 00:20:19 2028 GMT39189* issuer: CN=minica root ca 32960039190* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439191* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439192* subjectAltName: "test.foo" matches cert's "test.foo"39193* OpenSSL verify result: 1339194* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39195* closing connection #039196curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39197More details here: https://curl.se/docs/sslcerts.html3919839199curl failed to verify the legitimacy of the server and therefore could not39200establish a secure connection to it. To learn more about this situation and39201how to fix it, please visit the webpage mentioned above.39202* Host test.foo:443 was resolved.39203* IPv6: 2001:db8:1::339204* IPv4: 192.168.1.339205* Trying [2001:db8:1::3]:443...39206* ALPN: curl offers h2,http/1.139207} [5 bytes data]39208* TLSv1.3 (OUT), TLS handshake, Client hello (1):39209} [1552 bytes data]39210* SSL Trust Anchors:39211* OpenSSL default paths (fallback)39212{ [5 bytes data]39213* TLSv1.3 (IN), TLS handshake, Server hello (2):39214{ [1210 bytes data]39215* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39216{ [1 bytes data]39217* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39218{ [19 bytes data]39219* TLSv1.3 (IN), TLS handshake, Certificate (11):39220{ [1008 bytes data]39221* TLSv1.3 (IN), TLS handshake, CERT verify (15):39222{ [112 bytes data]39223* TLSv1.3 (IN), TLS handshake, Finished (20):39224{ [52 bytes data]39225* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39226} [1 bytes data]39227* TLSv1.3 (OUT), TLS handshake, Finished (20):39228} [52 bytes data]39229* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39230* ALPN: server accepted h239231* Server certificate:39232* subject: CN=test.foo39233* start date: Sep 15 00:20:19 2026 GMT39234* expire date: Oct 15 00:20:19 2028 GMT39235* issuer: CN=minica root ca 32960039236* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439237* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439238* subjectAltName: "test.foo" matches cert's "test.foo"39239* OpenSSL verify result: 1339240* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39241* closing connection #039242curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39243More details here: https://curl.se/docs/sslcerts.html3924439245curl failed to verify the legitimacy of the server and therefore could not39246establish a secure connection to it. To learn more about this situation and39247how to fix it, please visit the webpage mentioned above.39248* Host test.foo:443 was resolved.39249* IPv6: 2001:db8:1::339250* IPv4: 192.168.1.339251* Trying [2001:db8:1::3]:443...39252* ALPN: curl offers h2,http/1.139253} [5 bytes data]39254* TLSv1.3 (OUT), TLS handshake, Client hello (1):39255} [1552 bytes data]39256* SSL Trust Anchors:39257* OpenSSL default paths (fallback)39258{ [5 bytes data]39259* TLSv1.3 (IN), TLS handshake, Server hello (2):39260{ [1210 bytes data]39261* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39262{ [1 bytes data]39263* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39264{ [19 bytes data]39265* TLSv1.3 (IN), TLS handshake, Certificate (11):39266{ [1008 bytes data]39267* TLSv1.3 (IN), TLS handshake, CERT verify (15):39268{ [110 bytes data]39269* TLSv1.3 (IN), TLS handshake, Finished (20):39270{ [52 bytes data]39271* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39272} [1 bytes data]39273* TLSv1.3 (OUT), TLS handshake, Finished (20):39274} [52 bytes data]39275* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39276* ALPN: server accepted h239277* Server certificate:39278* subject: CN=test.foo39279* start date: Sep 15 00:20:19 2026 GMT39280* expire date: Oct 15 00:20:19 2028 GMT39281* issuer: CN=minica root ca 32960039282* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439283* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439284* subjectAltName: "test.foo" matches cert's "test.foo"39285* OpenSSL verify result: 1339286* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39287* closing connection #039288curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39289More details here: https://curl.se/docs/sslcerts.html3929039291curl failed to verify the legitimacy of the server and therefore could not39292establish a secure connection to it. To learn more about this situation and39293how to fix it, please visit the webpage mentioned above.39294* Host test.foo:443 was resolved.39295* IPv6: 2001:db8:1::339296* IPv4: 192.168.1.339297* Trying [2001:db8:1::3]:443...39298* ALPN: curl offers h2,http/1.139299} [5 bytes data]39300* TLSv1.3 (OUT), TLS handshake, Client hello (1):39301} [1552 bytes data]39302* SSL Trust Anchors:39303* OpenSSL default paths (fallback)39304{ [5 bytes data]39305* TLSv1.3 (IN), TLS handshake, Server hello (2):39306{ [1210 bytes data]39307* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39308{ [1 bytes data]39309* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39310{ [19 bytes data]39311* TLSv1.3 (IN), TLS handshake, Certificate (11):39312{ [1008 bytes data]39313* TLSv1.3 (IN), TLS handshake, CERT verify (15):39314{ [111 bytes data]39315* TLSv1.3 (IN), TLS handshake, Finished (20):39316{ [52 bytes data]39317* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39318} [1 bytes data]39319* TLSv1.3 (OUT), TLS handshake, Finished (20):39320} [52 bytes data]39321* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39322* ALPN: server accepted h239323* Server certificate:39324* subject: CN=test.foo39325* start date: Sep 15 00:20:19 2026 GMT39326* expire date: Oct 15 00:20:19 2028 GMT39327* issuer: CN=minica root ca 32960039328* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439329* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439330* subjectAltName: "test.foo" matches cert's "test.foo"39331* OpenSSL verify result: 1339332* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39333* closing connection #039334curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39335More details here: https://curl.se/docs/sslcerts.html3933639337curl failed to verify the legitimacy of the server and therefore could not39338establish a secure connection to it. To learn more about this situation and39339how to fix it, please visit the webpage mentioned above.39340* Trying [2001:db8:1::3]:443...39341* Host test.foo:443 was resolved.39342* IPv6: 2001:db8:1::339343* IPv4: 192.168.1.339344* ALPN: curl offers h2,http/1.139345} [5 bytes data]39346* TLSv1.3 (OUT), TLS handshake, Client hello (1):39347} [1552 bytes data]39348* SSL Trust Anchors:39349* OpenSSL default paths (fallback)39350{ [5 bytes data]39351* TLSv1.3 (IN), TLS handshake, Server hello (2):39352{ [1210 bytes data]39353* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39354{ [1 bytes data]39355* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39356{ [19 bytes data]39357* TLSv1.3 (IN), TLS handshake, Certificate (11):39358{ [1008 bytes data]39359* TLSv1.3 (IN), TLS handshake, CERT verify (15):39360{ [111 bytes data]39361* TLSv1.3 (IN), TLS handshake, Finished (20):39362{ [52 bytes data]39363* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39364} [1 bytes data]39365* TLSv1.3 (OUT), TLS handshake, Finished (20):39366} [52 bytes data]39367* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39368* ALPN: server accepted h239369* Server certificate:39370* subject: CN=test.foo39371* start date: Sep 15 00:20:19 2026 GMT39372* expire date: Oct 15 00:20:19 2028 GMT39373* issuer: CN=minica root ca 32960039374* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439375* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439376* subjectAltName: "test.foo" matches cert's "test.foo"39377* OpenSSL verify result: 1339378* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39379* closing connection #039380curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39381More details here: https://curl.se/docs/sslcerts.html3938239383curl failed to verify the legitimacy of the server and therefore could not39384establish a secure connection to it. To learn more about this situation and39385how to fix it, please visit the webpage mentioned above.39386* Host test.foo:443 was resolved.39387* IPv6: 2001:db8:1::339388* IPv4: 192.168.1.339389* Trying [2001:db8:1::3]:443...39390* ALPN: curl offers h2,http/1.139391} [5 bytes data]39392* TLSv1.3 (OUT), TLS handshake, Client hello (1):39393} [1552 bytes data]39394* SSL Trust Anchors:39395* OpenSSL default paths (fallback)39396{ [5 bytes data]39397* TLSv1.3 (IN), TLS handshake, Server hello (2):39398{ [1210 bytes data]39399* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39400{ [1 bytes data]39401* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39402{ [19 bytes data]39403* TLSv1.3 (IN), TLS handshake, Certificate (11):39404{ [1008 bytes data]39405* TLSv1.3 (IN), TLS handshake, CERT verify (15):39406{ [111 bytes data]39407* TLSv1.3 (IN), TLS handshake, Finished (20):39408{ [52 bytes data]39409* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39410} [1 bytes data]39411* TLSv1.3 (OUT), TLS handshake, Finished (20):39412} [52 bytes data]39413* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39414* ALPN: server accepted h239415* Server certificate:39416* subject: CN=test.foo39417* start date: Sep 15 00:20:19 2026 GMT39418* expire date: Oct 15 00:20:19 2028 GMT39419* issuer: CN=minica root ca 32960039420* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439421* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439422* subjectAltName: "test.foo" matches cert's "test.foo"39423* OpenSSL verify result: 1339424* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39425* closing connection #039426curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39427More details here: https://curl.se/docs/sslcerts.html3942839429curl failed to verify the legitimacy of the server and therefore could not39430establish a secure connection to it. To learn more about this situation and39431how to fix it, please visit the webpage mentioned above.39432* Host test.foo:443 was resolved.39433* IPv6: 2001:db8:1::339434* IPv4: 192.168.1.339435* Trying [2001:db8:1::3]:443...39436* ALPN: curl offers h2,http/1.139437} [5 bytes data]39438* TLSv1.3 (OUT), TLS handshake, Client hello (1):39439} [1552 bytes data]39440* SSL Trust Anchors:39441* OpenSSL default paths (fallback)39442{ [5 bytes data]39443* TLSv1.3 (IN), TLS handshake, Server hello (2):39444{ [1210 bytes data]39445* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39446{ [1 bytes data]39447* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39448{ [19 bytes data]39449* TLSv1.3 (IN), TLS handshake, Certificate (11):39450{ [1008 bytes data]39451* TLSv1.3 (IN), TLS handshake, CERT verify (15):39452{ [111 bytes data]39453* TLSv1.3 (IN), TLS handshake, Finished (20):39454{ [52 bytes data]39455* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39456} [1 bytes data]39457* TLSv1.3 (OUT), TLS handshake, Finished (20):39458} [52 bytes data]39459* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39460* ALPN: server accepted h239461* Server certificate:39462* subject: CN=test.foo39463* start date: Sep 15 00:20:19 2026 GMT39464* expire date: Oct 15 00:20:19 2028 GMT39465* issuer: CN=minica root ca 32960039466* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439467* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439468* subjectAltName: "test.foo" matches cert's "test.foo"39469* OpenSSL verify result: 1339470* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39471* closing connection #039472curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39473More details here: https://curl.se/docs/sslcerts.html3947439475curl failed to verify the legitimacy of the server and therefore could not39476establish a secure connection to it. To learn more about this situation and39477how to fix it, please visit the webpage mentioned above.39478* Host test.foo:443 was resolved.39479* IPv6: 2001:db8:1::339480* IPv4: 192.168.1.339481* Trying [2001:db8:1::3]:443...39482* ALPN: curl offers h2,http/1.139483} [5 bytes data]39484* TLSv1.3 (OUT), TLS handshake, Client hello (1):39485} [1552 bytes data]39486* SSL Trust Anchors:39487* OpenSSL default paths (fallback)39488{ [5 bytes data]39489* TLSv1.3 (IN), TLS handshake, Server hello (2):39490{ [1210 bytes data]39491* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39492{ [1 bytes data]39493* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39494{ [19 bytes data]39495* TLSv1.3 (IN), TLS handshake, Certificate (11):39496{ [1008 bytes data]39497* TLSv1.3 (IN), TLS handshake, CERT verify (15):39498{ [111 bytes data]39499* TLSv1.3 (IN), TLS handshake, Finished (20):39500{ [52 bytes data]39501* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39502} [1 bytes data]39503* TLSv1.3 (OUT), TLS handshake, Finished (20):39504} [52 bytes data]39505* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39506* ALPN: server accepted h239507* Server certificate:39508* subject: CN=test.foo39509* start date: Sep 15 00:20:19 2026 GMT39510* expire date: Oct 15 00:20:19 2028 GMT39511* issuer: CN=minica root ca 32960039512* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439513* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439514* subjectAltName: "test.foo" matches cert's "test.foo"39515* OpenSSL verify result: 1339516* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39517* closing connection #039518curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39519More details here: https://curl.se/docs/sslcerts.html3952039521curl failed to verify the legitimacy of the server and therefore could not39522establish a secure connection to it. To learn more about this situation and39523how to fix it, please visit the webpage mentioned above.39524* Host test.foo:443 was resolved.39525* IPv6: 2001:db8:1::339526* IPv4: 192.168.1.339527* Trying [2001:db8:1::3]:443...39528* ALPN: curl offers h2,http/1.139529} [5 bytes data]39530* TLSv1.3 (OUT), TLS handshake, Client hello (1):39531} [1552 bytes data]39532* SSL Trust Anchors:39533* OpenSSL default paths (fallback)39534{ [5 bytes data]39535* TLSv1.3 (IN), TLS handshake, Server hello (2):39536{ [1210 bytes data]39537* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39538{ [1 bytes data]39539* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39540{ [19 bytes data]39541* TLSv1.3 (IN), TLS handshake, Certificate (11):39542{ [1008 bytes data]39543* TLSv1.3 (IN), TLS handshake, CERT verify (15):39544{ [111 bytes data]39545* TLSv1.3 (IN), TLS handshake, Finished (20):39546{ [52 bytes data]39547* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39548} [1 bytes data]39549* TLSv1.3 (OUT), TLS handshake, Finished (20):39550} [52 bytes data]39551* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39552* ALPN: server accepted h239553* Server certificate:39554* subject: CN=test.foo39555* start date: Sep 15 00:20:19 2026 GMT39556* expire date: Oct 15 00:20:19 2028 GMT39557* issuer: CN=minica root ca 32960039558* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439559* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439560* subjectAltName: "test.foo" matches cert's "test.foo"39561* OpenSSL verify result: 1339562* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39563* closing connection #039564curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39565More details here: https://curl.se/docs/sslcerts.html3956639567curl failed to verify the legitimacy of the server and therefore could not39568establish a secure connection to it. To learn more about this situation and39569how to fix it, please visit the webpage mentioned above.39570* Host test.foo:443 was resolved.39571* IPv6: 2001:db8:1::339572* IPv4: 192.168.1.339573* Trying [2001:db8:1::3]:443...39574* ALPN: curl offers h2,http/1.139575} [5 bytes data]39576* TLSv1.3 (OUT), TLS handshake, Client hello (1):39577} [1552 bytes data]39578* SSL Trust Anchors:39579* OpenSSL default paths (fallback)39580{ [5 bytes data]39581* TLSv1.3 (IN), TLS handshake, Server hello (2):39582{ [1210 bytes data]39583* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39584{ [1 bytes data]39585* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39586{ [19 bytes data]39587* TLSv1.3 (IN), TLS handshake, Certificate (11):39588{ [1008 bytes data]39589* TLSv1.3 (IN), TLS handshake, CERT verify (15):39590{ [111 bytes data]39591* TLSv1.3 (IN), TLS handshake, Finished (20):39592{ [52 bytes data]39593* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39594} [1 bytes data]39595* TLSv1.3 (OUT), TLS handshake, Finished (20):39596} [52 bytes data]39597* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39598* ALPN: server accepted h239599* Server certificate:39600* subject: CN=test.foo39601* start date: Sep 15 00:20:19 2026 GMT39602* expire date: Oct 15 00:20:19 2028 GMT39603* issuer: CN=minica root ca 32960039604* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439605* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439606* subjectAltName: "test.foo" matches cert's "test.foo"39607* OpenSSL verify result: 1339608* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39609* closing connection #039610curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39611More details here: https://curl.se/docs/sslcerts.html3961239613curl failed to verify the legitimacy of the server and therefore could not39614establish a secure connection to it. To learn more about this situation and39615how to fix it, please visit the webpage mentioned above.39616* Trying [2001:db8:1::3]:443...39617* Host test.foo:443 was resolved.39618* IPv6: 2001:db8:1::339619* IPv4: 192.168.1.339620* ALPN: curl offers h2,http/1.139621} [5 bytes data]39622* TLSv1.3 (OUT), TLS handshake, Client hello (1):39623} [1552 bytes data]39624* SSL Trust Anchors:39625* OpenSSL default paths (fallback)39626{ [5 bytes data]39627* TLSv1.3 (IN), TLS handshake, Server hello (2):39628{ [1210 bytes data]39629* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39630{ [1 bytes data]39631* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39632{ [19 bytes data]39633* TLSv1.3 (IN), TLS handshake, Certificate (11):39634{ [1008 bytes data]39635* TLSv1.3 (IN), TLS handshake, CERT verify (15):39636{ [112 bytes data]39637* TLSv1.3 (IN), TLS handshake, Finished (20):39638{ [52 bytes data]39639* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39640} [1 bytes data]39641* TLSv1.3 (OUT), TLS handshake, Finished (20):39642} [52 bytes data]39643* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39644* ALPN: server accepted h239645* Server certificate:39646* subject: CN=test.foo39647* start date: Sep 15 00:20:19 2026 GMT39648* expire date: Oct 15 00:20:19 2028 GMT39649* issuer: CN=minica root ca 32960039650* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439651* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439652* subjectAltName: "test.foo" matches cert's "test.foo"39653* OpenSSL verify result: 1339654* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39655* closing connection #039656curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39657More details here: https://curl.se/docs/sslcerts.html3965839659curl failed to verify the legitimacy of the server and therefore could not39660establish a secure connection to it. To learn more about this situation and39661how to fix it, please visit the webpage mentioned above.39662client # [925700.680599] client systemd[1]: Starting Cleanup of Temporary Directories...39663client # [925700.793902] client systemd[1]: systemd-tmpfiles-clean.service: Deactivated successfully.39664client # [925700.794416] client systemd[1]: Finished Cleanup of Temporary Directories.39665* Host test.foo:443 was resolved.39666* IPv6: 2001:db8:1::339667* IPv4: 192.168.1.339668* Trying [2001:db8:1::3]:443...39669* ALPN: curl offers h2,http/1.139670} [5 bytes data]39671* TLSv1.3 (OUT), TLS handshake, Client hello (1):39672} [1552 bytes data]39673* SSL Trust Anchors:39674* OpenSSL default paths (fallback)39675{ [5 bytes data]39676* TLSv1.3 (IN), TLS handshake, Server hello (2):39677{ [1210 bytes data]39678* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39679{ [1 bytes data]39680* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39681{ [19 bytes data]39682* TLSv1.3 (IN), TLS handshake, Certificate (11):39683{ [1008 bytes data]39684* TLSv1.3 (IN), TLS handshake, CERT verify (15):39685{ [112 bytes data]39686* TLSv1.3 (IN), TLS handshake, Finished (20):39687{ [52 bytes data]39688* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39689} [1 bytes data]39690* TLSv1.3 (OUT), TLS handshake, Finished (20):39691} [52 bytes data]39692* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39693* ALPN: server accepted h239694* Server certificate:39695* subject: CN=test.foo39696* start date: Sep 15 00:20:19 2026 GMT39697* expire date: Oct 15 00:20:19 2028 GMT39698* issuer: CN=minica root ca 32960039699* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439700* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439701* subjectAltName: "test.foo" matches cert's "test.foo"39702* OpenSSL verify result: 1339703* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39704* closing connection #039705curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39706More details here: https://curl.se/docs/sslcerts.html3970739708curl failed to verify the legitimacy of the server and therefore could not39709establish a secure connection to it. To learn more about this situation and39710how to fix it, please visit the webpage mentioned above.39711* Host test.foo:443 was resolved.39712* IPv6: 2001:db8:1::339713* IPv4: 192.168.1.339714* Trying [2001:db8:1::3]:443...39715* ALPN: curl offers h2,http/1.139716} [5 bytes data]39717* TLSv1.3 (OUT), TLS handshake, Client hello (1):39718} [1552 bytes data]39719* SSL Trust Anchors:39720* OpenSSL default paths (fallback)39721{ [5 bytes data]39722* TLSv1.3 (IN), TLS handshake, Server hello (2):39723{ [1210 bytes data]39724* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39725{ [1 bytes data]39726* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39727{ [19 bytes data]39728* TLSv1.3 (IN), TLS handshake, Certificate (11):39729{ [1008 bytes data]39730* TLSv1.3 (IN), TLS handshake, CERT verify (15):39731{ [110 bytes data]39732* TLSv1.3 (IN), TLS handshake, Finished (20):39733{ [52 bytes data]39734* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39735} [1 bytes data]39736* TLSv1.3 (OUT), TLS handshake, Finished (20):39737} [52 bytes data]39738* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39739* ALPN: server accepted h239740* Server certificate:39741* subject: CN=test.foo39742* start date: Sep 15 00:20:19 2026 GMT39743* expire date: Oct 15 00:20:19 2028 GMT39744* issuer: CN=minica root ca 32960039745* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439746* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439747* subjectAltName: "test.foo" matches cert's "test.foo"39748* OpenSSL verify result: 1339749* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39750* closing connection #039751curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39752More details here: https://curl.se/docs/sslcerts.html3975339754curl failed to verify the legitimacy of the server and therefore could not39755establish a secure connection to it. To learn more about this situation and39756how to fix it, please visit the webpage mentioned above.39757* Host test.foo:443 was resolved.39758* IPv6: 2001:db8:1::339759* IPv4: 192.168.1.339760* Trying [2001:db8:1::3]:443...39761* ALPN: curl offers h2,http/1.139762} [5 bytes data]39763* TLSv1.3 (OUT), TLS handshake, Client hello (1):39764} [1552 bytes data]39765* SSL Trust Anchors:39766* OpenSSL default paths (fallback)39767{ [5 bytes data]39768* TLSv1.3 (IN), TLS handshake, Server hello (2):39769{ [1210 bytes data]39770* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39771{ [1 bytes data]39772* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39773{ [19 bytes data]39774* TLSv1.3 (IN), TLS handshake, Certificate (11):39775{ [1008 bytes data]39776* TLSv1.3 (IN), TLS handshake, CERT verify (15):39777{ [110 bytes data]39778* TLSv1.3 (IN), TLS handshake, Finished (20):39779{ [52 bytes data]39780* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39781} [1 bytes data]39782* TLSv1.3 (OUT), TLS handshake, Finished (20):39783} [52 bytes data]39784* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39785* ALPN: server accepted h239786* Server certificate:39787* subject: CN=test.foo39788* start date: Sep 15 00:20:19 2026 GMT39789* expire date: Oct 15 00:20:19 2028 GMT39790* issuer: CN=minica root ca 32960039791* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439792* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439793* subjectAltName: "test.foo" matches cert's "test.foo"39794* OpenSSL verify result: 1339795* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39796* closing connection #039797curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39798More details here: https://curl.se/docs/sslcerts.html3979939800curl failed to verify the legitimacy of the server and therefore could not39801establish a secure connection to it. To learn more about this situation and39802how to fix it, please visit the webpage mentioned above.39803* Host test.foo:443 was resolved.39804* IPv6: 2001:db8:1::339805* IPv4: 192.168.1.339806* Trying [2001:db8:1::3]:443...39807* ALPN: curl offers h2,http/1.139808} [5 bytes data]39809* TLSv1.3 (OUT), TLS handshake, Client hello (1):39810} [1552 bytes data]39811* SSL Trust Anchors:39812* OpenSSL default paths (fallback)39813{ [5 bytes data]39814* TLSv1.3 (IN), TLS handshake, Server hello (2):39815{ [1210 bytes data]39816* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39817{ [1 bytes data]39818* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39819{ [19 bytes data]39820* TLSv1.3 (IN), TLS handshake, Certificate (11):39821{ [1008 bytes data]39822* TLSv1.3 (IN), TLS handshake, CERT verify (15):39823{ [110 bytes data]39824* TLSv1.3 (IN), TLS handshake, Finished (20):39825{ [52 bytes data]39826* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39827} [1 bytes data]39828* TLSv1.3 (OUT), TLS handshake, Finished (20):39829} [52 bytes data]39830* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39831* ALPN: server accepted h239832* Server certificate:39833* subject: CN=test.foo39834* start date: Sep 15 00:20:19 2026 GMT39835* expire date: Oct 15 00:20:19 2028 GMT39836* issuer: CN=minica root ca 32960039837* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439838* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439839* subjectAltName: "test.foo" matches cert's "test.foo"39840* OpenSSL verify result: 1339841* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39842* closing connection #039843curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39844More details here: https://curl.se/docs/sslcerts.html3984539846curl failed to verify the legitimacy of the server and therefore could not39847establish a secure connection to it. To learn more about this situation and39848how to fix it, please visit the webpage mentioned above.39849server # [925705.510922] server systemd[1]: Starting Cleanup of Temporary Directories...39850server # [925705.621068] server systemd[1]: systemd-tmpfiles-clean.service: Deactivated successfully.39851server # [925705.621386] server systemd[1]: Finished Cleanup of Temporary Directories.39852* Host test.foo:443 was resolved.39853* IPv6: 2001:db8:1::339854* IPv4: 192.168.1.339855* Trying [2001:db8:1::3]:443...39856* ALPN: curl offers h2,http/1.139857} [5 bytes data]39858* TLSv1.3 (OUT), TLS handshake, Client hello (1):39859} [1552 bytes data]39860* SSL Trust Anchors:39861* OpenSSL default paths (fallback)39862{ [5 bytes data]39863* TLSv1.3 (IN), TLS handshake, Server hello (2):39864{ [1210 bytes data]39865* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39866{ [1 bytes data]39867* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39868{ [19 bytes data]39869* TLSv1.3 (IN), TLS handshake, Certificate (11):39870{ [1008 bytes data]39871* TLSv1.3 (IN), TLS handshake, CERT verify (15):39872{ [112 bytes data]39873* TLSv1.3 (IN), TLS handshake, Finished (20):39874{ [52 bytes data]39875* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39876} [1 bytes data]39877* TLSv1.3 (OUT), TLS handshake, Finished (20):39878} [52 bytes data]39879* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39880* ALPN: server accepted h239881* Server certificate:39882* subject: CN=test.foo39883* start date: Sep 15 00:20:19 2026 GMT39884* expire date: Oct 15 00:20:19 2028 GMT39885* issuer: CN=minica root ca 32960039886* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439887* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439888* subjectAltName: "test.foo" matches cert's "test.foo"39889* OpenSSL verify result: 1339890* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39891* closing connection #039892curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39893More details here: https://curl.se/docs/sslcerts.html3989439895curl failed to verify the legitimacy of the server and therefore could not39896establish a secure connection to it. To learn more about this situation and39897how to fix it, please visit the webpage mentioned above.39898ca # [925705.553663] ca systemd[1]: Starting Cleanup of Temporary Directories...39899ca # [925705.631342] ca systemd[1]: systemd-tmpfiles-clean.service: Deactivated successfully.39900ca # [925705.631643] ca systemd[1]: Finished Cleanup of Temporary Directories.39901* Trying [2001:db8:1::3]:443...39902* ALPN: curl offers h2,http/1.139903} [5 bytes data]39904* TLSv1.3 (OUT), TLS handshake, Client hello (1):39905} [1552 bytes data]39906* SSL Trust Anchors:39907* OpenSSL default paths (fallback)39908* Host test.foo:443 was resolved.39909* IPv6: 2001:db8:1::339910* IPv4: 192.168.1.339911{ [5 bytes data]39912* TLSv1.3 (IN), TLS handshake, Server hello (2):39913{ [1210 bytes data]39914* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39915{ [1 bytes data]39916* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39917{ [19 bytes data]39918* TLSv1.3 (IN), TLS handshake, Certificate (11):39919{ [1008 bytes data]39920* TLSv1.3 (IN), TLS handshake, CERT verify (15):39921{ [111 bytes data]39922* TLSv1.3 (IN), TLS handshake, Finished (20):39923{ [52 bytes data]39924* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39925} [1 bytes data]39926* TLSv1.3 (OUT), TLS handshake, Finished (20):39927} [52 bytes data]39928* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39929* ALPN: server accepted h239930* Server certificate:39931* subject: CN=test.foo39932* start date: Sep 15 00:20:19 2026 GMT39933* expire date: Oct 15 00:20:19 2028 GMT39934* issuer: CN=minica root ca 32960039935* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439936* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439937* subjectAltName: "test.foo" matches cert's "test.foo"39938* OpenSSL verify result: 1339939* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39940* closing connection #039941curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39942More details here: https://curl.se/docs/sslcerts.html3994339944curl failed to verify the legitimacy of the server and therefore could not39945establish a secure connection to it. To learn more about this situation and39946how to fix it, please visit the webpage mentioned above.39947* Trying [2001:db8:1::3]:443...39948* Host test.foo:443 was resolved.39949* IPv6: 2001:db8:1::339950* IPv4: 192.168.1.339951* ALPN: curl offers h2,http/1.139952} [5 bytes data]39953* TLSv1.3 (OUT), TLS handshake, Client hello (1):39954} [1552 bytes data]39955* SSL Trust Anchors:39956* OpenSSL default paths (fallback)39957{ [5 bytes data]39958* TLSv1.3 (IN), TLS handshake, Server hello (2):39959{ [1210 bytes data]39960* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39961{ [1 bytes data]39962* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39963{ [19 bytes data]39964* TLSv1.3 (IN), TLS handshake, Certificate (11):39965{ [1008 bytes data]39966* TLSv1.3 (IN), TLS handshake, CERT verify (15):39967{ [111 bytes data]39968* TLSv1.3 (IN), TLS handshake, Finished (20):39969{ [52 bytes data]39970* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39971} [1 bytes data]39972* TLSv1.3 (OUT), TLS handshake, Finished (20):39973} [52 bytes data]39974* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39975* ALPN: server accepted h239976* Server certificate:39977* subject: CN=test.foo39978* start date: Sep 15 00:20:19 2026 GMT39979* expire date: Oct 15 00:20:19 2028 GMT39980* issuer: CN=minica root ca 32960039981* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439982* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439983* subjectAltName: "test.foo" matches cert's "test.foo"39984* OpenSSL verify result: 1339985* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39986* closing connection #039987curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39988More details here: https://curl.se/docs/sslcerts.html3998939990curl failed to verify the legitimacy of the server and therefore could not39991establish a secure connection to it. To learn more about this situation and39992how to fix it, please visit the webpage mentioned above.39993* Host test.foo:443 was resolved.39994* IPv6: 2001:db8:1::339995* IPv4: 192.168.1.339996* Trying [2001:db8:1::3]:443...39997* ALPN: curl offers h2,http/1.139998} [5 bytes data]39999* TLSv1.3 (OUT), TLS handshake, Client hello (1):40000} [1552 bytes data]40001* SSL Trust Anchors:40002* OpenSSL default paths (fallback)40003{ [5 bytes data]40004* TLSv1.3 (IN), TLS handshake, Server hello (2):40005{ [1210 bytes data]40006* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):40007{ [1 bytes data]40008* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):40009{ [19 bytes data]40010* TLSv1.3 (IN), TLS handshake, Certificate (11):40011{ [1008 bytes data]40012* TLSv1.3 (IN), TLS handshake, CERT verify (15):40013{ [112 bytes data]40014* TLSv1.3 (IN), TLS handshake, Finished (20):40015{ [52 bytes data]40016* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):40017} [1 bytes data]40018* TLSv1.3 (OUT), TLS handshake, Finished (20):40019} [52 bytes data]40020* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey40021* ALPN: server accepted h240022* Server certificate:40023* subject: CN=test.foo40024* start date: Sep 15 00:20:19 2026 GMT40025* expire date: Oct 15 00:20:19 2028 GMT40026* issuer: CN=minica root ca 32960040027* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38440028* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38440029* subjectAltName: "test.foo" matches cert's "test.foo"40030* OpenSSL verify result: 1340031* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)40032* closing connection #040033curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)40034More details here: https://curl.se/docs/sslcerts.html4003540036curl failed to verify the legitimacy of the server and therefore could not40037establish a secure connection to it. To learn more about this situation and40038how to fix it, please visit the webpage mentioned above.40039* Host test.foo:443 was resolved.40040* IPv6: 2001:db8:1::340041* IPv4: 192.168.1.340042* Trying [2001:db8:1::3]:443...40043* ALPN: curl offers h2,http/1.140044} [5 bytes data]40045* TLSv1.3 (OUT), TLS handshake, Client hello (1):40046} [1552 bytes data]40047* SSL Trust Anchors:40048* OpenSSL default paths (fallback)40049{ [5 bytes data]40050* TLSv1.3 (IN), TLS handshake, Server hello (2):40051{ [1210 bytes data]40052* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):40053{ [1 bytes data]40054* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):40055{ [19 bytes data]40056* TLSv1.3 (IN), TLS handshake, Certificate (11):40057{ [1008 bytes data]40058* TLSv1.3 (IN), TLS handshake, CERT verify (15):40059{ [111 bytes data]40060* TLSv1.3 (IN), TLS handshake, Finished (20):40061{ [52 bytes data]40062* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):40063} [1 bytes data]40064* TLSv1.3 (OUT), TLS handshake, Finished (20):40065} [52 bytes data]40066* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey40067* ALPN: server accepted h240068* Server certificate:40069* subject: CN=test.foo40070* start date: Sep 15 00:20:19 2026 GMT40071* expire date: Oct 15 00:20:19 2028 GMT40072* issuer: CN=minica root ca 32960040073* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38440074* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38440075* subjectAltName: "test.foo" matches cert's "test.foo"40076* OpenSSL verify result: 1340077* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)40078* closing connection #040079curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)40080More details here: https://curl.se/docs/sslcerts.html4008140082curl failed to verify the legitimacy of the server and therefore could not40083establish a secure connection to it. To learn more about this situation and40084how to fix it, please visit the webpage mentioned above.40085!!! Traceback (most recent call last):40086!!! File "<string>", line 13, in <module>40087!!! client.wait_until_succeeds("curl -v https://test.foo")40088!!! 40089!!! RequestedAssertionFailed: action timed out after 900.42 seconds (timeout=900.0)40090cleanup40091kill NspawnMachine (pid 52)40092kill NspawnMachine (pid 54)40093Container ca terminated by signal KILL.40094kill NspawnMachine (pid 56)40095Container client terminated by signal KILL.40096Container server terminated by signal KILL.40097(finished: cleanup, in 0.50 seconds)