container-test-run-certificates
checks.aarch64-linux.certificates
· build #692
· raw
1Machine state will be reset. To keep it, pass --keep-machine-state2start all VLans3(finished: start all VLans, in 0.00 seconds)45Test will time out and terminate in 3600.0 seconds6run the VM test script7additionally exposed symbols:8 ca, client, server,9 vlan1,10 start_all, test_script, machines, machines_qemu, machines_nspawn, vlans, driver, log, os, create_machine, subtest, run_tests, join_all, retry, serial_stdout_off, serial_stdout_on, polling_condition, BaseMachine, QemuMachine, NspawnMachine, t, debug, dump_machine_ssh11start all VMs12ca: systemd-nspawn running (pid 53)13client: systemd-nspawn running (pid 54)14server: systemd-nspawn running (pid 55)15ca: Waiting for journal at /build/vm-state-ca/var/log/journal...16client: Waiting for journal at /build/vm-state-client/var/log/journal...17server: Waiting for journal at /build/vm-state-server/var/log/journal...18(finished: start all VMs, in 0.00 seconds)19nixos-nspawn(client): TAP vde-tap1 not found; container will be isolated from VDE20nixos-nspawn(client): A common reason for this is that /dev/net is not available in the Nix sandbox. Try adding /dev/net to extra-sandbox-paths.21nixos-nspawn(ca): TAP vde-tap1 not found; container will be isolated from VDE22nixos-nspawn(ca): A common reason for this is that /dev/net is not available in the Nix sandbox. Try adding /dev/net to extra-sandbox-paths.23nixos-nspawn(server): TAP vde-tap1 not found; container will be isolated from VDE24nixos-nspawn(server): A common reason for this is that /dev/net is not available in the Nix sandbox. Try adding /dev/net to extra-sandbox-paths.25Note: in a future version of systemd-nspawn the default set of permitted socket address families will be restricted to AF_INET, AF_INET6 and AF_UNIX. Use --restrict-address-families= to configure the set of permitted socket address families, or set RestrictAddressFamilies= in a .nspawn file.26Note: in a future version of systemd-nspawn the default set of permitted socket address families will be restricted to AF_INET, AF_INET6 and AF_UNIX. Use --restrict-address-families= to configure the set of permitted socket address families, or set RestrictAddressFamilies= in a .nspawn file.27Note: in a future version of systemd-nspawn the default set of permitted socket address families will be restricted to AF_INET, AF_INET6 and AF_UNIX. Use --restrict-address-families= to configure the set of permitted socket address families, or set RestrictAddressFamilies= in a .nspawn file.28░ Spawning container server on /build/vm-state-server.29░ Spawning container client on /build/vm-state-client.30░ Spawning container ca on /build/vm-state-ca.31ca # No journal files were found.32ca # No journal boot entry found for the specified boot (+0).33server # No journal files were found.34server # No journal boot entry found for the specified boot (+0).35client # No journal files were found.36client # No journal boot entry found for the specified boot (+0).37ca # [1202420.879448] ca systemd-journald[81]: Journal started38ca # [1202420.879510] ca systemd-journald[81]: Runtime Journal (/run/log/journal/09cde138c29c4c2495b2844835e5b828) is 8M, max 2.5G, 2.4G free.39ca # [1202420.891247] ca systemd[1]: Finished Apply Kernel Variables.40ca # [1202420.905445] ca systemd[1]: Finished Create Static Device Nodes in /dev gracefully.41ca # [1202420.921769] ca systemd[1]: Starting Flush Journal to Persistent Storage...42ca # [1202420.922771] ca systemd[1]: Starting Network Name Resolution...43ca # [1202420.923554] ca systemd[1]: Starting Create Static Device Nodes in /dev...44ca # [1202420.965548] ca systemd-journald[81]: Time spent on flushing to /var/log/journal/09cde138c29c4c2495b2844835e5b828 is 2.977ms for 7 entries.45ca # [1202420.965548] ca systemd-journald[81]: System Journal (/var/log/journal/09cde138c29c4c2495b2844835e5b828) is 8M, max 4G, 3.9G free.46ca # [1202420.989559] ca systemd[1]: Finished Flush Journal to Persistent Storage.47ca # [1202420.989960] ca systemd[1]: Finished Create Static Device Nodes in /dev.48ca # [1202420.991057] ca systemd[1]: Reached target Preparation for Local File Systems.49ca # [1202420.991181] ca systemd[1]: Reached target Local File Systems.50ca # [1202420.992090] ca systemd[1]: Listening on Boot Loader Control Service Socket.51ca # [1202420.992141] ca systemd[1]: Update Boot Loader Random Seed skipped, unmet condition check ConditionVirtualization=!container52ca # [1202420.993116] ca systemd[1]: Starting Save Transient machine-id to Disk...53ca # [1202420.996102] ca systemd[1]: Starting Create System Files and Directories...54ca # [1202420.996132] ca systemd[1]: Rule-based Manager for Device Events and Files skipped, unmet condition check ConditionPathIsReadWrite=/sys55ca # [1202421.014416] ca systemd-tmpfiles[158]: Cannot set file attributes for '/var/empty', value=0x00000010, mask=0x00000010, ignoring: Operation not permitted56server # [1202420.882365] server systemd-journald[72]: Journal started57ca # [1202421.014646] ca systemd-tmpfiles[158]: fchmod() of /var/log/journal failed: Operation not permitted58server # [1202420.882413] server systemd-journald[72]: Runtime Journal (/run/log/journal/3ce9da3f18e4403186f8164fa2b31b27) is 8M, max 2.5G, 2.4G free.59ca # [1202421.014795] ca systemd-tmpfiles[158]: fchmod() of /var/log/journal/09cde138c29c4c2495b2844835e5b828 failed: Operation not permitted60server # [1202420.897682] server systemd[1]: Finished Apply Kernel Variables.61ca # [1202421.015025] ca systemd-tmpfiles[158]: fchmod() of /run/log/journal failed: Operation not permitted62server # [1202420.910484] server systemd[1]: Finished Create Static Device Nodes in /dev gracefully.63ca # [1202421.016552] ca systemd[1]: Finished Create System Files and Directories.64server # [1202420.956351] server systemd[1]: Starting Flush Journal to Persistent Storage...65ca # [1202421.017629] ca systemd[1]: Starting Rebuild Journal Catalog...66server # [1202420.957215] server systemd[1]: Starting Network Name Resolution...67ca # [1202421.018486] ca systemd[1]: Starting Record System Boot/Shutdown in UTMP...68server # [1202420.957866] server systemd[1]: Starting Create Static Device Nodes in /dev...69ca # [1202421.031762] ca systemd[1]: Finished Record System Boot/Shutdown in UTMP.70server # [1202420.967080] server systemd-journald[72]: Time spent on flushing to /var/log/journal/3ce9da3f18e4403186f8164fa2b31b27 is 1.978ms for 7 entries.71ca # [1202421.040677] ca systemd[1]: Finished Save Transient machine-id to Disk.72server # [1202420.967080] server systemd-journald[72]: System Journal (/var/log/journal/3ce9da3f18e4403186f8164fa2b31b27) is 8M, max 4G, 3.9G free.73ca # [1202421.040907] ca systemd[1]: Finished Rebuild Journal Catalog.74server # [1202421.002847] server systemd[1]: Finished Flush Journal to Persistent Storage.75ca # [1202421.042602] ca systemd[1]: Starting Update is Completed...76server # [1202421.003992] server systemd[1]: Finished Create Static Device Nodes in /dev.77ca # [1202421.054690] ca systemd[1]: Finished Update is Completed.78server # [1202421.005570] server systemd[1]: Reached target Preparation for Local File Systems.79ca # [1202421.058758] ca systemd[1]: Finished Firewall.80server # [1202421.005715] server systemd[1]: Reached target Local File Systems.81ca # [1202421.058942] ca systemd[1]: Reached target Preparation for Network.82server # [1202421.006938] server systemd[1]: Listening on Boot Loader Control Service Socket.83ca # [1202421.059218] ca systemd[1]: Listening on Network Management Resolve Hook Socket.84server # [1202421.007175] server systemd[1]: Update Boot Loader Random Seed skipped, unmet condition check ConditionVirtualization=!container85ca # [1202421.060431] ca systemd[1]: Starting Network Management...86server # [1202421.008336] server systemd[1]: Starting Save Transient machine-id to Disk...87ca # [1202421.746418] ca systemd-networkd[199]: Failed to increase receive buffer size for general netlink socket, ignoring: Operation not permitted88server # [1202421.009245] server systemd[1]: Starting Create System Files and Directories...89ca # [1202421.746511] ca systemd-networkd[199]: Failed to increase receive buffer size for nftables netlink socket, ignoring: Operation not permitted90server # [1202421.009286] server systemd[1]: Rule-based Manager for Device Events and Files skipped, unmet condition check ConditionPathIsReadWrite=/sys91ca # [1202421.756672] ca systemd-networkd[199]: /etc/systemd/network/99-ethernet-default-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section.92server # [1202421.025905] server systemd-tmpfiles[152]: Cannot set file attributes for '/var/empty', value=0x00000010, mask=0x00000010, ignoring: Operation not permitted93ca # [1202421.756838] ca systemd-networkd[199]: /etc/systemd/network/99-wireless-client-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section.94server # [1202421.026094] server systemd-tmpfiles[152]: fchmod() of /var/log/journal failed: Operation not permitted95ca # [1202421.756988] ca systemd-networkd[199]: lo: Link UP96server # [1202421.026224] server systemd-tmpfiles[152]: fchmod() of /var/log/journal/3ce9da3f18e4403186f8164fa2b31b27 failed: Operation not permitted97ca # [1202421.756993] ca systemd-networkd[199]: lo: Gained carrier98server # [1202421.026418] server systemd-tmpfiles[152]: fchmod() of /run/log/journal failed: Operation not permitted99ca # [1202421.757180] ca systemd-networkd[199]: eth1: Configuring with /etc/systemd/network/40-eth1.network.100client # [1202420.888185] client systemd-journald[72]: Journal started101server # [1202421.030748] server systemd[1]: Finished Create System Files and Directories.102ca # [1202421.757540] ca systemd[1]: Started Network Management.103server # [1202421.031930] server systemd[1]: Starting Rebuild Journal Catalog...104ca # [1202421.757616] ca systemd-networkd[199]: eth1: Link UP105client # [1202420.888242] client systemd-journald[72]: Runtime Journal (/run/log/journal/bf2010466ebe4508837abdf2d2c7df59) is 8M, max 2.5G, 2.4G free.106server # [1202421.032742] server systemd[1]: Starting Record System Boot/Shutdown in UTMP...107ca # [1202421.757927] ca systemd-networkd[199]: eth1: Gained carrier108ca # [1202421.758622] ca systemd[1]: Starting Enable Persistent Storage in systemd-networkd...109client # [1202420.893136] client systemd[1]: Finished Apply Kernel Variables.110server # [1202421.040682] server systemd[1]: Finished Save Transient machine-id to Disk.111ca # [1202421.797666] ca systemd[1]: Finished Enable Persistent Storage in systemd-networkd.112client # [1202420.905382] client systemd[1]: Finished Create Static Device Nodes in /dev gracefully.113server # [1202421.051437] server systemd[1]: Finished Record System Boot/Shutdown in UTMP.114client # [1202420.919470] client systemd[1]: Starting Flush Journal to Persistent Storage...115server # [1202421.054781] server systemd[1]: Finished Rebuild Journal Catalog.116client # [1202420.920283] client systemd[1]: Starting Network Name Resolution...117server # [1202421.056549] server systemd[1]: Starting Update is Completed...118client # [1202420.920942] client systemd[1]: Starting Create Static Device Nodes in /dev...119server # [1202421.067630] server systemd[1]: Finished Update is Completed.120client # [1202420.962718] client systemd-journald[72]: Time spent on flushing to /var/log/journal/bf2010466ebe4508837abdf2d2c7df59 is 1.935ms for 7 entries.121server # [1202421.069613] server systemd[1]: Finished Firewall.122client # [1202420.962718] client systemd-journald[72]: System Journal (/var/log/journal/bf2010466ebe4508837abdf2d2c7df59) is 8M, max 4G, 3.9G free.123server # [1202421.069733] server systemd[1]: Reached target Preparation for Network.124client # [1202420.989559] client systemd[1]: Finished Flush Journal to Persistent Storage.125server # [1202421.070016] server systemd[1]: Listening on Network Management Resolve Hook Socket.126client # [1202420.989997] client systemd[1]: Finished Create Static Device Nodes in /dev.127server # [1202421.071182] server systemd[1]: Starting Network Management...128client # [1202420.991211] client systemd[1]: Reached target Preparation for Local File Systems.129server # [1202421.781528] server systemd-networkd[190]: Failed to increase receive buffer size for general netlink socket, ignoring: Operation not permitted130client # [1202420.991312] client systemd[1]: Reached target Local File Systems.131server # [1202421.781615] server systemd-networkd[190]: Failed to increase receive buffer size for nftables netlink socket, ignoring: Operation not permitted132client # [1202420.992112] client systemd[1]: Listening on Boot Loader Control Service Socket.133server # [1202421.792717] server systemd-networkd[190]: /etc/systemd/network/99-ethernet-default-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section.134client # [1202420.992165] client systemd[1]: Update Boot Loader Random Seed skipped, unmet condition check ConditionVirtualization=!container135server # [1202421.792882] server systemd-networkd[190]: /etc/systemd/network/99-wireless-client-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section.136client # [1202420.993118] client systemd[1]: Starting Save Transient machine-id to Disk...137server # [1202421.793024] server systemd-networkd[190]: lo: Link UP138client # [1202420.993921] client systemd[1]: Starting Create System Files and Directories...139server # [1202421.793028] server systemd-networkd[190]: lo: Gained carrier140client # [1202420.993951] client systemd[1]: Rule-based Manager for Device Events and Files skipped, unmet condition check ConditionPathIsReadWrite=/sys141server # [1202421.793191] server systemd-networkd[190]: eth1: Configuring with /etc/systemd/network/40-eth1.network.142client # [1202421.013130] client systemd-tmpfiles[145]: Cannot set file attributes for '/var/empty', value=0x00000010, mask=0x00000010, ignoring: Operation not permitted143server # [1202421.793658] server systemd[1]: Started Network Management.144client # [1202421.013344] client systemd-tmpfiles[145]: fchmod() of /var/log/journal failed: Operation not permitted145server # [1202421.793658] server systemd-networkd[190]: eth1: Link UP146client # [1202421.013488] client systemd-tmpfiles[145]: fchmod() of /var/log/journal/bf2010466ebe4508837abdf2d2c7df59 failed: Operation not permitted147server # [1202421.793958] server systemd-networkd[190]: eth1: Gained carrier148client # [1202421.013741] client systemd-tmpfiles[145]: fchmod() of /run/log/journal failed: Operation not permitted149server # [1202421.795274] server systemd[1]: Starting Enable Persistent Storage in systemd-networkd...150client # [1202421.015249] client systemd[1]: Finished Create System Files and Directories.151server # [1202421.838074] server systemd[1]: Finished Enable Persistent Storage in systemd-networkd.152client # [1202421.016382] client systemd[1]: Starting Rebuild Journal Catalog...153client # [1202421.017145] client systemd[1]: Starting Record System Boot/Shutdown in UTMP...154client # [1202421.036115] client systemd[1]: Finished Record System Boot/Shutdown in UTMP.155client # [1202421.040691] client systemd[1]: Finished Save Transient machine-id to Disk.156client # [1202421.040950] client systemd[1]: Finished Rebuild Journal Catalog.157client # [1202421.042722] client systemd[1]: Starting Update is Completed...158client # [1202421.053888] client systemd[1]: Finished Update is Completed.159client # [1202421.056185] client systemd[1]: Finished Firewall.160client # [1202421.056387] client systemd[1]: Reached target Preparation for Network.161client # [1202421.056679] client systemd[1]: Listening on Network Management Resolve Hook Socket.162client # [1202421.058003] client systemd[1]: Starting Network Management...163client # [1202421.755633] client systemd-networkd[186]: Failed to increase receive buffer size for general netlink socket, ignoring: Operation not permitted164client # [1202421.755718] client systemd-networkd[186]: Failed to increase receive buffer size for nftables netlink socket, ignoring: Operation not permitted165client # [1202421.767269] client systemd-networkd[186]: /etc/systemd/network/99-ethernet-default-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section.166client # [1202421.767433] client systemd-networkd[186]: /etc/systemd/network/99-wireless-client-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section.167client # [1202421.767583] client systemd-networkd[186]: lo: Link UP168client # [1202421.767588] client systemd-networkd[186]: lo: Gained carrier169client # [1202421.767760] client systemd-networkd[186]: eth1: Configuring with /etc/systemd/network/40-eth1.network.170client # [1202421.768236] client systemd[1]: Started Network Management.171client # [1202421.788256] client systemd-networkd[186]: eth1: Link UP172client # [1202421.788508] client systemd[1]: Starting Enable Persistent Storage in systemd-networkd...173client # [1202421.788549] client systemd-networkd[186]: eth1: Gained carrier174client # [1202421.822025] client systemd[1]: Finished Enable Persistent Storage in systemd-networkd.175client # [1202421.884858] client systemd[1]: etc-machine\x2did.mount: Deactivated successfully.176server # [1202421.883450] server systemd[1]: etc-machine\x2did.mount: Deactivated successfully.177ca # [1202421.890441] ca systemd[1]: etc-machine\x2did.mount: Deactivated successfully.178server # [1202422.156685] server systemd-resolved[123]: Positive Trust Anchors:179server # [1202422.156696] server systemd-resolved[123]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d180server # [1202422.156700] server systemd-resolved[123]: . IN DS 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16181server # [1202422.156735] server systemd-resolved[123]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 170.0.0.192.in-addr.arpa 171.0.0.192.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa ipv4only.arpa resolver.arpa corp home internal intranet lan local private test182server # [1202422.178717] server systemd-resolved[123]: Using system hostname 'server'.183server # [1202422.181046] server systemd[1]: Started Network Name Resolution.184server # [1202422.181165] server systemd[1]: Reached target Network.185server # [1202422.181271] server systemd[1]: Reached target Network is Online.186server # [1202422.181362] server systemd[1]: Reached target System Initialization.187server # [1202422.181734] server systemd[1]: Started Renew ACME Certificate for test.foo.188server # [1202422.181794] server systemd[1]: Discard unused filesystem blocks once a week skipped, unmet condition check ConditionVirtualization=!container189server # [1202422.181841] server systemd[1]: Started Daily Cleanup of Temporary Directories.190server # [1202422.181879] server systemd[1]: Reached target Timer Units.191server # [1202422.182115] server systemd[1]: Listening on D-Bus System Message Bus Socket.192server # [1202422.182321] server systemd[1]: Listening on Nix Daemon Socket.193server # [1202422.182540] server systemd[1]: Listening on Virtual Machine and Container Registration Service Socket.194server # [1202422.182589] server systemd[1]: Reached target Socket Units.195server # [1202422.182670] server systemd[1]: Reached target Basic System.196server # [1202422.185642] server systemd[1]: Starting Set up the ACME certificate renewal infrastructure...197server # [1202422.187140] server systemd[1]: Starting Import lastlog data into lastlog2 database...198server # [1202422.187207] server systemd[1]: nginx-config-reload.service skipped, unmet condition check ConditionPathExists=/var/lib/acme/test.foo/fullchain.pem199server # [1202422.188825] server systemd[1]: Starting Name Service Cache Daemon (nsncd)...200server # [1202422.191186] server systemd[1]: Starting D-Bus System Message Bus...201server # [1202422.251286] server systemd[1]: Finished Import lastlog data into lastlog2 database.202ca # [1202422.195206] ca systemd-resolved[119]: Positive Trust Anchors:203ca # [1202422.195217] ca systemd-resolved[119]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d204ca # [1202422.195219] ca systemd-resolved[119]: . IN DS 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16205ca # [1202422.195255] ca systemd-resolved[119]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 170.0.0.192.in-addr.arpa 171.0.0.192.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa ipv4only.arpa resolver.arpa corp home internal intranet lan local private test206ca # [1202422.217616] ca systemd-resolved[119]: Using system hostname 'ca'.207ca # [1202422.218945] ca systemd[1]: Started Network Name Resolution.208ca # [1202422.219070] ca systemd[1]: Reached target Network.209ca # [1202422.219180] ca systemd[1]: Reached target Network is Online.210ca # [1202422.219274] ca systemd[1]: Reached target System Initialization.211ca # [1202422.219647] ca systemd[1]: Started Renew ACME Certificate for ca.foo.212ca # [1202422.219699] ca systemd[1]: Discard unused filesystem blocks once a week skipped, unmet condition check ConditionVirtualization=!container213ca # [1202422.219747] ca systemd[1]: Started Daily Cleanup of Temporary Directories.214ca # [1202422.219787] ca systemd[1]: Reached target Timer Units.215ca # [1202422.219998] ca systemd[1]: Listening on D-Bus System Message Bus Socket.216ca # [1202422.220232] ca systemd[1]: Listening on Nix Daemon Socket.217ca # [1202422.220454] ca systemd[1]: Listening on Virtual Machine and Container Registration Service Socket.218ca # [1202422.220503] ca systemd[1]: Reached target Socket Units.219ca # [1202422.220591] ca systemd[1]: Reached target Basic System.220ca # [1202422.233550] ca systemd[1]: Starting Set up the ACME certificate renewal infrastructure...221ca # [1202422.235157] ca systemd[1]: Starting Import lastlog data into lastlog2 database...222ca # [1202422.235225] ca systemd[1]: nginx-config-reload.service skipped, unmet condition check ConditionPathExists=/var/lib/acme/ca.foo/fullchain.pem223ca # [1202422.236720] ca systemd[1]: Starting Name Service Cache Daemon (nsncd)...224ca # [1202422.238634] ca systemd[1]: Starting step-ca service...225ca # [1202422.241062] ca systemd[1]: Starting D-Bus System Message Bus...226ca # [1202422.258018] ca systemd[1]: Finished Import lastlog data into lastlog2 database.227ca # [1202422.437396] ca acme-setup-privileged[204]: + set -euo pipefail228ca # [1202422.437396] ca acme-setup-privileged[204]: + cd /var/lib/acme229ca # [1202422.437396] ca acme-setup-privileged[204]: + chmod -R u=rwX,g=,o= .lego/accounts230ca # [1202422.439320] ca acme-setup-privileged[204]: + chown -R acme .lego/accounts231ca # [1202422.441225] ca acme-setup-privileged[204]: + for fixpath in ca.foo .lego/ca.foo232ca # [1202422.441225] ca acme-setup-privileged[204]: + '[' -d ca.foo ']'233ca # [1202422.441364] ca acme-setup-privileged[204]: + for fixpath in ca.foo .lego/ca.foo234ca # [1202422.441364] ca acme-setup-privileged[204]: + '[' -d .lego/ca.foo ']'235client # [1202422.181131] client systemd-resolved[106]: Positive Trust Anchors:236client # [1202422.181141] client systemd-resolved[106]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d237client # [1202422.181144] client systemd-resolved[106]: . IN DS 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16238client # [1202422.181178] client systemd-resolved[106]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 170.0.0.192.in-addr.arpa 171.0.0.192.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa ipv4only.arpa resolver.arpa corp home internal intranet lan local private test239client # [1202422.203579] client systemd-resolved[106]: Using system hostname 'client'.240client # [1202422.204975] client systemd[1]: Started Network Name Resolution.241client # [1202422.205097] client systemd[1]: Reached target Network.242client # [1202422.205218] client systemd[1]: Reached target System Initialization.243client # [1202422.205309] client systemd[1]: Discard unused filesystem blocks once a week skipped, unmet condition check ConditionVirtualization=!container244client # [1202422.205358] client systemd[1]: Started Daily Cleanup of Temporary Directories.245client # [1202422.205398] client systemd[1]: Reached target Timer Units.246client # [1202422.205622] client systemd[1]: Listening on D-Bus System Message Bus Socket.247client # [1202422.205835] client systemd[1]: Listening on Nix Daemon Socket.248client # [1202422.206055] client systemd[1]: Listening on Virtual Machine and Container Registration Service Socket.249client # [1202422.206104] client systemd[1]: Reached target Socket Units.250client # [1202422.206179] client systemd[1]: Reached target Basic System.251client # [1202422.233288] client systemd[1]: Starting Import lastlog data into lastlog2 database...252client # [1202422.234793] client systemd[1]: Starting Name Service Cache Daemon (nsncd)...253client # [1202422.237202] client systemd[1]: Starting D-Bus System Message Bus...254client # [1202422.256358] client systemd[1]: Finished Import lastlog data into lastlog2 database.255client # [1202422.482935] client systemd[1]: Started Name Service Cache Daemon (nsncd).256server # [1202422.449034] server acme-setup-privileged[195]: + set -euo pipefail257server # [1202422.449034] server acme-setup-privileged[195]: + cd /var/lib/acme258server # [1202422.449034] server acme-setup-privileged[195]: + chmod -R u=rwX,g=,o= .lego/accounts259server # [1202422.450876] server acme-setup-privileged[195]: + chown -R acme .lego/accounts260server # [1202422.452862] server acme-setup-privileged[195]: + for fixpath in test.foo .lego/test.foo261server # [1202422.452943] server acme-setup-privileged[195]: + '[' -d test.foo ']'262server # [1202422.452943] server acme-setup-privileged[195]: + for fixpath in test.foo .lego/test.foo263server # [1202422.452943] server acme-setup-privileged[195]: + '[' -d .lego/test.foo ']'264server # [1202422.492298] server nsncd[197]: Sep 18 05:27:22.478 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket"265server # [1202422.492691] server systemd[1]: Started Name Service Cache Daemon (nsncd).266server # [1202422.492933] server systemd[1]: Reached target Host and Network Name Lookups.267server # [1202422.493048] server systemd[1]: Reached target User and Group Name Lookups.268server # [1202422.495016] server systemd[1]: Starting User Login Management...269server # [1202422.496377] server systemd[1]: Starting Permit User Sessions...270server # [1202422.507517] server systemd[1]: Finished Permit User Sessions.271server # [1202422.509231] server systemd[1]: Started Console Getty.272server # [1202422.509283] server systemd[1]: Getty on tty1 skipped, unmet condition check ConditionPathExists=/dev/tty0273server # [1202422.509307] server systemd[1]: Reached target Login Prompts.274server # [1202422.753974] server dbus-broker-launch[198]: Looking up NSS user entry for 'systemd-timesync'...275client # [1202422.483306] client nsncd[192]: Sep 18 05:27:22.468 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket"276client # [1202422.483041] client systemd[1]: Reached target Host and Network Name Lookups.277client # [1202422.483152] client systemd[1]: Reached target User and Group Name Lookups.278client # [1202422.494163] client systemd[1]: Starting User Login Management...279client # [1202422.495654] client systemd[1]: Starting Permit User Sessions...280client # [1202422.507633] client systemd[1]: Finished Permit User Sessions.281client # [1202422.509297] client systemd[1]: Started Console Getty.282client # [1202422.509353] client systemd[1]: Getty on tty1 skipped, unmet condition check ConditionPathExists=/dev/tty0283client # [1202422.509381] client systemd[1]: Reached target Login Prompts.284client # [1202422.695343] client dbus-broker-launch[193]: Looking up NSS user entry for 'systemd-timesync'...285client # [1202422.696782] client dbus-broker-launch[193]: NSS returned no entry for 'systemd-timesync'286client # [1202422.696782] client dbus-broker-launch[193]: Invalid user-name in /nix/store/g0a3fan1ykqwgcwicjzjgnwxr95dlfi7-system-path/share/dbus-1/system.d/org.freedesktop.timesync1.conf +16: user="systemd-timesync"287client # [1202422.698071] client systemd[1]: Started D-Bus System Message Bus.288client # [1202422.704927] client dbus-broker-launch[193]: Ready289ca: must succeed: systemctl restart acme-order-renew-ca.foo.service 290ca # [1202422.497460] ca systemd[1]: Started Name Service Cache Daemon (nsncd).291ca # [1202422.497577] ca systemd[1]: Reached target Host and Network Name Lookups.292ca # [1202422.497693] ca nsncd[206]: Sep 18 05:27:22.483 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket"293ca # [1202422.497685] ca systemd[1]: Reached target User and Group Name Lookups.294ca # [1202422.499698] ca systemd[1]: Starting User Login Management...295ca # [1202422.501005] ca systemd[1]: Starting Permit User Sessions...296ca # [1202422.511643] ca systemd[1]: Finished Permit User Sessions.297ca # [1202422.513343] ca systemd[1]: Started Console Getty.298ca # [1202422.513423] ca systemd[1]: Getty on tty1 skipped, unmet condition check ConditionPathExists=/dev/tty0299ca # [1202422.513464] ca systemd[1]: Reached target Login Prompts.300ca # [1202422.688718] ca dbus-broker-launch[208]: Looking up NSS user entry for 'systemd-timesync'...301ca # [1202422.690308] ca dbus-broker-launch[208]: NSS returned no entry for 'systemd-timesync'302ca # [1202422.690308] ca dbus-broker-launch[208]: Invalid user-name in /nix/store/bh2gmvmbmbp0nqf3m5qaqnfjair6v85q-system-path/share/dbus-1/system.d/org.freedesktop.timesync1.conf +16: user="systemd-timesync"303ca # [1202422.691775] ca systemd[1]: Started D-Bus System Message Bus.304ca # [1202422.700200] ca dbus-broker-launch[208]: Ready305server # [1202422.754878] server dbus-broker-launch[198]: NSS returned no entry for 'systemd-timesync'306server # [1202422.754878] server dbus-broker-launch[198]: Invalid user-name in /nix/store/zzss1678mb50nlwag2hiw11lg128jpl3-system-path/share/dbus-1/system.d/org.freedesktop.timesync1.conf +16: user="systemd-timesync"307server # [1202422.756105] server systemd[1]: Started D-Bus System Message Bus.308server # [1202422.768577] server dbus-broker-launch[198]: Ready309client # [1202423.104134] client systemd-networkd[186]: eth1: Gained IPv6LL310server # [1202423.366604] server systemd-logind[222]: New seat seat0.311server # [1202423.366787] server systemd[1]: Started User Login Management.312server # [1202423.368894] server systemd[1]: Starting linger-users.service...313server # [1202423.414498] server systemd[1]: linger-users.service: Deactivated successfully.314server # [1202423.414760] server systemd[1]: Finished linger-users.service.315server # [1202423.463739] server acme-setup-start[211]: + set -euo pipefail316server # [1202423.463739] server acme-setup-start[211]: + test -e ca/key.pem317server # [1202423.464378] server acme-setup-start[211]: + minica --ca-key ca/key.pem --ca-cert ca/cert.pem --domains selfsigned.local318server # [1202423.487521] server systemd[1]: Finished Set up the ACME certificate renewal infrastructure.319server # [1202423.490326] server systemd[1]: Starting Ensure certificate for test.foo...320ca # [1202423.383132] ca systemd-logind[238]: New seat seat0.321ca # [1202423.383345] ca systemd[1]: Started User Login Management.322ca # [1202423.404771] ca systemd[1]: Starting linger-users.service...323ca # [1202423.418551] ca systemd[1]: linger-users.service: Deactivated successfully.324ca # [1202423.418642] ca systemd[1]: Finished linger-users.service.325ca # [1202423.459454] ca acme-setup-start[222]: + set -euo pipefail326ca # [1202423.459454] ca acme-setup-start[222]: + test -e ca/key.pem327ca # [1202423.459870] ca acme-setup-start[222]: + minica --ca-key ca/key.pem --ca-cert ca/cert.pem --domains selfsigned.local328ca # [1202423.486642] ca systemd[1]: Finished Set up the ACME certificate renewal infrastructure.329ca # [1202423.488401] ca systemd[1]: Starting Ensure certificate for ca.foo...330client # [1202423.383799] client systemd-logind[208]: New seat seat0.331client # [1202423.383985] client systemd[1]: Started User Login Management.332client # [1202423.404672] client systemd[1]: Starting linger-users.service...333client # [1202423.419149] client systemd[1]: linger-users.service: Deactivated successfully.334client # [1202423.419302] client systemd[1]: Finished linger-users.service.335client # [1202423.420122] client systemd[1]: Reached target Multi-User System.336client # [1202423.420488] client systemd[1]: Startup finished in 3.013s.337ca # [1202423.680757] ca step-ca[207]: badger 2026/09/18 05:27:23 INFO: All 0 tables opened in 0s338ca # [1202423.685740] ca step-ca[207]: 2026/09/18 05:27:23 Building new tls configuration using step-ca x509 Signer Interface339ca # [1202423.691619] ca step-ca[207]: 2026/09/18 05:27:23 Starting Smallstep CA/0.30.2 (linux/arm64)340ca # [1202423.691619] ca step-ca[207]: 2026/09/18 05:27:23 Documentation: https://u.step.sm/docs/ca341ca # [1202423.691619] ca step-ca[207]: 2026/09/18 05:27:23 Community Discord: https://u.step.sm/discord342ca # [1202423.691619] ca step-ca[207]: 2026/09/18 05:27:23 Config file: /etc/smallstep/ca.json343ca # [1202423.691619] ca step-ca[207]: 2026/09/18 05:27:23 The primary server URL is https://ca.foo:1443344ca # [1202423.691619] ca step-ca[207]: 2026/09/18 05:27:23 Root certificates are available at https://ca.foo:1443/roots.pem345ca # [1202423.691942] ca step-ca[207]: 2026/09/18 05:27:23 X.509 Root Fingerprint: 73a51e13ceeb202e4a617c48c0cd308f9567bdcba2ae26dbaab91234245a452e346ca # [1202423.691997] ca systemd[1]: Started step-ca service.347ca # [1202423.692378] ca step-ca[207]: 2026/09/18 05:27:23 Serving HTTPS on 0.0.0.0:1443 ...348ca # [1202423.748127] ca systemd-networkd[199]: eth1: Gained IPv6LL349server # [1202423.808211] server systemd-networkd[190]: eth1: Gained IPv6LL350server # [1202424.425232] server acme-test.foo-start[248]: Waiting to acquire lock in /run/acme/351server # [1202424.429121] server acme-test.foo-start[248]: + '[' -e out/acme-success ']'352server # [1202424.429209] server acme-test.foo-start[248]: + minica --ca-cert=ca/cert.pem --ca-key=ca/key.pem --domains=test.foo --ip-addresses=353server # [1202424.444349] server acme-test.foo-start[258]: + cd test.foo354server # [1202424.444788] server acme-test.foo-start[258]: + cp -vp cert.pem ../out/cert.pem355server # [1202424.446300] server acme-test.foo-start[259]: 'cert.pem' -> '../out/cert.pem'356server # [1202424.446634] server acme-test.foo-start[258]: + cp -vp key.pem ../out/key.pem357server # [1202424.447960] server acme-test.foo-start[258]: 'key.pem' -> '../out/key.pem'358server # [1202424.448432] server acme-test.foo-start[248]: + cat out/cert.pem ca/cert.pem359server # [1202424.450164] server acme-test.foo-start[248]: + cp ca/cert.pem out/chain.pem360server # [1202424.451938] server acme-test.foo-start[248]: + cat out/key.pem out/fullchain.pem361server # [1202424.453878] server acme-test.foo-start[248]: + for fixpath in out certificates362server # [1202424.453878] server acme-test.foo-start[248]: + '[' -d out ']'363server # [1202424.453996] server acme-test.foo-start[248]: + chmod -R u=rwX,g=rX,o= out364server # [1202424.455591] server acme-test.foo-start[248]: + chown -R acme:nginx out365server # [1202424.459630] server acme-test.foo-start[248]: + for fixpath in out certificates366server # [1202424.459630] server acme-test.foo-start[248]: + '[' -d certificates ']'367server # [1202424.464520] server systemd[1]: Finished Ensure certificate for test.foo.368server # [1202424.466960] server systemd[1]: Starting Nginx Web Server...369ca # [1202424.451717] ca acme-ca.foo-start[258]: Waiting to acquire lock in /run/acme/370ca # [1202424.455451] ca acme-ca.foo-start[258]: + '[' -e out/acme-success ']'371ca # [1202424.455542] ca acme-ca.foo-start[258]: + minica --ca-cert=ca/cert.pem --ca-key=ca/key.pem --domains=ca.foo --ip-addresses=372ca # [1202424.470427] ca acme-ca.foo-start[296]: + cd ca.foo373ca # [1202424.470978] ca acme-ca.foo-start[296]: + cp -vp cert.pem ../out/cert.pem374ca # [1202424.472280] ca acme-ca.foo-start[297]: 'cert.pem' -> '../out/cert.pem'375ca # [1202424.472617] ca acme-ca.foo-start[296]: + cp -vp key.pem ../out/key.pem376ca # [1202424.474074] ca acme-ca.foo-start[296]: 'key.pem' -> '../out/key.pem'377ca # [1202424.474374] ca acme-ca.foo-start[258]: + cat out/cert.pem ca/cert.pem378ca # [1202424.476391] ca acme-ca.foo-start[258]: + cp ca/cert.pem out/chain.pem379ca # [1202424.478198] ca acme-ca.foo-start[258]: + cat out/key.pem out/fullchain.pem380ca # [1202424.480349] ca acme-ca.foo-start[258]: + for fixpath in out certificates381ca # [1202424.480349] ca acme-ca.foo-start[258]: + '[' -d out ']'382ca # [1202424.480455] ca acme-ca.foo-start[258]: + chmod -R u=rwX,g=rX,o= out383ca # [1202424.481938] ca acme-ca.foo-start[258]: + chown -R acme:nginx out384ca # [1202424.485601] ca acme-ca.foo-start[258]: + for fixpath in out certificates385ca # [1202424.485658] ca acme-ca.foo-start[258]: + '[' -d certificates ']'386ca # [1202424.516246] ca systemd[1]: Finished Ensure certificate for ca.foo.387ca # [1202424.518158] ca systemd[1]: Starting Nginx Web Server...388ca # [1202425.432871] ca nginx-pre-start[308]: nginx: the configuration file /nix/store/9xdq48zsmbzh971fy8df0q5bz7cca117-nginx.conf syntax is ok389ca # [1202425.433384] ca nginx-pre-start[308]: nginx: configuration file /nix/store/9xdq48zsmbzh971fy8df0q5bz7cca117-nginx.conf test is successful390ca # [1202425.441049] ca systemd[1]: Started Nginx Web Server.391ca # [1202425.441815] ca systemd[1]: Reached target Multi-User System.392ca # [1202425.468740] ca systemd[1]: Starting Order (and renew) ACME certificate for ca.foo...393server # [1202425.429140] server nginx-pre-start[270]: nginx: the configuration file /nix/store/bw9jgq9jgvw8ia747pppjhkzskqcy6wl-nginx.conf syntax is ok394server # [1202425.429748] server nginx-pre-start[270]: nginx: configuration file /nix/store/bw9jgq9jgvw8ia747pppjhkzskqcy6wl-nginx.conf test is successful395server # [1202425.434934] server systemd[1]: Started Nginx Web Server.396server # [1202425.436450] server systemd[1]: Reached target Multi-User System.397server # [1202425.438987] server systemd[1]: Starting Order (and renew) ACME certificate for test.foo...398ca # [1202426.403366] ca acme-order-renew-ca.foo-start[311]: Waiting to acquire lock in /run/acme/399ca # [1202426.407047] ca acme-order-renew-ca.foo-start[311]: + set -euo pipefail400ca # [1202426.407126] ca acme-order-renew-ca.foo-start[311]: + exec401ca # [1202426.407193] ca acme-order-renew-ca.foo-start[311]: + /nix/store/fxkh6pl0y4nfbhdqdnhfkvsq7pbxq655-flock-0.4.0/bin/flock 11402ca # [1202426.408704] ca acme-order-renew-ca.foo-start[323]: ++ find accounts -path '*/keys/*.key' -print -quit403ca # [1202426.412528] ca acme-order-renew-ca.foo-start[311]: + '[' -n '' ']'404ca # [1202426.412613] ca acme-order-renew-ca.foo-start[311]: + exec405ca # [1202426.412664] ca acme-order-renew-ca.foo-start[311]: + '[' -e certificates/ca.foo.key ']'406ca # [1202426.412664] ca acme-order-renew-ca.foo-start[311]: + lego run --accept-tos --path . --email none@none.tld --http --http.webroot /var/lib/acme/acme-challenge --server https://ca.foo:1443/acme/acme/directory --key-type ec256 -d ca.foo --no-random-sleep --renew-force --ari-disable --force-cert-domains407ca # [1202426.447981] ca acme-order-renew-ca.foo-start[324]: 2026-09-18T05:27:26.433753290Z INFO Private key saved. filepath=accounts/ca.foo_1443/none@none.tld/none@none.tld.key408ca # [1202426.481408] ca step-ca[207]: time="2026-09-18T05:27:26Z" level=info duration="156.602µs" duration-ns=156602 fields.time="2026-09-18T05:27:26Z" method=GET name=ca path=/acme/acme/directory protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=e613e920-a16a-4378-ad60-108362dfc483 response="{\"newNonce\":\"https://ca.foo:1443/acme/acme/new-nonce\",\"newAccount\":\"https://ca.foo:1443/acme/acme/new-account\",\"newOrder\":\"https://ca.foo:1443/acme/acme/new-order\",\"revokeCert\":\"https://ca.foo:1443/acme/acme/revoke-cert\",\"keyChange\":\"https://ca.foo:1443/acme/acme/key-change\"}" size=277 status=200 user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; arm64)" user-id=409ca # [1202426.481973] ca acme-order-renew-ca.foo-start[324]: 2026-09-18T05:27:26.467759952Z INFO Registering the account. email=none@none.tld410ca # [1202426.483855] ca step-ca[207]: time="2026-09-18T05:27:26Z" level=info duration=1.595742ms duration-ns=1595742 fields.time="2026-09-18T05:27:26Z" method=HEAD name=ca nonce=QXZpYnFCWjFDQ3dtT3M4Y0hPT0F3S1BzOWVEQ0N0SHU path=/acme/acme/new-nonce protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=1f3b739c-43ef-47ea-b005-4ed08eed3203 size=0 status=200 user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; arm64)" user-id=411ca # [1202426.487619] ca step-ca[207]: time="2026-09-18T05:27:26Z" level=info duration=2.793558ms duration-ns=2793558 fields.time="2026-09-18T05:27:26Z" method=POST name=ca nonce=bnh0Y2VldEk5TFpvN2hRSk1PSnp2Rk95VmFQM2J0Zm8 path=/acme/acme/new-account protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=fa890111-8e77-45a7-8725-fc3c42de8098 response="{\"contact\":[\"mailto:none@none.tld\"],\"status\":\"valid\",\"orders\":\"https://ca.foo:1443/acme/acme/account/nQCHGK9vME1UG7VoGurTewxIlTPXEcBI/orders\"}" size=143 status=201 user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; arm64)" user-id=412ca # [1202426.488400] ca acme-order-renew-ca.foo-start[324]: 2026-09-18T05:27:26.474209640Z WARN !!!! HEADS UP !!!!413ca # [1202426.488400] ca acme-order-renew-ca.foo-start[324]: Your account credentials have been saved in your414ca # [1202426.488400] ca acme-order-renew-ca.foo-start[324]: configuration directory at "accounts".415ca # [1202426.488400] ca acme-order-renew-ca.foo-start[324]: You should make a secure backup of this folder now. This416ca # [1202426.488400] ca acme-order-renew-ca.foo-start[324]: configuration directory will also contain private keys417ca # [1202426.488400] ca acme-order-renew-ca.foo-start[324]: generated by lego and certificates obtained from the ACME418ca # [1202426.488400] ca acme-order-renew-ca.foo-start[324]: server. Making regular backups of this folder is ideal.419ca # [1202426.490884] ca acme-order-renew-ca.foo-start[324]: 2026-09-18T05:27:26.476686074Z INFO Obtaining bundled SAN certificate. domains=ca.foo420ca # [1202426.498390] ca step-ca[207]: time="2026-09-18T05:27:26Z" level=info duration=4.834346ms duration-ns=4834346 fields.time="2026-09-18T05:27:26Z" method=POST name=ca nonce=dVdjdWpyZFNpRHJrSXpWdmt1R1EyV0MwTkIxSnlJNTc path=/acme/acme/new-order protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=ef9d4772-ae42-4f75-8106-8c7c8288011d response="{\"id\":\"ZHfkOkHawHQY5hZw5V8qVSY5F00Y6qqQ\",\"status\":\"pending\",\"expires\":\"2026-09-19T05:27:26Z\",\"identifiers\":[{\"type\":\"dns\",\"value\":\"ca.foo\"}],\"notBefore\":\"2026-09-18T05:26:26Z\",\"notAfter\":\"2026-12-17T05:27:26Z\",\"authorizations\":[\"https://ca.foo:1443/acme/acme/authz/7ITJnG2oIXPBVVPEnvPafclRI1Ce0DFz\"],\"finalize\":\"https://ca.foo:1443/acme/acme/order/ZHfkOkHawHQY5hZw5V8qVSY5F00Y6qqQ/finalize\"}" size=392 status=201 user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; arm64)" user-id=421ca # [1202426.563240] ca step-ca[207]: time="2026-09-18T05:27:26Z" level=info duration=2.141389ms duration-ns=2141389 fields.time="2026-09-18T05:27:26Z" method=POST name=ca nonce=UEU1cUVDTDZsTGNrbXkzZUFzeWtLbGNqR1dTbHYwQXM path=/acme/acme/authz/7ITJnG2oIXPBVVPEnvPafclRI1Ce0DFz protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=2dfb390d-e2d4-4e44-be98-02413058521d response="{\"identifier\":{\"type\":\"dns\",\"value\":\"ca.foo\"},\"status\":\"pending\",\"challenges\":[{\"type\":\"dns-01\",\"status\":\"pending\",\"token\":\"OVbyv3GWTR2MZ6TSc45QVhhVdUfsjBS4\",\"url\":\"https://ca.foo:1443/acme/acme/challenge/7ITJnG2oIXPBVVPEnvPafclRI1Ce0DFz/kNhniSnp2XzLuIIoQxh6DiWIEvqlRTy2\"},{\"type\":\"http-01\",\"status\":\"pending\",\"token\":\"OVbyv3GWTR2MZ6TSc45QVhhVdUfsjBS4\",\"url\":\"https://ca.foo:1443/acme/acme/challenge/7ITJnG2oIXPBVVPEnvPafclRI1Ce0DFz/u2zCJGAUR5mLZsNNQE7w37TG0bK7YEdj\"},{\"type\":\"tls-alpn-01\",\"status\":\"pending\",\"token\":\"OVbyv3GWTR2MZ6TSc45QVhhVdUfsjBS4\",\"url\":\"https://ca.foo:1443/acme/acme/challenge/7ITJnG2oIXPBVVPEnvPafclRI1Ce0DFz/7CTu6cRQ7CpMsDwG09rQe9GKtdXfwnZ0\"}],\"wildcard\":false,\"expires\":\"2026-09-19T05:27:26Z\"}" size=719 status=200 user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; arm64)" user-id=422ca # [1202426.563660] ca acme-order-renew-ca.foo-start[324]: 2026-09-18T05:27:26.549455863Z INFO Use solver. domain=ca.foo type=http-01423ca # [1202426.563745] ca acme-order-renew-ca.foo-start[324]: 2026-09-18T05:27:26.549511224Z INFO http01: Trying to solve HTTP-01. domain=ca.foo424ca # [1202426.570194] ca step-ca[207]: time="2026-09-18T05:27:26Z" level=info duration=5.424634ms duration-ns=5424634 fields.time="2026-09-18T05:27:26Z" method=POST name=ca nonce=aDVMekdQaWZYNHVVU2FndWM4MFRpY0ZxNDZtRzBheFk path=/acme/acme/challenge/7ITJnG2oIXPBVVPEnvPafclRI1Ce0DFz/u2zCJGAUR5mLZsNNQE7w37TG0bK7YEdj protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=bb74de4f-083a-47f9-a103-ab862cc890a8 response="{\"type\":\"http-01\",\"status\":\"valid\",\"token\":\"OVbyv3GWTR2MZ6TSc45QVhhVdUfsjBS4\",\"validated\":\"2026-09-18T05:27:26Z\",\"url\":\"https://ca.foo:1443/acme/acme/challenge/7ITJnG2oIXPBVVPEnvPafclRI1Ce0DFz/u2zCJGAUR5mLZsNNQE7w37TG0bK7YEdj\"}" size=228 status=200 user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; arm64)" user-id=425ca # [1202426.570585] ca acme-order-renew-ca.foo-start[324]: 2026-09-18T05:27:26.556380917Z INFO The server validated our request. domain=ca.foo426ca # [1202426.570718] ca acme-order-renew-ca.foo-start[324]: 2026-09-18T05:27:26.556528559Z INFO Validations succeeded; requesting certificates. domains=ca.foo427ca # [1202426.581389] ca step-ca[207]: time="2026-09-18T05:27:26Z" level=info duration=8.912441ms duration-ns=8912441 fields.time="2026-09-18T05:27:26Z" method=POST name=ca nonce=TjNpdDRIYXdjVkZrT2ttVU9wQjIzakNVQ09hWTlWRWI path=/acme/acme/order/ZHfkOkHawHQY5hZw5V8qVSY5F00Y6qqQ/finalize protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=7cf557dd-bd46-4163-b181-92e8e4469908 response="{\"id\":\"ZHfkOkHawHQY5hZw5V8qVSY5F00Y6qqQ\",\"status\":\"valid\",\"expires\":\"2026-09-19T05:27:26Z\",\"identifiers\":[{\"type\":\"dns\",\"value\":\"ca.foo\"}],\"notBefore\":\"2026-09-18T05:26:26Z\",\"notAfter\":\"2026-12-17T05:27:26Z\",\"authorizations\":[\"https://ca.foo:1443/acme/acme/authz/7ITJnG2oIXPBVVPEnvPafclRI1Ce0DFz\"],\"finalize\":\"https://ca.foo:1443/acme/acme/order/ZHfkOkHawHQY5hZw5V8qVSY5F00Y6qqQ/finalize\",\"certificate\":\"https://ca.foo:1443/acme/acme/certificate/AWJeK0JD3fjleWfMYQ2igWuzic4GW0ZS\"}" size=481 status=200 user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; arm64)" user-id=428ca # [1202426.584426] ca step-ca[207]: time="2026-09-18T05:27:26Z" level=info certificate="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" duration=2.067828ms duration-ns=2067828 fields.time="2026-09-18T05:27:26Z" issuer="Clan Intermediate CA" method=POST name=ca nonce=dlM0RVViMmVjV0VlWVJHNXlUMWxuRlg5WDJoSzNkTnQ path=/acme/acme/certificate/AWJeK0JD3fjleWfMYQ2igWuzic4GW0ZS protocol=HTTP/1.1 provisioner=acme public-key="ECDSA P-256" referer= remote-address="2001:db8:1::1" request-id=078c431c-43f9-45dd-89f9-60bf5c224f78 sans="map[dns:[ca.foo]]" serial=245651126303092358815632273339586290797 size=1344 status=200 subject=ca.foo user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; arm64)" user-id= valid-from="2026-09-18T05:26:26Z" valid-to="2026-12-17T05:27:26Z"429ca # [1202426.584794] ca acme-order-renew-ca.foo-start[324]: 2026-09-18T05:27:26.570590710Z INFO Server responded with a certificate. domains=ca.foo430ca # [1202426.584880] ca acme-order-renew-ca.foo-start[324]: 2026-09-18T05:27:26.570696872Z INFO Writing file. filepath=certificates/ca.foo.crt431ca # [1202426.585044] ca acme-order-renew-ca.foo-start[324]: 2026-09-18T05:27:26.570854154Z INFO Writing file. filepath=certificates/ca.foo.issuer.crt432ca # [1202426.585125] ca acme-order-renew-ca.foo-start[324]: 2026-09-18T05:27:26.570938355Z INFO Writing file. filepath=certificates/ca.foo.key433ca # [1202426.585299] ca acme-order-renew-ca.foo-start[324]: 2026-09-18T05:27:26.571110877Z INFO Writing file. filepath=certificates/ca.foo.json434ca # [1202426.591269] ca acme-order-renew-ca.foo-start[311]: + touch out/acme-success435ca # [1202426.593370] ca acme-order-renew-ca.foo-start[311]: + cmp -s certificates/ca.foo.crt out/fullchain.pem436ca # [1202426.595255] ca acme-order-renew-ca.foo-start[311]: + touch out/renewed437ca # [1202426.597238] ca acme-order-renew-ca.foo-start[311]: + echo Installing new certificate438ca # [1202426.597238] ca acme-order-renew-ca.foo-start[311]: Installing new certificate439ca # [1202426.597238] ca acme-order-renew-ca.foo-start[311]: + cp -vp certificates/ca.foo.crt out/fullchain.pem440ca # [1202426.599096] ca acme-order-renew-ca.foo-start[355]: 'certificates/ca.foo.crt' -> 'out/fullchain.pem'441ca # [1202426.599464] ca acme-order-renew-ca.foo-start[311]: + cp -vp certificates/ca.foo.key out/key.pem442ca # [1202426.600985] ca acme-order-renew-ca.foo-start[356]: 'certificates/ca.foo.key' -> 'out/key.pem'443ca # [1202426.601296] ca acme-order-renew-ca.foo-start[311]: + cp -vp certificates/ca.foo.issuer.crt out/chain.pem444ca # [1202426.603200] ca acme-order-renew-ca.foo-start[357]: 'certificates/ca.foo.issuer.crt' -> 'out/chain.pem'445ca # [1202426.603518] ca acme-order-renew-ca.foo-start[311]: + ln -sf fullchain.pem out/cert.pem446ca # [1202426.605257] ca acme-order-renew-ca.foo-start[311]: + cat out/key.pem out/fullchain.pem447ca # [1202426.607211] ca acme-order-renew-ca.foo-start[311]: + for fixpath in out certificates448ca # [1202426.607265] ca acme-order-renew-ca.foo-start[311]: + '[' -d out ']'449ca # [1202426.607265] ca acme-order-renew-ca.foo-start[311]: + chmod -R u=rwX,g=rX,o= out450ca # [1202426.609205] ca acme-order-renew-ca.foo-start[311]: + chown -R acme:nginx out451ca # [1202426.612267] ca acme-order-renew-ca.foo-start[311]: + for fixpath in out certificates452ca # [1202426.612267] ca acme-order-renew-ca.foo-start[311]: + '[' -d certificates ']'453ca # [1202426.612361] ca acme-order-renew-ca.foo-start[311]: + chmod -R u=rwX,g=rX,o= certificates454ca # [1202426.613958] ca acme-order-renew-ca.foo-start[311]: + chown -R acme:nginx certificates455ca # [1202426.617007] ca acme-order-renew-ca.foo-start[311]: + chmod -R u=rwX,g=,o= accounts/.456server # [1202426.408217] server acme-order-renew-test.foo-start[273]: Waiting to acquire lock in /run/acme/457server # [1202426.411935] server acme-order-renew-test.foo-start[273]: + set -euo pipefail458server # [1202426.412053] server acme-order-renew-test.foo-start[273]: + exec459server # [1202426.412111] server acme-order-renew-test.foo-start[273]: + /nix/store/fxkh6pl0y4nfbhdqdnhfkvsq7pbxq655-flock-0.4.0/bin/flock 11460server # [1202426.414001] server acme-order-renew-test.foo-start[285]: ++ find accounts -path '*/keys/*.key' -print -quit461server # [1202426.417136] server acme-order-renew-test.foo-start[273]: + '[' -n '' ']'462server # [1202426.417224] server acme-order-renew-test.foo-start[273]: + exec463server # [1202426.417277] server acme-order-renew-test.foo-start[273]: + '[' -e certificates/test.foo.key ']'464server # [1202426.417277] server acme-order-renew-test.foo-start[273]: + lego run --accept-tos --path . --email none@none.tld --http --http.webroot /var/lib/acme/acme-challenge --server https://ca.foo/acme/acme/directory --key-type ec256 -d test.foo --no-random-sleep --renew-force --ari-disable --force-cert-domains465server # [1202426.446182] server acme-order-renew-test.foo-start[286]: 2026-09-18T05:27:26.431968786Z INFO Private key saved. filepath=accounts/ca.foo/none@none.tld/none@none.tld.key466server # [1202426.490660] server acme-order-renew-test.foo-start[286]: 2026-09-18T05:27:26.476445430Z ERROR Error error="registration: set up client: new client: get directory at 'https://ca.foo/acme/acme/directory': unable to communicate with the API server: error: Get \"https://ca.foo/acme/acme/directory\": GET https://ca.foo/acme/acme/directory giving up after 1 attempt(s): Get \"https://ca.foo/acme/acme/directory\": tls: failed to verify certificate: x509: certificate signed by unknown authority"467server # [1202426.491146] server acme-order-renew-test.foo-start[273]: + echo Failed to fetch certificates. This may mean your DNS records are set up incorrectly. Self-signed certs are in place and dependant services will still start.468server # [1202426.491146] server acme-order-renew-test.foo-start[273]: Failed to fetch certificates. This may mean your DNS records are set up incorrectly. Self-signed certs are in place and dependant services will still start.469server # [1202426.491146] server acme-order-renew-test.foo-start[273]: + exit 10470server # [1202426.495669] server systemd[1]: acme-order-renew-test.foo.service: Main process exited, code=exited, status=10/n/a471server # [1202426.495818] server systemd[1]: acme-order-renew-test.foo.service: Failed with result 'exit-code'.472server # [1202426.496179] server systemd[1]: Failed to start Order (and renew) ACME certificate for test.foo.473server # [1202426.496630] server systemd[1]: Startup finished in 6.081s.474server # [1202426.496669] server systemd[1]: acme-order-renew-test.foo.service: Consumed 1.024s CPU time over 1.056s wall clock time.475ca # [1202426.823439] ca systemd[1]: Reloading Nginx Web Server...476ca # [1202426.828308] ca systemd[1]: acme-order-renew-ca.foo.service: Deactivated successfully.477ca # [1202426.828510] ca systemd[1]: Finished Order (and renew) ACME certificate for ca.foo.478ca # [1202426.828713] ca systemd[1]: acme-order-renew-ca.foo.service: Consumed 1.221s CPU time over 1.359s wall clock time.479ca # [1202427.755574] ca nginx[373]: nginx: the configuration file /nix/store/9xdq48zsmbzh971fy8df0q5bz7cca117-nginx.conf syntax is ok480ca # [1202427.756104] ca nginx[373]: nginx: configuration file /nix/store/9xdq48zsmbzh971fy8df0q5bz7cca117-nginx.conf test is successful481ca # [1202428.676158] ca systemd[1]: Reloaded Nginx Web Server.482ca # [1202428.676781] ca systemd[1]: Startup finished in 8.254s.483ca # [1202429.030815] ca systemd[1]: Starting Order (and renew) ACME certificate for ca.foo...484ca # [1202429.982650] ca acme-order-renew-ca.foo-start[388]: Waiting to acquire lock in /run/acme/485ca # [1202429.986060] ca acme-order-renew-ca.foo-start[388]: + set -euo pipefail486ca # [1202429.986132] ca acme-order-renew-ca.foo-start[388]: + exec487ca # [1202429.986183] ca acme-order-renew-ca.foo-start[388]: + /nix/store/fxkh6pl0y4nfbhdqdnhfkvsq7pbxq655-flock-0.4.0/bin/flock 11488ca # [1202429.987799] ca acme-order-renew-ca.foo-start[396]: ++ find accounts -path '*/keys/*.key' -print -quit489ca # [1202429.990897] ca acme-order-renew-ca.foo-start[388]: + '[' -n '' ']'490ca # [1202429.990961] ca acme-order-renew-ca.foo-start[388]: + exec491ca # [1202429.991011] ca acme-order-renew-ca.foo-start[388]: + '[' -e certificates/ca.foo.key ']'492ca # [1202429.991011] ca acme-order-renew-ca.foo-start[388]: + '[' -e certificates/ca.foo.crt ']'493ca # [1202429.991460] ca acme-order-renew-ca.foo-start[397]: ++ find accounts -name none@none.tld.key494ca # [1202429.994688] ca acme-order-renew-ca.foo-start[388]: + '[' -n accounts/ca.foo_1443/none@none.tld/none@none.tld.key ']'495ca # [1202429.994779] ca acme-order-renew-ca.foo-start[388]: + lego run --accept-tos --path . --email none@none.tld --http --http.webroot /var/lib/acme/acme-challenge --server https://ca.foo:1443/acme/acme/directory --key-type ec256 -d ca.foo --no-random-sleep --force-cert-domains496ca # [1202430.014931] ca acme-order-renew-ca.foo-start[398]: 2026-09-18T05:27:30.000717016Z INFO Renewing certificate cert-name=ca.foo497ca # [1202430.046661] ca step-ca[207]: time="2026-09-18T05:27:30Z" level=info duration="83.041µs" duration-ns=83041 fields.time="2026-09-18T05:27:30Z" method=GET name=ca path=/acme/acme/directory protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=837dc6e6-1f07-4b72-a0e1-6bb12b78c866 response="{\"newNonce\":\"https://ca.foo:1443/acme/acme/new-nonce\",\"newAccount\":\"https://ca.foo:1443/acme/acme/new-account\",\"newOrder\":\"https://ca.foo:1443/acme/acme/new-order\",\"revokeCert\":\"https://ca.foo:1443/acme/acme/revoke-cert\",\"keyChange\":\"https://ca.foo:1443/acme/acme/key-change\"}" size=277 status=200 user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; arm64)" user-id=498ca # [1202430.047289] ca acme-order-renew-ca.foo-start[398]: 2026-09-18T05:27:30.032952534Z WARN The server does not advertise a renewal info endpoint. cert-name=ca.foo error="renewalInfo[get/post]: server does not advertise a renewal info endpoint"499ca # [1202430.047289] ca acme-order-renew-ca.foo-start[398]: 2026-09-18T05:27:30.033050575Z INFO Skip renewal: The certificate expires at 2026-12-17T05:27:26Z, the renewal can be performed in 59d23h59m35s966966425ns. cert-name=ca.foo500ca # [1202430.047752] ca acme-order-renew-ca.foo-start[388]: + touch out/acme-success501ca # [1202430.049761] ca acme-order-renew-ca.foo-start[388]: + cmp -s certificates/ca.foo.crt out/fullchain.pem502ca # [1202430.051123] ca acme-order-renew-ca.foo-start[388]: + for fixpath in out certificates503ca # [1202430.051123] ca acme-order-renew-ca.foo-start[388]: + '[' -d out ']'504ca # [1202430.051215] ca acme-order-renew-ca.foo-start[388]: + chmod -R u=rwX,g=rX,o= out505ca # [1202430.053117] ca acme-order-renew-ca.foo-start[388]: + chown -R acme:nginx out506ca # [1202430.055806] ca acme-order-renew-ca.foo-start[388]: + for fixpath in out certificates507ca # [1202430.055860] ca acme-order-renew-ca.foo-start[388]: + '[' -d certificates ']'508ca # [1202430.055860] ca acme-order-renew-ca.foo-start[388]: + chmod -R u=rwX,g=rX,o= certificates509ca # [1202430.057727] ca acme-order-renew-ca.foo-start[388]: + chown -R acme:nginx certificates510ca # [1202430.061108] ca acme-order-renew-ca.foo-start[388]: + chmod -R u=rwX,g=,o= accounts/.511ca: (finished: must succeed: systemctl restart acme-order-renew-ca.foo.service , in 7.42 seconds)512ca # [1202430.265493] ca systemd[1]: acme-order-renew-ca.foo.service: Deactivated successfully.513ca # [1202430.265837] ca systemd[1]: Finished Order (and renew) ACME certificate for ca.foo.514ca # [1202430.266371] ca systemd[1]: acme-order-renew-ca.foo.service: Consumed 1.187s CPU time over 1.234s wall clock time.515server: must succeed: systemctl restart acme-test.foo.service516server # [1202433.306069] server systemd[1]: acme-test.foo.service: Deactivated successfully.517server # [1202433.306278] server systemd[1]: Stopped Ensure certificate for test.foo.518server # [1202433.307285] server systemd[1]: Stopping Ensure certificate for test.foo...519server # [1202433.309230] server systemd[1]: Starting Ensure certificate for test.foo...520server: (finished: must succeed: systemctl restart acme-test.foo.service, in 1.00 seconds)521client: waiting for success: curl -v https://test.foo522* Host test.foo:443 was resolved.523* IPv6: 2001:db8:1::3524* IPv4: 192.168.1.3525* Trying [2001:db8:1::3]:443...526* ALPN: curl offers h2,http/1.1527} [5 bytes data]528* TLSv1.3 (OUT), TLS handshake, Client hello (1):529} [1552 bytes data]530* SSL Trust Anchors:531* OpenSSL default paths (fallback)532{ [5 bytes data]533* TLSv1.3 (IN), TLS handshake, Server hello (2):534{ [1210 bytes data]535* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):536{ [1 bytes data]537* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):538{ [19 bytes data]539* TLSv1.3 (IN), TLS handshake, Certificate (11):540{ [1010 bytes data]541* TLSv1.3 (IN), TLS handshake, CERT verify (15):542{ [110 bytes data]543* TLSv1.3 (IN), TLS handshake, Finished (20):544{ [52 bytes data]545* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):546} [1 bytes data]547* TLSv1.3 (OUT), TLS handshake, Finished (20):548} [52 bytes data]549* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey550* ALPN: server accepted h2551* Server certificate:552* subject: CN=test.foo553* start date: Sep 18 05:27:24 2026 GMT554* expire date: Oct 18 05:27:24 2028 GMT555* issuer: CN=minica root ca 2e2b19556* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384557* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384558* subjectAltName: "test.foo" matches cert's "test.foo"559* OpenSSL verify result: 13560* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)561* closing connection #0562curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)563More details here: https://curl.se/docs/sslcerts.html564565curl failed to verify the legitimacy of the server and therefore could not566establish a secure connection to it. To learn more about this situation and567how to fix it, please visit the webpage mentioned above.568server # [1202434.247115] server acme-test.foo-start[319]: Waiting to acquire lock in /run/acme/569server # [1202434.250835] server acme-test.foo-start[319]: + '[' -e out/acme-success ']'570server # [1202434.250835] server acme-test.foo-start[319]: + minica --ca-cert=ca/cert.pem --ca-key=ca/key.pem --domains=test.foo --ip-addresses=571server # [1202434.266309] server acme-test.foo-start[328]: + cd test.foo572server # [1202434.266864] server acme-test.foo-start[328]: + cp -vp cert.pem ../out/cert.pem573server # [1202434.267979] server acme-test.foo-start[329]: 'cert.pem' -> '../out/cert.pem'574server # [1202434.268317] server acme-test.foo-start[328]: + cp -vp key.pem ../out/key.pem575server # [1202434.269709] server acme-test.foo-start[328]: 'key.pem' -> '../out/key.pem'576server # [1202434.269977] server acme-test.foo-start[319]: + cat out/cert.pem ca/cert.pem577server # [1202434.272062] server acme-test.foo-start[319]: + cp ca/cert.pem out/chain.pem578server # [1202434.274028] server acme-test.foo-start[319]: + cat out/key.pem out/fullchain.pem579server # [1202434.275883] server acme-test.foo-start[319]: + for fixpath in out certificates580server # [1202434.275936] server acme-test.foo-start[319]: + '[' -d out ']'581server # [1202434.275936] server acme-test.foo-start[319]: + chmod -R u=rwX,g=rX,o= out582server # [1202434.277796] server acme-test.foo-start[319]: + chown -R acme:nginx out583server # [1202434.281724] server acme-test.foo-start[319]: + for fixpath in out certificates584server # [1202434.281724] server acme-test.foo-start[319]: + '[' -d certificates ']'585server # [1202434.286510] server systemd[1]: Finished Ensure certificate for test.foo.586server # [1202434.291192] server systemd[1]: Starting Order (and renew) ACME certificate for test.foo...587* Trying [2001:db8:1::3]:443...588* Host test.foo:443 was resolved.589* IPv6: 2001:db8:1::3590* IPv4: 192.168.1.3591* ALPN: curl offers h2,http/1.1592} [5 bytes data]593* TLSv1.3 (OUT), TLS handshake, Client hello (1):594} [1552 bytes data]595* SSL Trust Anchors:596* OpenSSL default paths (fallback)597{ [5 bytes data]598* TLSv1.3 (IN), TLS handshake, Server hello (2):599{ [1210 bytes data]600* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):601{ [1 bytes data]602* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):603{ [19 bytes data]604* TLSv1.3 (IN), TLS handshake, Certificate (11):605{ [1010 bytes data]606* TLSv1.3 (IN), TLS handshake, CERT verify (15):607{ [110 bytes data]608* TLSv1.3 (IN), TLS handshake, Finished (20):609{ [52 bytes data]610* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):611} [1 bytes data]612* TLSv1.3 (OUT), TLS handshake, Finished (20):613} [52 bytes data]614* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey615* ALPN: server accepted h2616* Server certificate:617* subject: CN=test.foo618* start date: Sep 18 05:27:24 2026 GMT619* expire date: Oct 18 05:27:24 2028 GMT620* issuer: CN=minica root ca 2e2b19621* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384622* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384623* subjectAltName: "test.foo" matches cert's "test.foo"624* OpenSSL verify result: 13625* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)626* closing connection #0627curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)628More details here: https://curl.se/docs/sslcerts.html629630curl failed to verify the legitimacy of the server and therefore could not631establish a secure connection to it. To learn more about this situation and632how to fix it, please visit the webpage mentioned above.633server # [1202435.234356] server acme-order-renew-test.foo-start[336]: Waiting to acquire lock in /run/acme/634server # [1202435.237757] server acme-order-renew-test.foo-start[336]: + set -euo pipefail635server # [1202435.237834] server acme-order-renew-test.foo-start[336]: + exec636server # [1202435.237884] server acme-order-renew-test.foo-start[336]: + /nix/store/fxkh6pl0y4nfbhdqdnhfkvsq7pbxq655-flock-0.4.0/bin/flock 11637server # [1202435.239303] server acme-order-renew-test.foo-start[344]: ++ find accounts -path '*/keys/*.key' -print -quit638server # [1202435.242371] server acme-order-renew-test.foo-start[336]: + '[' -n '' ']'639server # [1202435.242438] server acme-order-renew-test.foo-start[336]: + exec640server # [1202435.242487] server acme-order-renew-test.foo-start[336]: + '[' -e certificates/test.foo.key ']'641server # [1202435.242535] server acme-order-renew-test.foo-start[336]: + lego run --accept-tos --path . --email none@none.tld --http --http.webroot /var/lib/acme/acme-challenge --server https://ca.foo/acme/acme/directory --key-type ec256 -d test.foo --no-random-sleep --renew-force --ari-disable --force-cert-domains642server # [1202435.298322] server acme-order-renew-test.foo-start[345]: 2026-09-18T05:27:35.284096800Z INFO Trying to resolve the account by key643server # [1202435.309612] server acme-order-renew-test.foo-start[345]: 2026-09-18T05:27:35.295418114Z WARN retry: acme: error: 0 :: urn:ietf:params:acme:error:accountDoesNotExist :: Account does not exist644server # [1202435.309808] server acme-order-renew-test.foo-start[345]: 2026-09-18T05:27:35.295609197Z ERROR Error error="registration: resolve account by key: unable to communicate with the API server: error: Post \"https://ca.foo/acme/acme/new-account\": POST https://ca.foo/acme/acme/new-account giving up after 1 attempt(s): acme: error: 0 :: urn:ietf:params:acme:error:accountDoesNotExist :: Account does not exist"645server # [1202435.310414] server acme-order-renew-test.foo-start[336]: + echo Failed to fetch certificates. This may mean your DNS records are set up incorrectly. Self-signed certs are in place and dependant services will still start.646server # [1202435.310414] server acme-order-renew-test.foo-start[336]: Failed to fetch certificates. This may mean your DNS records are set up incorrectly. Self-signed certs are in place and dependant services will still start.647server # [1202435.310414] server acme-order-renew-test.foo-start[336]: + exit 10648server # [1202435.313587] server systemd[1]: acme-order-renew-test.foo.service: Main process exited, code=exited, status=10/n/a649server # [1202435.313789] server systemd[1]: acme-order-renew-test.foo.service: Failed with result 'exit-code'.650server # [1202435.314141] server systemd[1]: Failed to start Order (and renew) ACME certificate for test.foo.651ca # [1202435.297752] ca step-ca[207]: time="2026-09-18T05:27:35Z" level=info duration="61.921µs" duration-ns=61921 fields.time="2026-09-18T05:27:35Z" method=GET name=ca path=/acme/acme/directory protocol=HTTP/1.1 referer= remote-address="::1" request-id=f034eba0-2b0e-4151-b167-205b8be7a228 response="{\"newNonce\":\"https://ca.foo/acme/acme/new-nonce\",\"newAccount\":\"https://ca.foo/acme/acme/new-account\",\"newOrder\":\"https://ca.foo/acme/acme/new-order\",\"revokeCert\":\"https://ca.foo/acme/acme/revoke-cert\",\"keyChange\":\"https://ca.foo/acme/acme/key-change\"}" size=252 status=200 user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; arm64)" user-id=652ca # [1202435.303344] ca step-ca[207]: time="2026-09-18T05:27:35Z" level=info duration=1.054774ms duration-ns=1054774 fields.time="2026-09-18T05:27:35Z" method=HEAD name=ca nonce=aTN5bkhkY3pocEQyUkVJQUNPYTAxNzRQanpNWEhRNG8 path=/acme/acme/new-nonce protocol=HTTP/1.1 referer= remote-address=127.0.0.1 request-id=b5c4b391-778c-4e78-87f9-68b270e26b53 size=0 status=200 user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; arm64)" user-id=653ca # [1202435.309188] ca step-ca[207]: time="2026-09-18T05:27:35Z" level=warning duration=1.912266ms duration-ns=1912266 error="account does not exist" fields.time="2026-09-18T05:27:35Z" method=POST name=ca nonce=bTJMT1EzNkF4YTlxWkR0MW9yNEtnTEJKb2JWdXNSVFQ path=/acme/acme/new-account protocol=HTTP/1.1 referer= remote-address="::1" request-id=07b69963-dec7-4839-8cbe-31d9c6637b4e response="{\"type\":\"urn:ietf:params:acme:error:accountDoesNotExist\",\"detail\":\"Account does not exist\"}" size=92 status=400 user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; arm64)" user-id=654* Trying [2001:db8:1::3]:443...655* Host test.foo:443 was resolved.656* IPv6: 2001:db8:1::3657* IPv4: 192.168.1.3658* ALPN: curl offers h2,http/1.1659} [5 bytes data]660* TLSv1.3 (OUT), TLS handshake, Client hello (1):661} [1552 bytes data]662* SSL Trust Anchors:663* OpenSSL default paths (fallback)664{ [5 bytes data]665* TLSv1.3 (IN), TLS handshake, Server hello (2):666{ [1210 bytes data]667* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):668{ [1 bytes data]669* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):670{ [19 bytes data]671* TLSv1.3 (IN), TLS handshake, Certificate (11):672{ [1010 bytes data]673* TLSv1.3 (IN), TLS handshake, CERT verify (15):674{ [111 bytes data]675* TLSv1.3 (IN), TLS handshake, Finished (20):676{ [52 bytes data]677* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):678} [1 bytes data]679* TLSv1.3 (OUT), TLS handshake, Finished (20):680} [52 bytes data]681* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey682* ALPN: server accepted h2683* Server certificate:684* subject: CN=test.foo685* start date: Sep 18 05:27:24 2026 GMT686* expire date: Oct 18 05:27:24 2028 GMT687* issuer: CN=minica root ca 2e2b19688* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384689* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384690* subjectAltName: "test.foo" matches cert's "test.foo"691* OpenSSL verify result: 13692* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)693* closing connection #0694curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)695More details here: https://curl.se/docs/sslcerts.html696697curl failed to verify the legitimacy of the server and therefore could not698establish a secure connection to it. To learn more about this situation and699how to fix it, please visit the webpage mentioned above.700* Host test.foo:443 was resolved.701* IPv6: 2001:db8:1::3702* IPv4: 192.168.1.3703* Trying [2001:db8:1::3]:443...704* ALPN: curl offers h2,http/1.1705} [5 bytes data]706* TLSv1.3 (OUT), TLS handshake, Client hello (1):707} [1552 bytes data]708* SSL Trust Anchors:709* OpenSSL default paths (fallback)710{ [5 bytes data]711* TLSv1.3 (IN), TLS handshake, Server hello (2):712{ [1210 bytes data]713* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):714{ [1 bytes data]715* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):716{ [19 bytes data]717* TLSv1.3 (IN), TLS handshake, Certificate (11):718{ [1010 bytes data]719* TLSv1.3 (IN), TLS handshake, CERT verify (15):720{ [111 bytes data]721* TLSv1.3 (IN), TLS handshake, Finished (20):722{ [52 bytes data]723* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):724} [1 bytes data]725* TLSv1.3 (OUT), TLS handshake, Finished (20):726} [52 bytes data]727* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey728* ALPN: server accepted h2729* Server certificate:730* subject: CN=test.foo731* start date: Sep 18 05:27:24 2026 GMT732* expire date: Oct 18 05:27:24 2028 GMT733* issuer: CN=minica root ca 2e2b19734* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384735* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384736* subjectAltName: "test.foo" matches cert's "test.foo"737* OpenSSL verify result: 13738* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)739* closing connection #0740curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)741More details here: https://curl.se/docs/sslcerts.html742743curl failed to verify the legitimacy of the server and therefore could not744establish a secure connection to it. To learn more about this situation and745how to fix it, please visit the webpage mentioned above.746* Host test.foo:443 was resolved.747* IPv6: 2001:db8:1::3748* IPv4: 192.168.1.3749* Trying [2001:db8:1::3]:443...750* ALPN: curl offers h2,http/1.1751} [5 bytes data]752* TLSv1.3 (OUT), TLS handshake, Client hello (1):753} [1552 bytes data]754* SSL Trust Anchors:755* OpenSSL default paths (fallback)756{ [5 bytes data]757* TLSv1.3 (IN), TLS handshake, Server hello (2):758{ [1210 bytes data]759* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):760{ [1 bytes data]761* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):762{ [19 bytes data]763* TLSv1.3 (IN), TLS handshake, Certificate (11):764{ [1010 bytes data]765* TLSv1.3 (IN), TLS handshake, CERT verify (15):766{ [111 bytes data]767* TLSv1.3 (IN), TLS handshake, Finished (20):768{ [52 bytes data]769* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):770} [1 bytes data]771* TLSv1.3 (OUT), TLS handshake, Finished (20):772} [52 bytes data]773* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey774* ALPN: server accepted h2775* Server certificate:776* subject: CN=test.foo777* start date: Sep 18 05:27:24 2026 GMT778* expire date: Oct 18 05:27:24 2028 GMT779* issuer: CN=minica root ca 2e2b19780* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384781* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384782* subjectAltName: "test.foo" matches cert's "test.foo"783* OpenSSL verify result: 13784* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)785* closing connection #0786curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)787More details here: https://curl.se/docs/sslcerts.html788789curl failed to verify the legitimacy of the server and therefore could not790establish a secure connection to it. To learn more about this situation and791how to fix it, please visit the webpage mentioned above.792* Trying [2001:db8:1::3]:443...793* Host test.foo:443 was resolved.794* IPv6: 2001:db8:1::3795* IPv4: 192.168.1.3796* ALPN: curl offers h2,http/1.1797} [5 bytes data]798* TLSv1.3 (OUT), TLS handshake, Client hello (1):799} [1552 bytes data]800* SSL Trust Anchors:801* OpenSSL default paths (fallback)802{ [5 bytes data]803* TLSv1.3 (IN), TLS handshake, Server hello (2):804{ [1210 bytes data]805* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):806{ [1 bytes data]807* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):808{ [19 bytes data]809* TLSv1.3 (IN), TLS handshake, Certificate (11):810{ [1010 bytes data]811* TLSv1.3 (IN), TLS handshake, CERT verify (15):812{ [110 bytes data]813* TLSv1.3 (IN), TLS handshake, Finished (20):814{ [52 bytes data]815* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):816} [1 bytes data]817* TLSv1.3 (OUT), TLS handshake, Finished (20):818} [52 bytes data]819* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey820* ALPN: server accepted h2821* Server certificate:822* subject: CN=test.foo823* start date: Sep 18 05:27:24 2026 GMT824* expire date: Oct 18 05:27:24 2028 GMT825* issuer: CN=minica root ca 2e2b19826* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384827* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384828* subjectAltName: "test.foo" matches cert's "test.foo"829* OpenSSL verify result: 13830* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)831* closing connection #0832curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)833More details here: https://curl.se/docs/sslcerts.html834835curl failed to verify the legitimacy of the server and therefore could not836establish a secure connection to it. To learn more about this situation and837how to fix it, please visit the webpage mentioned above.838* Host test.foo:443 was resolved.839* IPv6: 2001:db8:1::3840* IPv4: 192.168.1.3841* Trying [2001:db8:1::3]:443...842* ALPN: curl offers h2,http/1.1843} [5 bytes data]844* TLSv1.3 (OUT), TLS handshake, Client hello (1):845} [1552 bytes data]846* SSL Trust Anchors:847* OpenSSL default paths (fallback)848{ [5 bytes data]849* TLSv1.3 (IN), TLS handshake, Server hello (2):850{ [1210 bytes data]851* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):852{ [1 bytes data]853* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):854{ [19 bytes data]855* TLSv1.3 (IN), TLS handshake, Certificate (11):856{ [1010 bytes data]857* TLSv1.3 (IN), TLS handshake, CERT verify (15):858{ [111 bytes data]859* TLSv1.3 (IN), TLS handshake, Finished (20):860{ [52 bytes data]861* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):862} [1 bytes data]863* TLSv1.3 (OUT), TLS handshake, Finished (20):864} [52 bytes data]865* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey866* ALPN: server accepted h2867* Server certificate:868* subject: CN=test.foo869* start date: Sep 18 05:27:24 2026 GMT870* expire date: Oct 18 05:27:24 2028 GMT871* issuer: CN=minica root ca 2e2b19872* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384873* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384874* subjectAltName: "test.foo" matches cert's "test.foo"875* OpenSSL verify result: 13876* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)877* closing connection #0878curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)879More details here: https://curl.se/docs/sslcerts.html880881curl failed to verify the legitimacy of the server and therefore could not882establish a secure connection to it. To learn more about this situation and883how to fix it, please visit the webpage mentioned above.884* Host test.foo:443 was resolved.885* IPv6: 2001:db8:1::3886* IPv4: 192.168.1.3887* Trying [2001:db8:1::3]:443...888* ALPN: curl offers h2,http/1.1889} [5 bytes data]890* TLSv1.3 (OUT), TLS handshake, Client hello (1):891} [1552 bytes data]892* SSL Trust Anchors:893* OpenSSL default paths (fallback)894{ [5 bytes data]895* TLSv1.3 (IN), TLS handshake, Server hello (2):896{ [1210 bytes data]897* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):898{ [1 bytes data]899* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):900{ [19 bytes data]901* TLSv1.3 (IN), TLS handshake, Certificate (11):902{ [1010 bytes data]903* TLSv1.3 (IN), TLS handshake, CERT verify (15):904{ [110 bytes data]905* TLSv1.3 (IN), TLS handshake, Finished (20):906{ [52 bytes data]907* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):908} [1 bytes data]909* TLSv1.3 (OUT), TLS handshake, Finished (20):910} [52 bytes data]911* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey912* ALPN: server accepted h2913* Server certificate:914* subject: CN=test.foo915* start date: Sep 18 05:27:24 2026 GMT916* expire date: Oct 18 05:27:24 2028 GMT917* issuer: CN=minica root ca 2e2b19918* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384919* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384920* subjectAltName: "test.foo" matches cert's "test.foo"921* OpenSSL verify result: 13922* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)923* closing connection #0924curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)925More details here: https://curl.se/docs/sslcerts.html926927curl failed to verify the legitimacy of the server and therefore could not928establish a secure connection to it. To learn more about this situation and929how to fix it, please visit the webpage mentioned above.930* Host test.foo:443 was resolved.931* IPv6: 2001:db8:1::3932* IPv4: 192.168.1.3933* Trying [2001:db8:1::3]:443...934* ALPN: curl offers h2,http/1.1935} [5 bytes data]936* TLSv1.3 (OUT), TLS handshake, Client hello (1):937} [1552 bytes data]938* SSL Trust Anchors:939* OpenSSL default paths (fallback)940{ [5 bytes data]941* TLSv1.3 (IN), TLS handshake, Server hello (2):942{ [1210 bytes data]943* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):944{ [1 bytes data]945* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):946{ [19 bytes data]947* TLSv1.3 (IN), TLS handshake, Certificate (11):948{ [1010 bytes data]949* TLSv1.3 (IN), TLS handshake, CERT verify (15):950{ [111 bytes data]951* TLSv1.3 (IN), TLS handshake, Finished (20):952{ [52 bytes data]953* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):954} [1 bytes data]955* TLSv1.3 (OUT), TLS handshake, Finished (20):956} [52 bytes data]957* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey958* ALPN: server accepted h2959* Server certificate:960* subject: CN=test.foo961* start date: Sep 18 05:27:24 2026 GMT962* expire date: Oct 18 05:27:24 2028 GMT963* issuer: CN=minica root ca 2e2b19964* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384965* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384966* subjectAltName: "test.foo" matches cert's "test.foo"967* OpenSSL verify result: 13968* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)969* closing connection #0970curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)971More details here: https://curl.se/docs/sslcerts.html972973curl failed to verify the legitimacy of the server and therefore could not974establish a secure connection to it. To learn more about this situation and975how to fix it, please visit the webpage mentioned above.976* Trying [2001:db8:1::3]:443...977* Host test.foo:443 was resolved.978* IPv6: 2001:db8:1::3979* IPv4: 192.168.1.3980* ALPN: curl offers h2,http/1.1981} [5 bytes data]982* TLSv1.3 (OUT), TLS handshake, Client hello (1):983} [1552 bytes data]984* SSL Trust Anchors:985* OpenSSL default paths (fallback)986{ [5 bytes data]987* TLSv1.3 (IN), TLS handshake, Server hello (2):988{ [1210 bytes data]989* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):990{ [1 bytes data]991* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):992{ [19 bytes data]993* TLSv1.3 (IN), TLS handshake, Certificate (11):994{ [1010 bytes data]995* TLSv1.3 (IN), TLS handshake, CERT verify (15):996{ [111 bytes data]997* TLSv1.3 (IN), TLS handshake, Finished (20):998{ [52 bytes data]999* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1000} [1 bytes data]1001* TLSv1.3 (OUT), TLS handshake, Finished (20):1002} [52 bytes data]1003* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1004* ALPN: server accepted h21005* Server certificate:1006* subject: CN=test.foo1007* start date: Sep 18 05:27:24 2026 GMT1008* expire date: Oct 18 05:27:24 2028 GMT1009* issuer: CN=minica root ca 2e2b191010* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841011* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841012* subjectAltName: "test.foo" matches cert's "test.foo"1013* OpenSSL verify result: 131014* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1015* closing connection #01016curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1017More details here: https://curl.se/docs/sslcerts.html10181019curl failed to verify the legitimacy of the server and therefore could not1020establish a secure connection to it. To learn more about this situation and1021how to fix it, please visit the webpage mentioned above.1022* Host test.foo:443 was resolved.1023* IPv6: 2001:db8:1::31024* IPv4: 192.168.1.31025* Trying [2001:db8:1::3]:443...1026* ALPN: curl offers h2,http/1.11027} [5 bytes data]1028* TLSv1.3 (OUT), TLS handshake, Client hello (1):1029} [1552 bytes data]1030* SSL Trust Anchors:1031* OpenSSL default paths (fallback)1032{ [5 bytes data]1033* TLSv1.3 (IN), TLS handshake, Server hello (2):1034{ [1210 bytes data]1035* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1036{ [1 bytes data]1037* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1038{ [19 bytes data]1039* TLSv1.3 (IN), TLS handshake, Certificate (11):1040{ [1010 bytes data]1041* TLSv1.3 (IN), TLS handshake, CERT verify (15):1042{ [111 bytes data]1043* TLSv1.3 (IN), TLS handshake, Finished (20):1044{ [52 bytes data]1045* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1046} [1 bytes data]1047* TLSv1.3 (OUT), TLS handshake, Finished (20):1048} [52 bytes data]1049* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1050* ALPN: server accepted h21051* Server certificate:1052* subject: CN=test.foo1053* start date: Sep 18 05:27:24 2026 GMT1054* expire date: Oct 18 05:27:24 2028 GMT1055* issuer: CN=minica root ca 2e2b191056* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841057* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841058* subjectAltName: "test.foo" matches cert's "test.foo"1059* OpenSSL verify result: 131060* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1061* closing connection #01062curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1063More details here: https://curl.se/docs/sslcerts.html10641065curl failed to verify the legitimacy of the server and therefore could not1066establish a secure connection to it. To learn more about this situation and1067how to fix it, please visit the webpage mentioned above.1068* Host test.foo:443 was resolved.1069* IPv6: 2001:db8:1::31070* IPv4: 192.168.1.31071* Trying [2001:db8:1::3]:443...1072* ALPN: curl offers h2,http/1.11073} [5 bytes data]1074* TLSv1.3 (OUT), TLS handshake, Client hello (1):1075} [1552 bytes data]1076* SSL Trust Anchors:1077* OpenSSL default paths (fallback)1078{ [5 bytes data]1079* TLSv1.3 (IN), TLS handshake, Server hello (2):1080{ [1210 bytes data]1081* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1082{ [1 bytes data]1083* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1084{ [19 bytes data]1085* TLSv1.3 (IN), TLS handshake, Certificate (11):1086{ [1010 bytes data]1087* TLSv1.3 (IN), TLS handshake, CERT verify (15):1088{ [111 bytes data]1089* TLSv1.3 (IN), TLS handshake, Finished (20):1090{ [52 bytes data]1091* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1092} [1 bytes data]1093* TLSv1.3 (OUT), TLS handshake, Finished (20):1094} [52 bytes data]1095* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1096* ALPN: server accepted h21097* Server certificate:1098* subject: CN=test.foo1099* start date: Sep 18 05:27:24 2026 GMT1100* expire date: Oct 18 05:27:24 2028 GMT1101* issuer: CN=minica root ca 2e2b191102* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841103* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841104* subjectAltName: "test.foo" matches cert's "test.foo"1105* OpenSSL verify result: 131106* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1107* closing connection #01108curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1109More details here: https://curl.se/docs/sslcerts.html11101111curl failed to verify the legitimacy of the server and therefore could not1112establish a secure connection to it. To learn more about this situation and1113how to fix it, please visit the webpage mentioned above.1114* Host test.foo:443 was resolved.1115* IPv6: 2001:db8:1::31116* IPv4: 192.168.1.31117* Trying [2001:db8:1::3]:443...1118* ALPN: curl offers h2,http/1.11119} [5 bytes data]1120* TLSv1.3 (OUT), TLS handshake, Client hello (1):1121} [1552 bytes data]1122* SSL Trust Anchors:1123* OpenSSL default paths (fallback)1124{ [5 bytes data]1125* TLSv1.3 (IN), TLS handshake, Server hello (2):1126{ [1210 bytes data]1127* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1128{ [1 bytes data]1129* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1130{ [19 bytes data]1131* TLSv1.3 (IN), TLS handshake, Certificate (11):1132{ [1010 bytes data]1133* TLSv1.3 (IN), TLS handshake, CERT verify (15):1134{ [110 bytes data]1135* TLSv1.3 (IN), TLS handshake, Finished (20):1136{ [52 bytes data]1137* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1138} [1 bytes data]1139* TLSv1.3 (OUT), TLS handshake, Finished (20):1140} [52 bytes data]1141* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1142* ALPN: server accepted h21143* Server certificate:1144* subject: CN=test.foo1145* start date: Sep 18 05:27:24 2026 GMT1146* expire date: Oct 18 05:27:24 2028 GMT1147* issuer: CN=minica root ca 2e2b191148* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841149* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841150* subjectAltName: "test.foo" matches cert's "test.foo"1151* OpenSSL verify result: 131152* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1153* closing connection #01154curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1155More details here: https://curl.se/docs/sslcerts.html11561157curl failed to verify the legitimacy of the server and therefore could not1158establish a secure connection to it. To learn more about this situation and1159how to fix it, please visit the webpage mentioned above.1160* Host test.foo:443 was resolved.1161* IPv6: 2001:db8:1::31162* IPv4: 192.168.1.31163* Trying [2001:db8:1::3]:443...1164* ALPN: curl offers h2,http/1.11165} [5 bytes data]1166* TLSv1.3 (OUT), TLS handshake, Client hello (1):1167} [1552 bytes data]1168* SSL Trust Anchors:1169* OpenSSL default paths (fallback)1170{ [5 bytes data]1171* TLSv1.3 (IN), TLS handshake, Server hello (2):1172{ [1210 bytes data]1173* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1174{ [1 bytes data]1175* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1176{ [19 bytes data]1177* TLSv1.3 (IN), TLS handshake, Certificate (11):1178{ [1010 bytes data]1179* TLSv1.3 (IN), TLS handshake, CERT verify (15):1180{ [111 bytes data]1181* TLSv1.3 (IN), TLS handshake, Finished (20):1182{ [52 bytes data]1183* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1184} [1 bytes data]1185* TLSv1.3 (OUT), TLS handshake, Finished (20):1186} [52 bytes data]1187* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1188* ALPN: server accepted h21189* Server certificate:1190* subject: CN=test.foo1191* start date: Sep 18 05:27:24 2026 GMT1192* expire date: Oct 18 05:27:24 2028 GMT1193* issuer: CN=minica root ca 2e2b191194* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841195* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841196* subjectAltName: "test.foo" matches cert's "test.foo"1197* OpenSSL verify result: 131198* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1199* closing connection #01200curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1201More details here: https://curl.se/docs/sslcerts.html12021203curl failed to verify the legitimacy of the server and therefore could not1204establish a secure connection to it. To learn more about this situation and1205how to fix it, please visit the webpage mentioned above.1206* Host test.foo:443 was resolved.1207* IPv6: 2001:db8:1::31208* IPv4: 192.168.1.31209* Trying [2001:db8:1::3]:443...1210* ALPN: curl offers h2,http/1.11211} [5 bytes data]1212* TLSv1.3 (OUT), TLS handshake, Client hello (1):1213} [1552 bytes data]1214* SSL Trust Anchors:1215* OpenSSL default paths (fallback)1216{ [5 bytes data]1217* TLSv1.3 (IN), TLS handshake, Server hello (2):1218{ [1210 bytes data]1219* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1220{ [1 bytes data]1221* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1222{ [19 bytes data]1223* TLSv1.3 (IN), TLS handshake, Certificate (11):1224{ [1010 bytes data]1225* TLSv1.3 (IN), TLS handshake, CERT verify (15):1226{ [111 bytes data]1227* TLSv1.3 (IN), TLS handshake, Finished (20):1228{ [52 bytes data]1229* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1230} [1 bytes data]1231* TLSv1.3 (OUT), TLS handshake, Finished (20):1232} [52 bytes data]1233* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1234* ALPN: server accepted h21235* Server certificate:1236* subject: CN=test.foo1237* start date: Sep 18 05:27:24 2026 GMT1238* expire date: Oct 18 05:27:24 2028 GMT1239* issuer: CN=minica root ca 2e2b191240* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841241* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841242* subjectAltName: "test.foo" matches cert's "test.foo"1243* OpenSSL verify result: 131244* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1245* closing connection #01246curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1247More details here: https://curl.se/docs/sslcerts.html12481249curl failed to verify the legitimacy of the server and therefore could not1250establish a secure connection to it. To learn more about this situation and1251how to fix it, please visit the webpage mentioned above.1252* Host test.foo:443 was resolved.1253* IPv6: 2001:db8:1::31254* IPv4: 192.168.1.31255* Trying [2001:db8:1::3]:443...1256* ALPN: curl offers h2,http/1.11257} [5 bytes data]1258* TLSv1.3 (OUT), TLS handshake, Client hello (1):1259} [1552 bytes data]1260* SSL Trust Anchors:1261* OpenSSL default paths (fallback)1262{ [5 bytes data]1263* TLSv1.3 (IN), TLS handshake, Server hello (2):1264{ [1210 bytes data]1265* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1266{ [1 bytes data]1267* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1268{ [19 bytes data]1269* TLSv1.3 (IN), TLS handshake, Certificate (11):1270{ [1010 bytes data]1271* TLSv1.3 (IN), TLS handshake, CERT verify (15):1272{ [112 bytes data]1273* TLSv1.3 (IN), TLS handshake, Finished (20):1274{ [52 bytes data]1275* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1276} [1 bytes data]1277* TLSv1.3 (OUT), TLS handshake, Finished (20):1278} [52 bytes data]1279* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1280* ALPN: server accepted h21281* Server certificate:1282* subject: CN=test.foo1283* start date: Sep 18 05:27:24 2026 GMT1284* expire date: Oct 18 05:27:24 2028 GMT1285* issuer: CN=minica root ca 2e2b191286* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841287* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841288* subjectAltName: "test.foo" matches cert's "test.foo"1289* OpenSSL verify result: 131290* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1291* closing connection #01292curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1293More details here: https://curl.se/docs/sslcerts.html12941295curl failed to verify the legitimacy of the server and therefore could not1296establish a secure connection to it. To learn more about this situation and1297how to fix it, please visit the webpage mentioned above.1298* Trying [2001:db8:1::3]:443...1299* Host test.foo:443 was resolved.1300* IPv6: 2001:db8:1::31301* IPv4: 192.168.1.31302* ALPN: curl offers h2,http/1.11303} [5 bytes data]1304* TLSv1.3 (OUT), TLS handshake, Client hello (1):1305} [1552 bytes data]1306* SSL Trust Anchors:1307* OpenSSL default paths (fallback)1308{ [5 bytes data]1309* TLSv1.3 (IN), TLS handshake, Server hello (2):1310{ [1210 bytes data]1311* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1312{ [1 bytes data]1313* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1314{ [19 bytes data]1315* TLSv1.3 (IN), TLS handshake, Certificate (11):1316{ [1010 bytes data]1317* TLSv1.3 (IN), TLS handshake, CERT verify (15):1318{ [111 bytes data]1319* TLSv1.3 (IN), TLS handshake, Finished (20):1320{ [52 bytes data]1321* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1322} [1 bytes data]1323* TLSv1.3 (OUT), TLS handshake, Finished (20):1324} [52 bytes data]1325* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1326* ALPN: server accepted h21327* Server certificate:1328* subject: CN=test.foo1329* start date: Sep 18 05:27:24 2026 GMT1330* expire date: Oct 18 05:27:24 2028 GMT1331* issuer: CN=minica root ca 2e2b191332* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841333* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841334* subjectAltName: "test.foo" matches cert's "test.foo"1335* OpenSSL verify result: 131336* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1337* closing connection #01338curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1339More details here: https://curl.se/docs/sslcerts.html13401341curl failed to verify the legitimacy of the server and therefore could not1342establish a secure connection to it. To learn more about this situation and1343how to fix it, please visit the webpage mentioned above.1344* Host test.foo:443 was resolved.1345* IPv6: 2001:db8:1::31346* IPv4: 192.168.1.31347* Trying [2001:db8:1::3]:443...1348* ALPN: curl offers h2,http/1.11349} [5 bytes data]1350* TLSv1.3 (OUT), TLS handshake, Client hello (1):1351} [1552 bytes data]1352* SSL Trust Anchors:1353* OpenSSL default paths (fallback)1354{ [5 bytes data]1355* TLSv1.3 (IN), TLS handshake, Server hello (2):1356{ [1210 bytes data]1357* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1358{ [1 bytes data]1359* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1360{ [19 bytes data]1361* TLSv1.3 (IN), TLS handshake, Certificate (11):1362{ [1010 bytes data]1363* TLSv1.3 (IN), TLS handshake, CERT verify (15):1364{ [112 bytes data]1365* TLSv1.3 (IN), TLS handshake, Finished (20):1366{ [52 bytes data]1367* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1368} [1 bytes data]1369* TLSv1.3 (OUT), TLS handshake, Finished (20):1370} [52 bytes data]1371* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1372* ALPN: server accepted h21373* Server certificate:1374* subject: CN=test.foo1375* start date: Sep 18 05:27:24 2026 GMT1376* expire date: Oct 18 05:27:24 2028 GMT1377* issuer: CN=minica root ca 2e2b191378* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841379* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841380* subjectAltName: "test.foo" matches cert's "test.foo"1381* OpenSSL verify result: 131382* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1383* closing connection #01384curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1385More details here: https://curl.se/docs/sslcerts.html13861387curl failed to verify the legitimacy of the server and therefore could not1388establish a secure connection to it. To learn more about this situation and1389how to fix it, please visit the webpage mentioned above.1390* Host test.foo:443 was resolved.1391* IPv6: 2001:db8:1::31392* IPv4: 192.168.1.31393* Trying [2001:db8:1::3]:443...1394* ALPN: curl offers h2,http/1.11395} [5 bytes data]1396* TLSv1.3 (OUT), TLS handshake, Client hello (1):1397} [1552 bytes data]1398* SSL Trust Anchors:1399* OpenSSL default paths (fallback)1400{ [5 bytes data]1401* TLSv1.3 (IN), TLS handshake, Server hello (2):1402{ [1210 bytes data]1403* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1404{ [1 bytes data]1405* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1406{ [19 bytes data]1407* TLSv1.3 (IN), TLS handshake, Certificate (11):1408{ [1010 bytes data]1409* TLSv1.3 (IN), TLS handshake, CERT verify (15):1410{ [112 bytes data]1411* TLSv1.3 (IN), TLS handshake, Finished (20):1412{ [52 bytes data]1413* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1414} [1 bytes data]1415* TLSv1.3 (OUT), TLS handshake, Finished (20):1416} [52 bytes data]1417* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1418* ALPN: server accepted h21419* Server certificate:1420* subject: CN=test.foo1421* start date: Sep 18 05:27:24 2026 GMT1422* expire date: Oct 18 05:27:24 2028 GMT1423* issuer: CN=minica root ca 2e2b191424* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841425* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841426* subjectAltName: "test.foo" matches cert's "test.foo"1427* OpenSSL verify result: 131428* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1429* closing connection #01430curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1431More details here: https://curl.se/docs/sslcerts.html14321433curl failed to verify the legitimacy of the server and therefore could not1434establish a secure connection to it. To learn more about this situation and1435how to fix it, please visit the webpage mentioned above.1436* Host test.foo:443 was resolved.1437* IPv6: 2001:db8:1::31438* IPv4: 192.168.1.31439* Trying [2001:db8:1::3]:443...1440* ALPN: curl offers h2,http/1.11441} [5 bytes data]1442* TLSv1.3 (OUT), TLS handshake, Client hello (1):1443} [1552 bytes data]1444* SSL Trust Anchors:1445* OpenSSL default paths (fallback)1446{ [5 bytes data]1447* TLSv1.3 (IN), TLS handshake, Server hello (2):1448{ [1210 bytes data]1449* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1450{ [1 bytes data]1451* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1452{ [19 bytes data]1453* TLSv1.3 (IN), TLS handshake, Certificate (11):1454{ [1010 bytes data]1455* TLSv1.3 (IN), TLS handshake, CERT verify (15):1456{ [110 bytes data]1457* TLSv1.3 (IN), TLS handshake, Finished (20):1458{ [52 bytes data]1459* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1460} [1 bytes data]1461* TLSv1.3 (OUT), TLS handshake, Finished (20):1462} [52 bytes data]1463* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1464* ALPN: server accepted h21465* Server certificate:1466* subject: CN=test.foo1467* start date: Sep 18 05:27:24 2026 GMT1468* expire date: Oct 18 05:27:24 2028 GMT1469* issuer: CN=minica root ca 2e2b191470* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841471* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841472* subjectAltName: "test.foo" matches cert's "test.foo"1473* OpenSSL verify result: 131474* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1475* closing connection #01476curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1477More details here: https://curl.se/docs/sslcerts.html14781479curl failed to verify the legitimacy of the server and therefore could not1480establish a secure connection to it. To learn more about this situation and1481how to fix it, please visit the webpage mentioned above.1482* Host test.foo:443 was resolved.1483* IPv6: 2001:db8:1::31484* IPv4: 192.168.1.31485* Trying [2001:db8:1::3]:443...1486* ALPN: curl offers h2,http/1.11487} [5 bytes data]1488* TLSv1.3 (OUT), TLS handshake, Client hello (1):1489} [1552 bytes data]1490* SSL Trust Anchors:1491* OpenSSL default paths (fallback)1492{ [5 bytes data]1493* TLSv1.3 (IN), TLS handshake, Server hello (2):1494{ [1210 bytes data]1495* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1496{ [1 bytes data]1497* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1498{ [19 bytes data]1499* TLSv1.3 (IN), TLS handshake, Certificate (11):1500{ [1010 bytes data]1501* TLSv1.3 (IN), TLS handshake, CERT verify (15):1502{ [111 bytes data]1503* TLSv1.3 (IN), TLS handshake, Finished (20):1504{ [52 bytes data]1505* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1506} [1 bytes data]1507* TLSv1.3 (OUT), TLS handshake, Finished (20):1508} [52 bytes data]1509* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1510* ALPN: server accepted h21511* Server certificate:1512* subject: CN=test.foo1513* start date: Sep 18 05:27:24 2026 GMT1514* expire date: Oct 18 05:27:24 2028 GMT1515* issuer: CN=minica root ca 2e2b191516* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841517* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841518* subjectAltName: "test.foo" matches cert's "test.foo"1519* OpenSSL verify result: 131520* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1521* closing connection #01522curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1523More details here: https://curl.se/docs/sslcerts.html15241525curl failed to verify the legitimacy of the server and therefore could not1526establish a secure connection to it. To learn more about this situation and1527how to fix it, please visit the webpage mentioned above.1528* Host test.foo:443 was resolved.1529* IPv6: 2001:db8:1::31530* IPv4: 192.168.1.31531* Trying [2001:db8:1::3]:443...1532* ALPN: curl offers h2,http/1.11533} [5 bytes data]1534* TLSv1.3 (OUT), TLS handshake, Client hello (1):1535} [1552 bytes data]1536* SSL Trust Anchors:1537* OpenSSL default paths (fallback)1538{ [5 bytes data]1539* TLSv1.3 (IN), TLS handshake, Server hello (2):1540{ [1210 bytes data]1541* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1542{ [1 bytes data]1543* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1544{ [19 bytes data]1545* TLSv1.3 (IN), TLS handshake, Certificate (11):1546{ [1010 bytes data]1547* TLSv1.3 (IN), TLS handshake, CERT verify (15):1548{ [111 bytes data]1549* TLSv1.3 (IN), TLS handshake, Finished (20):1550{ [52 bytes data]1551* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1552} [1 bytes data]1553* TLSv1.3 (OUT), TLS handshake, Finished (20):1554} [52 bytes data]1555* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1556* ALPN: server accepted h21557* Server certificate:1558* subject: CN=test.foo1559* start date: Sep 18 05:27:24 2026 GMT1560* expire date: Oct 18 05:27:24 2028 GMT1561* issuer: CN=minica root ca 2e2b191562* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841563* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841564* subjectAltName: "test.foo" matches cert's "test.foo"1565* OpenSSL verify result: 131566* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1567* closing connection #01568curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1569More details here: https://curl.se/docs/sslcerts.html15701571curl failed to verify the legitimacy of the server and therefore could not1572establish a secure connection to it. To learn more about this situation and1573how to fix it, please visit the webpage mentioned above.1574* Host test.foo:443 was resolved.1575* IPv6: 2001:db8:1::31576* IPv4: 192.168.1.31577* Trying [2001:db8:1::3]:443...1578* ALPN: curl offers h2,http/1.11579} [5 bytes data]1580* TLSv1.3 (OUT), TLS handshake, Client hello (1):1581} [1552 bytes data]1582* SSL Trust Anchors:1583* OpenSSL default paths (fallback)1584{ [5 bytes data]1585* TLSv1.3 (IN), TLS handshake, Server hello (2):1586{ [1210 bytes data]1587* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1588{ [1 bytes data]1589* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1590{ [19 bytes data]1591* TLSv1.3 (IN), TLS handshake, Certificate (11):1592{ [1010 bytes data]1593* TLSv1.3 (IN), TLS handshake, CERT verify (15):1594{ [111 bytes data]1595* TLSv1.3 (IN), TLS handshake, Finished (20):1596{ [52 bytes data]1597* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1598} [1 bytes data]1599* TLSv1.3 (OUT), TLS handshake, Finished (20):1600} [52 bytes data]1601* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1602* ALPN: server accepted h21603* Server certificate:1604* subject: CN=test.foo1605* start date: Sep 18 05:27:24 2026 GMT1606* expire date: Oct 18 05:27:24 2028 GMT1607* issuer: CN=minica root ca 2e2b191608* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841609* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841610* subjectAltName: "test.foo" matches cert's "test.foo"1611* OpenSSL verify result: 131612* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1613* closing connection #01614curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1615More details here: https://curl.se/docs/sslcerts.html16161617curl failed to verify the legitimacy of the server and therefore could not1618establish a secure connection to it. To learn more about this situation and1619how to fix it, please visit the webpage mentioned above.1620* Host test.foo:443 was resolved.1621* IPv6: 2001:db8:1::31622* IPv4: 192.168.1.31623* Trying [2001:db8:1::3]:443...1624* ALPN: curl offers h2,http/1.11625} [5 bytes data]1626* TLSv1.3 (OUT), TLS handshake, Client hello (1):1627} [1552 bytes data]1628* SSL Trust Anchors:1629* OpenSSL default paths (fallback)1630{ [5 bytes data]1631* TLSv1.3 (IN), TLS handshake, Server hello (2):1632{ [1210 bytes data]1633* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1634{ [1 bytes data]1635* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1636{ [19 bytes data]1637* TLSv1.3 (IN), TLS handshake, Certificate (11):1638{ [1010 bytes data]1639* TLSv1.3 (IN), TLS handshake, CERT verify (15):1640{ [112 bytes data]1641* TLSv1.3 (IN), TLS handshake, Finished (20):1642{ [52 bytes data]1643* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1644} [1 bytes data]1645* TLSv1.3 (OUT), TLS handshake, Finished (20):1646} [52 bytes data]1647* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1648* ALPN: server accepted h21649* Server certificate:1650* subject: CN=test.foo1651* start date: Sep 18 05:27:24 2026 GMT1652* expire date: Oct 18 05:27:24 2028 GMT1653* issuer: CN=minica root ca 2e2b191654* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841655* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841656* subjectAltName: "test.foo" matches cert's "test.foo"1657* OpenSSL verify result: 131658* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1659* closing connection #01660curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1661More details here: https://curl.se/docs/sslcerts.html16621663curl failed to verify the legitimacy of the server and therefore could not1664establish a secure connection to it. To learn more about this situation and1665how to fix it, please visit the webpage mentioned above.1666* Host test.foo:443 was resolved.1667* IPv6: 2001:db8:1::31668* IPv4: 192.168.1.31669* Trying [2001:db8:1::3]:443...1670* ALPN: curl offers h2,http/1.11671} [5 bytes data]1672* TLSv1.3 (OUT), TLS handshake, Client hello (1):1673} [1552 bytes data]1674* SSL Trust Anchors:1675* OpenSSL default paths (fallback)1676{ [5 bytes data]1677* TLSv1.3 (IN), TLS handshake, Server hello (2):1678{ [1210 bytes data]1679* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1680{ [1 bytes data]1681* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1682{ [19 bytes data]1683* TLSv1.3 (IN), TLS handshake, Certificate (11):1684{ [1010 bytes data]1685* TLSv1.3 (IN), TLS handshake, CERT verify (15):1686{ [110 bytes data]1687* TLSv1.3 (IN), TLS handshake, Finished (20):1688{ [52 bytes data]1689* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1690} [1 bytes data]1691* TLSv1.3 (OUT), TLS handshake, Finished (20):1692} [52 bytes data]1693* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1694* ALPN: server accepted h21695* Server certificate:1696* subject: CN=test.foo1697* start date: Sep 18 05:27:24 2026 GMT1698* expire date: Oct 18 05:27:24 2028 GMT1699* issuer: CN=minica root ca 2e2b191700* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841701* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841702* subjectAltName: "test.foo" matches cert's "test.foo"1703* OpenSSL verify result: 131704* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1705* closing connection #01706curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1707More details here: https://curl.se/docs/sslcerts.html17081709curl failed to verify the legitimacy of the server and therefore could not1710establish a secure connection to it. To learn more about this situation and1711how to fix it, please visit the webpage mentioned above.1712* Host test.foo:443 was resolved.1713* IPv6: 2001:db8:1::31714* IPv4: 192.168.1.31715* Trying [2001:db8:1::3]:443...1716* ALPN: curl offers h2,http/1.11717} [5 bytes data]1718* TLSv1.3 (OUT), TLS handshake, Client hello (1):1719} [1552 bytes data]1720* SSL Trust Anchors:1721* OpenSSL default paths (fallback)1722{ [5 bytes data]1723* TLSv1.3 (IN), TLS handshake, Server hello (2):1724{ [1210 bytes data]1725* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1726{ [1 bytes data]1727* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1728{ [19 bytes data]1729* TLSv1.3 (IN), TLS handshake, Certificate (11):1730{ [1010 bytes data]1731* TLSv1.3 (IN), TLS handshake, CERT verify (15):1732{ [112 bytes data]1733* TLSv1.3 (IN), TLS handshake, Finished (20):1734{ [52 bytes data]1735* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1736} [1 bytes data]1737* TLSv1.3 (OUT), TLS handshake, Finished (20):1738} [52 bytes data]1739* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1740* ALPN: server accepted h21741* Server certificate:1742* subject: CN=test.foo1743* start date: Sep 18 05:27:24 2026 GMT1744* expire date: Oct 18 05:27:24 2028 GMT1745* issuer: CN=minica root ca 2e2b191746* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841747* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841748* subjectAltName: "test.foo" matches cert's "test.foo"1749* OpenSSL verify result: 131750* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1751* closing connection #01752curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1753More details here: https://curl.se/docs/sslcerts.html17541755curl failed to verify the legitimacy of the server and therefore could not1756establish a secure connection to it. To learn more about this situation and1757how to fix it, please visit the webpage mentioned above.1758* Host test.foo:443 was resolved.1759* IPv6: 2001:db8:1::31760* IPv4: 192.168.1.31761* Trying [2001:db8:1::3]:443...1762* ALPN: curl offers h2,http/1.11763} [5 bytes data]1764* TLSv1.3 (OUT), TLS handshake, Client hello (1):1765} [1552 bytes data]1766* SSL Trust Anchors:1767* OpenSSL default paths (fallback)1768{ [5 bytes data]1769* TLSv1.3 (IN), TLS handshake, Server hello (2):1770{ [1210 bytes data]1771* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1772{ [1 bytes data]1773* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1774{ [19 bytes data]1775* TLSv1.3 (IN), TLS handshake, Certificate (11):1776{ [1010 bytes data]1777* TLSv1.3 (IN), TLS handshake, CERT verify (15):1778{ [111 bytes data]1779* TLSv1.3 (IN), TLS handshake, Finished (20):1780{ [52 bytes data]1781* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1782} [1 bytes data]1783* TLSv1.3 (OUT), TLS handshake, Finished (20):1784} [52 bytes data]1785* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1786* ALPN: server accepted h21787* Server certificate:1788* subject: CN=test.foo1789* start date: Sep 18 05:27:24 2026 GMT1790* expire date: Oct 18 05:27:24 2028 GMT1791* issuer: CN=minica root ca 2e2b191792* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841793* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841794* subjectAltName: "test.foo" matches cert's "test.foo"1795* OpenSSL verify result: 131796* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1797* closing connection #01798curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1799More details here: https://curl.se/docs/sslcerts.html18001801curl failed to verify the legitimacy of the server and therefore could not1802establish a secure connection to it. To learn more about this situation and1803how to fix it, please visit the webpage mentioned above.1804* Trying [2001:db8:1::3]:443...1805* Host test.foo:443 was resolved.1806* IPv6: 2001:db8:1::31807* IPv4: 192.168.1.31808* ALPN: curl offers h2,http/1.11809} [5 bytes data]1810* TLSv1.3 (OUT), TLS handshake, Client hello (1):1811} [1552 bytes data]1812* SSL Trust Anchors:1813* OpenSSL default paths (fallback)1814{ [5 bytes data]1815* TLSv1.3 (IN), TLS handshake, Server hello (2):1816{ [1210 bytes data]1817* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1818{ [1 bytes data]1819* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1820{ [19 bytes data]1821* TLSv1.3 (IN), TLS handshake, Certificate (11):1822{ [1010 bytes data]1823* TLSv1.3 (IN), TLS handshake, CERT verify (15):1824{ [112 bytes data]1825* TLSv1.3 (IN), TLS handshake, Finished (20):1826{ [52 bytes data]1827* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1828} [1 bytes data]1829* TLSv1.3 (OUT), TLS handshake, Finished (20):1830} [52 bytes data]1831* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1832* ALPN: server accepted h21833* Server certificate:1834* subject: CN=test.foo1835* start date: Sep 18 05:27:24 2026 GMT1836* expire date: Oct 18 05:27:24 2028 GMT1837* issuer: CN=minica root ca 2e2b191838* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841839* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841840* subjectAltName: "test.foo" matches cert's "test.foo"1841* OpenSSL verify result: 131842* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1843* closing connection #01844curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1845More details here: https://curl.se/docs/sslcerts.html18461847curl failed to verify the legitimacy of the server and therefore could not1848establish a secure connection to it. To learn more about this situation and1849how to fix it, please visit the webpage mentioned above.1850* Host test.foo:443 was resolved.1851* IPv6: 2001:db8:1::31852* IPv4: 192.168.1.31853* Trying [2001:db8:1::3]:443...1854* ALPN: curl offers h2,http/1.11855} [5 bytes data]1856* TLSv1.3 (OUT), TLS handshake, Client hello (1):1857} [1552 bytes data]1858* SSL Trust Anchors:1859* OpenSSL default paths (fallback)1860{ [5 bytes data]1861* TLSv1.3 (IN), TLS handshake, Server hello (2):1862{ [1210 bytes data]1863* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1864{ [1 bytes data]1865* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1866{ [19 bytes data]1867* TLSv1.3 (IN), TLS handshake, Certificate (11):1868{ [1010 bytes data]1869* TLSv1.3 (IN), TLS handshake, CERT verify (15):1870{ [111 bytes data]1871* TLSv1.3 (IN), TLS handshake, Finished (20):1872{ [52 bytes data]1873* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1874} [1 bytes data]1875* TLSv1.3 (OUT), TLS handshake, Finished (20):1876} [52 bytes data]1877* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1878* ALPN: server accepted h21879* Server certificate:1880* subject: CN=test.foo1881* start date: Sep 18 05:27:24 2026 GMT1882* expire date: Oct 18 05:27:24 2028 GMT1883* issuer: CN=minica root ca 2e2b191884* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841885* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841886* subjectAltName: "test.foo" matches cert's "test.foo"1887* OpenSSL verify result: 131888* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1889* closing connection #01890curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1891More details here: https://curl.se/docs/sslcerts.html18921893curl failed to verify the legitimacy of the server and therefore could not1894establish a secure connection to it. To learn more about this situation and1895how to fix it, please visit the webpage mentioned above.1896* Host test.foo:443 was resolved.1897* IPv6: 2001:db8:1::31898* IPv4: 192.168.1.31899* Trying [2001:db8:1::3]:443...1900* ALPN: curl offers h2,http/1.11901} [5 bytes data]1902* TLSv1.3 (OUT), TLS handshake, Client hello (1):1903} [1552 bytes data]1904* SSL Trust Anchors:1905* OpenSSL default paths (fallback)1906{ [5 bytes data]1907* TLSv1.3 (IN), TLS handshake, Server hello (2):1908{ [1210 bytes data]1909* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1910{ [1 bytes data]1911* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1912{ [19 bytes data]1913* TLSv1.3 (IN), TLS handshake, Certificate (11):1914{ [1010 bytes data]1915* TLSv1.3 (IN), TLS handshake, CERT verify (15):1916{ [111 bytes data]1917* TLSv1.3 (IN), TLS handshake, Finished (20):1918{ [52 bytes data]1919* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1920} [1 bytes data]1921* TLSv1.3 (OUT), TLS handshake, Finished (20):1922} [52 bytes data]1923* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1924* ALPN: server accepted h21925* Server certificate:1926* subject: CN=test.foo1927* start date: Sep 18 05:27:24 2026 GMT1928* expire date: Oct 18 05:27:24 2028 GMT1929* issuer: CN=minica root ca 2e2b191930* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841931* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841932* subjectAltName: "test.foo" matches cert's "test.foo"1933* OpenSSL verify result: 131934* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1935* closing connection #01936curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1937More details here: https://curl.se/docs/sslcerts.html19381939curl failed to verify the legitimacy of the server and therefore could not1940establish a secure connection to it. To learn more about this situation and1941how to fix it, please visit the webpage mentioned above.1942* Host test.foo:443 was resolved.1943* IPv6: 2001:db8:1::31944* IPv4: 192.168.1.31945* Trying [2001:db8:1::3]:443...1946* ALPN: curl offers h2,http/1.11947} [5 bytes data]1948* TLSv1.3 (OUT), TLS handshake, Client hello (1):1949} [1552 bytes data]1950* SSL Trust Anchors:1951* OpenSSL default paths (fallback)1952{ [5 bytes data]1953* TLSv1.3 (IN), TLS handshake, Server hello (2):1954{ [1210 bytes data]1955* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1956{ [1 bytes data]1957* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1958{ [19 bytes data]1959* TLSv1.3 (IN), TLS handshake, Certificate (11):1960{ [1010 bytes data]1961* TLSv1.3 (IN), TLS handshake, CERT verify (15):1962{ [110 bytes data]1963* TLSv1.3 (IN), TLS handshake, Finished (20):1964{ [52 bytes data]1965* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1966} [1 bytes data]1967* TLSv1.3 (OUT), TLS handshake, Finished (20):1968} [52 bytes data]1969* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1970* ALPN: server accepted h21971* Server certificate:1972* subject: CN=test.foo1973* start date: Sep 18 05:27:24 2026 GMT1974* expire date: Oct 18 05:27:24 2028 GMT1975* issuer: CN=minica root ca 2e2b191976* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841977* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841978* subjectAltName: "test.foo" matches cert's "test.foo"1979* OpenSSL verify result: 131980* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1981* closing connection #01982curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1983More details here: https://curl.se/docs/sslcerts.html19841985curl failed to verify the legitimacy of the server and therefore could not1986establish a secure connection to it. To learn more about this situation and1987how to fix it, please visit the webpage mentioned above.1988* Host test.foo:443 was resolved.1989* IPv6: 2001:db8:1::31990* IPv4: 192.168.1.31991* Trying [2001:db8:1::3]:443...1992* ALPN: curl offers h2,http/1.11993} [5 bytes data]1994* TLSv1.3 (OUT), TLS handshake, Client hello (1):1995} [1552 bytes data]1996* SSL Trust Anchors:1997* OpenSSL default paths (fallback)1998{ [5 bytes data]1999* TLSv1.3 (IN), TLS handshake, Server hello (2):2000{ [1210 bytes data]
loading 35,097 hidden lines…
37098{ [1210 bytes data]37099* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37100{ [1 bytes data]37101* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37102{ [19 bytes data]37103* TLSv1.3 (IN), TLS handshake, Certificate (11):37104{ [1010 bytes data]37105* TLSv1.3 (IN), TLS handshake, CERT verify (15):37106{ [110 bytes data]37107* TLSv1.3 (IN), TLS handshake, Finished (20):37108{ [52 bytes data]37109* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37110} [1 bytes data]37111* TLSv1.3 (OUT), TLS handshake, Finished (20):37112} [52 bytes data]37113* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37114* ALPN: server accepted h237115* Server certificate:37116* subject: CN=test.foo37117* start date: Sep 18 05:27:24 2026 GMT37118* expire date: Oct 18 05:27:24 2028 GMT37119* issuer: CN=minica root ca 2e2b1937120* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437121* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437122* subjectAltName: "test.foo" matches cert's "test.foo"37123* OpenSSL verify result: 1337124* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37125* closing connection #037126curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37127More details here: https://curl.se/docs/sslcerts.html3712837129curl failed to verify the legitimacy of the server and therefore could not37130establish a secure connection to it. To learn more about this situation and37131how to fix it, please visit the webpage mentioned above.37132* Host test.foo:443 was resolved.37133* IPv6: 2001:db8:1::337134* IPv4: 192.168.1.337135* Trying [2001:db8:1::3]:443...37136* ALPN: curl offers h2,http/1.137137} [5 bytes data]37138* TLSv1.3 (OUT), TLS handshake, Client hello (1):37139} [1552 bytes data]37140* SSL Trust Anchors:37141* OpenSSL default paths (fallback)37142{ [5 bytes data]37143* TLSv1.3 (IN), TLS handshake, Server hello (2):37144{ [1210 bytes data]37145* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37146{ [1 bytes data]37147* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37148{ [19 bytes data]37149* TLSv1.3 (IN), TLS handshake, Certificate (11):37150{ [1010 bytes data]37151* TLSv1.3 (IN), TLS handshake, CERT verify (15):37152{ [111 bytes data]37153* TLSv1.3 (IN), TLS handshake, Finished (20):37154{ [52 bytes data]37155* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37156} [1 bytes data]37157* TLSv1.3 (OUT), TLS handshake, Finished (20):37158} [52 bytes data]37159* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37160* ALPN: server accepted h237161* Server certificate:37162* subject: CN=test.foo37163* start date: Sep 18 05:27:24 2026 GMT37164* expire date: Oct 18 05:27:24 2028 GMT37165* issuer: CN=minica root ca 2e2b1937166* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437167* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437168* subjectAltName: "test.foo" matches cert's "test.foo"37169* OpenSSL verify result: 1337170* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37171* closing connection #037172curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37173More details here: https://curl.se/docs/sslcerts.html3717437175curl failed to verify the legitimacy of the server and therefore could not37176establish a secure connection to it. To learn more about this situation and37177how to fix it, please visit the webpage mentioned above.37178* Host test.foo:443 was resolved.37179* IPv6: 2001:db8:1::337180* IPv4: 192.168.1.337181* Trying [2001:db8:1::3]:443...37182* ALPN: curl offers h2,http/1.137183} [5 bytes data]37184* TLSv1.3 (OUT), TLS handshake, Client hello (1):37185} [1552 bytes data]37186* SSL Trust Anchors:37187* OpenSSL default paths (fallback)37188{ [5 bytes data]37189* TLSv1.3 (IN), TLS handshake, Server hello (2):37190{ [1210 bytes data]37191* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37192{ [1 bytes data]37193* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37194{ [19 bytes data]37195* TLSv1.3 (IN), TLS handshake, Certificate (11):37196{ [1010 bytes data]37197* TLSv1.3 (IN), TLS handshake, CERT verify (15):37198{ [111 bytes data]37199* TLSv1.3 (IN), TLS handshake, Finished (20):37200{ [52 bytes data]37201* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37202} [1 bytes data]37203* TLSv1.3 (OUT), TLS handshake, Finished (20):37204} [52 bytes data]37205* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37206* ALPN: server accepted h237207* Server certificate:37208* subject: CN=test.foo37209* start date: Sep 18 05:27:24 2026 GMT37210* expire date: Oct 18 05:27:24 2028 GMT37211* issuer: CN=minica root ca 2e2b1937212* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437213* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437214* subjectAltName: "test.foo" matches cert's "test.foo"37215* OpenSSL verify result: 1337216* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37217* closing connection #037218curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37219More details here: https://curl.se/docs/sslcerts.html3722037221curl failed to verify the legitimacy of the server and therefore could not37222establish a secure connection to it. To learn more about this situation and37223how to fix it, please visit the webpage mentioned above.37224* Host test.foo:443 was resolved.37225* IPv6: 2001:db8:1::337226* IPv4: 192.168.1.337227* Trying [2001:db8:1::3]:443...37228* ALPN: curl offers h2,http/1.137229} [5 bytes data]37230* TLSv1.3 (OUT), TLS handshake, Client hello (1):37231} [1552 bytes data]37232* SSL Trust Anchors:37233* OpenSSL default paths (fallback)37234{ [5 bytes data]37235* TLSv1.3 (IN), TLS handshake, Server hello (2):37236{ [1210 bytes data]37237* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37238{ [1 bytes data]37239* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37240{ [19 bytes data]37241* TLSv1.3 (IN), TLS handshake, Certificate (11):37242{ [1010 bytes data]37243* TLSv1.3 (IN), TLS handshake, CERT verify (15):37244{ [112 bytes data]37245* TLSv1.3 (IN), TLS handshake, Finished (20):37246{ [52 bytes data]37247* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37248} [1 bytes data]37249* TLSv1.3 (OUT), TLS handshake, Finished (20):37250} [52 bytes data]37251* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37252* ALPN: server accepted h237253* Server certificate:37254* subject: CN=test.foo37255* start date: Sep 18 05:27:24 2026 GMT37256* expire date: Oct 18 05:27:24 2028 GMT37257* issuer: CN=minica root ca 2e2b1937258* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437259* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437260* subjectAltName: "test.foo" matches cert's "test.foo"37261* OpenSSL verify result: 1337262* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37263* closing connection #037264curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37265More details here: https://curl.se/docs/sslcerts.html3726637267curl failed to verify the legitimacy of the server and therefore could not37268establish a secure connection to it. To learn more about this situation and37269how to fix it, please visit the webpage mentioned above.37270* Host test.foo:443 was resolved.37271* IPv6: 2001:db8:1::337272* IPv4: 192.168.1.337273* Trying [2001:db8:1::3]:443...37274* ALPN: curl offers h2,http/1.137275} [5 bytes data]37276* TLSv1.3 (OUT), TLS handshake, Client hello (1):37277} [1552 bytes data]37278* SSL Trust Anchors:37279* OpenSSL default paths (fallback)37280{ [5 bytes data]37281* TLSv1.3 (IN), TLS handshake, Server hello (2):37282{ [1210 bytes data]37283* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37284{ [1 bytes data]37285* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37286{ [19 bytes data]37287* TLSv1.3 (IN), TLS handshake, Certificate (11):37288{ [1010 bytes data]37289* TLSv1.3 (IN), TLS handshake, CERT verify (15):37290{ [111 bytes data]37291* TLSv1.3 (IN), TLS handshake, Finished (20):37292{ [52 bytes data]37293* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37294} [1 bytes data]37295* TLSv1.3 (OUT), TLS handshake, Finished (20):37296} [52 bytes data]37297* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37298* ALPN: server accepted h237299* Server certificate:37300* subject: CN=test.foo37301* start date: Sep 18 05:27:24 2026 GMT37302* expire date: Oct 18 05:27:24 2028 GMT37303* issuer: CN=minica root ca 2e2b1937304* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437305* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437306* subjectAltName: "test.foo" matches cert's "test.foo"37307* OpenSSL verify result: 1337308* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37309* closing connection #037310curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37311More details here: https://curl.se/docs/sslcerts.html3731237313curl failed to verify the legitimacy of the server and therefore could not37314establish a secure connection to it. To learn more about this situation and37315how to fix it, please visit the webpage mentioned above.37316* Host test.foo:443 was resolved.37317* IPv6: 2001:db8:1::337318* IPv4: 192.168.1.337319* Trying [2001:db8:1::3]:443...37320* ALPN: curl offers h2,http/1.137321} [5 bytes data]37322* TLSv1.3 (OUT), TLS handshake, Client hello (1):37323} [1552 bytes data]37324* SSL Trust Anchors:37325* OpenSSL default paths (fallback)37326{ [5 bytes data]37327* TLSv1.3 (IN), TLS handshake, Server hello (2):37328{ [1210 bytes data]37329* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37330{ [1 bytes data]37331* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37332{ [19 bytes data]37333* TLSv1.3 (IN), TLS handshake, Certificate (11):37334{ [1010 bytes data]37335* TLSv1.3 (IN), TLS handshake, CERT verify (15):37336{ [111 bytes data]37337* TLSv1.3 (IN), TLS handshake, Finished (20):37338{ [52 bytes data]37339* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37340} [1 bytes data]37341* TLSv1.3 (OUT), TLS handshake, Finished (20):37342} [52 bytes data]37343* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37344* ALPN: server accepted h237345* Server certificate:37346* subject: CN=test.foo37347* start date: Sep 18 05:27:24 2026 GMT37348* expire date: Oct 18 05:27:24 2028 GMT37349* issuer: CN=minica root ca 2e2b1937350* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437351* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437352* subjectAltName: "test.foo" matches cert's "test.foo"37353* OpenSSL verify result: 1337354* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37355* closing connection #037356curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37357More details here: https://curl.se/docs/sslcerts.html3735837359curl failed to verify the legitimacy of the server and therefore could not37360establish a secure connection to it. To learn more about this situation and37361how to fix it, please visit the webpage mentioned above.37362* Host test.foo:443 was resolved.37363* IPv6: 2001:db8:1::337364* IPv4: 192.168.1.337365* Trying [2001:db8:1::3]:443...37366* ALPN: curl offers h2,http/1.137367} [5 bytes data]37368* TLSv1.3 (OUT), TLS handshake, Client hello (1):37369} [1552 bytes data]37370* SSL Trust Anchors:37371* OpenSSL default paths (fallback)37372{ [5 bytes data]37373* TLSv1.3 (IN), TLS handshake, Server hello (2):37374{ [1210 bytes data]37375* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37376{ [1 bytes data]37377* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37378{ [19 bytes data]37379* TLSv1.3 (IN), TLS handshake, Certificate (11):37380{ [1010 bytes data]37381* TLSv1.3 (IN), TLS handshake, CERT verify (15):37382{ [112 bytes data]37383* TLSv1.3 (IN), TLS handshake, Finished (20):37384{ [52 bytes data]37385* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37386} [1 bytes data]37387* TLSv1.3 (OUT), TLS handshake, Finished (20):37388} [52 bytes data]37389* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37390* ALPN: server accepted h237391* Server certificate:37392* subject: CN=test.foo37393* start date: Sep 18 05:27:24 2026 GMT37394* expire date: Oct 18 05:27:24 2028 GMT37395* issuer: CN=minica root ca 2e2b1937396* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437397* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437398* subjectAltName: "test.foo" matches cert's "test.foo"37399* OpenSSL verify result: 1337400* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37401* closing connection #037402curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37403More details here: https://curl.se/docs/sslcerts.html3740437405curl failed to verify the legitimacy of the server and therefore could not37406establish a secure connection to it. To learn more about this situation and37407how to fix it, please visit the webpage mentioned above.37408* Host test.foo:443 was resolved.37409* IPv6: 2001:db8:1::337410* IPv4: 192.168.1.337411* Trying [2001:db8:1::3]:443...37412* ALPN: curl offers h2,http/1.137413} [5 bytes data]37414* TLSv1.3 (OUT), TLS handshake, Client hello (1):37415} [1552 bytes data]37416* SSL Trust Anchors:37417* OpenSSL default paths (fallback)37418{ [5 bytes data]37419* TLSv1.3 (IN), TLS handshake, Server hello (2):37420{ [1210 bytes data]37421* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37422{ [1 bytes data]37423* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37424{ [19 bytes data]37425* TLSv1.3 (IN), TLS handshake, Certificate (11):37426{ [1010 bytes data]37427* TLSv1.3 (IN), TLS handshake, CERT verify (15):37428{ [110 bytes data]37429* TLSv1.3 (IN), TLS handshake, Finished (20):37430{ [52 bytes data]37431* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37432} [1 bytes data]37433* TLSv1.3 (OUT), TLS handshake, Finished (20):37434} [52 bytes data]37435* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37436* ALPN: server accepted h237437* Server certificate:37438* subject: CN=test.foo37439* start date: Sep 18 05:27:24 2026 GMT37440* expire date: Oct 18 05:27:24 2028 GMT37441* issuer: CN=minica root ca 2e2b1937442* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437443* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437444* subjectAltName: "test.foo" matches cert's "test.foo"37445* OpenSSL verify result: 1337446* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37447* closing connection #037448curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37449More details here: https://curl.se/docs/sslcerts.html3745037451curl failed to verify the legitimacy of the server and therefore could not37452establish a secure connection to it. To learn more about this situation and37453how to fix it, please visit the webpage mentioned above.37454* Host test.foo:443 was resolved.37455* IPv6: 2001:db8:1::337456* IPv4: 192.168.1.337457* Trying [2001:db8:1::3]:443...37458* ALPN: curl offers h2,http/1.137459} [5 bytes data]37460* TLSv1.3 (OUT), TLS handshake, Client hello (1):37461} [1552 bytes data]37462* SSL Trust Anchors:37463* OpenSSL default paths (fallback)37464{ [5 bytes data]37465* TLSv1.3 (IN), TLS handshake, Server hello (2):37466{ [1210 bytes data]37467* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37468{ [1 bytes data]37469* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37470{ [19 bytes data]37471* TLSv1.3 (IN), TLS handshake, Certificate (11):37472{ [1010 bytes data]37473* TLSv1.3 (IN), TLS handshake, CERT verify (15):37474{ [110 bytes data]37475* TLSv1.3 (IN), TLS handshake, Finished (20):37476{ [52 bytes data]37477* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37478} [1 bytes data]37479* TLSv1.3 (OUT), TLS handshake, Finished (20):37480} [52 bytes data]37481* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37482* ALPN: server accepted h237483* Server certificate:37484* subject: CN=test.foo37485* start date: Sep 18 05:27:24 2026 GMT37486* expire date: Oct 18 05:27:24 2028 GMT37487* issuer: CN=minica root ca 2e2b1937488* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437489* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437490* subjectAltName: "test.foo" matches cert's "test.foo"37491* OpenSSL verify result: 1337492* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37493* closing connection #037494curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37495More details here: https://curl.se/docs/sslcerts.html3749637497curl failed to verify the legitimacy of the server and therefore could not37498establish a secure connection to it. To learn more about this situation and37499how to fix it, please visit the webpage mentioned above.37500* Host test.foo:443 was resolved.37501* IPv6: 2001:db8:1::337502* IPv4: 192.168.1.337503* Trying [2001:db8:1::3]:443...37504* ALPN: curl offers h2,http/1.137505} [5 bytes data]37506* TLSv1.3 (OUT), TLS handshake, Client hello (1):37507} [1552 bytes data]37508* SSL Trust Anchors:37509* OpenSSL default paths (fallback)37510{ [5 bytes data]37511* TLSv1.3 (IN), TLS handshake, Server hello (2):37512{ [1210 bytes data]37513* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37514{ [1 bytes data]37515* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37516{ [19 bytes data]37517* TLSv1.3 (IN), TLS handshake, Certificate (11):37518{ [1010 bytes data]37519* TLSv1.3 (IN), TLS handshake, CERT verify (15):37520{ [112 bytes data]37521* TLSv1.3 (IN), TLS handshake, Finished (20):37522{ [52 bytes data]37523* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37524} [1 bytes data]37525* TLSv1.3 (OUT), TLS handshake, Finished (20):37526} [52 bytes data]37527* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37528* ALPN: server accepted h237529* Server certificate:37530* subject: CN=test.foo37531* start date: Sep 18 05:27:24 2026 GMT37532* expire date: Oct 18 05:27:24 2028 GMT37533* issuer: CN=minica root ca 2e2b1937534* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437535* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437536* subjectAltName: "test.foo" matches cert's "test.foo"37537* OpenSSL verify result: 1337538* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37539* closing connection #037540curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37541More details here: https://curl.se/docs/sslcerts.html3754237543curl failed to verify the legitimacy of the server and therefore could not37544establish a secure connection to it. To learn more about this situation and37545how to fix it, please visit the webpage mentioned above.37546* Host test.foo:443 was resolved.37547* IPv6: 2001:db8:1::337548* IPv4: 192.168.1.337549* Trying [2001:db8:1::3]:443...37550* ALPN: curl offers h2,http/1.137551} [5 bytes data]37552* TLSv1.3 (OUT), TLS handshake, Client hello (1):37553} [1552 bytes data]37554* SSL Trust Anchors:37555* OpenSSL default paths (fallback)37556{ [5 bytes data]37557* TLSv1.3 (IN), TLS handshake, Server hello (2):37558{ [1210 bytes data]37559* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37560{ [1 bytes data]37561* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37562{ [19 bytes data]37563* TLSv1.3 (IN), TLS handshake, Certificate (11):37564{ [1010 bytes data]37565* TLSv1.3 (IN), TLS handshake, CERT verify (15):37566{ [112 bytes data]37567* TLSv1.3 (IN), TLS handshake, Finished (20):37568{ [52 bytes data]37569* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37570} [1 bytes data]37571* TLSv1.3 (OUT), TLS handshake, Finished (20):37572} [52 bytes data]37573* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37574* ALPN: server accepted h237575* Server certificate:37576* subject: CN=test.foo37577* start date: Sep 18 05:27:24 2026 GMT37578* expire date: Oct 18 05:27:24 2028 GMT37579* issuer: CN=minica root ca 2e2b1937580* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437581* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437582* subjectAltName: "test.foo" matches cert's "test.foo"37583* OpenSSL verify result: 1337584* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37585* closing connection #037586curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37587More details here: https://curl.se/docs/sslcerts.html3758837589curl failed to verify the legitimacy of the server and therefore could not37590establish a secure connection to it. To learn more about this situation and37591how to fix it, please visit the webpage mentioned above.37592* Host test.foo:443 was resolved.37593* IPv6: 2001:db8:1::337594* IPv4: 192.168.1.337595* Trying [2001:db8:1::3]:443...37596* ALPN: curl offers h2,http/1.137597} [5 bytes data]37598* TLSv1.3 (OUT), TLS handshake, Client hello (1):37599} [1552 bytes data]37600* SSL Trust Anchors:37601* OpenSSL default paths (fallback)37602{ [5 bytes data]37603* TLSv1.3 (IN), TLS handshake, Server hello (2):37604{ [1210 bytes data]37605* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37606{ [1 bytes data]37607* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37608{ [19 bytes data]37609* TLSv1.3 (IN), TLS handshake, Certificate (11):37610{ [1010 bytes data]37611* TLSv1.3 (IN), TLS handshake, CERT verify (15):37612{ [111 bytes data]37613* TLSv1.3 (IN), TLS handshake, Finished (20):37614{ [52 bytes data]37615* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37616} [1 bytes data]37617* TLSv1.3 (OUT), TLS handshake, Finished (20):37618} [52 bytes data]37619* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37620* ALPN: server accepted h237621* Server certificate:37622* subject: CN=test.foo37623* start date: Sep 18 05:27:24 2026 GMT37624* expire date: Oct 18 05:27:24 2028 GMT37625* issuer: CN=minica root ca 2e2b1937626* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437627* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437628* subjectAltName: "test.foo" matches cert's "test.foo"37629* OpenSSL verify result: 1337630* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37631* closing connection #037632curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37633More details here: https://curl.se/docs/sslcerts.html3763437635curl failed to verify the legitimacy of the server and therefore could not37636establish a secure connection to it. To learn more about this situation and37637how to fix it, please visit the webpage mentioned above.37638* Host test.foo:443 was resolved.37639* IPv6: 2001:db8:1::337640* IPv4: 192.168.1.337641* Trying [2001:db8:1::3]:443...37642* ALPN: curl offers h2,http/1.137643} [5 bytes data]37644* TLSv1.3 (OUT), TLS handshake, Client hello (1):37645} [1552 bytes data]37646* SSL Trust Anchors:37647* OpenSSL default paths (fallback)37648{ [5 bytes data]37649* TLSv1.3 (IN), TLS handshake, Server hello (2):37650{ [1210 bytes data]37651* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37652{ [1 bytes data]37653* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37654{ [19 bytes data]37655* TLSv1.3 (IN), TLS handshake, Certificate (11):37656{ [1010 bytes data]37657* TLSv1.3 (IN), TLS handshake, CERT verify (15):37658{ [110 bytes data]37659* TLSv1.3 (IN), TLS handshake, Finished (20):37660{ [52 bytes data]37661* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37662} [1 bytes data]37663* TLSv1.3 (OUT), TLS handshake, Finished (20):37664} [52 bytes data]37665* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37666* ALPN: server accepted h237667* Server certificate:37668* subject: CN=test.foo37669* start date: Sep 18 05:27:24 2026 GMT37670* expire date: Oct 18 05:27:24 2028 GMT37671* issuer: CN=minica root ca 2e2b1937672* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437673* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437674* subjectAltName: "test.foo" matches cert's "test.foo"37675* OpenSSL verify result: 1337676* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37677* closing connection #037678curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37679More details here: https://curl.se/docs/sslcerts.html3768037681curl failed to verify the legitimacy of the server and therefore could not37682establish a secure connection to it. To learn more about this situation and37683how to fix it, please visit the webpage mentioned above.37684* Host test.foo:443 was resolved.37685* IPv6: 2001:db8:1::337686* IPv4: 192.168.1.337687* Trying [2001:db8:1::3]:443...37688* ALPN: curl offers h2,http/1.137689} [5 bytes data]37690* TLSv1.3 (OUT), TLS handshake, Client hello (1):37691} [1552 bytes data]37692* SSL Trust Anchors:37693* OpenSSL default paths (fallback)37694{ [5 bytes data]37695* TLSv1.3 (IN), TLS handshake, Server hello (2):37696{ [1210 bytes data]37697* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37698{ [1 bytes data]37699* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37700{ [19 bytes data]37701* TLSv1.3 (IN), TLS handshake, Certificate (11):37702{ [1010 bytes data]37703* TLSv1.3 (IN), TLS handshake, CERT verify (15):37704{ [111 bytes data]37705* TLSv1.3 (IN), TLS handshake, Finished (20):37706{ [52 bytes data]37707* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37708} [1 bytes data]37709* TLSv1.3 (OUT), TLS handshake, Finished (20):37710} [52 bytes data]37711* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37712* ALPN: server accepted h237713* Server certificate:37714* subject: CN=test.foo37715* start date: Sep 18 05:27:24 2026 GMT37716* expire date: Oct 18 05:27:24 2028 GMT37717* issuer: CN=minica root ca 2e2b1937718* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437719* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437720* subjectAltName: "test.foo" matches cert's "test.foo"37721* OpenSSL verify result: 1337722* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37723* closing connection #037724curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37725More details here: https://curl.se/docs/sslcerts.html3772637727curl failed to verify the legitimacy of the server and therefore could not37728establish a secure connection to it. To learn more about this situation and37729how to fix it, please visit the webpage mentioned above.37730* Host test.foo:443 was resolved.37731* IPv6: 2001:db8:1::337732* IPv4: 192.168.1.337733* Trying [2001:db8:1::3]:443...37734* ALPN: curl offers h2,http/1.137735} [5 bytes data]37736* TLSv1.3 (OUT), TLS handshake, Client hello (1):37737} [1552 bytes data]37738* SSL Trust Anchors:37739* OpenSSL default paths (fallback)37740{ [5 bytes data]37741* TLSv1.3 (IN), TLS handshake, Server hello (2):37742{ [1210 bytes data]37743* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37744{ [1 bytes data]37745* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37746{ [19 bytes data]37747* TLSv1.3 (IN), TLS handshake, Certificate (11):37748{ [1010 bytes data]37749* TLSv1.3 (IN), TLS handshake, CERT verify (15):37750{ [112 bytes data]37751* TLSv1.3 (IN), TLS handshake, Finished (20):37752{ [52 bytes data]37753* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37754} [1 bytes data]37755* TLSv1.3 (OUT), TLS handshake, Finished (20):37756} [52 bytes data]37757* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37758* ALPN: server accepted h237759* Server certificate:37760* subject: CN=test.foo37761* start date: Sep 18 05:27:24 2026 GMT37762* expire date: Oct 18 05:27:24 2028 GMT37763* issuer: CN=minica root ca 2e2b1937764* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437765* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437766* subjectAltName: "test.foo" matches cert's "test.foo"37767* OpenSSL verify result: 1337768* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37769* closing connection #037770curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37771More details here: https://curl.se/docs/sslcerts.html3777237773curl failed to verify the legitimacy of the server and therefore could not37774establish a secure connection to it. To learn more about this situation and37775how to fix it, please visit the webpage mentioned above.37776* Host test.foo:443 was resolved.37777* IPv6: 2001:db8:1::337778* IPv4: 192.168.1.337779* Trying [2001:db8:1::3]:443...37780* ALPN: curl offers h2,http/1.137781} [5 bytes data]37782* TLSv1.3 (OUT), TLS handshake, Client hello (1):37783} [1552 bytes data]37784* SSL Trust Anchors:37785* OpenSSL default paths (fallback)37786{ [5 bytes data]37787* TLSv1.3 (IN), TLS handshake, Server hello (2):37788{ [1210 bytes data]37789* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37790{ [1 bytes data]37791* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37792{ [19 bytes data]37793* TLSv1.3 (IN), TLS handshake, Certificate (11):37794{ [1010 bytes data]37795* TLSv1.3 (IN), TLS handshake, CERT verify (15):37796{ [112 bytes data]37797* TLSv1.3 (IN), TLS handshake, Finished (20):37798{ [52 bytes data]37799* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37800} [1 bytes data]37801* TLSv1.3 (OUT), TLS handshake, Finished (20):37802} [52 bytes data]37803* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37804* ALPN: server accepted h237805* Server certificate:37806* subject: CN=test.foo37807* start date: Sep 18 05:27:24 2026 GMT37808* expire date: Oct 18 05:27:24 2028 GMT37809* issuer: CN=minica root ca 2e2b1937810* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437811* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437812* subjectAltName: "test.foo" matches cert's "test.foo"37813* OpenSSL verify result: 1337814* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37815* closing connection #037816curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37817More details here: https://curl.se/docs/sslcerts.html3781837819curl failed to verify the legitimacy of the server and therefore could not37820establish a secure connection to it. To learn more about this situation and37821how to fix it, please visit the webpage mentioned above.37822* Host test.foo:443 was resolved.37823* IPv6: 2001:db8:1::337824* IPv4: 192.168.1.337825* Trying [2001:db8:1::3]:443...37826* ALPN: curl offers h2,http/1.137827} [5 bytes data]37828* TLSv1.3 (OUT), TLS handshake, Client hello (1):37829} [1552 bytes data]37830* SSL Trust Anchors:37831* OpenSSL default paths (fallback)37832{ [5 bytes data]37833* TLSv1.3 (IN), TLS handshake, Server hello (2):37834{ [1210 bytes data]37835* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37836{ [1 bytes data]37837* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37838{ [19 bytes data]37839* TLSv1.3 (IN), TLS handshake, Certificate (11):37840{ [1010 bytes data]37841* TLSv1.3 (IN), TLS handshake, CERT verify (15):37842{ [111 bytes data]37843* TLSv1.3 (IN), TLS handshake, Finished (20):37844{ [52 bytes data]37845* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37846} [1 bytes data]37847* TLSv1.3 (OUT), TLS handshake, Finished (20):37848} [52 bytes data]37849* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37850* ALPN: server accepted h237851* Server certificate:37852* subject: CN=test.foo37853* start date: Sep 18 05:27:24 2026 GMT37854* expire date: Oct 18 05:27:24 2028 GMT37855* issuer: CN=minica root ca 2e2b1937856* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437857* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437858* subjectAltName: "test.foo" matches cert's "test.foo"37859* OpenSSL verify result: 1337860* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37861* closing connection #037862curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37863More details here: https://curl.se/docs/sslcerts.html3786437865curl failed to verify the legitimacy of the server and therefore could not37866establish a secure connection to it. To learn more about this situation and37867how to fix it, please visit the webpage mentioned above.37868* Host test.foo:443 was resolved.37869* IPv6: 2001:db8:1::337870* IPv4: 192.168.1.337871* Trying [2001:db8:1::3]:443...37872* ALPN: curl offers h2,http/1.137873} [5 bytes data]37874* TLSv1.3 (OUT), TLS handshake, Client hello (1):37875} [1552 bytes data]37876* SSL Trust Anchors:37877* OpenSSL default paths (fallback)37878{ [5 bytes data]37879* TLSv1.3 (IN), TLS handshake, Server hello (2):37880{ [1210 bytes data]37881* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37882{ [1 bytes data]37883* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37884{ [19 bytes data]37885* TLSv1.3 (IN), TLS handshake, Certificate (11):37886{ [1010 bytes data]37887* TLSv1.3 (IN), TLS handshake, CERT verify (15):37888{ [112 bytes data]37889* TLSv1.3 (IN), TLS handshake, Finished (20):37890{ [52 bytes data]37891* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37892} [1 bytes data]37893* TLSv1.3 (OUT), TLS handshake, Finished (20):37894} [52 bytes data]37895* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37896* ALPN: server accepted h237897* Server certificate:37898* subject: CN=test.foo37899* start date: Sep 18 05:27:24 2026 GMT37900* expire date: Oct 18 05:27:24 2028 GMT37901* issuer: CN=minica root ca 2e2b1937902* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437903* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437904* subjectAltName: "test.foo" matches cert's "test.foo"37905* OpenSSL verify result: 1337906* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37907* closing connection #037908curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37909More details here: https://curl.se/docs/sslcerts.html3791037911curl failed to verify the legitimacy of the server and therefore could not37912establish a secure connection to it. To learn more about this situation and37913how to fix it, please visit the webpage mentioned above.37914* Host test.foo:443 was resolved.37915* IPv6: 2001:db8:1::337916* IPv4: 192.168.1.337917* Trying [2001:db8:1::3]:443...37918* ALPN: curl offers h2,http/1.137919} [5 bytes data]37920* TLSv1.3 (OUT), TLS handshake, Client hello (1):37921} [1552 bytes data]37922* SSL Trust Anchors:37923* OpenSSL default paths (fallback)37924{ [5 bytes data]37925* TLSv1.3 (IN), TLS handshake, Server hello (2):37926{ [1210 bytes data]37927* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37928{ [1 bytes data]37929* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37930{ [19 bytes data]37931* TLSv1.3 (IN), TLS handshake, Certificate (11):37932{ [1010 bytes data]37933* TLSv1.3 (IN), TLS handshake, CERT verify (15):37934{ [110 bytes data]37935* TLSv1.3 (IN), TLS handshake, Finished (20):37936{ [52 bytes data]37937* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37938} [1 bytes data]37939* TLSv1.3 (OUT), TLS handshake, Finished (20):37940} [52 bytes data]37941* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37942* ALPN: server accepted h237943* Server certificate:37944* subject: CN=test.foo37945* start date: Sep 18 05:27:24 2026 GMT37946* expire date: Oct 18 05:27:24 2028 GMT37947* issuer: CN=minica root ca 2e2b1937948* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437949* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437950* subjectAltName: "test.foo" matches cert's "test.foo"37951* OpenSSL verify result: 1337952* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37953* closing connection #037954curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37955More details here: https://curl.se/docs/sslcerts.html3795637957curl failed to verify the legitimacy of the server and therefore could not37958establish a secure connection to it. To learn more about this situation and37959how to fix it, please visit the webpage mentioned above.37960* Host test.foo:443 was resolved.37961* IPv6: 2001:db8:1::337962* IPv4: 192.168.1.337963* Trying [2001:db8:1::3]:443...37964* ALPN: curl offers h2,http/1.137965} [5 bytes data]37966* TLSv1.3 (OUT), TLS handshake, Client hello (1):37967} [1552 bytes data]37968* SSL Trust Anchors:37969* OpenSSL default paths (fallback)37970{ [5 bytes data]37971* TLSv1.3 (IN), TLS handshake, Server hello (2):37972{ [1210 bytes data]37973* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37974{ [1 bytes data]37975* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37976{ [19 bytes data]37977* TLSv1.3 (IN), TLS handshake, Certificate (11):37978{ [1010 bytes data]37979* TLSv1.3 (IN), TLS handshake, CERT verify (15):37980{ [111 bytes data]37981* TLSv1.3 (IN), TLS handshake, Finished (20):37982{ [52 bytes data]37983* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37984} [1 bytes data]37985* TLSv1.3 (OUT), TLS handshake, Finished (20):37986} [52 bytes data]37987* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37988* ALPN: server accepted h237989* Server certificate:37990* subject: CN=test.foo37991* start date: Sep 18 05:27:24 2026 GMT37992* expire date: Oct 18 05:27:24 2028 GMT37993* issuer: CN=minica root ca 2e2b1937994* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437995* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437996* subjectAltName: "test.foo" matches cert's "test.foo"37997* OpenSSL verify result: 1337998* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37999* closing connection #038000curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38001More details here: https://curl.se/docs/sslcerts.html3800238003curl failed to verify the legitimacy of the server and therefore could not38004establish a secure connection to it. To learn more about this situation and38005how to fix it, please visit the webpage mentioned above.38006* Host test.foo:443 was resolved.38007* IPv6: 2001:db8:1::338008* IPv4: 192.168.1.338009* Trying [2001:db8:1::3]:443...38010* ALPN: curl offers h2,http/1.138011} [5 bytes data]38012* TLSv1.3 (OUT), TLS handshake, Client hello (1):38013} [1552 bytes data]38014* SSL Trust Anchors:38015* OpenSSL default paths (fallback)38016{ [5 bytes data]38017* TLSv1.3 (IN), TLS handshake, Server hello (2):38018{ [1210 bytes data]38019* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38020{ [1 bytes data]38021* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38022{ [19 bytes data]38023* TLSv1.3 (IN), TLS handshake, Certificate (11):38024{ [1010 bytes data]38025* TLSv1.3 (IN), TLS handshake, CERT verify (15):38026{ [111 bytes data]38027* TLSv1.3 (IN), TLS handshake, Finished (20):38028{ [52 bytes data]38029* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38030} [1 bytes data]38031* TLSv1.3 (OUT), TLS handshake, Finished (20):38032} [52 bytes data]38033* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38034* ALPN: server accepted h238035* Server certificate:38036* subject: CN=test.foo38037* start date: Sep 18 05:27:24 2026 GMT38038* expire date: Oct 18 05:27:24 2028 GMT38039* issuer: CN=minica root ca 2e2b1938040* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438041* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438042* subjectAltName: "test.foo" matches cert's "test.foo"38043* OpenSSL verify result: 1338044* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38045* closing connection #038046curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38047More details here: https://curl.se/docs/sslcerts.html3804838049curl failed to verify the legitimacy of the server and therefore could not38050establish a secure connection to it. To learn more about this situation and38051how to fix it, please visit the webpage mentioned above.38052* Host test.foo:443 was resolved.38053* IPv6: 2001:db8:1::338054* IPv4: 192.168.1.338055* Trying [2001:db8:1::3]:443...38056* ALPN: curl offers h2,http/1.138057} [5 bytes data]38058* TLSv1.3 (OUT), TLS handshake, Client hello (1):38059} [1552 bytes data]38060* SSL Trust Anchors:38061* OpenSSL default paths (fallback)38062{ [5 bytes data]38063* TLSv1.3 (IN), TLS handshake, Server hello (2):38064{ [1210 bytes data]38065* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38066{ [1 bytes data]38067* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38068{ [19 bytes data]38069* TLSv1.3 (IN), TLS handshake, Certificate (11):38070{ [1010 bytes data]38071* TLSv1.3 (IN), TLS handshake, CERT verify (15):38072{ [111 bytes data]38073* TLSv1.3 (IN), TLS handshake, Finished (20):38074{ [52 bytes data]38075* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38076} [1 bytes data]38077* TLSv1.3 (OUT), TLS handshake, Finished (20):38078} [52 bytes data]38079* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38080* ALPN: server accepted h238081* Server certificate:38082* subject: CN=test.foo38083* start date: Sep 18 05:27:24 2026 GMT38084* expire date: Oct 18 05:27:24 2028 GMT38085* issuer: CN=minica root ca 2e2b1938086* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438087* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438088* subjectAltName: "test.foo" matches cert's "test.foo"38089* OpenSSL verify result: 1338090* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38091* closing connection #038092curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38093More details here: https://curl.se/docs/sslcerts.html3809438095curl failed to verify the legitimacy of the server and therefore could not38096establish a secure connection to it. To learn more about this situation and38097how to fix it, please visit the webpage mentioned above.38098* Host test.foo:443 was resolved.38099* IPv6: 2001:db8:1::338100* IPv4: 192.168.1.338101* Trying [2001:db8:1::3]:443...38102* ALPN: curl offers h2,http/1.138103} [5 bytes data]38104* TLSv1.3 (OUT), TLS handshake, Client hello (1):38105} [1552 bytes data]38106* SSL Trust Anchors:38107* OpenSSL default paths (fallback)38108{ [5 bytes data]38109* TLSv1.3 (IN), TLS handshake, Server hello (2):38110{ [1210 bytes data]38111* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38112{ [1 bytes data]38113* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38114{ [19 bytes data]38115* TLSv1.3 (IN), TLS handshake, Certificate (11):38116{ [1010 bytes data]38117* TLSv1.3 (IN), TLS handshake, CERT verify (15):38118{ [110 bytes data]38119* TLSv1.3 (IN), TLS handshake, Finished (20):38120{ [52 bytes data]38121* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38122} [1 bytes data]38123* TLSv1.3 (OUT), TLS handshake, Finished (20):38124} [52 bytes data]38125* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38126* ALPN: server accepted h238127* Server certificate:38128* subject: CN=test.foo38129* start date: Sep 18 05:27:24 2026 GMT38130* expire date: Oct 18 05:27:24 2028 GMT38131* issuer: CN=minica root ca 2e2b1938132* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438133* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438134* subjectAltName: "test.foo" matches cert's "test.foo"38135* OpenSSL verify result: 1338136* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38137* closing connection #038138curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38139More details here: https://curl.se/docs/sslcerts.html3814038141curl failed to verify the legitimacy of the server and therefore could not38142establish a secure connection to it. To learn more about this situation and38143how to fix it, please visit the webpage mentioned above.38144* Host test.foo:443 was resolved.38145* IPv6: 2001:db8:1::338146* IPv4: 192.168.1.338147* Trying [2001:db8:1::3]:443...38148* ALPN: curl offers h2,http/1.138149} [5 bytes data]38150* TLSv1.3 (OUT), TLS handshake, Client hello (1):38151} [1552 bytes data]38152* SSL Trust Anchors:38153* OpenSSL default paths (fallback)38154{ [5 bytes data]38155* TLSv1.3 (IN), TLS handshake, Server hello (2):38156{ [1210 bytes data]38157* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38158{ [1 bytes data]38159* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38160{ [19 bytes data]38161* TLSv1.3 (IN), TLS handshake, Certificate (11):38162{ [1010 bytes data]38163* TLSv1.3 (IN), TLS handshake, CERT verify (15):38164{ [112 bytes data]38165* TLSv1.3 (IN), TLS handshake, Finished (20):38166{ [52 bytes data]38167* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38168} [1 bytes data]38169* TLSv1.3 (OUT), TLS handshake, Finished (20):38170} [52 bytes data]38171* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38172* ALPN: server accepted h238173* Server certificate:38174* subject: CN=test.foo38175* start date: Sep 18 05:27:24 2026 GMT38176* expire date: Oct 18 05:27:24 2028 GMT38177* issuer: CN=minica root ca 2e2b1938178* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438179* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438180* subjectAltName: "test.foo" matches cert's "test.foo"38181* OpenSSL verify result: 1338182* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38183* closing connection #038184curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38185More details here: https://curl.se/docs/sslcerts.html3818638187curl failed to verify the legitimacy of the server and therefore could not38188establish a secure connection to it. To learn more about this situation and38189how to fix it, please visit the webpage mentioned above.38190* Host test.foo:443 was resolved.38191* IPv6: 2001:db8:1::338192* IPv4: 192.168.1.338193* Trying [2001:db8:1::3]:443...38194* ALPN: curl offers h2,http/1.138195} [5 bytes data]38196* TLSv1.3 (OUT), TLS handshake, Client hello (1):38197} [1552 bytes data]38198* SSL Trust Anchors:38199* OpenSSL default paths (fallback)38200{ [5 bytes data]38201* TLSv1.3 (IN), TLS handshake, Server hello (2):38202{ [1210 bytes data]38203* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38204{ [1 bytes data]38205* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38206{ [19 bytes data]38207* TLSv1.3 (IN), TLS handshake, Certificate (11):38208{ [1010 bytes data]38209* TLSv1.3 (IN), TLS handshake, CERT verify (15):38210{ [112 bytes data]38211* TLSv1.3 (IN), TLS handshake, Finished (20):38212{ [52 bytes data]38213* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38214} [1 bytes data]38215* TLSv1.3 (OUT), TLS handshake, Finished (20):38216} [52 bytes data]38217* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38218* ALPN: server accepted h238219* Server certificate:38220* subject: CN=test.foo38221* start date: Sep 18 05:27:24 2026 GMT38222* expire date: Oct 18 05:27:24 2028 GMT38223* issuer: CN=minica root ca 2e2b1938224* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438225* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438226* subjectAltName: "test.foo" matches cert's "test.foo"38227* OpenSSL verify result: 1338228* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38229* closing connection #038230curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38231More details here: https://curl.se/docs/sslcerts.html3823238233curl failed to verify the legitimacy of the server and therefore could not38234establish a secure connection to it. To learn more about this situation and38235how to fix it, please visit the webpage mentioned above.38236* Host test.foo:443 was resolved.38237* IPv6: 2001:db8:1::338238* IPv4: 192.168.1.338239* Trying [2001:db8:1::3]:443...38240* ALPN: curl offers h2,http/1.138241} [5 bytes data]38242* TLSv1.3 (OUT), TLS handshake, Client hello (1):38243} [1552 bytes data]38244* SSL Trust Anchors:38245* OpenSSL default paths (fallback)38246{ [5 bytes data]38247* TLSv1.3 (IN), TLS handshake, Server hello (2):38248{ [1210 bytes data]38249* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38250{ [1 bytes data]38251* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38252{ [19 bytes data]38253* TLSv1.3 (IN), TLS handshake, Certificate (11):38254{ [1010 bytes data]38255* TLSv1.3 (IN), TLS handshake, CERT verify (15):38256{ [112 bytes data]38257* TLSv1.3 (IN), TLS handshake, Finished (20):38258{ [52 bytes data]38259* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38260} [1 bytes data]38261* TLSv1.3 (OUT), TLS handshake, Finished (20):38262} [52 bytes data]38263* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38264* ALPN: server accepted h238265* Server certificate:38266* subject: CN=test.foo38267* start date: Sep 18 05:27:24 2026 GMT38268* expire date: Oct 18 05:27:24 2028 GMT38269* issuer: CN=minica root ca 2e2b1938270* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438271* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438272* subjectAltName: "test.foo" matches cert's "test.foo"38273* OpenSSL verify result: 1338274* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38275* closing connection #038276curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38277More details here: https://curl.se/docs/sslcerts.html3827838279curl failed to verify the legitimacy of the server and therefore could not38280establish a secure connection to it. To learn more about this situation and38281how to fix it, please visit the webpage mentioned above.38282* Trying [2001:db8:1::3]:443...38283* Host test.foo:443 was resolved.38284* IPv6: 2001:db8:1::338285* IPv4: 192.168.1.338286* ALPN: curl offers h2,http/1.138287} [5 bytes data]38288* TLSv1.3 (OUT), TLS handshake, Client hello (1):38289} [1552 bytes data]38290* SSL Trust Anchors:38291* OpenSSL default paths (fallback)38292{ [5 bytes data]38293* TLSv1.3 (IN), TLS handshake, Server hello (2):38294{ [1210 bytes data]38295* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38296{ [1 bytes data]38297* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38298{ [19 bytes data]38299* TLSv1.3 (IN), TLS handshake, Certificate (11):38300{ [1010 bytes data]38301* TLSv1.3 (IN), TLS handshake, CERT verify (15):38302{ [110 bytes data]38303* TLSv1.3 (IN), TLS handshake, Finished (20):38304{ [52 bytes data]38305* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38306} [1 bytes data]38307* TLSv1.3 (OUT), TLS handshake, Finished (20):38308} [52 bytes data]38309* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38310* ALPN: server accepted h238311* Server certificate:38312* subject: CN=test.foo38313* start date: Sep 18 05:27:24 2026 GMT38314* expire date: Oct 18 05:27:24 2028 GMT38315* issuer: CN=minica root ca 2e2b1938316* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438317* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438318* subjectAltName: "test.foo" matches cert's "test.foo"38319* OpenSSL verify result: 1338320* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38321* closing connection #038322curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38323More details here: https://curl.se/docs/sslcerts.html3832438325curl failed to verify the legitimacy of the server and therefore could not38326establish a secure connection to it. To learn more about this situation and38327how to fix it, please visit the webpage mentioned above.38328* Host test.foo:443 was resolved.38329* IPv6: 2001:db8:1::338330* IPv4: 192.168.1.338331* Trying [2001:db8:1::3]:443...38332* ALPN: curl offers h2,http/1.138333} [5 bytes data]38334* TLSv1.3 (OUT), TLS handshake, Client hello (1):38335} [1552 bytes data]38336* SSL Trust Anchors:38337* OpenSSL default paths (fallback)38338{ [5 bytes data]38339* TLSv1.3 (IN), TLS handshake, Server hello (2):38340{ [1210 bytes data]38341* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38342{ [1 bytes data]38343* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38344{ [19 bytes data]38345* TLSv1.3 (IN), TLS handshake, Certificate (11):38346{ [1010 bytes data]38347* TLSv1.3 (IN), TLS handshake, CERT verify (15):38348{ [112 bytes data]38349* TLSv1.3 (IN), TLS handshake, Finished (20):38350{ [52 bytes data]38351* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38352} [1 bytes data]38353* TLSv1.3 (OUT), TLS handshake, Finished (20):38354} [52 bytes data]38355* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38356* ALPN: server accepted h238357* Server certificate:38358* subject: CN=test.foo38359* start date: Sep 18 05:27:24 2026 GMT38360* expire date: Oct 18 05:27:24 2028 GMT38361* issuer: CN=minica root ca 2e2b1938362* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438363* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438364* subjectAltName: "test.foo" matches cert's "test.foo"38365* OpenSSL verify result: 1338366* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38367* closing connection #038368curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38369More details here: https://curl.se/docs/sslcerts.html3837038371curl failed to verify the legitimacy of the server and therefore could not38372establish a secure connection to it. To learn more about this situation and38373how to fix it, please visit the webpage mentioned above.38374* Host test.foo:443 was resolved.38375* IPv6: 2001:db8:1::338376* IPv4: 192.168.1.338377* Trying [2001:db8:1::3]:443...38378* ALPN: curl offers h2,http/1.138379} [5 bytes data]38380* TLSv1.3 (OUT), TLS handshake, Client hello (1):38381} [1552 bytes data]38382* SSL Trust Anchors:38383* OpenSSL default paths (fallback)38384{ [5 bytes data]38385* TLSv1.3 (IN), TLS handshake, Server hello (2):38386{ [1210 bytes data]38387* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38388{ [1 bytes data]38389* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38390{ [19 bytes data]38391* TLSv1.3 (IN), TLS handshake, Certificate (11):38392{ [1010 bytes data]38393* TLSv1.3 (IN), TLS handshake, CERT verify (15):38394{ [112 bytes data]38395* TLSv1.3 (IN), TLS handshake, Finished (20):38396{ [52 bytes data]38397* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38398} [1 bytes data]38399* TLSv1.3 (OUT), TLS handshake, Finished (20):38400} [52 bytes data]38401* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38402* ALPN: server accepted h238403* Server certificate:38404* subject: CN=test.foo38405* start date: Sep 18 05:27:24 2026 GMT38406* expire date: Oct 18 05:27:24 2028 GMT38407* issuer: CN=minica root ca 2e2b1938408* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438409* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438410* subjectAltName: "test.foo" matches cert's "test.foo"38411* OpenSSL verify result: 1338412* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38413* closing connection #038414curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38415More details here: https://curl.se/docs/sslcerts.html3841638417curl failed to verify the legitimacy of the server and therefore could not38418establish a secure connection to it. To learn more about this situation and38419how to fix it, please visit the webpage mentioned above.38420* Host test.foo:443 was resolved.38421* IPv6: 2001:db8:1::338422* IPv4: 192.168.1.338423* Trying [2001:db8:1::3]:443...38424* ALPN: curl offers h2,http/1.138425} [5 bytes data]38426* TLSv1.3 (OUT), TLS handshake, Client hello (1):38427} [1552 bytes data]38428* SSL Trust Anchors:38429* OpenSSL default paths (fallback)38430{ [5 bytes data]38431* TLSv1.3 (IN), TLS handshake, Server hello (2):38432{ [1210 bytes data]38433* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38434{ [1 bytes data]38435* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38436{ [19 bytes data]38437* TLSv1.3 (IN), TLS handshake, Certificate (11):38438{ [1010 bytes data]38439* TLSv1.3 (IN), TLS handshake, CERT verify (15):38440{ [110 bytes data]38441* TLSv1.3 (IN), TLS handshake, Finished (20):38442{ [52 bytes data]38443* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38444} [1 bytes data]38445* TLSv1.3 (OUT), TLS handshake, Finished (20):38446} [52 bytes data]38447* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38448* ALPN: server accepted h238449* Server certificate:38450* subject: CN=test.foo38451* start date: Sep 18 05:27:24 2026 GMT38452* expire date: Oct 18 05:27:24 2028 GMT38453* issuer: CN=minica root ca 2e2b1938454* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438455* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438456* subjectAltName: "test.foo" matches cert's "test.foo"38457* OpenSSL verify result: 1338458* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38459* closing connection #038460curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38461More details here: https://curl.se/docs/sslcerts.html3846238463curl failed to verify the legitimacy of the server and therefore could not38464establish a secure connection to it. To learn more about this situation and38465how to fix it, please visit the webpage mentioned above.38466* Host test.foo:443 was resolved.38467* IPv6: 2001:db8:1::338468* IPv4: 192.168.1.338469* Trying [2001:db8:1::3]:443...38470* ALPN: curl offers h2,http/1.138471} [5 bytes data]38472* TLSv1.3 (OUT), TLS handshake, Client hello (1):38473} [1552 bytes data]38474* SSL Trust Anchors:38475* OpenSSL default paths (fallback)38476{ [5 bytes data]38477* TLSv1.3 (IN), TLS handshake, Server hello (2):38478{ [1210 bytes data]38479* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38480{ [1 bytes data]38481* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38482{ [19 bytes data]38483* TLSv1.3 (IN), TLS handshake, Certificate (11):38484{ [1010 bytes data]38485* TLSv1.3 (IN), TLS handshake, CERT verify (15):38486{ [110 bytes data]38487* TLSv1.3 (IN), TLS handshake, Finished (20):38488{ [52 bytes data]38489* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38490} [1 bytes data]38491* TLSv1.3 (OUT), TLS handshake, Finished (20):38492} [52 bytes data]38493* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38494* ALPN: server accepted h238495* Server certificate:38496* subject: CN=test.foo38497* start date: Sep 18 05:27:24 2026 GMT38498* expire date: Oct 18 05:27:24 2028 GMT38499* issuer: CN=minica root ca 2e2b1938500* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438501* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438502* subjectAltName: "test.foo" matches cert's "test.foo"38503* OpenSSL verify result: 1338504* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38505* closing connection #038506curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38507More details here: https://curl.se/docs/sslcerts.html3850838509curl failed to verify the legitimacy of the server and therefore could not38510establish a secure connection to it. To learn more about this situation and38511how to fix it, please visit the webpage mentioned above.38512* Host test.foo:443 was resolved.38513* IPv6: 2001:db8:1::338514* IPv4: 192.168.1.338515* Trying [2001:db8:1::3]:443...38516* ALPN: curl offers h2,http/1.138517} [5 bytes data]38518* TLSv1.3 (OUT), TLS handshake, Client hello (1):38519} [1552 bytes data]38520* SSL Trust Anchors:38521* OpenSSL default paths (fallback)38522{ [5 bytes data]38523* TLSv1.3 (IN), TLS handshake, Server hello (2):38524{ [1210 bytes data]38525* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38526{ [1 bytes data]38527* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38528{ [19 bytes data]38529* TLSv1.3 (IN), TLS handshake, Certificate (11):38530{ [1010 bytes data]38531* TLSv1.3 (IN), TLS handshake, CERT verify (15):38532{ [112 bytes data]38533* TLSv1.3 (IN), TLS handshake, Finished (20):38534{ [52 bytes data]38535* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38536} [1 bytes data]38537* TLSv1.3 (OUT), TLS handshake, Finished (20):38538} [52 bytes data]38539* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38540* ALPN: server accepted h238541* Server certificate:38542* subject: CN=test.foo38543* start date: Sep 18 05:27:24 2026 GMT38544* expire date: Oct 18 05:27:24 2028 GMT38545* issuer: CN=minica root ca 2e2b1938546* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438547* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438548* subjectAltName: "test.foo" matches cert's "test.foo"38549* OpenSSL verify result: 1338550* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38551* closing connection #038552curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38553More details here: https://curl.se/docs/sslcerts.html3855438555curl failed to verify the legitimacy of the server and therefore could not38556establish a secure connection to it. To learn more about this situation and38557how to fix it, please visit the webpage mentioned above.38558* Host test.foo:443 was resolved.38559* IPv6: 2001:db8:1::338560* IPv4: 192.168.1.338561* Trying [2001:db8:1::3]:443...38562* ALPN: curl offers h2,http/1.138563} [5 bytes data]38564* TLSv1.3 (OUT), TLS handshake, Client hello (1):38565} [1552 bytes data]38566* SSL Trust Anchors:38567* OpenSSL default paths (fallback)38568{ [5 bytes data]38569* TLSv1.3 (IN), TLS handshake, Server hello (2):38570{ [1210 bytes data]38571* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38572{ [1 bytes data]38573* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38574{ [19 bytes data]38575* TLSv1.3 (IN), TLS handshake, Certificate (11):38576{ [1010 bytes data]38577* TLSv1.3 (IN), TLS handshake, CERT verify (15):38578{ [111 bytes data]38579* TLSv1.3 (IN), TLS handshake, Finished (20):38580{ [52 bytes data]38581* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38582} [1 bytes data]38583* TLSv1.3 (OUT), TLS handshake, Finished (20):38584} [52 bytes data]38585* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38586* ALPN: server accepted h238587* Server certificate:38588* subject: CN=test.foo38589* start date: Sep 18 05:27:24 2026 GMT38590* expire date: Oct 18 05:27:24 2028 GMT38591* issuer: CN=minica root ca 2e2b1938592* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438593* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438594* subjectAltName: "test.foo" matches cert's "test.foo"38595* OpenSSL verify result: 1338596* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38597* closing connection #038598curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38599More details here: https://curl.se/docs/sslcerts.html3860038601curl failed to verify the legitimacy of the server and therefore could not38602establish a secure connection to it. To learn more about this situation and38603how to fix it, please visit the webpage mentioned above.38604* Host test.foo:443 was resolved.38605* IPv6: 2001:db8:1::338606* IPv4: 192.168.1.338607* Trying [2001:db8:1::3]:443...38608* ALPN: curl offers h2,http/1.138609} [5 bytes data]38610* TLSv1.3 (OUT), TLS handshake, Client hello (1):38611} [1552 bytes data]38612* SSL Trust Anchors:38613* OpenSSL default paths (fallback)38614{ [5 bytes data]38615* TLSv1.3 (IN), TLS handshake, Server hello (2):38616{ [1210 bytes data]38617* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38618{ [1 bytes data]38619* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38620{ [19 bytes data]38621* TLSv1.3 (IN), TLS handshake, Certificate (11):38622{ [1010 bytes data]38623* TLSv1.3 (IN), TLS handshake, CERT verify (15):38624{ [111 bytes data]38625* TLSv1.3 (IN), TLS handshake, Finished (20):38626{ [52 bytes data]38627* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38628} [1 bytes data]38629* TLSv1.3 (OUT), TLS handshake, Finished (20):38630} [52 bytes data]38631* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38632* ALPN: server accepted h238633* Server certificate:38634* subject: CN=test.foo38635* start date: Sep 18 05:27:24 2026 GMT38636* expire date: Oct 18 05:27:24 2028 GMT38637* issuer: CN=minica root ca 2e2b1938638* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438639* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438640* subjectAltName: "test.foo" matches cert's "test.foo"38641* OpenSSL verify result: 1338642* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38643* closing connection #038644curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38645More details here: https://curl.se/docs/sslcerts.html3864638647curl failed to verify the legitimacy of the server and therefore could not38648establish a secure connection to it. To learn more about this situation and38649how to fix it, please visit the webpage mentioned above.38650* Host test.foo:443 was resolved.38651* IPv6: 2001:db8:1::338652* IPv4: 192.168.1.338653* Trying [2001:db8:1::3]:443...38654* ALPN: curl offers h2,http/1.138655} [5 bytes data]38656* TLSv1.3 (OUT), TLS handshake, Client hello (1):38657} [1552 bytes data]38658* SSL Trust Anchors:38659* OpenSSL default paths (fallback)38660{ [5 bytes data]38661* TLSv1.3 (IN), TLS handshake, Server hello (2):38662{ [1210 bytes data]38663* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38664{ [1 bytes data]38665* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38666{ [19 bytes data]38667* TLSv1.3 (IN), TLS handshake, Certificate (11):38668{ [1010 bytes data]38669* TLSv1.3 (IN), TLS handshake, CERT verify (15):38670{ [111 bytes data]38671* TLSv1.3 (IN), TLS handshake, Finished (20):38672{ [52 bytes data]38673* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38674} [1 bytes data]38675* TLSv1.3 (OUT), TLS handshake, Finished (20):38676} [52 bytes data]38677* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38678* ALPN: server accepted h238679* Server certificate:38680* subject: CN=test.foo38681* start date: Sep 18 05:27:24 2026 GMT38682* expire date: Oct 18 05:27:24 2028 GMT38683* issuer: CN=minica root ca 2e2b1938684* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438685* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438686* subjectAltName: "test.foo" matches cert's "test.foo"38687* OpenSSL verify result: 1338688* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38689* closing connection #038690curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38691More details here: https://curl.se/docs/sslcerts.html3869238693curl failed to verify the legitimacy of the server and therefore could not38694establish a secure connection to it. To learn more about this situation and38695how to fix it, please visit the webpage mentioned above.38696* Host test.foo:443 was resolved.38697* IPv6: 2001:db8:1::338698* IPv4: 192.168.1.338699* Trying [2001:db8:1::3]:443...38700* ALPN: curl offers h2,http/1.138701} [5 bytes data]38702* TLSv1.3 (OUT), TLS handshake, Client hello (1):38703} [1552 bytes data]38704* SSL Trust Anchors:38705* OpenSSL default paths (fallback)38706{ [5 bytes data]38707* TLSv1.3 (IN), TLS handshake, Server hello (2):38708{ [1210 bytes data]38709* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38710{ [1 bytes data]38711* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38712{ [19 bytes data]38713* TLSv1.3 (IN), TLS handshake, Certificate (11):38714{ [1010 bytes data]38715* TLSv1.3 (IN), TLS handshake, CERT verify (15):38716{ [111 bytes data]38717* TLSv1.3 (IN), TLS handshake, Finished (20):38718{ [52 bytes data]38719* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38720} [1 bytes data]38721* TLSv1.3 (OUT), TLS handshake, Finished (20):38722} [52 bytes data]38723* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38724* ALPN: server accepted h238725* Server certificate:38726* subject: CN=test.foo38727* start date: Sep 18 05:27:24 2026 GMT38728* expire date: Oct 18 05:27:24 2028 GMT38729* issuer: CN=minica root ca 2e2b1938730* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438731* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438732* subjectAltName: "test.foo" matches cert's "test.foo"38733* OpenSSL verify result: 1338734* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38735* closing connection #038736curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38737More details here: https://curl.se/docs/sslcerts.html3873838739curl failed to verify the legitimacy of the server and therefore could not38740establish a secure connection to it. To learn more about this situation and38741how to fix it, please visit the webpage mentioned above.38742* Host test.foo:443 was resolved.38743* IPv6: 2001:db8:1::338744* IPv4: 192.168.1.338745* Trying [2001:db8:1::3]:443...38746* ALPN: curl offers h2,http/1.138747} [5 bytes data]38748* TLSv1.3 (OUT), TLS handshake, Client hello (1):38749} [1552 bytes data]38750* SSL Trust Anchors:38751* OpenSSL default paths (fallback)38752{ [5 bytes data]38753* TLSv1.3 (IN), TLS handshake, Server hello (2):38754{ [1210 bytes data]38755* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38756{ [1 bytes data]38757* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38758{ [19 bytes data]38759* TLSv1.3 (IN), TLS handshake, Certificate (11):38760{ [1010 bytes data]38761* TLSv1.3 (IN), TLS handshake, CERT verify (15):38762{ [110 bytes data]38763* TLSv1.3 (IN), TLS handshake, Finished (20):38764{ [52 bytes data]38765* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38766} [1 bytes data]38767* TLSv1.3 (OUT), TLS handshake, Finished (20):38768} [52 bytes data]38769* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38770* ALPN: server accepted h238771* Server certificate:38772* subject: CN=test.foo38773* start date: Sep 18 05:27:24 2026 GMT38774* expire date: Oct 18 05:27:24 2028 GMT38775* issuer: CN=minica root ca 2e2b1938776* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438777* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438778* subjectAltName: "test.foo" matches cert's "test.foo"38779* OpenSSL verify result: 1338780* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38781* closing connection #038782curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38783More details here: https://curl.se/docs/sslcerts.html3878438785curl failed to verify the legitimacy of the server and therefore could not38786establish a secure connection to it. To learn more about this situation and38787how to fix it, please visit the webpage mentioned above.38788* Host test.foo:443 was resolved.38789* IPv6: 2001:db8:1::338790* IPv4: 192.168.1.338791* Trying [2001:db8:1::3]:443...38792* ALPN: curl offers h2,http/1.138793} [5 bytes data]38794* TLSv1.3 (OUT), TLS handshake, Client hello (1):38795} [1552 bytes data]38796* SSL Trust Anchors:38797* OpenSSL default paths (fallback)38798{ [5 bytes data]38799* TLSv1.3 (IN), TLS handshake, Server hello (2):38800{ [1210 bytes data]38801* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38802{ [1 bytes data]38803* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38804{ [19 bytes data]38805* TLSv1.3 (IN), TLS handshake, Certificate (11):38806{ [1010 bytes data]38807* TLSv1.3 (IN), TLS handshake, CERT verify (15):38808{ [110 bytes data]38809* TLSv1.3 (IN), TLS handshake, Finished (20):38810{ [52 bytes data]38811* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38812} [1 bytes data]38813* TLSv1.3 (OUT), TLS handshake, Finished (20):38814} [52 bytes data]38815* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38816* ALPN: server accepted h238817* Server certificate:38818* subject: CN=test.foo38819* start date: Sep 18 05:27:24 2026 GMT38820* expire date: Oct 18 05:27:24 2028 GMT38821* issuer: CN=minica root ca 2e2b1938822* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438823* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438824* subjectAltName: "test.foo" matches cert's "test.foo"38825* OpenSSL verify result: 1338826* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38827* closing connection #038828curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38829More details here: https://curl.se/docs/sslcerts.html3883038831curl failed to verify the legitimacy of the server and therefore could not38832establish a secure connection to it. To learn more about this situation and38833how to fix it, please visit the webpage mentioned above.38834* Host test.foo:443 was resolved.38835* IPv6: 2001:db8:1::338836* IPv4: 192.168.1.338837* Trying [2001:db8:1::3]:443...38838* ALPN: curl offers h2,http/1.138839} [5 bytes data]38840* TLSv1.3 (OUT), TLS handshake, Client hello (1):38841} [1552 bytes data]38842* SSL Trust Anchors:38843* OpenSSL default paths (fallback)38844{ [5 bytes data]38845* TLSv1.3 (IN), TLS handshake, Server hello (2):38846{ [1210 bytes data]38847* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38848{ [1 bytes data]38849* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38850{ [19 bytes data]38851* TLSv1.3 (IN), TLS handshake, Certificate (11):38852{ [1010 bytes data]38853* TLSv1.3 (IN), TLS handshake, CERT verify (15):38854{ [111 bytes data]38855* TLSv1.3 (IN), TLS handshake, Finished (20):38856{ [52 bytes data]38857* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38858} [1 bytes data]38859* TLSv1.3 (OUT), TLS handshake, Finished (20):38860} [52 bytes data]38861* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38862* ALPN: server accepted h238863* Server certificate:38864* subject: CN=test.foo38865* start date: Sep 18 05:27:24 2026 GMT38866* expire date: Oct 18 05:27:24 2028 GMT38867* issuer: CN=minica root ca 2e2b1938868* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438869* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438870* subjectAltName: "test.foo" matches cert's "test.foo"38871* OpenSSL verify result: 1338872* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38873* closing connection #038874curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38875More details here: https://curl.se/docs/sslcerts.html3887638877curl failed to verify the legitimacy of the server and therefore could not38878establish a secure connection to it. To learn more about this situation and38879how to fix it, please visit the webpage mentioned above.38880* Host test.foo:443 was resolved.38881* IPv6: 2001:db8:1::338882* IPv4: 192.168.1.338883* Trying [2001:db8:1::3]:443...38884* ALPN: curl offers h2,http/1.138885} [5 bytes data]38886* TLSv1.3 (OUT), TLS handshake, Client hello (1):38887} [1552 bytes data]38888* SSL Trust Anchors:38889* OpenSSL default paths (fallback)38890{ [5 bytes data]38891* TLSv1.3 (IN), TLS handshake, Server hello (2):38892{ [1210 bytes data]38893* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38894{ [1 bytes data]38895* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38896{ [19 bytes data]38897* TLSv1.3 (IN), TLS handshake, Certificate (11):38898{ [1010 bytes data]38899* TLSv1.3 (IN), TLS handshake, CERT verify (15):38900{ [112 bytes data]38901* TLSv1.3 (IN), TLS handshake, Finished (20):38902{ [52 bytes data]38903* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38904} [1 bytes data]38905* TLSv1.3 (OUT), TLS handshake, Finished (20):38906} [52 bytes data]38907* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38908* ALPN: server accepted h238909* Server certificate:38910* subject: CN=test.foo38911* start date: Sep 18 05:27:24 2026 GMT38912* expire date: Oct 18 05:27:24 2028 GMT38913* issuer: CN=minica root ca 2e2b1938914* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438915* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438916* subjectAltName: "test.foo" matches cert's "test.foo"38917* OpenSSL verify result: 1338918* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38919* closing connection #038920curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38921More details here: https://curl.se/docs/sslcerts.html3892238923curl failed to verify the legitimacy of the server and therefore could not38924establish a secure connection to it. To learn more about this situation and38925how to fix it, please visit the webpage mentioned above.38926* Host test.foo:443 was resolved.38927* IPv6: 2001:db8:1::338928* IPv4: 192.168.1.338929* Trying [2001:db8:1::3]:443...38930* ALPN: curl offers h2,http/1.138931} [5 bytes data]38932* TLSv1.3 (OUT), TLS handshake, Client hello (1):38933} [1552 bytes data]38934* SSL Trust Anchors:38935* OpenSSL default paths (fallback)38936{ [5 bytes data]38937* TLSv1.3 (IN), TLS handshake, Server hello (2):38938{ [1210 bytes data]38939* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38940{ [1 bytes data]38941* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38942{ [19 bytes data]38943* TLSv1.3 (IN), TLS handshake, Certificate (11):38944{ [1010 bytes data]38945* TLSv1.3 (IN), TLS handshake, CERT verify (15):38946{ [111 bytes data]38947* TLSv1.3 (IN), TLS handshake, Finished (20):38948{ [52 bytes data]38949* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38950} [1 bytes data]38951* TLSv1.3 (OUT), TLS handshake, Finished (20):38952} [52 bytes data]38953* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38954* ALPN: server accepted h238955* Server certificate:38956* subject: CN=test.foo38957* start date: Sep 18 05:27:24 2026 GMT38958* expire date: Oct 18 05:27:24 2028 GMT38959* issuer: CN=minica root ca 2e2b1938960* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438961* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438962* subjectAltName: "test.foo" matches cert's "test.foo"38963* OpenSSL verify result: 1338964* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38965* closing connection #038966curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38967More details here: https://curl.se/docs/sslcerts.html3896838969curl failed to verify the legitimacy of the server and therefore could not38970establish a secure connection to it. To learn more about this situation and38971how to fix it, please visit the webpage mentioned above.38972* Host test.foo:443 was resolved.38973* IPv6: 2001:db8:1::338974* IPv4: 192.168.1.338975* Trying [2001:db8:1::3]:443...38976* ALPN: curl offers h2,http/1.138977} [5 bytes data]38978* TLSv1.3 (OUT), TLS handshake, Client hello (1):38979} [1552 bytes data]38980* SSL Trust Anchors:38981* OpenSSL default paths (fallback)38982{ [5 bytes data]38983* TLSv1.3 (IN), TLS handshake, Server hello (2):38984{ [1210 bytes data]38985* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38986{ [1 bytes data]38987* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38988{ [19 bytes data]38989* TLSv1.3 (IN), TLS handshake, Certificate (11):38990{ [1010 bytes data]38991* TLSv1.3 (IN), TLS handshake, CERT verify (15):38992{ [112 bytes data]38993* TLSv1.3 (IN), TLS handshake, Finished (20):38994{ [52 bytes data]38995* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38996} [1 bytes data]38997* TLSv1.3 (OUT), TLS handshake, Finished (20):38998} [52 bytes data]38999* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39000* ALPN: server accepted h239001* Server certificate:39002* subject: CN=test.foo39003* start date: Sep 18 05:27:24 2026 GMT39004* expire date: Oct 18 05:27:24 2028 GMT39005* issuer: CN=minica root ca 2e2b1939006* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439007* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439008* subjectAltName: "test.foo" matches cert's "test.foo"39009* OpenSSL verify result: 1339010* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39011* closing connection #039012curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39013More details here: https://curl.se/docs/sslcerts.html3901439015curl failed to verify the legitimacy of the server and therefore could not39016establish a secure connection to it. To learn more about this situation and39017how to fix it, please visit the webpage mentioned above.39018* Host test.foo:443 was resolved.39019* IPv6: 2001:db8:1::339020* IPv4: 192.168.1.339021* Trying [2001:db8:1::3]:443...39022* ALPN: curl offers h2,http/1.139023} [5 bytes data]39024* TLSv1.3 (OUT), TLS handshake, Client hello (1):39025} [1552 bytes data]39026* SSL Trust Anchors:39027* OpenSSL default paths (fallback)39028{ [5 bytes data]39029* TLSv1.3 (IN), TLS handshake, Server hello (2):39030{ [1210 bytes data]39031* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39032{ [1 bytes data]39033* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39034{ [19 bytes data]39035* TLSv1.3 (IN), TLS handshake, Certificate (11):39036{ [1010 bytes data]39037* TLSv1.3 (IN), TLS handshake, CERT verify (15):39038{ [111 bytes data]39039* TLSv1.3 (IN), TLS handshake, Finished (20):39040{ [52 bytes data]39041* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39042} [1 bytes data]39043* TLSv1.3 (OUT), TLS handshake, Finished (20):39044} [52 bytes data]39045* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39046* ALPN: server accepted h239047* Server certificate:39048* subject: CN=test.foo39049* start date: Sep 18 05:27:24 2026 GMT39050* expire date: Oct 18 05:27:24 2028 GMT39051* issuer: CN=minica root ca 2e2b1939052* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439053* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439054* subjectAltName: "test.foo" matches cert's "test.foo"39055* OpenSSL verify result: 1339056* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39057* closing connection #039058curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39059More details here: https://curl.se/docs/sslcerts.html3906039061curl failed to verify the legitimacy of the server and therefore could not39062establish a secure connection to it. To learn more about this situation and39063how to fix it, please visit the webpage mentioned above.39064* Host test.foo:443 was resolved.39065* IPv6: 2001:db8:1::339066* IPv4: 192.168.1.339067* Trying [2001:db8:1::3]:443...39068* ALPN: curl offers h2,http/1.139069} [5 bytes data]39070* TLSv1.3 (OUT), TLS handshake, Client hello (1):39071} [1552 bytes data]39072* SSL Trust Anchors:39073* OpenSSL default paths (fallback)39074{ [5 bytes data]39075* TLSv1.3 (IN), TLS handshake, Server hello (2):39076{ [1210 bytes data]39077* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39078{ [1 bytes data]39079* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39080{ [19 bytes data]39081* TLSv1.3 (IN), TLS handshake, Certificate (11):39082{ [1010 bytes data]39083* TLSv1.3 (IN), TLS handshake, CERT verify (15):39084{ [110 bytes data]39085* TLSv1.3 (IN), TLS handshake, Finished (20):39086{ [52 bytes data]39087* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39088} [1 bytes data]39089* TLSv1.3 (OUT), TLS handshake, Finished (20):39090} [52 bytes data]39091* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39092* ALPN: server accepted h239093* Server certificate:39094* subject: CN=test.foo39095* start date: Sep 18 05:27:24 2026 GMT39096* expire date: Oct 18 05:27:24 2028 GMT39097* issuer: CN=minica root ca 2e2b1939098* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439099* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439100* subjectAltName: "test.foo" matches cert's "test.foo"39101* OpenSSL verify result: 1339102* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39103* closing connection #039104curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39105More details here: https://curl.se/docs/sslcerts.html3910639107curl failed to verify the legitimacy of the server and therefore could not39108establish a secure connection to it. To learn more about this situation and39109how to fix it, please visit the webpage mentioned above.39110* Host test.foo:443 was resolved.39111* IPv6: 2001:db8:1::339112* IPv4: 192.168.1.339113* Trying [2001:db8:1::3]:443...39114* ALPN: curl offers h2,http/1.139115} [5 bytes data]39116* TLSv1.3 (OUT), TLS handshake, Client hello (1):39117} [1552 bytes data]39118* SSL Trust Anchors:39119* OpenSSL default paths (fallback)39120{ [5 bytes data]39121* TLSv1.3 (IN), TLS handshake, Server hello (2):39122{ [1210 bytes data]39123* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39124{ [1 bytes data]39125* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39126{ [19 bytes data]39127* TLSv1.3 (IN), TLS handshake, Certificate (11):39128{ [1010 bytes data]39129* TLSv1.3 (IN), TLS handshake, CERT verify (15):39130{ [112 bytes data]39131* TLSv1.3 (IN), TLS handshake, Finished (20):39132{ [52 bytes data]39133* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39134} [1 bytes data]39135* TLSv1.3 (OUT), TLS handshake, Finished (20):39136} [52 bytes data]39137* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39138* ALPN: server accepted h239139* Server certificate:39140* subject: CN=test.foo39141* start date: Sep 18 05:27:24 2026 GMT39142* expire date: Oct 18 05:27:24 2028 GMT39143* issuer: CN=minica root ca 2e2b1939144* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439145* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439146* subjectAltName: "test.foo" matches cert's "test.foo"39147* OpenSSL verify result: 1339148* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39149* closing connection #039150curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39151More details here: https://curl.se/docs/sslcerts.html3915239153curl failed to verify the legitimacy of the server and therefore could not39154establish a secure connection to it. To learn more about this situation and39155how to fix it, please visit the webpage mentioned above.39156* Host test.foo:443 was resolved.39157* IPv6: 2001:db8:1::339158* IPv4: 192.168.1.339159* Trying [2001:db8:1::3]:443...39160* ALPN: curl offers h2,http/1.139161} [5 bytes data]39162* TLSv1.3 (OUT), TLS handshake, Client hello (1):39163} [1552 bytes data]39164* SSL Trust Anchors:39165* OpenSSL default paths (fallback)39166{ [5 bytes data]39167* TLSv1.3 (IN), TLS handshake, Server hello (2):39168{ [1210 bytes data]39169* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39170{ [1 bytes data]39171* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39172{ [19 bytes data]39173* TLSv1.3 (IN), TLS handshake, Certificate (11):39174{ [1010 bytes data]39175* TLSv1.3 (IN), TLS handshake, CERT verify (15):39176{ [110 bytes data]39177* TLSv1.3 (IN), TLS handshake, Finished (20):39178{ [52 bytes data]39179* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39180} [1 bytes data]39181* TLSv1.3 (OUT), TLS handshake, Finished (20):39182} [52 bytes data]39183* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39184* ALPN: server accepted h239185* Server certificate:39186* subject: CN=test.foo39187* start date: Sep 18 05:27:24 2026 GMT39188* expire date: Oct 18 05:27:24 2028 GMT39189* issuer: CN=minica root ca 2e2b1939190* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439191* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439192* subjectAltName: "test.foo" matches cert's "test.foo"39193* OpenSSL verify result: 1339194* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39195* closing connection #039196curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39197More details here: https://curl.se/docs/sslcerts.html3919839199curl failed to verify the legitimacy of the server and therefore could not39200establish a secure connection to it. To learn more about this situation and39201how to fix it, please visit the webpage mentioned above.39202* Trying [2001:db8:1::3]:443...39203* Host test.foo:443 was resolved.39204* IPv6: 2001:db8:1::339205* IPv4: 192.168.1.339206* ALPN: curl offers h2,http/1.139207} [5 bytes data]39208* TLSv1.3 (OUT), TLS handshake, Client hello (1):39209} [1552 bytes data]39210* SSL Trust Anchors:39211* OpenSSL default paths (fallback)39212{ [5 bytes data]39213* TLSv1.3 (IN), TLS handshake, Server hello (2):39214{ [1210 bytes data]39215* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39216{ [1 bytes data]39217* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39218{ [19 bytes data]39219* TLSv1.3 (IN), TLS handshake, Certificate (11):39220{ [1010 bytes data]39221* TLSv1.3 (IN), TLS handshake, CERT verify (15):39222{ [111 bytes data]39223* TLSv1.3 (IN), TLS handshake, Finished (20):39224{ [52 bytes data]39225* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39226} [1 bytes data]39227* TLSv1.3 (OUT), TLS handshake, Finished (20):39228} [52 bytes data]39229* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39230* ALPN: server accepted h239231* Server certificate:39232* subject: CN=test.foo39233* start date: Sep 18 05:27:24 2026 GMT39234* expire date: Oct 18 05:27:24 2028 GMT39235* issuer: CN=minica root ca 2e2b1939236* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439237* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439238* subjectAltName: "test.foo" matches cert's "test.foo"39239* OpenSSL verify result: 1339240* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39241* closing connection #039242curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39243More details here: https://curl.se/docs/sslcerts.html3924439245curl failed to verify the legitimacy of the server and therefore could not39246establish a secure connection to it. To learn more about this situation and39247how to fix it, please visit the webpage mentioned above.39248* Host test.foo:443 was resolved.39249* IPv6: 2001:db8:1::339250* IPv4: 192.168.1.339251* Trying [2001:db8:1::3]:443...39252* ALPN: curl offers h2,http/1.139253} [5 bytes data]39254* TLSv1.3 (OUT), TLS handshake, Client hello (1):39255} [1552 bytes data]39256* SSL Trust Anchors:39257* OpenSSL default paths (fallback)39258{ [5 bytes data]39259* TLSv1.3 (IN), TLS handshake, Server hello (2):39260{ [1210 bytes data]39261* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39262{ [1 bytes data]39263* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39264{ [19 bytes data]39265* TLSv1.3 (IN), TLS handshake, Certificate (11):39266{ [1010 bytes data]39267* TLSv1.3 (IN), TLS handshake, CERT verify (15):39268{ [111 bytes data]39269* TLSv1.3 (IN), TLS handshake, Finished (20):39270{ [52 bytes data]39271* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39272} [1 bytes data]39273* TLSv1.3 (OUT), TLS handshake, Finished (20):39274} [52 bytes data]39275* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39276* ALPN: server accepted h239277* Server certificate:39278* subject: CN=test.foo39279* start date: Sep 18 05:27:24 2026 GMT39280* expire date: Oct 18 05:27:24 2028 GMT39281* issuer: CN=minica root ca 2e2b1939282* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439283* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439284* subjectAltName: "test.foo" matches cert's "test.foo"39285* OpenSSL verify result: 1339286* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39287* closing connection #039288curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39289More details here: https://curl.se/docs/sslcerts.html3929039291curl failed to verify the legitimacy of the server and therefore could not39292establish a secure connection to it. To learn more about this situation and39293how to fix it, please visit the webpage mentioned above.39294* Host test.foo:443 was resolved.39295* IPv6: 2001:db8:1::339296* IPv4: 192.168.1.339297* Trying [2001:db8:1::3]:443...39298* ALPN: curl offers h2,http/1.139299} [5 bytes data]39300* TLSv1.3 (OUT), TLS handshake, Client hello (1):39301} [1552 bytes data]39302* SSL Trust Anchors:39303* OpenSSL default paths (fallback)39304{ [5 bytes data]39305* TLSv1.3 (IN), TLS handshake, Server hello (2):39306{ [1210 bytes data]39307* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39308{ [1 bytes data]39309* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39310{ [19 bytes data]39311* TLSv1.3 (IN), TLS handshake, Certificate (11):39312{ [1010 bytes data]39313* TLSv1.3 (IN), TLS handshake, CERT verify (15):39314{ [111 bytes data]39315* TLSv1.3 (IN), TLS handshake, Finished (20):39316{ [52 bytes data]39317* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39318} [1 bytes data]39319* TLSv1.3 (OUT), TLS handshake, Finished (20):39320} [52 bytes data]39321* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39322* ALPN: server accepted h239323* Server certificate:39324* subject: CN=test.foo39325* start date: Sep 18 05:27:24 2026 GMT39326* expire date: Oct 18 05:27:24 2028 GMT39327* issuer: CN=minica root ca 2e2b1939328* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439329* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439330* subjectAltName: "test.foo" matches cert's "test.foo"39331* OpenSSL verify result: 1339332* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39333* closing connection #039334curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39335More details here: https://curl.se/docs/sslcerts.html3933639337curl failed to verify the legitimacy of the server and therefore could not39338establish a secure connection to it. To learn more about this situation and39339how to fix it, please visit the webpage mentioned above.39340* Trying [2001:db8:1::3]:443...39341* ALPN: curl offers h2,http/1.139342} [5 bytes data]39343* TLSv1.3 (OUT), TLS handshake, Client hello (1):39344} [1552 bytes data]39345* SSL Trust Anchors:39346* OpenSSL default paths (fallback)39347* Host test.foo:443 was resolved.39348* IPv6: 2001:db8:1::339349* IPv4: 192.168.1.339350{ [5 bytes data]39351* TLSv1.3 (IN), TLS handshake, Server hello (2):39352{ [1210 bytes data]39353* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39354{ [1 bytes data]39355* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39356{ [19 bytes data]39357* TLSv1.3 (IN), TLS handshake, Certificate (11):39358{ [1010 bytes data]39359* TLSv1.3 (IN), TLS handshake, CERT verify (15):39360{ [111 bytes data]39361* TLSv1.3 (IN), TLS handshake, Finished (20):39362{ [52 bytes data]39363* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39364} [1 bytes data]39365* TLSv1.3 (OUT), TLS handshake, Finished (20):39366} [52 bytes data]39367* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39368* ALPN: server accepted h239369* Server certificate:39370* subject: CN=test.foo39371* start date: Sep 18 05:27:24 2026 GMT39372* expire date: Oct 18 05:27:24 2028 GMT39373* issuer: CN=minica root ca 2e2b1939374* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439375* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439376* subjectAltName: "test.foo" matches cert's "test.foo"39377* OpenSSL verify result: 1339378* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39379* closing connection #039380curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39381More details here: https://curl.se/docs/sslcerts.html3938239383curl failed to verify the legitimacy of the server and therefore could not39384establish a secure connection to it. To learn more about this situation and39385how to fix it, please visit the webpage mentioned above.39386* Trying [2001:db8:1::3]:443...39387* ALPN: curl offers h2,http/1.139388} [5 bytes data]39389* TLSv1.3 (OUT), TLS handshake, Client hello (1):39390} [1552 bytes data]39391* SSL Trust Anchors:39392* OpenSSL default paths (fallback)39393* Host test.foo:443 was resolved.39394* IPv6: 2001:db8:1::339395* IPv4: 192.168.1.339396{ [5 bytes data]39397* TLSv1.3 (IN), TLS handshake, Server hello (2):39398{ [1210 bytes data]39399* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39400{ [1 bytes data]39401* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39402{ [19 bytes data]39403* TLSv1.3 (IN), TLS handshake, Certificate (11):39404{ [1010 bytes data]39405* TLSv1.3 (IN), TLS handshake, CERT verify (15):39406{ [110 bytes data]39407* TLSv1.3 (IN), TLS handshake, Finished (20):39408{ [52 bytes data]39409* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39410} [1 bytes data]39411* TLSv1.3 (OUT), TLS handshake, Finished (20):39412} [52 bytes data]39413* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39414* ALPN: server accepted h239415* Server certificate:39416* subject: CN=test.foo39417* start date: Sep 18 05:27:24 2026 GMT39418* expire date: Oct 18 05:27:24 2028 GMT39419* issuer: CN=minica root ca 2e2b1939420* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439421* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439422* subjectAltName: "test.foo" matches cert's "test.foo"39423* OpenSSL verify result: 1339424* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39425* closing connection #039426curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39427More details here: https://curl.se/docs/sslcerts.html3942839429curl failed to verify the legitimacy of the server and therefore could not39430establish a secure connection to it. To learn more about this situation and39431how to fix it, please visit the webpage mentioned above.39432* Host test.foo:443 was resolved.39433* IPv6: 2001:db8:1::339434* IPv4: 192.168.1.339435* Trying [2001:db8:1::3]:443...39436* ALPN: curl offers h2,http/1.139437} [5 bytes data]39438* TLSv1.3 (OUT), TLS handshake, Client hello (1):39439} [1552 bytes data]39440* SSL Trust Anchors:39441* OpenSSL default paths (fallback)39442{ [5 bytes data]39443* TLSv1.3 (IN), TLS handshake, Server hello (2):39444{ [1210 bytes data]39445* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39446{ [1 bytes data]39447* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39448{ [19 bytes data]39449* TLSv1.3 (IN), TLS handshake, Certificate (11):39450{ [1010 bytes data]39451* TLSv1.3 (IN), TLS handshake, CERT verify (15):39452{ [111 bytes data]39453* TLSv1.3 (IN), TLS handshake, Finished (20):39454{ [52 bytes data]39455* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39456} [1 bytes data]39457* TLSv1.3 (OUT), TLS handshake, Finished (20):39458} [52 bytes data]39459* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39460* ALPN: server accepted h239461* Server certificate:39462* subject: CN=test.foo39463* start date: Sep 18 05:27:24 2026 GMT39464* expire date: Oct 18 05:27:24 2028 GMT39465* issuer: CN=minica root ca 2e2b1939466* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439467* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439468* subjectAltName: "test.foo" matches cert's "test.foo"39469* OpenSSL verify result: 1339470* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39471* closing connection #039472curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39473More details here: https://curl.se/docs/sslcerts.html3947439475curl failed to verify the legitimacy of the server and therefore could not39476establish a secure connection to it. To learn more about this situation and39477how to fix it, please visit the webpage mentioned above.39478* Host test.foo:443 was resolved.39479* IPv6: 2001:db8:1::339480* IPv4: 192.168.1.339481* Trying [2001:db8:1::3]:443...39482* ALPN: curl offers h2,http/1.139483} [5 bytes data]39484* TLSv1.3 (OUT), TLS handshake, Client hello (1):39485} [1552 bytes data]39486* SSL Trust Anchors:39487* OpenSSL default paths (fallback)39488{ [5 bytes data]39489* TLSv1.3 (IN), TLS handshake, Server hello (2):39490{ [1210 bytes data]39491* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39492{ [1 bytes data]39493* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39494{ [19 bytes data]39495* TLSv1.3 (IN), TLS handshake, Certificate (11):39496{ [1010 bytes data]39497* TLSv1.3 (IN), TLS handshake, CERT verify (15):39498{ [110 bytes data]39499* TLSv1.3 (IN), TLS handshake, Finished (20):39500{ [52 bytes data]39501* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39502} [1 bytes data]39503* TLSv1.3 (OUT), TLS handshake, Finished (20):39504} [52 bytes data]39505* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39506* ALPN: server accepted h239507* Server certificate:39508* subject: CN=test.foo39509* start date: Sep 18 05:27:24 2026 GMT39510* expire date: Oct 18 05:27:24 2028 GMT39511* issuer: CN=minica root ca 2e2b1939512* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439513* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439514* subjectAltName: "test.foo" matches cert's "test.foo"39515* OpenSSL verify result: 1339516* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39517* closing connection #039518curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39519More details here: https://curl.se/docs/sslcerts.html3952039521curl failed to verify the legitimacy of the server and therefore could not39522establish a secure connection to it. To learn more about this situation and39523how to fix it, please visit the webpage mentioned above.39524* Host test.foo:443 was resolved.39525* IPv6: 2001:db8:1::339526* IPv4: 192.168.1.339527* Trying [2001:db8:1::3]:443...39528* ALPN: curl offers h2,http/1.139529} [5 bytes data]39530* TLSv1.3 (OUT), TLS handshake, Client hello (1):39531} [1552 bytes data]39532* SSL Trust Anchors:39533* OpenSSL default paths (fallback)39534{ [5 bytes data]39535* TLSv1.3 (IN), TLS handshake, Server hello (2):39536{ [1210 bytes data]39537* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39538{ [1 bytes data]39539* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39540{ [19 bytes data]39541* TLSv1.3 (IN), TLS handshake, Certificate (11):39542{ [1010 bytes data]39543* TLSv1.3 (IN), TLS handshake, CERT verify (15):39544{ [112 bytes data]39545* TLSv1.3 (IN), TLS handshake, Finished (20):39546{ [52 bytes data]39547* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39548} [1 bytes data]39549* TLSv1.3 (OUT), TLS handshake, Finished (20):39550} [52 bytes data]39551* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39552* ALPN: server accepted h239553* Server certificate:39554* subject: CN=test.foo39555* start date: Sep 18 05:27:24 2026 GMT39556* expire date: Oct 18 05:27:24 2028 GMT39557* issuer: CN=minica root ca 2e2b1939558* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439559* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439560* subjectAltName: "test.foo" matches cert's "test.foo"39561* OpenSSL verify result: 1339562* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39563* closing connection #039564curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39565More details here: https://curl.se/docs/sslcerts.html3956639567curl failed to verify the legitimacy of the server and therefore could not39568establish a secure connection to it. To learn more about this situation and39569how to fix it, please visit the webpage mentioned above.39570* Host test.foo:443 was resolved.39571* IPv6: 2001:db8:1::339572* IPv4: 192.168.1.339573* Trying [2001:db8:1::3]:443...39574* ALPN: curl offers h2,http/1.139575} [5 bytes data]39576* TLSv1.3 (OUT), TLS handshake, Client hello (1):39577} [1552 bytes data]39578* SSL Trust Anchors:39579* OpenSSL default paths (fallback)39580{ [5 bytes data]39581* TLSv1.3 (IN), TLS handshake, Server hello (2):39582{ [1210 bytes data]39583* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39584{ [1 bytes data]39585* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39586{ [19 bytes data]39587* TLSv1.3 (IN), TLS handshake, Certificate (11):39588{ [1010 bytes data]39589* TLSv1.3 (IN), TLS handshake, CERT verify (15):39590{ [112 bytes data]39591* TLSv1.3 (IN), TLS handshake, Finished (20):39592{ [52 bytes data]39593* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39594} [1 bytes data]39595* TLSv1.3 (OUT), TLS handshake, Finished (20):39596} [52 bytes data]39597* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39598* ALPN: server accepted h239599* Server certificate:39600* subject: CN=test.foo39601* start date: Sep 18 05:27:24 2026 GMT39602* expire date: Oct 18 05:27:24 2028 GMT39603* issuer: CN=minica root ca 2e2b1939604* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439605* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439606* subjectAltName: "test.foo" matches cert's "test.foo"39607* OpenSSL verify result: 1339608* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39609* closing connection #039610curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39611More details here: https://curl.se/docs/sslcerts.html3961239613curl failed to verify the legitimacy of the server and therefore could not39614establish a secure connection to it. To learn more about this situation and39615how to fix it, please visit the webpage mentioned above.39616client # [1203323.810469] client systemd[1]: Starting Cleanup of Temporary Directories...39617client # [1203323.925011] client systemd[1]: systemd-tmpfiles-clean.service: Deactivated successfully.39618client # [1203323.925485] client systemd[1]: Finished Cleanup of Temporary Directories.39619* Host test.foo:443 was resolved.39620* IPv6: 2001:db8:1::339621* IPv4: 192.168.1.339622* Trying [2001:db8:1::3]:443...39623* ALPN: curl offers h2,http/1.139624} [5 bytes data]39625* TLSv1.3 (OUT), TLS handshake, Client hello (1):39626} [1552 bytes data]39627* SSL Trust Anchors:39628* OpenSSL default paths (fallback)39629{ [5 bytes data]39630* TLSv1.3 (IN), TLS handshake, Server hello (2):39631{ [1210 bytes data]39632* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39633{ [1 bytes data]39634* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39635{ [19 bytes data]39636* TLSv1.3 (IN), TLS handshake, Certificate (11):39637{ [1010 bytes data]39638* TLSv1.3 (IN), TLS handshake, CERT verify (15):39639{ [112 bytes data]39640* TLSv1.3 (IN), TLS handshake, Finished (20):39641{ [52 bytes data]39642* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39643} [1 bytes data]39644* TLSv1.3 (OUT), TLS handshake, Finished (20):39645} [52 bytes data]39646* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39647* ALPN: server accepted h239648* Server certificate:39649* subject: CN=test.foo39650* start date: Sep 18 05:27:24 2026 GMT39651* expire date: Oct 18 05:27:24 2028 GMT39652* issuer: CN=minica root ca 2e2b1939653* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439654* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439655* subjectAltName: "test.foo" matches cert's "test.foo"39656* OpenSSL verify result: 1339657* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39658* closing connection #039659curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39660More details here: https://curl.se/docs/sslcerts.html3966139662curl failed to verify the legitimacy of the server and therefore could not39663establish a secure connection to it. To learn more about this situation and39664how to fix it, please visit the webpage mentioned above.39665* Host test.foo:443 was resolved.39666* IPv6: 2001:db8:1::339667* IPv4: 192.168.1.339668* Trying [2001:db8:1::3]:443...39669* ALPN: curl offers h2,http/1.139670} [5 bytes data]39671* TLSv1.3 (OUT), TLS handshake, Client hello (1):39672} [1552 bytes data]39673* SSL Trust Anchors:39674* OpenSSL default paths (fallback)39675{ [5 bytes data]39676* TLSv1.3 (IN), TLS handshake, Server hello (2):39677{ [1210 bytes data]39678* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39679{ [1 bytes data]39680* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39681{ [19 bytes data]39682* TLSv1.3 (IN), TLS handshake, Certificate (11):39683{ [1010 bytes data]39684* TLSv1.3 (IN), TLS handshake, CERT verify (15):39685{ [112 bytes data]39686* TLSv1.3 (IN), TLS handshake, Finished (20):39687{ [52 bytes data]39688* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39689} [1 bytes data]39690* TLSv1.3 (OUT), TLS handshake, Finished (20):39691} [52 bytes data]39692* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39693* ALPN: server accepted h239694* Server certificate:39695* subject: CN=test.foo39696* start date: Sep 18 05:27:24 2026 GMT39697* expire date: Oct 18 05:27:24 2028 GMT39698* issuer: CN=minica root ca 2e2b1939699* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439700* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439701* subjectAltName: "test.foo" matches cert's "test.foo"39702* OpenSSL verify result: 1339703* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39704* closing connection #039705curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39706More details here: https://curl.se/docs/sslcerts.html3970739708curl failed to verify the legitimacy of the server and therefore could not39709establish a secure connection to it. To learn more about this situation and39710how to fix it, please visit the webpage mentioned above.39711* Host test.foo:443 was resolved.39712* IPv6: 2001:db8:1::339713* IPv4: 192.168.1.339714* Trying [2001:db8:1::3]:443...39715* ALPN: curl offers h2,http/1.139716} [5 bytes data]39717* TLSv1.3 (OUT), TLS handshake, Client hello (1):39718} [1552 bytes data]39719* SSL Trust Anchors:39720* OpenSSL default paths (fallback)39721{ [5 bytes data]39722* TLSv1.3 (IN), TLS handshake, Server hello (2):39723{ [1210 bytes data]39724* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39725{ [1 bytes data]39726* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39727{ [19 bytes data]39728* TLSv1.3 (IN), TLS handshake, Certificate (11):39729{ [1010 bytes data]39730* TLSv1.3 (IN), TLS handshake, CERT verify (15):39731{ [109 bytes data]39732* TLSv1.3 (IN), TLS handshake, Finished (20):39733{ [52 bytes data]39734* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39735} [1 bytes data]39736* TLSv1.3 (OUT), TLS handshake, Finished (20):39737} [52 bytes data]39738* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39739* ALPN: server accepted h239740* Server certificate:39741* subject: CN=test.foo39742* start date: Sep 18 05:27:24 2026 GMT39743* expire date: Oct 18 05:27:24 2028 GMT39744* issuer: CN=minica root ca 2e2b1939745* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439746* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439747* subjectAltName: "test.foo" matches cert's "test.foo"39748* OpenSSL verify result: 1339749* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39750* closing connection #039751curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39752More details here: https://curl.se/docs/sslcerts.html3975339754curl failed to verify the legitimacy of the server and therefore could not39755establish a secure connection to it. To learn more about this situation and39756how to fix it, please visit the webpage mentioned above.39757* Trying [2001:db8:1::3]:443...39758* Host test.foo:443 was resolved.39759* IPv6: 2001:db8:1::339760* IPv4: 192.168.1.339761* ALPN: curl offers h2,http/1.139762} [5 bytes data]39763* TLSv1.3 (OUT), TLS handshake, Client hello (1):39764} [1552 bytes data]39765* SSL Trust Anchors:39766* OpenSSL default paths (fallback)39767{ [5 bytes data]39768* TLSv1.3 (IN), TLS handshake, Server hello (2):39769{ [1210 bytes data]39770* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39771{ [1 bytes data]39772* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39773{ [19 bytes data]39774* TLSv1.3 (IN), TLS handshake, Certificate (11):39775{ [1010 bytes data]39776* TLSv1.3 (IN), TLS handshake, CERT verify (15):39777{ [112 bytes data]39778* TLSv1.3 (IN), TLS handshake, Finished (20):39779{ [52 bytes data]39780* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39781} [1 bytes data]39782* TLSv1.3 (OUT), TLS handshake, Finished (20):39783} [52 bytes data]39784* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39785* ALPN: server accepted h239786* Server certificate:39787* subject: CN=test.foo39788* start date: Sep 18 05:27:24 2026 GMT39789* expire date: Oct 18 05:27:24 2028 GMT39790* issuer: CN=minica root ca 2e2b1939791* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439792* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439793* subjectAltName: "test.foo" matches cert's "test.foo"39794* OpenSSL verify result: 1339795* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39796* closing connection #039797curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39798More details here: https://curl.se/docs/sslcerts.html3979939800curl failed to verify the legitimacy of the server and therefore could not39801establish a secure connection to it. To learn more about this situation and39802how to fix it, please visit the webpage mentioned above.39803* Host test.foo:443 was resolved.39804* IPv6: 2001:db8:1::339805* IPv4: 192.168.1.339806* Trying [2001:db8:1::3]:443...39807* ALPN: curl offers h2,http/1.139808} [5 bytes data]39809* TLSv1.3 (OUT), TLS handshake, Client hello (1):39810} [1552 bytes data]39811* SSL Trust Anchors:39812* OpenSSL default paths (fallback)39813{ [5 bytes data]39814* TLSv1.3 (IN), TLS handshake, Server hello (2):39815{ [1210 bytes data]39816* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39817{ [1 bytes data]39818* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39819{ [19 bytes data]39820* TLSv1.3 (IN), TLS handshake, Certificate (11):39821{ [1010 bytes data]39822* TLSv1.3 (IN), TLS handshake, CERT verify (15):39823{ [111 bytes data]39824* TLSv1.3 (IN), TLS handshake, Finished (20):39825{ [52 bytes data]39826* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39827} [1 bytes data]39828* TLSv1.3 (OUT), TLS handshake, Finished (20):39829} [52 bytes data]39830* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39831* ALPN: server accepted h239832* Server certificate:39833* subject: CN=test.foo39834* start date: Sep 18 05:27:24 2026 GMT39835* expire date: Oct 18 05:27:24 2028 GMT39836* issuer: CN=minica root ca 2e2b1939837* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439838* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439839* subjectAltName: "test.foo" matches cert's "test.foo"39840* OpenSSL verify result: 1339841* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39842* closing connection #039843curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39844More details here: https://curl.se/docs/sslcerts.html3984539846curl failed to verify the legitimacy of the server and therefore could not39847establish a secure connection to it. To learn more about this situation and39848how to fix it, please visit the webpage mentioned above.39849* Host test.foo:443 was resolved.39850* IPv6: 2001:db8:1::339851* IPv4: 192.168.1.339852* Trying [2001:db8:1::3]:443...39853* ALPN: curl offers h2,http/1.139854} [5 bytes data]39855* TLSv1.3 (OUT), TLS handshake, Client hello (1):39856} [1552 bytes data]39857* SSL Trust Anchors:39858* OpenSSL default paths (fallback)39859{ [5 bytes data]39860* TLSv1.3 (IN), TLS handshake, Server hello (2):39861{ [1210 bytes data]39862* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39863{ [1 bytes data]39864* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39865{ [19 bytes data]39866* TLSv1.3 (IN), TLS handshake, Certificate (11):39867{ [1010 bytes data]39868* TLSv1.3 (IN), TLS handshake, CERT verify (15):39869{ [110 bytes data]39870* TLSv1.3 (IN), TLS handshake, Finished (20):39871{ [52 bytes data]39872* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39873} [1 bytes data]39874* TLSv1.3 (OUT), TLS handshake, Finished (20):39875} [52 bytes data]39876* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39877* ALPN: server accepted h239878* Server certificate:39879* subject: CN=test.foo39880* start date: Sep 18 05:27:24 2026 GMT39881* expire date: Oct 18 05:27:24 2028 GMT39882* issuer: CN=minica root ca 2e2b1939883* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439884* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439885* subjectAltName: "test.foo" matches cert's "test.foo"39886* OpenSSL verify result: 1339887* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39888* closing connection #039889curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39890More details here: https://curl.se/docs/sslcerts.html3989139892curl failed to verify the legitimacy of the server and therefore could not39893establish a secure connection to it. To learn more about this situation and39894how to fix it, please visit the webpage mentioned above.39895ca # [1203329.946641] ca systemd[1]: Starting Cleanup of Temporary Directories...39896ca # [1203330.032558] ca systemd[1]: systemd-tmpfiles-clean.service: Deactivated successfully.39897ca # [1203330.032762] ca systemd[1]: Finished Cleanup of Temporary Directories.39898server # [1203330.172204] server systemd[1]: Starting Cleanup of Temporary Directories...39899server # [1203330.282132] server systemd[1]: systemd-tmpfiles-clean.service: Deactivated successfully.39900server # [1203330.282473] server systemd[1]: Finished Cleanup of Temporary Directories.39901* Host test.foo:443 was resolved.39902* IPv6: 2001:db8:1::339903* IPv4: 192.168.1.339904* Trying [2001:db8:1::3]:443...39905* ALPN: curl offers h2,http/1.139906} [5 bytes data]39907* TLSv1.3 (OUT), TLS handshake, Client hello (1):39908} [1552 bytes data]39909* SSL Trust Anchors:39910* OpenSSL default paths (fallback)39911{ [5 bytes data]39912* TLSv1.3 (IN), TLS handshake, Server hello (2):39913{ [1210 bytes data]39914* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39915{ [1 bytes data]39916* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39917{ [19 bytes data]39918* TLSv1.3 (IN), TLS handshake, Certificate (11):39919{ [1010 bytes data]39920* TLSv1.3 (IN), TLS handshake, CERT verify (15):39921{ [112 bytes data]39922* TLSv1.3 (IN), TLS handshake, Finished (20):39923{ [52 bytes data]39924* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39925} [1 bytes data]39926* TLSv1.3 (OUT), TLS handshake, Finished (20):39927} [52 bytes data]39928* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39929* ALPN: server accepted h239930* Server certificate:39931* subject: CN=test.foo39932* start date: Sep 18 05:27:24 2026 GMT39933* expire date: Oct 18 05:27:24 2028 GMT39934* issuer: CN=minica root ca 2e2b1939935* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439936* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439937* subjectAltName: "test.foo" matches cert's "test.foo"39938* OpenSSL verify result: 1339939* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39940* closing connection #039941curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39942More details here: https://curl.se/docs/sslcerts.html3994339944curl failed to verify the legitimacy of the server and therefore could not39945establish a secure connection to it. To learn more about this situation and39946how to fix it, please visit the webpage mentioned above.39947* Host test.foo:443 was resolved.39948* IPv6: 2001:db8:1::339949* IPv4: 192.168.1.339950* Trying [2001:db8:1::3]:443...39951* ALPN: curl offers h2,http/1.139952} [5 bytes data]39953* TLSv1.3 (OUT), TLS handshake, Client hello (1):39954} [1552 bytes data]39955* SSL Trust Anchors:39956* OpenSSL default paths (fallback)39957{ [5 bytes data]39958* TLSv1.3 (IN), TLS handshake, Server hello (2):39959{ [1210 bytes data]39960* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39961{ [1 bytes data]39962* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39963{ [19 bytes data]39964* TLSv1.3 (IN), TLS handshake, Certificate (11):39965{ [1010 bytes data]39966* TLSv1.3 (IN), TLS handshake, CERT verify (15):39967{ [112 bytes data]39968* TLSv1.3 (IN), TLS handshake, Finished (20):39969{ [52 bytes data]39970* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39971} [1 bytes data]39972* TLSv1.3 (OUT), TLS handshake, Finished (20):39973} [52 bytes data]39974* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39975* ALPN: server accepted h239976* Server certificate:39977* subject: CN=test.foo39978* start date: Sep 18 05:27:24 2026 GMT39979* expire date: Oct 18 05:27:24 2028 GMT39980* issuer: CN=minica root ca 2e2b1939981* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439982* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439983* subjectAltName: "test.foo" matches cert's "test.foo"39984* OpenSSL verify result: 1339985* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39986* closing connection #039987curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39988More details here: https://curl.se/docs/sslcerts.html3998939990curl failed to verify the legitimacy of the server and therefore could not39991establish a secure connection to it. To learn more about this situation and39992how to fix it, please visit the webpage mentioned above.39993* Trying [2001:db8:1::3]:443...39994* Host test.foo:443 was resolved.39995* IPv6: 2001:db8:1::339996* IPv4: 192.168.1.339997* ALPN: curl offers h2,http/1.139998} [5 bytes data]39999* TLSv1.3 (OUT), TLS handshake, Client hello (1):40000} [1552 bytes data]40001* SSL Trust Anchors:40002* OpenSSL default paths (fallback)40003{ [5 bytes data]40004* TLSv1.3 (IN), TLS handshake, Server hello (2):40005{ [1210 bytes data]40006* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):40007{ [1 bytes data]40008* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):40009{ [19 bytes data]40010* TLSv1.3 (IN), TLS handshake, Certificate (11):40011{ [1010 bytes data]40012* TLSv1.3 (IN), TLS handshake, CERT verify (15):40013{ [111 bytes data]40014* TLSv1.3 (IN), TLS handshake, Finished (20):40015{ [52 bytes data]40016* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):40017} [1 bytes data]40018* TLSv1.3 (OUT), TLS handshake, Finished (20):40019} [52 bytes data]40020* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey40021* ALPN: server accepted h240022* Server certificate:40023* subject: CN=test.foo40024* start date: Sep 18 05:27:24 2026 GMT40025* expire date: Oct 18 05:27:24 2028 GMT40026* issuer: CN=minica root ca 2e2b1940027* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38440028* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38440029* subjectAltName: "test.foo" matches cert's "test.foo"40030* OpenSSL verify result: 1340031* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)40032* closing connection #040033curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)40034More details here: https://curl.se/docs/sslcerts.html4003540036curl failed to verify the legitimacy of the server and therefore could not40037establish a secure connection to it. To learn more about this situation and40038how to fix it, please visit the webpage mentioned above.40039* Trying [2001:db8:1::3]:443...40040* ALPN: curl offers h2,http/1.140041} [5 bytes data]40042* TLSv1.3 (OUT), TLS handshake, Client hello (1):40043} [1552 bytes data]40044* SSL Trust Anchors:40045* OpenSSL default paths (fallback)40046* Host test.foo:443 was resolved.40047* IPv6: 2001:db8:1::340048* IPv4: 192.168.1.340049{ [5 bytes data]40050* TLSv1.3 (IN), TLS handshake, Server hello (2):40051{ [1210 bytes data]40052* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):40053{ [1 bytes data]40054* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):40055{ [19 bytes data]40056* TLSv1.3 (IN), TLS handshake, Certificate (11):40057{ [1010 bytes data]40058* TLSv1.3 (IN), TLS handshake, CERT verify (15):40059{ [112 bytes data]40060* TLSv1.3 (IN), TLS handshake, Finished (20):40061{ [52 bytes data]40062* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):40063} [1 bytes data]40064* TLSv1.3 (OUT), TLS handshake, Finished (20):40065} [52 bytes data]40066* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey40067* ALPN: server accepted h240068* Server certificate:40069* subject: CN=test.foo40070* start date: Sep 18 05:27:24 2026 GMT40071* expire date: Oct 18 05:27:24 2028 GMT40072* issuer: CN=minica root ca 2e2b1940073* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38440074* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38440075* subjectAltName: "test.foo" matches cert's "test.foo"40076* OpenSSL verify result: 1340077* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)40078* closing connection #040079curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)40080More details here: https://curl.se/docs/sslcerts.html4008140082curl failed to verify the legitimacy of the server and therefore could not40083establish a secure connection to it. To learn more about this situation and40084how to fix it, please visit the webpage mentioned above.40085!!! Traceback (most recent call last):40086!!! File "<string>", line 13, in <module>40087!!! client.wait_until_succeeds("curl -v https://test.foo")40088!!! 40089!!! RequestedAssertionFailed: action timed out after 900.21 seconds (timeout=900.0)40090cleanup40091kill NspawnMachine (pid 53)40092kill NspawnMachine (pid 54)40093Container ca terminated by signal KILL.40094kill NspawnMachine (pid 55)40095Container client terminated by signal KILL.40096(finished: cleanup, in 0.50 seconds)40097Container server terminated by signal KILL.