container-test-run-certificates
checks.aarch64-linux.certificates
· build #707
· raw
1Machine state will be reset. To keep it, pass --keep-machine-state2start all VLans3(finished: start all VLans, in 0.00 seconds)45Test will time out and terminate in 3600.0 seconds6run the VM test script7additionally exposed symbols:8 ca, client, server,9 vlan1,10 start_all, test_script, machines, machines_qemu, machines_nspawn, vlans, driver, log, os, create_machine, subtest, run_tests, join_all, retry, serial_stdout_off, serial_stdout_on, polling_condition, BaseMachine, QemuMachine, NspawnMachine, t, debug, dump_machine_ssh11start all VMs12ca: systemd-nspawn running (pid 53)13client: systemd-nspawn running (pid 54)14server: systemd-nspawn running (pid 55)15ca: Waiting for journal at /build/vm-state-ca/var/log/journal...16client: Waiting for journal at /build/vm-state-client/var/log/journal...17server: Waiting for journal at /build/vm-state-server/var/log/journal...18(finished: start all VMs, in 0.00 seconds)19nixos-nspawn(server): TAP vde-tap1 not found; container will be isolated from VDE20nixos-nspawn(server): A common reason for this is that /dev/net is not available in the Nix sandbox. Try adding /dev/net to extra-sandbox-paths.21nixos-nspawn(ca): TAP vde-tap1 not found; container will be isolated from VDE22nixos-nspawn(ca): A common reason for this is that /dev/net is not available in the Nix sandbox. Try adding /dev/net to extra-sandbox-paths.23nixos-nspawn(client): TAP vde-tap1 not found; container will be isolated from VDE24nixos-nspawn(client): A common reason for this is that /dev/net is not available in the Nix sandbox. Try adding /dev/net to extra-sandbox-paths.25Note: in a future version of systemd-nspawn the default set of permitted socket address families will be restricted to AF_INET, AF_INET6 and AF_UNIX. Use --restrict-address-families= to configure the set of permitted socket address families, or set RestrictAddressFamilies= in a .nspawn file.26Note: in a future version of systemd-nspawn the default set of permitted socket address families will be restricted to AF_INET, AF_INET6 and AF_UNIX. Use --restrict-address-families= to configure the set of permitted socket address families, or set RestrictAddressFamilies= in a .nspawn file.27Note: in a future version of systemd-nspawn the default set of permitted socket address families will be restricted to AF_INET, AF_INET6 and AF_UNIX. Use --restrict-address-families= to configure the set of permitted socket address families, or set RestrictAddressFamilies= in a .nspawn file.28░ Spawning container server on /build/vm-state-server.29░ Spawning container ca on /build/vm-state-ca.30░ Spawning container client on /build/vm-state-client.31ca # No journal files were found.32server # No journal files were found.33ca # No journal boot entry found for the specified boot (+0).34client # No journal files were found.35server # No journal boot entry found for the specified boot (+0).36client # No journal boot entry found for the specified boot (+0).37ca # [1288235.455064] ca systemd-journald[82]: Journal started38ca # [1288235.455121] ca systemd-journald[82]: Runtime Journal (/run/log/journal/bedbcc58f643429aab90df4f1a77a561) is 8M, max 2.5G, 2.4G free.39client # [1288235.454332] client systemd-journald[72]: Journal started40ca # [1288235.464731] ca systemd[1]: Finished Apply Kernel Variables.41client # [1288235.454392] client systemd-journald[72]: Runtime Journal (/run/log/journal/1c58118f37a34940aaa66749c5b1e33d) is 8M, max 2.5G, 2.4G free.42ca # [1288235.477774] ca systemd[1]: Finished Create Static Device Nodes in /dev gracefully.43client # [1288235.460024] client systemd[1]: Finished Apply Kernel Variables.44ca # [1288235.493725] ca systemd[1]: Starting Flush Journal to Persistent Storage...45client # [1288235.472215] client systemd[1]: Finished Create Static Device Nodes in /dev gracefully.46ca # [1288235.494517] ca systemd[1]: Starting Network Name Resolution...47ca # [1288235.495476] ca systemd[1]: Starting Create Static Device Nodes in /dev...48ca # [1288235.504572] ca systemd-journald[82]: Time spent on flushing to /var/log/journal/bedbcc58f643429aab90df4f1a77a561 is 4.109ms for 7 entries.49ca # [1288235.504572] ca systemd-journald[82]: System Journal (/var/log/journal/bedbcc58f643429aab90df4f1a77a561) is 8M, max 4G, 3.9G free.50ca # [1288235.530026] ca systemd[1]: Finished Flush Journal to Persistent Storage.51client # [1288235.486301] client systemd[1]: Starting Flush Journal to Persistent Storage...52server # [1288235.454337] server systemd-journald[72]: Journal started53client # [1288235.487180] client systemd[1]: Starting Network Name Resolution...54server # [1288235.454393] server systemd-journald[72]: Runtime Journal (/run/log/journal/5468bb59408e4dc0bae313d090736921) is 8M, max 2.5G, 2.4G free.55ca # [1288235.531014] ca systemd[1]: Finished Create Static Device Nodes in /dev.56server # [1288235.467535] server systemd[1]: Finished Apply Kernel Variables.57ca # [1288235.532096] ca systemd[1]: Reached target Preparation for Local File Systems.58server # [1288235.481537] server systemd[1]: Finished Create Static Device Nodes in /dev gracefully.59ca # [1288235.532231] ca systemd[1]: Reached target Local File Systems.60server # [1288235.497821] server systemd[1]: Starting Flush Journal to Persistent Storage...61ca # [1288235.533053] ca systemd[1]: Listening on Boot Loader Control Service Socket.62server # [1288235.498691] server systemd[1]: Starting Network Name Resolution...63ca # [1288235.533104] ca systemd[1]: Update Boot Loader Random Seed skipped, unmet condition check ConditionVirtualization=!container64server # [1288235.499347] server systemd[1]: Starting Create Static Device Nodes in /dev...65ca # [1288235.533989] ca systemd[1]: Starting Save Transient machine-id to Disk...66server # [1288235.509165] server systemd-journald[72]: Time spent on flushing to /var/log/journal/5468bb59408e4dc0bae313d090736921 is 1.558ms for 7 entries.67ca # [1288235.534676] ca systemd[1]: Starting Create System Files and Directories...68server # [1288235.509165] server systemd-journald[72]: System Journal (/var/log/journal/5468bb59408e4dc0bae313d090736921) is 8M, max 4G, 3.9G free.69server # [1288235.529240] server systemd[1]: Finished Flush Journal to Persistent Storage.70server # [1288235.529590] server systemd[1]: Finished Create Static Device Nodes in /dev.71server # [1288235.530835] server systemd[1]: Reached target Preparation for Local File Systems.72server # [1288235.530965] server systemd[1]: Reached target Local File Systems.73server # [1288235.531819] server systemd[1]: Listening on Boot Loader Control Service Socket.74server # [1288235.531867] server systemd[1]: Update Boot Loader Random Seed skipped, unmet condition check ConditionVirtualization=!container75server # [1288235.532727] server systemd[1]: Starting Save Transient machine-id to Disk...76server # [1288235.533416] server systemd[1]: Starting Create System Files and Directories...77server # [1288235.533448] server systemd[1]: Rule-based Manager for Device Events and Files skipped, unmet condition check ConditionPathIsReadWrite=/sys78server # [1288235.551583] server systemd-tmpfiles[131]: Cannot set file attributes for '/var/empty', value=0x00000010, mask=0x00000010, ignoring: Operation not permitted79server # [1288235.551809] server systemd-tmpfiles[131]: fchmod() of /var/log/journal failed: Operation not permitted80server # [1288235.551962] server systemd-tmpfiles[131]: fchmod() of /var/log/journal/5468bb59408e4dc0bae313d090736921 failed: Operation not permitted81server # [1288235.552223] server systemd-tmpfiles[131]: fchmod() of /run/log/journal failed: Operation not permitted82server # [1288235.553764] server systemd[1]: Finished Create System Files and Directories.83server # [1288235.554915] server systemd[1]: Starting Rebuild Journal Catalog...84server # [1288235.555912] server systemd[1]: Starting Record System Boot/Shutdown in UTMP...85server # [1288235.572092] server systemd[1]: Finished Record System Boot/Shutdown in UTMP.86server # [1288235.576280] server systemd[1]: Finished Rebuild Journal Catalog.87server # [1288235.577342] server systemd[1]: Starting Update is Completed...88server # [1288235.587325] server systemd[1]: Finished Update is Completed.89server # [1288235.636738] server systemd[1]: Finished Firewall.90server # [1288235.636898] server systemd[1]: Reached target Preparation for Network.91client # [1288235.487893] client systemd[1]: Starting Create Static Device Nodes in /dev...92ca # [1288235.534707] ca systemd[1]: Rule-based Manager for Device Events and Files skipped, unmet condition check ConditionPathIsReadWrite=/sys93client # [1288235.498193] client systemd-journald[72]: Time spent on flushing to /var/log/journal/1c58118f37a34940aaa66749c5b1e33d is 2.818ms for 7 entries.94server # [1288235.637117] server systemd[1]: Listening on Network Management Resolve Hook Socket.95client # [1288235.498193] client systemd-journald[72]: System Journal (/var/log/journal/1c58118f37a34940aaa66749c5b1e33d) is 8M, max 4G, 3.9G free.96ca # [1288235.553955] ca systemd-tmpfiles[144]: Cannot set file attributes for '/var/empty', value=0x00000010, mask=0x00000010, ignoring: Operation not permitted97client # [1288235.506251] client systemd[1]: Finished Create Static Device Nodes in /dev.98server # [1288235.638159] server systemd[1]: Starting Network Management...99server # [1288236.064275] server systemd[1]: Finished Save Transient machine-id to Disk.100ca # [1288235.554189] ca systemd-tmpfiles[144]: fchmod() of /var/log/journal failed: Operation not permitted101client # [1288235.506917] client systemd[1]: Reached target Preparation for Local File Systems.102client # [1288235.507059] client systemd[1]: Reached target Local File Systems.103server # [1288236.354718] server systemd-networkd[189]: Failed to increase receive buffer size for general netlink socket, ignoring: Operation not permitted104client # [1288235.507925] client systemd[1]: Listening on Boot Loader Control Service Socket.105ca # [1288235.554345] ca systemd-tmpfiles[144]: fchmod() of /var/log/journal/bedbcc58f643429aab90df4f1a77a561 failed: Operation not permitted106ca # [1288235.554579] ca systemd-tmpfiles[144]: fchmod() of /run/log/journal failed: Operation not permitted107server # [1288236.354815] server systemd-networkd[189]: Failed to increase receive buffer size for nftables netlink socket, ignoring: Operation not permitted108client # [1288235.507975] client systemd[1]: Update Boot Loader Random Seed skipped, unmet condition check ConditionVirtualization=!container109ca # [1288235.556270] ca systemd[1]: Finished Create System Files and Directories.110server # [1288236.364853] server systemd-networkd[189]: /etc/systemd/network/99-ethernet-default-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section.111ca # [1288235.557350] ca systemd[1]: Starting Rebuild Journal Catalog...112client # [1288235.508897] client systemd[1]: Starting Save Transient machine-id to Disk...113ca # [1288235.558077] ca systemd[1]: Starting Record System Boot/Shutdown in UTMP...114client # [1288235.508935] client systemd[1]: Rule-based Manager for Device Events and Files skipped, unmet condition check ConditionPathIsReadWrite=/sys115ca # [1288235.571983] ca systemd[1]: Finished Record System Boot/Shutdown in UTMP.116server # [1288236.365021] server systemd-networkd[189]: /etc/systemd/network/99-wireless-client-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section.117ca # [1288235.578179] ca systemd[1]: Finished Rebuild Journal Catalog.118server # [1288236.365169] server systemd-networkd[189]: lo: Link UP119server # [1288236.365172] server systemd-networkd[189]: lo: Gained carrier120client # [1288235.515351] client systemd[1]: Finished Flush Journal to Persistent Storage.121ca # [1288235.579189] ca systemd[1]: Starting Update is Completed...122server # [1288236.365337] server systemd-networkd[189]: eth1: Configuring with /etc/systemd/network/40-eth1.network.123ca # [1288235.589684] ca systemd[1]: Finished Update is Completed.124server # [1288236.365736] server systemd[1]: Started Network Management.125ca # [1288235.627460] ca systemd[1]: Finished Firewall.126server # [1288236.392278] server systemd-networkd[189]: eth1: Link UP127server # [1288236.392556] server systemd[1]: Starting Enable Persistent Storage in systemd-networkd...128server # [1288236.392837] server systemd-networkd[189]: eth1: Gained carrier129client # [1288235.516313] client systemd[1]: Starting Create System Files and Directories...130ca # [1288235.627633] ca systemd[1]: Reached target Preparation for Network.131client # [1288235.533925] client systemd-tmpfiles[127]: Cannot set file attributes for '/var/empty', value=0x00000010, mask=0x00000010, ignoring: Operation not permitted132ca # [1288235.627883] ca systemd[1]: Listening on Network Management Resolve Hook Socket.133client # [1288235.534147] client systemd-tmpfiles[127]: fchmod() of /var/log/journal failed: Operation not permitted134ca # [1288235.629139] ca systemd[1]: Starting Network Management...135client # [1288235.534302] client systemd-tmpfiles[127]: fchmod() of /var/log/journal/1c58118f37a34940aaa66749c5b1e33d failed: Operation not permitted136ca # [1288236.065165] ca systemd[1]: Finished Save Transient machine-id to Disk.137client # [1288235.534535] client systemd-tmpfiles[127]: fchmod() of /run/log/journal failed: Operation not permitted138ca # [1288236.354732] ca systemd-networkd[199]: Failed to increase receive buffer size for general netlink socket, ignoring: Operation not permitted139client # [1288235.535960] client systemd[1]: Finished Create System Files and Directories.140ca # [1288236.354819] ca systemd-networkd[199]: Failed to increase receive buffer size for nftables netlink socket, ignoring: Operation not permitted141client # [1288235.537091] client systemd[1]: Starting Rebuild Journal Catalog...142ca # [1288236.364867] ca systemd-networkd[199]: /etc/systemd/network/99-ethernet-default-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section.143client # [1288235.537827] client systemd[1]: Starting Record System Boot/Shutdown in UTMP...144ca # [1288236.365039] ca systemd-networkd[199]: /etc/systemd/network/99-wireless-client-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section.145client # [1288235.550594] client systemd[1]: Finished Record System Boot/Shutdown in UTMP.146ca # [1288236.365210] ca systemd-networkd[199]: lo: Link UP147client # [1288235.560237] client systemd[1]: Finished Rebuild Journal Catalog.148ca # [1288236.365215] ca systemd-networkd[199]: lo: Gained carrier149client # [1288235.561432] client systemd[1]: Starting Update is Completed...150ca # [1288236.365380] ca systemd-networkd[199]: eth1: Configuring with /etc/systemd/network/40-eth1.network.151client # [1288235.570540] client systemd[1]: Finished Update is Completed.152ca # [1288236.365789] ca systemd[1]: Started Network Management.153client # [1288235.620534] client systemd[1]: Finished Firewall.154ca # [1288236.392354] ca systemd-networkd[199]: eth1: Link UP155client # [1288235.620702] client systemd[1]: Reached target Preparation for Network.156ca # [1288236.392777] ca systemd[1]: Starting Enable Persistent Storage in systemd-networkd...157client # [1288235.620964] client systemd[1]: Listening on Network Management Resolve Hook Socket.158ca # [1288236.392858] ca systemd-networkd[199]: eth1: Gained carrier159client # [1288235.622149] client systemd[1]: Starting Network Management...160client # [1288236.064897] client systemd[1]: Finished Save Transient machine-id to Disk.161client # [1288236.344996] client systemd-networkd[185]: Failed to increase receive buffer size for general netlink socket, ignoring: Operation not permitted162client # [1288236.345089] client systemd-networkd[185]: Failed to increase receive buffer size for nftables netlink socket, ignoring: Operation not permitted163client # [1288236.355894] client systemd-networkd[185]: /etc/systemd/network/99-ethernet-default-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section.164client # [1288236.356078] client systemd-networkd[185]: /etc/systemd/network/99-wireless-client-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section.165client # [1288236.356232] client systemd-networkd[185]: lo: Link UP166client # [1288236.356236] client systemd-networkd[185]: lo: Gained carrier167client # [1288236.356429] client systemd-networkd[185]: eth1: Configuring with /etc/systemd/network/40-eth1.network.168client # [1288236.356820] client systemd[1]: Started Network Management.169client # [1288236.356880] client systemd-networkd[185]: eth1: Link UP170client # [1288236.357191] client systemd-networkd[185]: eth1: Gained carrier171client # [1288236.358651] client systemd[1]: Starting Enable Persistent Storage in systemd-networkd...172client # [1288236.401686] client systemd[1]: Finished Enable Persistent Storage in systemd-networkd.173ca # [1288236.426442] ca systemd[1]: Finished Enable Persistent Storage in systemd-networkd.174ca # [1288236.465367] ca systemd[1]: etc-machine\x2did.mount: Deactivated successfully.175server # [1288236.426193] server systemd[1]: Finished Enable Persistent Storage in systemd-networkd.176server # [1288236.449863] server systemd[1]: etc-machine\x2did.mount: Deactivated successfully.177client # [1288236.465772] client systemd[1]: etc-machine\x2did.mount: Deactivated successfully.178ca # [1288236.695346] ca systemd-resolved[119]: Positive Trust Anchors:179ca # [1288236.695357] ca systemd-resolved[119]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d180ca # [1288236.695361] ca systemd-resolved[119]: . IN DS 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16181ca # [1288236.695395] ca systemd-resolved[119]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 170.0.0.192.in-addr.arpa 171.0.0.192.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa ipv4only.arpa resolver.arpa corp home internal intranet lan local private test182ca # [1288236.718091] ca systemd-resolved[119]: Using system hostname 'ca'.183ca # [1288236.719493] ca systemd[1]: Started Network Name Resolution.184ca # [1288236.719622] ca systemd[1]: Reached target Network.185ca # [1288236.719735] ca systemd[1]: Reached target Network is Online.186ca # [1288236.719825] ca systemd[1]: Reached target System Initialization.187ca # [1288236.720256] ca systemd[1]: Started Renew ACME Certificate for ca.foo.188ca # [1288236.720317] ca systemd[1]: Discard unused filesystem blocks once a week skipped, unmet condition check ConditionVirtualization=!container189ca # [1288236.720367] ca systemd[1]: Started Daily Cleanup of Temporary Directories.190ca # [1288236.720407] ca systemd[1]: Reached target Timer Units.191ca # [1288236.720646] ca systemd[1]: Listening on D-Bus System Message Bus Socket.192ca # [1288236.720850] ca systemd[1]: Listening on Nix Daemon Socket.193ca # [1288236.721075] ca systemd[1]: Listening on Virtual Machine and Container Registration Service Socket.194ca # [1288236.721122] ca systemd[1]: Reached target Socket Units.195ca # [1288236.721216] ca systemd[1]: Reached target Basic System.196ca # [1288236.723978] ca systemd[1]: Starting Set up the ACME certificate renewal infrastructure...197ca # [1288236.725364] ca systemd[1]: Starting Import lastlog data into lastlog2 database...198ca # [1288236.725431] ca systemd[1]: nginx-config-reload.service skipped, unmet condition check ConditionPathExists=/var/lib/acme/ca.foo/fullchain.pem199ca # [1288236.726884] ca systemd[1]: Starting Name Service Cache Daemon (nsncd)...200ca # [1288236.728642] ca systemd[1]: Starting step-ca service...201ca # [1288236.777187] ca systemd[1]: Starting D-Bus System Message Bus...202ca # [1288236.878683] ca systemd[1]: lastlog2-import.service: Failed to spawn executor: No such file or directory203ca # [1288236.878732] ca systemd[1]: lastlog2-import.service: Failed to spawn 'start-post' task: No such file or directory204ca # [1288236.878805] ca systemd[1]: lastlog2-import.service: Failed with result 'resources'.205ca # [1288236.878912] ca systemd[1]: Failed to start Import lastlog data into lastlog2 database.206server # [1288236.714676] server systemd-resolved[108]: Positive Trust Anchors:207server # [1288236.714688] server systemd-resolved[108]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d208server # [1288236.714691] server systemd-resolved[108]: . IN DS 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16209server # [1288236.714724] server systemd-resolved[108]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 170.0.0.192.in-addr.arpa 171.0.0.192.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa ipv4only.arpa resolver.arpa corp home internal intranet lan local private test210server # [1288236.737350] server systemd-resolved[108]: Using system hostname 'server'.211server # [1288236.738704] server systemd[1]: Started Network Name Resolution.212server # [1288236.738828] server systemd[1]: Reached target Network.213server # [1288236.738935] server systemd[1]: Reached target Network is Online.214server # [1288236.739018] server systemd[1]: Reached target System Initialization.215server # [1288236.739381] server systemd[1]: Started Renew ACME Certificate for test.foo.216server # [1288236.739434] server systemd[1]: Discard unused filesystem blocks once a week skipped, unmet condition check ConditionVirtualization=!container217server # [1288236.739474] server systemd[1]: Started Daily Cleanup of Temporary Directories.218server # [1288236.739512] server systemd[1]: Reached target Timer Units.219server # [1288236.776376] server systemd[1]: Listening on D-Bus System Message Bus Socket.220server # [1288236.776608] server systemd[1]: Listening on Nix Daemon Socket.221server # [1288236.776841] server systemd[1]: Listening on Virtual Machine and Container Registration Service Socket.222server # [1288236.776891] server systemd[1]: Reached target Socket Units.223server # [1288236.776994] server systemd[1]: Reached target Basic System.224server # [1288236.779808] server systemd[1]: Starting Set up the ACME certificate renewal infrastructure...225server # [1288236.781243] server systemd[1]: Starting Import lastlog data into lastlog2 database...226server # [1288236.781316] server systemd[1]: nginx-config-reload.service skipped, unmet condition check ConditionPathExists=/var/lib/acme/test.foo/fullchain.pem227server # [1288236.782806] server systemd[1]: Starting Name Service Cache Daemon (nsncd)...228server # [1288236.784950] server systemd[1]: Starting D-Bus System Message Bus...229server # [1288236.804049] server systemd[1]: Finished Import lastlog data into lastlog2 database.230server # [1288236.969007] server acme-setup-privileged[195]: + set -euo pipefail231server # [1288236.969007] server acme-setup-privileged[195]: + cd /var/lib/acme232server # [1288236.969007] server acme-setup-privileged[195]: + chmod -R u=rwX,g=,o= .lego/accounts233client # [1288236.732884] client systemd-resolved[107]: Positive Trust Anchors:234client # [1288236.732894] client systemd-resolved[107]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d235client # [1288236.732898] client systemd-resolved[107]: . IN DS 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16236client # [1288236.732932] client systemd-resolved[107]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 170.0.0.192.in-addr.arpa 171.0.0.192.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa ipv4only.arpa resolver.arpa corp home internal intranet lan local private test237client # [1288236.755246] client systemd-resolved[107]: Using system hostname 'client'.238client # [1288236.756634] client systemd[1]: Started Network Name Resolution.239client # [1288236.756752] client systemd[1]: Reached target Network.240client # [1288236.756873] client systemd[1]: Reached target System Initialization.241client # [1288236.756966] client systemd[1]: Discard unused filesystem blocks once a week skipped, unmet condition check ConditionVirtualization=!container242client # [1288236.757015] client systemd[1]: Started Daily Cleanup of Temporary Directories.243client # [1288236.757050] client systemd[1]: Reached target Timer Units.244client # [1288236.776391] client systemd[1]: Listening on D-Bus System Message Bus Socket.245client # [1288236.776613] client systemd[1]: Listening on Nix Daemon Socket.246client # [1288236.776867] client systemd[1]: Listening on Virtual Machine and Container Registration Service Socket.247client # [1288236.776916] client systemd[1]: Reached target Socket Units.248client # [1288236.777006] client systemd[1]: Reached target Basic System.249client # [1288236.779323] client systemd[1]: Starting Import lastlog data into lastlog2 database...250client # [1288236.780857] client systemd[1]: Starting Name Service Cache Daemon (nsncd)...251client # [1288236.783039] client systemd[1]: Starting D-Bus System Message Bus...252client # [1288236.802786] client systemd[1]: Finished Import lastlog data into lastlog2 database.253client # [1288237.021110] client nsncd[192]: Sep 19 05:17:37.006 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket"254client # [1288237.021060] client systemd[1]: Started Name Service Cache Daemon (nsncd).255client # [1288237.021154] client systemd[1]: Reached target Host and Network Name Lookups.256client # [1288237.021269] client systemd[1]: Reached target User and Group Name Lookups.257server # [1288236.971093] server acme-setup-privileged[195]: + chown -R acme .lego/accounts258server # [1288236.972595] server acme-setup-privileged[195]: + for fixpath in test.foo .lego/test.foo259server # [1288236.972660] server acme-setup-privileged[195]: + '[' -d test.foo ']'260server # [1288236.972660] server acme-setup-privileged[195]: + for fixpath in test.foo .lego/test.foo261server # [1288236.972660] server acme-setup-privileged[195]: + '[' -d .lego/test.foo ']'262server # [1288237.026659] server nsncd[197]: Sep 19 05:17:37.012 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket"263server # [1288237.026646] server systemd[1]: Started Name Service Cache Daemon (nsncd).264server # [1288237.026770] server systemd[1]: Reached target Host and Network Name Lookups.265server # [1288237.026874] server systemd[1]: Reached target User and Group Name Lookups.266server # [1288237.030023] server systemd[1]: Starting User Login Management...267server # [1288237.031398] server systemd[1]: Starting Permit User Sessions...268server # [1288237.043464] server systemd[1]: Finished Permit User Sessions.269server # [1288237.044687] server systemd[1]: Started Console Getty.270server # [1288237.044743] server systemd[1]: Getty on tty1 skipped, unmet condition check ConditionPathExists=/dev/tty0271server # [1288237.044771] server systemd[1]: Reached target Login Prompts.272server # [1288237.229624] server dbus-broker-launch[198]: Looking up NSS user entry for 'systemd-timesync'...273client # [1288237.029737] client systemd[1]: Starting User Login Management...274client # [1288237.031219] client systemd[1]: Starting Permit User Sessions...275client # [1288237.043451] client systemd[1]: Finished Permit User Sessions.276client # [1288237.044519] client systemd[1]: Started Console Getty.277client # [1288237.044563] client systemd[1]: Getty on tty1 skipped, unmet condition check ConditionPathExists=/dev/tty0278client # [1288237.044585] client systemd[1]: Reached target Login Prompts.279client # [1288237.218589] client dbus-broker-launch[193]: Looking up NSS user entry for 'systemd-timesync'...280client # [1288237.220080] client dbus-broker-launch[193]: NSS returned no entry for 'systemd-timesync'281client # [1288237.220080] client dbus-broker-launch[193]: Invalid user-name in /nix/store/g0a3fan1ykqwgcwicjzjgnwxr95dlfi7-system-path/share/dbus-1/system.d/org.freedesktop.timesync1.conf +16: user="systemd-timesync"282client # [1288237.222236] client systemd[1]: Started D-Bus System Message Bus.283client # [1288237.230684] client dbus-broker-launch[193]: Ready284ca # [1288237.004994] ca acme-setup-privileged[205]: + set -euo pipefail285ca # [1288237.004994] ca acme-setup-privileged[205]: + cd /var/lib/acme286ca # [1288237.004994] ca acme-setup-privileged[205]: + chmod -R u=rwX,g=,o= .lego/accounts287ca # [1288237.006938] ca acme-setup-privileged[205]: + chown -R acme .lego/accounts288ca # [1288237.009217] ca acme-setup-privileged[205]: + for fixpath in ca.foo .lego/ca.foo289ca # [1288237.009261] ca acme-setup-privileged[205]: + '[' -d ca.foo ']'290ca # [1288237.009261] ca acme-setup-privileged[205]: + for fixpath in ca.foo .lego/ca.foo291ca # [1288237.009261] ca acme-setup-privileged[205]: + '[' -d .lego/ca.foo ']'292ca # [1288237.069705] ca nsncd[207]: Sep 19 05:17:37.055 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket"293ca # [1288237.069872] ca systemd[1]: Started Name Service Cache Daemon (nsncd).294ca # [1288237.070026] ca systemd[1]: Reached target Host and Network Name Lookups.295ca # [1288237.070139] ca systemd[1]: Reached target User and Group Name Lookups.296ca # [1288237.072100] ca systemd[1]: Starting User Login Management...297ca # [1288237.073451] ca systemd[1]: Starting Permit User Sessions...298ca # [1288237.084839] ca systemd[1]: Finished Permit User Sessions.299ca # [1288237.085922] ca systemd[1]: Started Console Getty.300ca # [1288237.085972] ca systemd[1]: Getty on tty1 skipped, unmet condition check ConditionPathExists=/dev/tty0301ca # [1288237.085993] ca systemd[1]: Reached target Login Prompts.302ca # [1288237.295251] ca dbus-broker-launch[212]: Looking up NSS user entry for 'systemd-timesync'...303ca: must succeed: systemctl restart acme-order-renew-ca.foo.service 304server # [1288237.230864] server dbus-broker-launch[198]: NSS returned no entry for 'systemd-timesync'305server # [1288237.230864] server dbus-broker-launch[198]: Invalid user-name in /nix/store/zzss1678mb50nlwag2hiw11lg128jpl3-system-path/share/dbus-1/system.d/org.freedesktop.timesync1.conf +16: user="systemd-timesync"306server # [1288237.232880] server systemd[1]: Started D-Bus System Message Bus.307server # [1288237.240791] server dbus-broker-launch[198]: Ready308server # [1288237.472156] server systemd-networkd[189]: eth1: Gained IPv6LL309ca # [1288237.296370] ca dbus-broker-launch[212]: NSS returned no entry for 'systemd-timesync'310ca # [1288237.296370] ca dbus-broker-launch[212]: Invalid user-name in /nix/store/bh2gmvmbmbp0nqf3m5qaqnfjair6v85q-system-path/share/dbus-1/system.d/org.freedesktop.timesync1.conf +16: user="systemd-timesync"311ca # [1288237.298877] ca systemd[1]: Started D-Bus System Message Bus.312ca # [1288237.307372] ca dbus-broker-launch[212]: Ready313ca # [1288237.922896] ca systemd-logind[237]: New seat seat0.314ca # [1288237.923068] ca systemd[1]: Started User Login Management.315ca # [1288237.932843] ca systemd[1]: Starting linger-users.service...316ca # [1288237.946450] ca systemd[1]: linger-users.service: Deactivated successfully.317ca # [1288237.946666] ca systemd[1]: Finished linger-users.service.318ca # [1288238.028358] ca acme-setup-start[221]: + set -euo pipefail319ca # [1288238.028358] ca acme-setup-start[221]: + test -e ca/key.pem320ca # [1288238.028935] ca acme-setup-start[221]: + minica --ca-key ca/key.pem --ca-cert ca/cert.pem --domains selfsigned.local321ca # [1288238.051301] ca systemd[1]: Finished Set up the ACME certificate renewal infrastructure.322ca # [1288238.053224] ca systemd[1]: Starting Ensure certificate for ca.foo...323ca # [1288238.080213] ca systemd-networkd[199]: eth1: Gained IPv6LL324server # [1288237.890558] server systemd-logind[223]: New seat seat0.325server # [1288237.890743] server systemd[1]: Started User Login Management.326server # [1288237.893322] server systemd[1]: Starting linger-users.service...327server # [1288237.942000] server systemd[1]: linger-users.service: Deactivated successfully.328server # [1288237.942194] server systemd[1]: Finished linger-users.service.329server # [1288238.016069] server acme-setup-start[211]: + set -euo pipefail330server # [1288238.016069] server acme-setup-start[211]: + test -e ca/key.pem331server # [1288238.016069] server acme-setup-start[211]: + minica --ca-key ca/key.pem --ca-cert ca/cert.pem --domains selfsigned.local332server # [1288238.042569] server systemd[1]: Finished Set up the ACME certificate renewal infrastructure.333server # [1288238.044672] server systemd[1]: Starting Ensure certificate for test.foo...334client # [1288237.907173] client systemd-logind[208]: New seat seat0.335client # [1288237.907351] client systemd[1]: Started User Login Management.336client # [1288237.932671] client systemd[1]: Starting linger-users.service...337client # [1288237.947383] client systemd[1]: linger-users.service: Deactivated successfully.338client # [1288237.947588] client systemd[1]: Finished linger-users.service.339client # [1288237.948470] client systemd[1]: Reached target Multi-User System.340client # [1288237.948793] client systemd[1]: Startup finished in 2.975s.341ca # [1288238.241891] ca step-ca[208]: badger 2026/09/19 05:17:38 INFO: All 0 tables opened in 0s342ca # [1288238.287268] ca step-ca[208]: 2026/09/19 05:17:38 Building new tls configuration using step-ca x509 Signer Interface343ca # [1288238.294115] ca step-ca[208]: 2026/09/19 05:17:38 Starting Smallstep CA/0.30.2 (linux/arm64)344ca # [1288238.294115] ca step-ca[208]: 2026/09/19 05:17:38 Documentation: https://u.step.sm/docs/ca345ca # [1288238.294115] ca step-ca[208]: 2026/09/19 05:17:38 Community Discord: https://u.step.sm/discord346ca # [1288238.294115] ca step-ca[208]: 2026/09/19 05:17:38 Config file: /etc/smallstep/ca.json347ca # [1288238.294115] ca step-ca[208]: 2026/09/19 05:17:38 The primary server URL is https://ca.foo:1443348ca # [1288238.294401] ca step-ca[208]: 2026/09/19 05:17:38 Root certificates are available at https://ca.foo:1443/roots.pem349ca # [1288238.294401] ca step-ca[208]: 2026/09/19 05:17:38 X.509 Root Fingerprint: 73a51e13ceeb202e4a617c48c0cd308f9567bdcba2ae26dbaab91234245a452e350ca # [1288238.294641] ca systemd[1]: Started step-ca service.351ca # [1288238.294849] ca step-ca[208]: 2026/09/19 05:17:38 Serving HTTPS on 0.0.0.0:1443 ...352client # [1288238.336136] client systemd-networkd[185]: eth1: Gained IPv6LL353server # [1288238.985932] server acme-test.foo-start[248]: Waiting to acquire lock in /run/acme/354server # [1288238.989631] server acme-test.foo-start[248]: + '[' -e out/acme-success ']'355server # [1288238.989711] server acme-test.foo-start[248]: + minica --ca-cert=ca/cert.pem --ca-key=ca/key.pem --domains=test.foo --ip-addresses=356server # [1288239.005500] server acme-test.foo-start[257]: + cd test.foo357server # [1288239.006080] server acme-test.foo-start[257]: + cp -vp cert.pem ../out/cert.pem358server # [1288239.007339] server acme-test.foo-start[258]: 'cert.pem' -> '../out/cert.pem'359server # [1288239.007675] server acme-test.foo-start[257]: + cp -vp key.pem ../out/key.pem360server # [1288239.009017] server acme-test.foo-start[257]: 'key.pem' -> '../out/key.pem'361server # [1288239.009260] server acme-test.foo-start[248]: + cat out/cert.pem ca/cert.pem362server # [1288239.011046] server acme-test.foo-start[248]: + cp ca/cert.pem out/chain.pem363server # [1288239.012931] server acme-test.foo-start[248]: + cat out/key.pem out/fullchain.pem364server # [1288239.014825] server acme-test.foo-start[248]: + for fixpath in out certificates365server # [1288239.014825] server acme-test.foo-start[248]: + '[' -d out ']'366server # [1288239.014940] server acme-test.foo-start[248]: + chmod -R u=rwX,g=rX,o= out367server # [1288239.016885] server acme-test.foo-start[248]: + chown -R acme:nginx out368server # [1288239.020208] server acme-test.foo-start[248]: + for fixpath in out certificates369server # [1288239.020208] server acme-test.foo-start[248]: + '[' -d certificates ']'370server # [1288239.025097] server systemd[1]: Finished Ensure certificate for test.foo.371server # [1288239.028172] server systemd[1]: Starting Nginx Web Server...372ca # [1288238.992162] ca acme-ca.foo-start[257]: Waiting to acquire lock in /run/acme/373ca # [1288238.995445] ca acme-ca.foo-start[257]: + '[' -e out/acme-success ']'374ca # [1288238.995538] ca acme-ca.foo-start[257]: + minica --ca-cert=ca/cert.pem --ca-key=ca/key.pem --domains=ca.foo --ip-addresses=375ca # [1288239.010163] ca acme-ca.foo-start[294]: + cd ca.foo376ca # [1288239.010716] ca acme-ca.foo-start[294]: + cp -vp cert.pem ../out/cert.pem377ca # [1288239.012072] ca acme-ca.foo-start[295]: 'cert.pem' -> '../out/cert.pem'378ca # [1288239.012571] ca acme-ca.foo-start[294]: + cp -vp key.pem ../out/key.pem379ca # [1288239.013830] ca acme-ca.foo-start[294]: 'key.pem' -> '../out/key.pem'380ca # [1288239.014063] ca acme-ca.foo-start[257]: + cat out/cert.pem ca/cert.pem381ca # [1288239.015957] ca acme-ca.foo-start[257]: + cp ca/cert.pem out/chain.pem382ca # [1288239.017566] ca acme-ca.foo-start[257]: + cat out/key.pem out/fullchain.pem383ca # [1288239.019247] ca acme-ca.foo-start[257]: + for fixpath in out certificates384ca # [1288239.019247] ca acme-ca.foo-start[257]: + '[' -d out ']'385ca # [1288239.019359] ca acme-ca.foo-start[257]: + chmod -R u=rwX,g=rX,o= out386ca # [1288239.021348] ca acme-ca.foo-start[257]: + chown -R acme:nginx out387ca # [1288239.025590] ca acme-ca.foo-start[257]: + for fixpath in out certificates388ca # [1288239.025590] ca acme-ca.foo-start[257]: + '[' -d certificates ']'389ca # [1288239.030109] ca systemd[1]: Finished Ensure certificate for ca.foo.390ca # [1288239.032502] ca systemd[1]: Starting Nginx Web Server...391server # [1288239.978728] server nginx-pre-start[269]: nginx: the configuration file /nix/store/bw9jgq9jgvw8ia747pppjhkzskqcy6wl-nginx.conf syntax is ok392server # [1288239.979345] server nginx-pre-start[269]: nginx: configuration file /nix/store/bw9jgq9jgvw8ia747pppjhkzskqcy6wl-nginx.conf test is successful393server # [1288239.984571] server systemd[1]: Started Nginx Web Server.394server # [1288239.986089] server systemd[1]: Reached target Multi-User System.395server # [1288239.988645] server systemd[1]: Starting Order (and renew) ACME certificate for test.foo...396ca # [1288239.992659] ca nginx-pre-start[306]: nginx: the configuration file /nix/store/9xdq48zsmbzh971fy8df0q5bz7cca117-nginx.conf syntax is ok397ca # [1288239.993230] ca nginx-pre-start[306]: nginx: configuration file /nix/store/9xdq48zsmbzh971fy8df0q5bz7cca117-nginx.conf test is successful398ca # [1288240.024556] ca systemd[1]: Started Nginx Web Server.399ca # [1288240.026098] ca systemd[1]: Reached target Multi-User System.400ca # [1288240.028550] ca systemd[1]: Starting Order (and renew) ACME certificate for ca.foo...401ca # [1288240.949563] ca acme-order-renew-ca.foo-start[309]: Waiting to acquire lock in /run/acme/402ca # [1288240.952929] ca acme-order-renew-ca.foo-start[309]: + set -euo pipefail403ca # [1288240.953003] ca acme-order-renew-ca.foo-start[309]: + exec404ca # [1288240.953068] ca acme-order-renew-ca.foo-start[309]: + /nix/store/fxkh6pl0y4nfbhdqdnhfkvsq7pbxq655-flock-0.4.0/bin/flock 11405ca # [1288240.954699] ca acme-order-renew-ca.foo-start[321]: ++ find accounts -path '*/keys/*.key' -print -quit406ca # [1288240.957834] ca acme-order-renew-ca.foo-start[309]: + '[' -n '' ']'407ca # [1288240.957931] ca acme-order-renew-ca.foo-start[309]: + exec408ca # [1288240.957931] ca acme-order-renew-ca.foo-start[309]: + '[' -e certificates/ca.foo.key ']'409ca # [1288240.958043] ca acme-order-renew-ca.foo-start[309]: + lego run --accept-tos --path . --email none@none.tld --http --http.webroot /var/lib/acme/acme-challenge --server https://ca.foo:1443/acme/acme/directory --key-type ec256 -d ca.foo --no-random-sleep --renew-force --ari-disable --force-cert-domains410ca # [1288241.031512] ca acme-order-renew-ca.foo-start[322]: 2026-09-19T05:17:41.017298924Z INFO Private key saved. filepath=accounts/ca.foo_1443/none@none.tld/none@none.tld.key411ca # [1288241.060270] ca step-ca[208]: time="2026-09-19T05:17:41Z" level=info duration="161.682µs" duration-ns=161682 fields.time="2026-09-19T05:17:41Z" method=GET name=ca path=/acme/acme/directory protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=7222bc8e-7e40-4c82-a4f0-3079c19ade7b response="{\"newNonce\":\"https://ca.foo:1443/acme/acme/new-nonce\",\"newAccount\":\"https://ca.foo:1443/acme/acme/new-account\",\"newOrder\":\"https://ca.foo:1443/acme/acme/new-order\",\"revokeCert\":\"https://ca.foo:1443/acme/acme/revoke-cert\",\"keyChange\":\"https://ca.foo:1443/acme/acme/key-change\"}" size=277 status=200 user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; arm64)" user-id=412ca # [1288241.060903] ca acme-order-renew-ca.foo-start[322]: 2026-09-19T05:17:41.046700843Z INFO Registering the account. email=none@none.tld413ca # [1288241.062810] ca step-ca[208]: time="2026-09-19T05:17:41Z" level=info duration=1.620982ms duration-ns=1620982 fields.time="2026-09-19T05:17:41Z" method=HEAD name=ca nonce=OXhLckRQUjc2VDYxdDM3ekRkN3VuWHo3alFLMVlrNE8 path=/acme/acme/new-nonce protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=27b153aa-6528-46f9-ae59-ecd69e77ef9f size=0 status=200 user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; arm64)" user-id=414ca # [1288241.066609] ca step-ca[208]: time="2026-09-19T05:17:41Z" level=info duration=2.885359ms duration-ns=2885359 fields.time="2026-09-19T05:17:41Z" method=POST name=ca nonce=NjRHT2tTUGd4T0NJMHdKV3ZJeENWazhlMTJrRnlQSFk path=/acme/acme/new-account protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=ada060a5-86b9-47aa-bef7-bec6f28227c5 response="{\"contact\":[\"mailto:none@none.tld\"],\"status\":\"valid\",\"orders\":\"https://ca.foo:1443/acme/acme/account/kzkgxT0lx0taHmdWHOqudACpwv3U2yxF/orders\"}" size=143 status=201 user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; arm64)" user-id=415ca # [1288241.067205] ca acme-order-renew-ca.foo-start[322]: 2026-09-19T05:17:41.053013928Z WARN !!!! HEADS UP !!!!416ca # [1288241.067205] ca acme-order-renew-ca.foo-start[322]: Your account credentials have been saved in your417ca # [1288241.067205] ca acme-order-renew-ca.foo-start[322]: configuration directory at "accounts".418ca # [1288241.067205] ca acme-order-renew-ca.foo-start[322]: You should make a secure backup of this folder now. This419ca # [1288241.067205] ca acme-order-renew-ca.foo-start[322]: configuration directory will also contain private keys420ca # [1288241.067205] ca acme-order-renew-ca.foo-start[322]: generated by lego and certificates obtained from the ACME421ca # [1288241.067205] ca acme-order-renew-ca.foo-start[322]: server. Making regular backups of this folder is ideal.422ca # [1288241.067377] ca acme-order-renew-ca.foo-start[322]: 2026-09-19T05:17:41.053194691Z INFO Obtaining bundled SAN certificate. domains=ca.foo423ca # [1288241.072845] ca step-ca[208]: time="2026-09-19T05:17:41Z" level=info duration=4.834666ms duration-ns=4834666 fields.time="2026-09-19T05:17:41Z" method=POST name=ca nonce=OXZOVDJhdlZxczB6cm00VVJHODdiZlNYUE1EdkxiYmo path=/acme/acme/new-order protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=c8e30082-0b12-4f2b-b793-ce22e0b35338 response="{\"id\":\"iPLPj7p91g3DHsL1RYNyTuBtZ9HyhCXS\",\"status\":\"pending\",\"expires\":\"2026-09-20T05:17:41Z\",\"identifiers\":[{\"type\":\"dns\",\"value\":\"ca.foo\"}],\"notBefore\":\"2026-09-19T05:16:41Z\",\"notAfter\":\"2026-12-18T05:17:41Z\",\"authorizations\":[\"https://ca.foo:1443/acme/acme/authz/kYby10BMF3QIYOQj3nHLTh8ErjvZHdZb\"],\"finalize\":\"https://ca.foo:1443/acme/acme/order/iPLPj7p91g3DHsL1RYNyTuBtZ9HyhCXS/finalize\"}" size=392 status=201 user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; arm64)" user-id=424ca # [1288241.132296] ca step-ca[208]: time="2026-09-19T05:17:41Z" level=info duration=2.173109ms duration-ns=2173109 fields.time="2026-09-19T05:17:41Z" method=POST name=ca nonce=NEk4R1BrMEJZZ3M5Z1FtdGFLNFFkMlVjNXlnN1JyRno path=/acme/acme/authz/kYby10BMF3QIYOQj3nHLTh8ErjvZHdZb protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=7ad6e9d5-b34e-4fa1-b2bc-c17598dd127d response="{\"identifier\":{\"type\":\"dns\",\"value\":\"ca.foo\"},\"status\":\"pending\",\"challenges\":[{\"type\":\"dns-01\",\"status\":\"pending\",\"token\":\"W21iADtGLyIBpYahQv4NX0F7BP3ZhXke\",\"url\":\"https://ca.foo:1443/acme/acme/challenge/kYby10BMF3QIYOQj3nHLTh8ErjvZHdZb/YJqoJO7rubrjU2bN5PF7Sw7Gzkv12OSO\"},{\"type\":\"http-01\",\"status\":\"pending\",\"token\":\"W21iADtGLyIBpYahQv4NX0F7BP3ZhXke\",\"url\":\"https://ca.foo:1443/acme/acme/challenge/kYby10BMF3QIYOQj3nHLTh8ErjvZHdZb/Eqcnp48mMnmBoNW5JZE8NqO0DLjyvnfM\"},{\"type\":\"tls-alpn-01\",\"status\":\"pending\",\"token\":\"W21iADtGLyIBpYahQv4NX0F7BP3ZhXke\",\"url\":\"https://ca.foo:1443/acme/acme/challenge/kYby10BMF3QIYOQj3nHLTh8ErjvZHdZb/Pu1MisEo8aw7lEwHoyEeLx5sSEx9fTwQ\"}],\"wildcard\":false,\"expires\":\"2026-09-20T05:17:41Z\"}" size=719 status=200 user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; arm64)" user-id=425ca # [1288241.132744] ca acme-order-renew-ca.foo-start[322]: 2026-09-19T05:17:41.118545258Z INFO Use solver. domain=ca.foo type=http-01426ca # [1288241.132792] ca acme-order-renew-ca.foo-start[322]: 2026-09-19T05:17:41.118591179Z INFO http01: Trying to solve HTTP-01. domain=ca.foo427ca # [1288241.138315] ca step-ca[208]: time="2026-09-19T05:17:41Z" level=info duration=4.707824ms duration-ns=4707824 fields.time="2026-09-19T05:17:41Z" method=POST name=ca nonce=YTZCcEVsVGFKc0Uzc3VvRW0zanlvQkd3RndPb1ZOOG8 path=/acme/acme/challenge/kYby10BMF3QIYOQj3nHLTh8ErjvZHdZb/Eqcnp48mMnmBoNW5JZE8NqO0DLjyvnfM protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=3f0dea13-dd71-4f67-81fb-b6c494ca4aeb response="{\"type\":\"http-01\",\"status\":\"valid\",\"token\":\"W21iADtGLyIBpYahQv4NX0F7BP3ZhXke\",\"validated\":\"2026-09-19T05:17:41Z\",\"url\":\"https://ca.foo:1443/acme/acme/challenge/kYby10BMF3QIYOQj3nHLTh8ErjvZHdZb/Eqcnp48mMnmBoNW5JZE8NqO0DLjyvnfM\"}" size=228 status=200 user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; arm64)" user-id=428ca # [1288241.138788] ca acme-order-renew-ca.foo-start[322]: 2026-09-19T05:17:41.124593020Z INFO The server validated our request. domain=ca.foo429ca # [1288241.138909] ca acme-order-renew-ca.foo-start[322]: 2026-09-19T05:17:41.124724582Z INFO Validations succeeded; requesting certificates. domains=ca.foo430ca # [1288241.149124] ca step-ca[208]: time="2026-09-19T05:17:41Z" level=info duration=8.450555ms duration-ns=8450555 fields.time="2026-09-19T05:17:41Z" method=POST name=ca nonce=VzJURGVEM0hIelJwZGlTVXJFU3RrOUdBRmltQWRNVEI path=/acme/acme/order/iPLPj7p91g3DHsL1RYNyTuBtZ9HyhCXS/finalize protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=fec4ad69-ee68-4e96-be90-c2e7e6bff432 response="{\"id\":\"iPLPj7p91g3DHsL1RYNyTuBtZ9HyhCXS\",\"status\":\"valid\",\"expires\":\"2026-09-20T05:17:41Z\",\"identifiers\":[{\"type\":\"dns\",\"value\":\"ca.foo\"}],\"notBefore\":\"2026-09-19T05:16:41Z\",\"notAfter\":\"2026-12-18T05:17:41Z\",\"authorizations\":[\"https://ca.foo:1443/acme/acme/authz/kYby10BMF3QIYOQj3nHLTh8ErjvZHdZb\"],\"finalize\":\"https://ca.foo:1443/acme/acme/order/iPLPj7p91g3DHsL1RYNyTuBtZ9HyhCXS/finalize\",\"certificate\":\"https://ca.foo:1443/acme/acme/certificate/mQwLmy3TeqkVMUbqJIlQCMMvaR3eLbjw\"}" size=481 status=200 user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; arm64)" user-id=431ca # [1288241.151926] ca step-ca[208]: time="2026-09-19T05:17:41Z" level=info certificate="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" duration=1.855945ms duration-ns=1855945 fields.time="2026-09-19T05:17:41Z" issuer="Clan Intermediate CA" method=POST name=ca nonce=ZXhVVkk4SUk0OXFPdzJnQllzQmNuN0ticmZCRWY0Rmo path=/acme/acme/certificate/mQwLmy3TeqkVMUbqJIlQCMMvaR3eLbjw protocol=HTTP/1.1 provisioner=acme public-key="ECDSA P-256" referer= remote-address="2001:db8:1::1" request-id=87210e05-7700-4c84-92e1-b0b7eca0b899 sans="map[dns:[ca.foo]]" serial=45025350656156076265837875494568109557 size=1344 status=200 subject=ca.foo user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; arm64)" user-id= valid-from="2026-09-19T05:16:41Z" valid-to="2026-12-18T05:17:41Z"432ca # [1288241.152237] ca acme-order-renew-ca.foo-start[322]: 2026-09-19T05:17:41.138040323Z INFO Server responded with a certificate. domains=ca.foo433ca # [1288241.152318] ca acme-order-renew-ca.foo-start[322]: 2026-09-19T05:17:41.138136484Z INFO Writing file. filepath=certificates/ca.foo.crt434ca # [1288241.152478] ca acme-order-renew-ca.foo-start[322]: 2026-09-19T05:17:41.138282966Z INFO Writing file. filepath=certificates/ca.foo.issuer.crt435ca # [1288241.152553] ca acme-order-renew-ca.foo-start[322]: 2026-09-19T05:17:41.138372367Z INFO Writing file. filepath=certificates/ca.foo.key436ca # [1288241.152692] ca acme-order-renew-ca.foo-start[322]: 2026-09-19T05:17:41.138510489Z INFO Writing file. filepath=certificates/ca.foo.json437ca # [1288241.158923] ca acme-order-renew-ca.foo-start[309]: + touch out/acme-success438ca # [1288241.160968] ca acme-order-renew-ca.foo-start[309]: + cmp -s certificates/ca.foo.crt out/fullchain.pem439ca # [1288241.162913] ca acme-order-renew-ca.foo-start[309]: + touch out/renewed440ca # [1288241.164709] ca acme-order-renew-ca.foo-start[309]: + echo Installing new certificate441ca # [1288241.164709] ca acme-order-renew-ca.foo-start[309]: Installing new certificate442ca # [1288241.164775] ca acme-order-renew-ca.foo-start[309]: + cp -vp certificates/ca.foo.crt out/fullchain.pem443ca # [1288241.166317] ca acme-order-renew-ca.foo-start[352]: 'certificates/ca.foo.crt' -> 'out/fullchain.pem'444ca # [1288241.166600] ca acme-order-renew-ca.foo-start[309]: + cp -vp certificates/ca.foo.key out/key.pem445ca # [1288241.168156] ca acme-order-renew-ca.foo-start[353]: 'certificates/ca.foo.key' -> 'out/key.pem'446ca # [1288241.168390] ca acme-order-renew-ca.foo-start[309]: + cp -vp certificates/ca.foo.issuer.crt out/chain.pem447ca # [1288241.170233] ca acme-order-renew-ca.foo-start[354]: 'certificates/ca.foo.issuer.crt' -> 'out/chain.pem'448ca # [1288241.170501] ca acme-order-renew-ca.foo-start[309]: + ln -sf fullchain.pem out/cert.pem449ca # [1288241.172547] ca acme-order-renew-ca.foo-start[309]: + cat out/key.pem out/fullchain.pem450ca # [1288241.174363] ca acme-order-renew-ca.foo-start[309]: + for fixpath in out certificates451ca # [1288241.174395] ca acme-order-renew-ca.foo-start[309]: + '[' -d out ']'452ca # [1288241.174395] ca acme-order-renew-ca.foo-start[309]: + chmod -R u=rwX,g=rX,o= out453ca # [1288241.176188] ca acme-order-renew-ca.foo-start[309]: + chown -R acme:nginx out454ca # [1288241.179533] ca acme-order-renew-ca.foo-start[309]: + for fixpath in out certificates455ca # [1288241.179570] ca acme-order-renew-ca.foo-start[309]: + '[' -d certificates ']'456ca # [1288241.179570] ca acme-order-renew-ca.foo-start[309]: + chmod -R u=rwX,g=rX,o= certificates457ca # [1288241.181242] ca acme-order-renew-ca.foo-start[309]: + chown -R acme:nginx certificates458ca # [1288241.184274] ca acme-order-renew-ca.foo-start[309]: + chmod -R u=rwX,g=,o= accounts/.459server # [1288240.944065] server acme-order-renew-test.foo-start[272]: Waiting to acquire lock in /run/acme/460server # [1288240.947706] server acme-order-renew-test.foo-start[272]: + set -euo pipefail461server # [1288240.947779] server acme-order-renew-test.foo-start[272]: + exec462server # [1288240.947838] server acme-order-renew-test.foo-start[272]: + /nix/store/fxkh6pl0y4nfbhdqdnhfkvsq7pbxq655-flock-0.4.0/bin/flock 11463server # [1288240.949597] server acme-order-renew-test.foo-start[283]: ++ find accounts -path '*/keys/*.key' -print -quit464server # [1288240.952886] server acme-order-renew-test.foo-start[272]: + '[' -n '' ']'465server # [1288240.952969] server acme-order-renew-test.foo-start[272]: + exec466server # [1288240.953021] server acme-order-renew-test.foo-start[272]: + '[' -e certificates/test.foo.key ']'467server # [1288240.953076] server acme-order-renew-test.foo-start[272]: + lego run --accept-tos --path . --email none@none.tld --http --http.webroot /var/lib/acme/acme-challenge --server https://ca.foo/acme/acme/directory --key-type ec256 -d test.foo --no-random-sleep --renew-force --ari-disable --force-cert-domains468server # [1288241.033525] server acme-order-renew-test.foo-start[284]: 2026-09-19T05:17:41.019272630Z INFO Private key saved. filepath=accounts/ca.foo/none@none.tld/none@none.tld.key469server # [1288241.072472] server acme-order-renew-test.foo-start[284]: 2026-09-19T05:17:41.058249199Z ERROR Error error="registration: set up client: new client: get directory at 'https://ca.foo/acme/acme/directory': unable to communicate with the API server: error: Get \"https://ca.foo/acme/acme/directory\": GET https://ca.foo/acme/acme/directory giving up after 1 attempt(s): Get \"https://ca.foo/acme/acme/directory\": tls: failed to verify certificate: x509: certificate signed by unknown authority"470server # [1288241.076081] server acme-order-renew-test.foo-start[272]: + echo Failed to fetch certificates. This may mean your DNS records are set up incorrectly. Self-signed certs are in place and dependant services will still start.471server # [1288241.076081] server acme-order-renew-test.foo-start[272]: Failed to fetch certificates. This may mean your DNS records are set up incorrectly. Self-signed certs are in place and dependant services will still start.472server # [1288241.076081] server acme-order-renew-test.foo-start[272]: + exit 10473server # [1288241.079849] server systemd[1]: acme-order-renew-test.foo.service: Main process exited, code=exited, status=10/n/a474server # [1288241.080078] server systemd[1]: acme-order-renew-test.foo.service: Failed with result 'exit-code'.475server # [1288241.080453] server systemd[1]: Failed to start Order (and renew) ACME certificate for test.foo.476server # [1288241.081025] server systemd[1]: Startup finished in 6.108s.477server # [1288241.081082] server systemd[1]: acme-order-renew-test.foo.service: Consumed 1.018s CPU time over 1.091s wall clock time.478ca # [1288241.379483] ca systemd[1]: Reloading Nginx Web Server...479ca # [1288241.384339] ca systemd[1]: acme-order-renew-ca.foo.service: Deactivated successfully.480ca # [1288241.384544] ca systemd[1]: Finished Order (and renew) ACME certificate for ca.foo.481ca # [1288241.384753] ca systemd[1]: acme-order-renew-ca.foo.service: Consumed 1.199s CPU time over 1.355s wall clock time.482ca # [1288242.327774] ca nginx[370]: nginx: the configuration file /nix/store/9xdq48zsmbzh971fy8df0q5bz7cca117-nginx.conf syntax is ok483ca # [1288242.328313] ca nginx[370]: nginx: configuration file /nix/store/9xdq48zsmbzh971fy8df0q5bz7cca117-nginx.conf test is successful484ca # [1288243.284404] ca systemd[1]: Reloaded Nginx Web Server.485ca # [1288243.284935] ca systemd[1]: Startup finished in 8.303s.486ca # [1288243.569124] ca systemd[1]: Starting Order (and renew) ACME certificate for ca.foo...487ca # [1288244.543852] ca acme-order-renew-ca.foo-start[385]: Waiting to acquire lock in /run/acme/488ca # [1288244.547368] ca acme-order-renew-ca.foo-start[385]: + set -euo pipefail489ca # [1288244.547437] ca acme-order-renew-ca.foo-start[385]: + exec490ca # [1288244.547485] ca acme-order-renew-ca.foo-start[385]: + /nix/store/fxkh6pl0y4nfbhdqdnhfkvsq7pbxq655-flock-0.4.0/bin/flock 11491ca # [1288244.549035] ca acme-order-renew-ca.foo-start[393]: ++ find accounts -path '*/keys/*.key' -print -quit492ca # [1288244.552125] ca acme-order-renew-ca.foo-start[385]: + '[' -n '' ']'493ca # [1288244.552192] ca acme-order-renew-ca.foo-start[385]: + exec494ca # [1288244.552261] ca acme-order-renew-ca.foo-start[385]: + '[' -e certificates/ca.foo.key ']'495ca # [1288244.552261] ca acme-order-renew-ca.foo-start[385]: + '[' -e certificates/ca.foo.crt ']'496ca # [1288244.553044] ca acme-order-renew-ca.foo-start[394]: ++ find accounts -name none@none.tld.key497ca # [1288244.556365] ca acme-order-renew-ca.foo-start[385]: + '[' -n accounts/ca.foo_1443/none@none.tld/none@none.tld.key ']'498ca # [1288244.556432] ca acme-order-renew-ca.foo-start[385]: + lego run --accept-tos --path . --email none@none.tld --http --http.webroot /var/lib/acme/acme-challenge --server https://ca.foo:1443/acme/acme/directory --key-type ec256 -d ca.foo --no-random-sleep --force-cert-domains499ca # [1288244.574151] ca acme-order-renew-ca.foo-start[395]: 2026-09-19T05:17:44.559941577Z INFO Renewing certificate cert-name=ca.foo500ca # [1288244.607865] ca step-ca[208]: time="2026-09-19T05:17:44Z" level=info duration="64.521µs" duration-ns=64521 fields.time="2026-09-19T05:17:44Z" method=GET name=ca path=/acme/acme/directory protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=ca748891-f777-4f43-bcaf-7ab2069b3ec1 response="{\"newNonce\":\"https://ca.foo:1443/acme/acme/new-nonce\",\"newAccount\":\"https://ca.foo:1443/acme/acme/new-account\",\"newOrder\":\"https://ca.foo:1443/acme/acme/new-order\",\"revokeCert\":\"https://ca.foo:1443/acme/acme/revoke-cert\",\"keyChange\":\"https://ca.foo:1443/acme/acme/key-change\"}" size=277 status=200 user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; arm64)" user-id=501ca # [1288244.608482] ca acme-order-renew-ca.foo-start[395]: 2026-09-19T05:17:44.594110121Z WARN The server does not advertise a renewal info endpoint. cert-name=ca.foo error="renewalInfo[get/post]: server does not advertise a renewal info endpoint"502ca # [1288244.608482] ca acme-order-renew-ca.foo-start[395]: 2026-09-19T05:17:44.594200562Z INFO Skip renewal: The certificate expires at 2026-12-18T05:17:41Z, the renewal can be performed in 59d23h59m36s405814918ns. cert-name=ca.foo503ca # [1288244.608952] ca acme-order-renew-ca.foo-start[385]: + touch out/acme-success504ca # [1288244.610533] ca acme-order-renew-ca.foo-start[385]: + cmp -s certificates/ca.foo.crt out/fullchain.pem505ca # [1288244.611948] ca acme-order-renew-ca.foo-start[385]: + for fixpath in out certificates506ca # [1288244.611948] ca acme-order-renew-ca.foo-start[385]: + '[' -d out ']'507ca # [1288244.612070] ca acme-order-renew-ca.foo-start[385]: + chmod -R u=rwX,g=rX,o= out508ca # [1288244.613665] ca acme-order-renew-ca.foo-start[385]: + chown -R acme:nginx out509ca # [1288244.617079] ca acme-order-renew-ca.foo-start[385]: + for fixpath in out certificates510ca # [1288244.617136] ca acme-order-renew-ca.foo-start[385]: + '[' -d certificates ']'511ca # [1288244.617136] ca acme-order-renew-ca.foo-start[385]: + chmod -R u=rwX,g=rX,o= certificates512ca # [1288244.618857] ca acme-order-renew-ca.foo-start[385]: + chown -R acme:nginx certificates513ca # [1288244.622177] ca acme-order-renew-ca.foo-start[385]: + chmod -R u=rwX,g=,o= accounts/.514ca: (finished: must succeed: systemctl restart acme-order-renew-ca.foo.service , in 7.46 seconds)515ca # [1288244.848270] ca systemd[1]: acme-order-renew-ca.foo.service: Deactivated successfully.516ca # [1288244.848633] ca systemd[1]: Finished Order (and renew) ACME certificate for ca.foo.517ca # [1288244.849179] ca systemd[1]: acme-order-renew-ca.foo.service: Consumed 1.210s CPU time over 1.279s wall clock time.518server: must succeed: systemctl restart acme-test.foo.service519server # [1288247.887203] server systemd[1]: acme-test.foo.service: Deactivated successfully.520server # [1288247.887570] server systemd[1]: Stopped Ensure certificate for test.foo.521server # [1288247.889038] server systemd[1]: Stopping Ensure certificate for test.foo...522server # [1288247.891501] server systemd[1]: Starting Ensure certificate for test.foo...523server: (finished: must succeed: systemctl restart acme-test.foo.service, in 1.04 seconds)524client: waiting for success: curl -v https://test.foo525* Host test.foo:443 was resolved.526* IPv6: 2001:db8:1::3527* IPv4: 192.168.1.3528* Trying [2001:db8:1::3]:443...529* ALPN: curl offers h2,http/1.1530} [5 bytes data]531* TLSv1.3 (OUT), TLS handshake, Client hello (1):532} [1552 bytes data]533* SSL Trust Anchors:534* OpenSSL default paths (fallback)535{ [5 bytes data]536* TLSv1.3 (IN), TLS handshake, Server hello (2):537{ [1210 bytes data]538* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):539{ [1 bytes data]540* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):541{ [19 bytes data]542* TLSv1.3 (IN), TLS handshake, Certificate (11):543{ [1009 bytes data]544* TLSv1.3 (IN), TLS handshake, CERT verify (15):545{ [110 bytes data]546* TLSv1.3 (IN), TLS handshake, Finished (20):547{ [52 bytes data]548* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):549} [1 bytes data]550* TLSv1.3 (OUT), TLS handshake, Finished (20):551} [52 bytes data]552* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey553* ALPN: server accepted h2554* Server certificate:555* subject: CN=test.foo556* start date: Sep 19 05:17:38 2026 GMT557* expire date: Oct 19 05:17:38 2028 GMT558* issuer: CN=minica root ca 421703559* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384560* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384561* subjectAltName: "test.foo" matches cert's "test.foo"562* OpenSSL verify result: 13563* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)564* closing connection #0565curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)566More details here: https://curl.se/docs/sslcerts.html567568curl failed to verify the legitimacy of the server and therefore could not569establish a secure connection to it. To learn more about this situation and570how to fix it, please visit the webpage mentioned above.571server # [1288248.876438] server acme-test.foo-start[319]: Waiting to acquire lock in /run/acme/572server # [1288248.879696] server acme-test.foo-start[319]: + '[' -e out/acme-success ']'573server # [1288248.879696] server acme-test.foo-start[319]: + minica --ca-cert=ca/cert.pem --ca-key=ca/key.pem --domains=test.foo --ip-addresses=574server # [1288248.894934] server acme-test.foo-start[329]: + cd test.foo575server # [1288248.895496] server acme-test.foo-start[329]: + cp -vp cert.pem ../out/cert.pem576server # [1288248.896877] server acme-test.foo-start[330]: 'cert.pem' -> '../out/cert.pem'577server # [1288248.897208] server acme-test.foo-start[329]: + cp -vp key.pem ../out/key.pem578server # [1288248.898595] server acme-test.foo-start[329]: 'key.pem' -> '../out/key.pem'579server # [1288248.898855] server acme-test.foo-start[319]: + cat out/cert.pem ca/cert.pem580server # [1288248.900673] server acme-test.foo-start[319]: + cp ca/cert.pem out/chain.pem581server # [1288248.902473] server acme-test.foo-start[319]: + cat out/key.pem out/fullchain.pem582server # [1288248.904505] server acme-test.foo-start[319]: + for fixpath in out certificates583server # [1288248.904505] server acme-test.foo-start[319]: + '[' -d out ']'584server # [1288248.904597] server acme-test.foo-start[319]: + chmod -R u=rwX,g=rX,o= out585server # [1288248.906077] server acme-test.foo-start[319]: + chown -R acme:nginx out586server # [1288248.909027] server acme-test.foo-start[319]: + for fixpath in out certificates587server # [1288248.909027] server acme-test.foo-start[319]: + '[' -d certificates ']'588server # [1288248.913833] server systemd[1]: Finished Ensure certificate for test.foo.589server # [1288248.918633] server systemd[1]: Starting Order (and renew) ACME certificate for test.foo...590* Trying [2001:db8:1::3]:443...591* Host test.foo:443 was resolved.592* IPv6: 2001:db8:1::3593* IPv4: 192.168.1.3594* ALPN: curl offers h2,http/1.1595} [5 bytes data]596* TLSv1.3 (OUT), TLS handshake, Client hello (1):597} [1552 bytes data]598* SSL Trust Anchors:599* OpenSSL default paths (fallback)600{ [5 bytes data]601* TLSv1.3 (IN), TLS handshake, Server hello (2):602{ [1210 bytes data]603* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):604{ [1 bytes data]605* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):606{ [19 bytes data]607* TLSv1.3 (IN), TLS handshake, Certificate (11):608{ [1009 bytes data]609* TLSv1.3 (IN), TLS handshake, CERT verify (15):610{ [111 bytes data]611* TLSv1.3 (IN), TLS handshake, Finished (20):612{ [52 bytes data]613* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):614} [1 bytes data]615* TLSv1.3 (OUT), TLS handshake, Finished (20):616} [52 bytes data]617* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey618* ALPN: server accepted h2619* Server certificate:620* subject: CN=test.foo621* start date: Sep 19 05:17:38 2026 GMT622* expire date: Oct 19 05:17:38 2028 GMT623* issuer: CN=minica root ca 421703624* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384625* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384626* subjectAltName: "test.foo" matches cert's "test.foo"627* OpenSSL verify result: 13628* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)629* closing connection #0630curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)631More details here: https://curl.se/docs/sslcerts.html632633curl failed to verify the legitimacy of the server and therefore could not634establish a secure connection to it. To learn more about this situation and635how to fix it, please visit the webpage mentioned above.636ca # [1288249.943591] ca step-ca[208]: time="2026-09-19T05:17:49Z" level=info duration="61.601µs" duration-ns=61601 fields.time="2026-09-19T05:17:49Z" method=GET name=ca path=/acme/acme/directory protocol=HTTP/1.1 referer= remote-address="::1" request-id=23f860ff-eeca-4fea-83e9-eaa629758a55 response="{\"newNonce\":\"https://ca.foo/acme/acme/new-nonce\",\"newAccount\":\"https://ca.foo/acme/acme/new-account\",\"newOrder\":\"https://ca.foo/acme/acme/new-order\",\"revokeCert\":\"https://ca.foo/acme/acme/revoke-cert\",\"keyChange\":\"https://ca.foo/acme/acme/key-change\"}" size=252 status=200 user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; arm64)" user-id=637ca # [1288249.949313] ca step-ca[208]: time="2026-09-19T05:17:49Z" level=info duration=1.377899ms duration-ns=1377899 fields.time="2026-09-19T05:17:49Z" method=HEAD name=ca nonce=MUNNVTVVTHoySFRLYXQzdkgyZlZxRXNUbmZJcUwyWWw path=/acme/acme/new-nonce protocol=HTTP/1.1 referer= remote-address=127.0.0.1 request-id=acef767b-34c7-4a1e-bf5f-2ff6d6cf5a52 size=0 status=200 user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; arm64)" user-id=638ca # [1288249.954706] ca step-ca[208]: time="2026-09-19T05:17:49Z" level=warning duration=1.766224ms duration-ns=1766224 error="account does not exist" fields.time="2026-09-19T05:17:49Z" method=POST name=ca nonce=THRIU2hveVlMbXNOY0VERktRVjJOaVZmYk4zOG1KRmY path=/acme/acme/new-account protocol=HTTP/1.1 referer= remote-address="::1" request-id=2aa4bfe6-06a1-437e-ae0e-3f1b27ceb91d response="{\"type\":\"urn:ietf:params:acme:error:accountDoesNotExist\",\"detail\":\"Account does not exist\"}" size=92 status=400 user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; arm64)" user-id=639server # [1288249.877409] server acme-order-renew-test.foo-start[337]: Waiting to acquire lock in /run/acme/640server # [1288249.880795] server acme-order-renew-test.foo-start[337]: + set -euo pipefail641server # [1288249.880870] server acme-order-renew-test.foo-start[337]: + exec642server # [1288249.880920] server acme-order-renew-test.foo-start[337]: + /nix/store/fxkh6pl0y4nfbhdqdnhfkvsq7pbxq655-flock-0.4.0/bin/flock 11643server # [1288249.882333] server acme-order-renew-test.foo-start[345]: ++ find accounts -path '*/keys/*.key' -print -quit644server # [1288249.885439] server acme-order-renew-test.foo-start[337]: + '[' -n '' ']'645server # [1288249.885506] server acme-order-renew-test.foo-start[337]: + exec646server # [1288249.885555] server acme-order-renew-test.foo-start[337]: + '[' -e certificates/test.foo.key ']'647server # [1288249.885603] server acme-order-renew-test.foo-start[337]: + lego run --accept-tos --path . --email none@none.tld --http --http.webroot /var/lib/acme/acme-challenge --server https://ca.foo/acme/acme/directory --key-type ec256 -d test.foo --no-random-sleep --renew-force --ari-disable --force-cert-domains648server # [1288249.944178] server acme-order-renew-test.foo-start[346]: 2026-09-19T05:17:49.929952877Z INFO Trying to resolve the account by key649server # [1288249.955110] server acme-order-renew-test.foo-start[346]: 2026-09-19T05:17:49.940915946Z WARN retry: acme: error: 0 :: urn:ietf:params:acme:error:accountDoesNotExist :: Account does not exist650server # [1288249.955301] server acme-order-renew-test.foo-start[346]: 2026-09-19T05:17:49.941105149Z ERROR Error error="registration: resolve account by key: unable to communicate with the API server: error: Post \"https://ca.foo/acme/acme/new-account\": POST https://ca.foo/acme/acme/new-account giving up after 1 attempt(s): acme: error: 0 :: urn:ietf:params:acme:error:accountDoesNotExist :: Account does not exist"651server # [1288249.955790] server acme-order-renew-test.foo-start[337]: + echo Failed to fetch certificates. This may mean your DNS records are set up incorrectly. Self-signed certs are in place and dependant services will still start.652server # [1288249.955790] server acme-order-renew-test.foo-start[337]: Failed to fetch certificates. This may mean your DNS records are set up incorrectly. Self-signed certs are in place and dependant services will still start.653server # [1288249.955790] server acme-order-renew-test.foo-start[337]: + exit 10654server # [1288249.960114] server systemd[1]: acme-order-renew-test.foo.service: Main process exited, code=exited, status=10/n/a655server # [1288249.960324] server systemd[1]: acme-order-renew-test.foo.service: Failed with result 'exit-code'.656server # [1288249.960728] server systemd[1]: Failed to start Order (and renew) ACME certificate for test.foo.657* Trying [2001:db8:1::3]:443...658* Host test.foo:443 was resolved.659* IPv6: 2001:db8:1::3660* IPv4: 192.168.1.3661* ALPN: curl offers h2,http/1.1662} [5 bytes data]663* TLSv1.3 (OUT), TLS handshake, Client hello (1):664} [1552 bytes data]665* SSL Trust Anchors:666* OpenSSL default paths (fallback)667{ [5 bytes data]668* TLSv1.3 (IN), TLS handshake, Server hello (2):669{ [1210 bytes data]670* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):671{ [1 bytes data]672* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):673{ [19 bytes data]674* TLSv1.3 (IN), TLS handshake, Certificate (11):675{ [1009 bytes data]676* TLSv1.3 (IN), TLS handshake, CERT verify (15):677{ [111 bytes data]678* TLSv1.3 (IN), TLS handshake, Finished (20):679{ [52 bytes data]680* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):681} [1 bytes data]682* TLSv1.3 (OUT), TLS handshake, Finished (20):683} [52 bytes data]684* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey685* ALPN: server accepted h2686* Server certificate:687* subject: CN=test.foo688* start date: Sep 19 05:17:38 2026 GMT689* expire date: Oct 19 05:17:38 2028 GMT690* issuer: CN=minica root ca 421703691* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384692* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384693* subjectAltName: "test.foo" matches cert's "test.foo"694* OpenSSL verify result: 13695* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)696* closing connection #0697curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)698More details here: https://curl.se/docs/sslcerts.html699700curl failed to verify the legitimacy of the server and therefore could not701establish a secure connection to it. To learn more about this situation and702how to fix it, please visit the webpage mentioned above.703* Host test.foo:443 was resolved.704* IPv6: 2001:db8:1::3705* IPv4: 192.168.1.3706* Trying [2001:db8:1::3]:443...707* ALPN: curl offers h2,http/1.1708} [5 bytes data]709* TLSv1.3 (OUT), TLS handshake, Client hello (1):710} [1552 bytes data]711* SSL Trust Anchors:712* OpenSSL default paths (fallback)713{ [5 bytes data]714* TLSv1.3 (IN), TLS handshake, Server hello (2):715{ [1210 bytes data]716* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):717{ [1 bytes data]718* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):719{ [19 bytes data]720* TLSv1.3 (IN), TLS handshake, Certificate (11):721{ [1009 bytes data]722* TLSv1.3 (IN), TLS handshake, CERT verify (15):723{ [110 bytes data]724* TLSv1.3 (IN), TLS handshake, Finished (20):725{ [52 bytes data]726* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):727} [1 bytes data]728* TLSv1.3 (OUT), TLS handshake, Finished (20):729} [52 bytes data]730* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey731* ALPN: server accepted h2732* Server certificate:733* subject: CN=test.foo734* start date: Sep 19 05:17:38 2026 GMT735* expire date: Oct 19 05:17:38 2028 GMT736* issuer: CN=minica root ca 421703737* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384738* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384739* subjectAltName: "test.foo" matches cert's "test.foo"740* OpenSSL verify result: 13741* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)742* closing connection #0743curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)744More details here: https://curl.se/docs/sslcerts.html745746curl failed to verify the legitimacy of the server and therefore could not747establish a secure connection to it. To learn more about this situation and748how to fix it, please visit the webpage mentioned above.749* Host test.foo:443 was resolved.750* IPv6: 2001:db8:1::3751* IPv4: 192.168.1.3752* Trying [2001:db8:1::3]:443...753* ALPN: curl offers h2,http/1.1754} [5 bytes data]755* TLSv1.3 (OUT), TLS handshake, Client hello (1):756} [1552 bytes data]757* SSL Trust Anchors:758* OpenSSL default paths (fallback)759{ [5 bytes data]760* TLSv1.3 (IN), TLS handshake, Server hello (2):761{ [1210 bytes data]762* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):763{ [1 bytes data]764* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):765{ [19 bytes data]766* TLSv1.3 (IN), TLS handshake, Certificate (11):767{ [1009 bytes data]768* TLSv1.3 (IN), TLS handshake, CERT verify (15):769{ [112 bytes data]770* TLSv1.3 (IN), TLS handshake, Finished (20):771{ [52 bytes data]772* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):773} [1 bytes data]774* TLSv1.3 (OUT), TLS handshake, Finished (20):775} [52 bytes data]776* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey777* ALPN: server accepted h2778* Server certificate:779* subject: CN=test.foo780* start date: Sep 19 05:17:38 2026 GMT781* expire date: Oct 19 05:17:38 2028 GMT782* issuer: CN=minica root ca 421703783* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384784* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384785* subjectAltName: "test.foo" matches cert's "test.foo"786* OpenSSL verify result: 13787* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)788* closing connection #0789curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)790More details here: https://curl.se/docs/sslcerts.html791792curl failed to verify the legitimacy of the server and therefore could not793establish a secure connection to it. To learn more about this situation and794how to fix it, please visit the webpage mentioned above.795* Host test.foo:443 was resolved.796* IPv6: 2001:db8:1::3797* IPv4: 192.168.1.3798* Trying [2001:db8:1::3]:443...799* ALPN: curl offers h2,http/1.1800} [5 bytes data]801* TLSv1.3 (OUT), TLS handshake, Client hello (1):802} [1552 bytes data]803* SSL Trust Anchors:804* OpenSSL default paths (fallback)805{ [5 bytes data]806* TLSv1.3 (IN), TLS handshake, Server hello (2):807{ [1210 bytes data]808* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):809{ [1 bytes data]810* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):811{ [19 bytes data]812* TLSv1.3 (IN), TLS handshake, Certificate (11):813{ [1009 bytes data]814* TLSv1.3 (IN), TLS handshake, CERT verify (15):815{ [111 bytes data]816* TLSv1.3 (IN), TLS handshake, Finished (20):817{ [52 bytes data]818* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):819} [1 bytes data]820* TLSv1.3 (OUT), TLS handshake, Finished (20):821} [52 bytes data]822* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey823* ALPN: server accepted h2824* Server certificate:825* subject: CN=test.foo826* start date: Sep 19 05:17:38 2026 GMT827* expire date: Oct 19 05:17:38 2028 GMT828* issuer: CN=minica root ca 421703829* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384830* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384831* subjectAltName: "test.foo" matches cert's "test.foo"832* OpenSSL verify result: 13833* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)834* closing connection #0835curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)836More details here: https://curl.se/docs/sslcerts.html837838curl failed to verify the legitimacy of the server and therefore could not839establish a secure connection to it. To learn more about this situation and840how to fix it, please visit the webpage mentioned above.841* Host test.foo:443 was resolved.842* IPv6: 2001:db8:1::3843* IPv4: 192.168.1.3844* Trying [2001:db8:1::3]:443...845* ALPN: curl offers h2,http/1.1846} [5 bytes data]847* TLSv1.3 (OUT), TLS handshake, Client hello (1):848} [1552 bytes data]849* SSL Trust Anchors:850* OpenSSL default paths (fallback)851{ [5 bytes data]852* TLSv1.3 (IN), TLS handshake, Server hello (2):853{ [1210 bytes data]854* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):855{ [1 bytes data]856* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):857{ [19 bytes data]858* TLSv1.3 (IN), TLS handshake, Certificate (11):859{ [1009 bytes data]860* TLSv1.3 (IN), TLS handshake, CERT verify (15):861{ [110 bytes data]862* TLSv1.3 (IN), TLS handshake, Finished (20):863{ [52 bytes data]864* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):865} [1 bytes data]866* TLSv1.3 (OUT), TLS handshake, Finished (20):867} [52 bytes data]868* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey869* ALPN: server accepted h2870* Server certificate:871* subject: CN=test.foo872* start date: Sep 19 05:17:38 2026 GMT873* expire date: Oct 19 05:17:38 2028 GMT874* issuer: CN=minica root ca 421703875* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384876* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384877* subjectAltName: "test.foo" matches cert's "test.foo"878* OpenSSL verify result: 13879* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)880* closing connection #0881curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)882More details here: https://curl.se/docs/sslcerts.html883884curl failed to verify the legitimacy of the server and therefore could not885establish a secure connection to it. To learn more about this situation and886how to fix it, please visit the webpage mentioned above.887* Host test.foo:443 was resolved.888* IPv6: 2001:db8:1::3889* IPv4: 192.168.1.3890* Trying [2001:db8:1::3]:443...891* ALPN: curl offers h2,http/1.1892} [5 bytes data]893* TLSv1.3 (OUT), TLS handshake, Client hello (1):894} [1552 bytes data]895* SSL Trust Anchors:896* OpenSSL default paths (fallback)897{ [5 bytes data]898* TLSv1.3 (IN), TLS handshake, Server hello (2):899{ [1210 bytes data]900* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):901{ [1 bytes data]902* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):903{ [19 bytes data]904* TLSv1.3 (IN), TLS handshake, Certificate (11):905{ [1009 bytes data]906* TLSv1.3 (IN), TLS handshake, CERT verify (15):907{ [110 bytes data]908* TLSv1.3 (IN), TLS handshake, Finished (20):909{ [52 bytes data]910* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):911} [1 bytes data]912* TLSv1.3 (OUT), TLS handshake, Finished (20):913} [52 bytes data]914* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey915* ALPN: server accepted h2916* Server certificate:917* subject: CN=test.foo918* start date: Sep 19 05:17:38 2026 GMT919* expire date: Oct 19 05:17:38 2028 GMT920* issuer: CN=minica root ca 421703921* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384922* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384923* subjectAltName: "test.foo" matches cert's "test.foo"924* OpenSSL verify result: 13925* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)926* closing connection #0927curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)928More details here: https://curl.se/docs/sslcerts.html929930curl failed to verify the legitimacy of the server and therefore could not931establish a secure connection to it. To learn more about this situation and932how to fix it, please visit the webpage mentioned above.933* Host test.foo:443 was resolved.934* IPv6: 2001:db8:1::3935* IPv4: 192.168.1.3936* Trying [2001:db8:1::3]:443...937* ALPN: curl offers h2,http/1.1938} [5 bytes data]939* TLSv1.3 (OUT), TLS handshake, Client hello (1):940} [1552 bytes data]941* SSL Trust Anchors:942* OpenSSL default paths (fallback)943{ [5 bytes data]944* TLSv1.3 (IN), TLS handshake, Server hello (2):945{ [1210 bytes data]946* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):947{ [1 bytes data]948* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):949{ [19 bytes data]950* TLSv1.3 (IN), TLS handshake, Certificate (11):951{ [1009 bytes data]952* TLSv1.3 (IN), TLS handshake, CERT verify (15):953{ [110 bytes data]954* TLSv1.3 (IN), TLS handshake, Finished (20):955{ [52 bytes data]956* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):957} [1 bytes data]958* TLSv1.3 (OUT), TLS handshake, Finished (20):959} [52 bytes data]960* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey961* ALPN: server accepted h2962* Server certificate:963* subject: CN=test.foo964* start date: Sep 19 05:17:38 2026 GMT965* expire date: Oct 19 05:17:38 2028 GMT966* issuer: CN=minica root ca 421703967* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384968* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384969* subjectAltName: "test.foo" matches cert's "test.foo"970* OpenSSL verify result: 13971* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)972* closing connection #0973curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)974More details here: https://curl.se/docs/sslcerts.html975976curl failed to verify the legitimacy of the server and therefore could not977establish a secure connection to it. To learn more about this situation and978how to fix it, please visit the webpage mentioned above.979* Host test.foo:443 was resolved.980* IPv6: 2001:db8:1::3981* IPv4: 192.168.1.3982* Trying [2001:db8:1::3]:443...983* ALPN: curl offers h2,http/1.1984} [5 bytes data]985* TLSv1.3 (OUT), TLS handshake, Client hello (1):986} [1552 bytes data]987* SSL Trust Anchors:988* OpenSSL default paths (fallback)989{ [5 bytes data]990* TLSv1.3 (IN), TLS handshake, Server hello (2):991{ [1210 bytes data]992* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):993{ [1 bytes data]994* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):995{ [19 bytes data]996* TLSv1.3 (IN), TLS handshake, Certificate (11):997{ [1009 bytes data]998* TLSv1.3 (IN), TLS handshake, CERT verify (15):999{ [111 bytes data]1000* TLSv1.3 (IN), TLS handshake, Finished (20):1001{ [52 bytes data]1002* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1003} [1 bytes data]1004* TLSv1.3 (OUT), TLS handshake, Finished (20):1005} [52 bytes data]1006* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1007* ALPN: server accepted h21008* Server certificate:1009* subject: CN=test.foo1010* start date: Sep 19 05:17:38 2026 GMT1011* expire date: Oct 19 05:17:38 2028 GMT1012* issuer: CN=minica root ca 4217031013* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841014* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841015* subjectAltName: "test.foo" matches cert's "test.foo"1016* OpenSSL verify result: 131017* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1018* closing connection #01019curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1020More details here: https://curl.se/docs/sslcerts.html10211022curl failed to verify the legitimacy of the server and therefore could not1023establish a secure connection to it. To learn more about this situation and1024how to fix it, please visit the webpage mentioned above.1025* Host test.foo:443 was resolved.1026* IPv6: 2001:db8:1::31027* IPv4: 192.168.1.31028* Trying [2001:db8:1::3]:443...1029* ALPN: curl offers h2,http/1.11030} [5 bytes data]1031* TLSv1.3 (OUT), TLS handshake, Client hello (1):1032} [1552 bytes data]1033* SSL Trust Anchors:1034* OpenSSL default paths (fallback)1035{ [5 bytes data]1036* TLSv1.3 (IN), TLS handshake, Server hello (2):1037{ [1210 bytes data]1038* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1039{ [1 bytes data]1040* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1041{ [19 bytes data]1042* TLSv1.3 (IN), TLS handshake, Certificate (11):1043{ [1009 bytes data]1044* TLSv1.3 (IN), TLS handshake, CERT verify (15):1045{ [112 bytes data]1046* TLSv1.3 (IN), TLS handshake, Finished (20):1047{ [52 bytes data]1048* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1049} [1 bytes data]1050* TLSv1.3 (OUT), TLS handshake, Finished (20):1051} [52 bytes data]1052* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1053* ALPN: server accepted h21054* Server certificate:1055* subject: CN=test.foo1056* start date: Sep 19 05:17:38 2026 GMT1057* expire date: Oct 19 05:17:38 2028 GMT1058* issuer: CN=minica root ca 4217031059* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841060* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841061* subjectAltName: "test.foo" matches cert's "test.foo"1062* OpenSSL verify result: 131063* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1064* closing connection #01065curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1066More details here: https://curl.se/docs/sslcerts.html10671068curl failed to verify the legitimacy of the server and therefore could not1069establish a secure connection to it. To learn more about this situation and1070how to fix it, please visit the webpage mentioned above.1071* Host test.foo:443 was resolved.1072* IPv6: 2001:db8:1::31073* IPv4: 192.168.1.31074* Trying [2001:db8:1::3]:443...1075* ALPN: curl offers h2,http/1.11076} [5 bytes data]1077* TLSv1.3 (OUT), TLS handshake, Client hello (1):1078} [1552 bytes data]1079* SSL Trust Anchors:1080* OpenSSL default paths (fallback)1081{ [5 bytes data]1082* TLSv1.3 (IN), TLS handshake, Server hello (2):1083{ [1210 bytes data]1084* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1085{ [1 bytes data]1086* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1087{ [19 bytes data]1088* TLSv1.3 (IN), TLS handshake, Certificate (11):1089{ [1009 bytes data]1090* TLSv1.3 (IN), TLS handshake, CERT verify (15):1091{ [110 bytes data]1092* TLSv1.3 (IN), TLS handshake, Finished (20):1093{ [52 bytes data]1094* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1095} [1 bytes data]1096* TLSv1.3 (OUT), TLS handshake, Finished (20):1097} [52 bytes data]1098* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1099* ALPN: server accepted h21100* Server certificate:1101* subject: CN=test.foo1102* start date: Sep 19 05:17:38 2026 GMT1103* expire date: Oct 19 05:17:38 2028 GMT1104* issuer: CN=minica root ca 4217031105* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841106* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841107* subjectAltName: "test.foo" matches cert's "test.foo"1108* OpenSSL verify result: 131109* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1110* closing connection #01111curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1112More details here: https://curl.se/docs/sslcerts.html11131114curl failed to verify the legitimacy of the server and therefore could not1115establish a secure connection to it. To learn more about this situation and1116how to fix it, please visit the webpage mentioned above.1117* Host test.foo:443 was resolved.1118* IPv6: 2001:db8:1::31119* IPv4: 192.168.1.31120* Trying [2001:db8:1::3]:443...1121* ALPN: curl offers h2,http/1.11122} [5 bytes data]1123* TLSv1.3 (OUT), TLS handshake, Client hello (1):1124} [1552 bytes data]1125* SSL Trust Anchors:1126* OpenSSL default paths (fallback)1127{ [5 bytes data]1128* TLSv1.3 (IN), TLS handshake, Server hello (2):1129{ [1210 bytes data]1130* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1131{ [1 bytes data]1132* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1133{ [19 bytes data]1134* TLSv1.3 (IN), TLS handshake, Certificate (11):1135{ [1009 bytes data]1136* TLSv1.3 (IN), TLS handshake, CERT verify (15):1137{ [111 bytes data]1138* TLSv1.3 (IN), TLS handshake, Finished (20):1139{ [52 bytes data]1140* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1141} [1 bytes data]1142* TLSv1.3 (OUT), TLS handshake, Finished (20):1143} [52 bytes data]1144* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1145* ALPN: server accepted h21146* Server certificate:1147* subject: CN=test.foo1148* start date: Sep 19 05:17:38 2026 GMT1149* expire date: Oct 19 05:17:38 2028 GMT1150* issuer: CN=minica root ca 4217031151* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841152* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841153* subjectAltName: "test.foo" matches cert's "test.foo"1154* OpenSSL verify result: 131155* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1156* closing connection #01157curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1158More details here: https://curl.se/docs/sslcerts.html11591160curl failed to verify the legitimacy of the server and therefore could not1161establish a secure connection to it. To learn more about this situation and1162how to fix it, please visit the webpage mentioned above.1163* Host test.foo:443 was resolved.1164* IPv6: 2001:db8:1::31165* IPv4: 192.168.1.31166* Trying [2001:db8:1::3]:443...1167* ALPN: curl offers h2,http/1.11168} [5 bytes data]1169* TLSv1.3 (OUT), TLS handshake, Client hello (1):1170} [1552 bytes data]1171* SSL Trust Anchors:1172* OpenSSL default paths (fallback)1173{ [5 bytes data]1174* TLSv1.3 (IN), TLS handshake, Server hello (2):1175{ [1210 bytes data]1176* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1177{ [1 bytes data]1178* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1179{ [19 bytes data]1180* TLSv1.3 (IN), TLS handshake, Certificate (11):1181{ [1009 bytes data]1182* TLSv1.3 (IN), TLS handshake, CERT verify (15):1183{ [111 bytes data]1184* TLSv1.3 (IN), TLS handshake, Finished (20):1185{ [52 bytes data]1186* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1187} [1 bytes data]1188* TLSv1.3 (OUT), TLS handshake, Finished (20):1189} [52 bytes data]1190* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1191* ALPN: server accepted h21192* Server certificate:1193* subject: CN=test.foo1194* start date: Sep 19 05:17:38 2026 GMT1195* expire date: Oct 19 05:17:38 2028 GMT1196* issuer: CN=minica root ca 4217031197* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841198* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841199* subjectAltName: "test.foo" matches cert's "test.foo"1200* OpenSSL verify result: 131201* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1202* closing connection #01203curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1204More details here: https://curl.se/docs/sslcerts.html12051206curl failed to verify the legitimacy of the server and therefore could not1207establish a secure connection to it. To learn more about this situation and1208how to fix it, please visit the webpage mentioned above.1209* Host test.foo:443 was resolved.1210* IPv6: 2001:db8:1::31211* IPv4: 192.168.1.31212* Trying [2001:db8:1::3]:443...1213* ALPN: curl offers h2,http/1.11214} [5 bytes data]1215* TLSv1.3 (OUT), TLS handshake, Client hello (1):1216} [1552 bytes data]1217* SSL Trust Anchors:1218* OpenSSL default paths (fallback)1219{ [5 bytes data]1220* TLSv1.3 (IN), TLS handshake, Server hello (2):1221{ [1210 bytes data]1222* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1223{ [1 bytes data]1224* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1225{ [19 bytes data]1226* TLSv1.3 (IN), TLS handshake, Certificate (11):1227{ [1009 bytes data]1228* TLSv1.3 (IN), TLS handshake, CERT verify (15):1229{ [110 bytes data]1230* TLSv1.3 (IN), TLS handshake, Finished (20):1231{ [52 bytes data]1232* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1233} [1 bytes data]1234* TLSv1.3 (OUT), TLS handshake, Finished (20):1235} [52 bytes data]1236* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1237* ALPN: server accepted h21238* Server certificate:1239* subject: CN=test.foo1240* start date: Sep 19 05:17:38 2026 GMT1241* expire date: Oct 19 05:17:38 2028 GMT1242* issuer: CN=minica root ca 4217031243* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841244* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841245* subjectAltName: "test.foo" matches cert's "test.foo"1246* OpenSSL verify result: 131247* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1248* closing connection #01249curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1250More details here: https://curl.se/docs/sslcerts.html12511252curl failed to verify the legitimacy of the server and therefore could not1253establish a secure connection to it. To learn more about this situation and1254how to fix it, please visit the webpage mentioned above.1255* Host test.foo:443 was resolved.1256* IPv6: 2001:db8:1::31257* IPv4: 192.168.1.31258* Trying [2001:db8:1::3]:443...1259* ALPN: curl offers h2,http/1.11260} [5 bytes data]1261* TLSv1.3 (OUT), TLS handshake, Client hello (1):1262} [1552 bytes data]1263* SSL Trust Anchors:1264* OpenSSL default paths (fallback)1265{ [5 bytes data]1266* TLSv1.3 (IN), TLS handshake, Server hello (2):1267{ [1210 bytes data]1268* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1269{ [1 bytes data]1270* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1271{ [19 bytes data]1272* TLSv1.3 (IN), TLS handshake, Certificate (11):1273{ [1009 bytes data]1274* TLSv1.3 (IN), TLS handshake, CERT verify (15):1275{ [111 bytes data]1276* TLSv1.3 (IN), TLS handshake, Finished (20):1277{ [52 bytes data]1278* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1279} [1 bytes data]1280* TLSv1.3 (OUT), TLS handshake, Finished (20):1281} [52 bytes data]1282* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1283* ALPN: server accepted h21284* Server certificate:1285* subject: CN=test.foo1286* start date: Sep 19 05:17:38 2026 GMT1287* expire date: Oct 19 05:17:38 2028 GMT1288* issuer: CN=minica root ca 4217031289* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841290* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841291* subjectAltName: "test.foo" matches cert's "test.foo"1292* OpenSSL verify result: 131293* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1294* closing connection #01295curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1296More details here: https://curl.se/docs/sslcerts.html12971298curl failed to verify the legitimacy of the server and therefore could not1299establish a secure connection to it. To learn more about this situation and1300how to fix it, please visit the webpage mentioned above.1301* Host test.foo:443 was resolved.1302* IPv6: 2001:db8:1::31303* IPv4: 192.168.1.31304* Trying [2001:db8:1::3]:443...1305* ALPN: curl offers h2,http/1.11306} [5 bytes data]1307* TLSv1.3 (OUT), TLS handshake, Client hello (1):1308} [1552 bytes data]1309* SSL Trust Anchors:1310* OpenSSL default paths (fallback)1311{ [5 bytes data]1312* TLSv1.3 (IN), TLS handshake, Server hello (2):1313{ [1210 bytes data]1314* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1315{ [1 bytes data]1316* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1317{ [19 bytes data]1318* TLSv1.3 (IN), TLS handshake, Certificate (11):1319{ [1009 bytes data]1320* TLSv1.3 (IN), TLS handshake, CERT verify (15):1321{ [111 bytes data]1322* TLSv1.3 (IN), TLS handshake, Finished (20):1323{ [52 bytes data]1324* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1325} [1 bytes data]1326* TLSv1.3 (OUT), TLS handshake, Finished (20):1327} [52 bytes data]1328* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1329* ALPN: server accepted h21330* Server certificate:1331* subject: CN=test.foo1332* start date: Sep 19 05:17:38 2026 GMT1333* expire date: Oct 19 05:17:38 2028 GMT1334* issuer: CN=minica root ca 4217031335* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841336* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841337* subjectAltName: "test.foo" matches cert's "test.foo"1338* OpenSSL verify result: 131339* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1340* closing connection #01341curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1342More details here: https://curl.se/docs/sslcerts.html13431344curl failed to verify the legitimacy of the server and therefore could not1345establish a secure connection to it. To learn more about this situation and1346how to fix it, please visit the webpage mentioned above.1347* Host test.foo:443 was resolved.1348* IPv6: 2001:db8:1::31349* IPv4: 192.168.1.31350* Trying [2001:db8:1::3]:443...1351* ALPN: curl offers h2,http/1.11352} [5 bytes data]1353* TLSv1.3 (OUT), TLS handshake, Client hello (1):1354} [1552 bytes data]1355* SSL Trust Anchors:1356* OpenSSL default paths (fallback)1357{ [5 bytes data]1358* TLSv1.3 (IN), TLS handshake, Server hello (2):1359{ [1210 bytes data]1360* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1361{ [1 bytes data]1362* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1363{ [19 bytes data]1364* TLSv1.3 (IN), TLS handshake, Certificate (11):1365{ [1009 bytes data]1366* TLSv1.3 (IN), TLS handshake, CERT verify (15):1367{ [112 bytes data]1368* TLSv1.3 (IN), TLS handshake, Finished (20):1369{ [52 bytes data]1370* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1371} [1 bytes data]1372* TLSv1.3 (OUT), TLS handshake, Finished (20):1373} [52 bytes data]1374* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1375* ALPN: server accepted h21376* Server certificate:1377* subject: CN=test.foo1378* start date: Sep 19 05:17:38 2026 GMT1379* expire date: Oct 19 05:17:38 2028 GMT1380* issuer: CN=minica root ca 4217031381* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841382* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841383* subjectAltName: "test.foo" matches cert's "test.foo"1384* OpenSSL verify result: 131385* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1386* closing connection #01387curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1388More details here: https://curl.se/docs/sslcerts.html13891390curl failed to verify the legitimacy of the server and therefore could not1391establish a secure connection to it. To learn more about this situation and1392how to fix it, please visit the webpage mentioned above.1393* Host test.foo:443 was resolved.1394* IPv6: 2001:db8:1::31395* IPv4: 192.168.1.31396* Trying [2001:db8:1::3]:443...1397* ALPN: curl offers h2,http/1.11398} [5 bytes data]1399* TLSv1.3 (OUT), TLS handshake, Client hello (1):1400} [1552 bytes data]1401* SSL Trust Anchors:1402* OpenSSL default paths (fallback)1403{ [5 bytes data]1404* TLSv1.3 (IN), TLS handshake, Server hello (2):1405{ [1210 bytes data]1406* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1407{ [1 bytes data]1408* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1409{ [19 bytes data]1410* TLSv1.3 (IN), TLS handshake, Certificate (11):1411{ [1009 bytes data]1412* TLSv1.3 (IN), TLS handshake, CERT verify (15):1413{ [111 bytes data]1414* TLSv1.3 (IN), TLS handshake, Finished (20):1415{ [52 bytes data]1416* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1417} [1 bytes data]1418* TLSv1.3 (OUT), TLS handshake, Finished (20):1419} [52 bytes data]1420* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1421* ALPN: server accepted h21422* Server certificate:1423* subject: CN=test.foo1424* start date: Sep 19 05:17:38 2026 GMT1425* expire date: Oct 19 05:17:38 2028 GMT1426* issuer: CN=minica root ca 4217031427* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841428* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841429* subjectAltName: "test.foo" matches cert's "test.foo"1430* OpenSSL verify result: 131431* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1432* closing connection #01433curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1434More details here: https://curl.se/docs/sslcerts.html14351436curl failed to verify the legitimacy of the server and therefore could not1437establish a secure connection to it. To learn more about this situation and1438how to fix it, please visit the webpage mentioned above.1439* Trying [2001:db8:1::3]:443...1440* Host test.foo:443 was resolved.1441* IPv6: 2001:db8:1::31442* IPv4: 192.168.1.31443* ALPN: curl offers h2,http/1.11444} [5 bytes data]1445* TLSv1.3 (OUT), TLS handshake, Client hello (1):1446} [1552 bytes data]1447* SSL Trust Anchors:1448* OpenSSL default paths (fallback)1449{ [5 bytes data]1450* TLSv1.3 (IN), TLS handshake, Server hello (2):1451{ [1210 bytes data]1452* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1453{ [1 bytes data]1454* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1455{ [19 bytes data]1456* TLSv1.3 (IN), TLS handshake, Certificate (11):1457{ [1009 bytes data]1458* TLSv1.3 (IN), TLS handshake, CERT verify (15):1459{ [111 bytes data]1460* TLSv1.3 (IN), TLS handshake, Finished (20):1461{ [52 bytes data]1462* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1463} [1 bytes data]1464* TLSv1.3 (OUT), TLS handshake, Finished (20):1465} [52 bytes data]1466* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1467* ALPN: server accepted h21468* Server certificate:1469* subject: CN=test.foo1470* start date: Sep 19 05:17:38 2026 GMT1471* expire date: Oct 19 05:17:38 2028 GMT1472* issuer: CN=minica root ca 4217031473* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841474* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841475* subjectAltName: "test.foo" matches cert's "test.foo"1476* OpenSSL verify result: 131477* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1478* closing connection #01479curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1480More details here: https://curl.se/docs/sslcerts.html14811482curl failed to verify the legitimacy of the server and therefore could not1483establish a secure connection to it. To learn more about this situation and1484how to fix it, please visit the webpage mentioned above.1485* Host test.foo:443 was resolved.1486* IPv6: 2001:db8:1::31487* IPv4: 192.168.1.31488* Trying [2001:db8:1::3]:443...1489* ALPN: curl offers h2,http/1.11490} [5 bytes data]1491* TLSv1.3 (OUT), TLS handshake, Client hello (1):1492} [1552 bytes data]1493* SSL Trust Anchors:1494* OpenSSL default paths (fallback)1495{ [5 bytes data]1496* TLSv1.3 (IN), TLS handshake, Server hello (2):1497{ [1210 bytes data]1498* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1499{ [1 bytes data]1500* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1501{ [19 bytes data]1502* TLSv1.3 (IN), TLS handshake, Certificate (11):1503{ [1009 bytes data]1504* TLSv1.3 (IN), TLS handshake, CERT verify (15):1505{ [111 bytes data]1506* TLSv1.3 (IN), TLS handshake, Finished (20):1507{ [52 bytes data]1508* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1509} [1 bytes data]1510* TLSv1.3 (OUT), TLS handshake, Finished (20):1511} [52 bytes data]1512* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1513* ALPN: server accepted h21514* Server certificate:1515* subject: CN=test.foo1516* start date: Sep 19 05:17:38 2026 GMT1517* expire date: Oct 19 05:17:38 2028 GMT1518* issuer: CN=minica root ca 4217031519* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841520* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841521* subjectAltName: "test.foo" matches cert's "test.foo"1522* OpenSSL verify result: 131523* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1524* closing connection #01525curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1526More details here: https://curl.se/docs/sslcerts.html15271528curl failed to verify the legitimacy of the server and therefore could not1529establish a secure connection to it. To learn more about this situation and1530how to fix it, please visit the webpage mentioned above.1531* Host test.foo:443 was resolved.1532* IPv6: 2001:db8:1::31533* IPv4: 192.168.1.31534* Trying [2001:db8:1::3]:443...1535* ALPN: curl offers h2,http/1.11536} [5 bytes data]1537* TLSv1.3 (OUT), TLS handshake, Client hello (1):1538} [1552 bytes data]1539* SSL Trust Anchors:1540* OpenSSL default paths (fallback)1541{ [5 bytes data]1542* TLSv1.3 (IN), TLS handshake, Server hello (2):1543{ [1210 bytes data]1544* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1545{ [1 bytes data]1546* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1547{ [19 bytes data]1548* TLSv1.3 (IN), TLS handshake, Certificate (11):1549{ [1009 bytes data]1550* TLSv1.3 (IN), TLS handshake, CERT verify (15):1551{ [110 bytes data]1552* TLSv1.3 (IN), TLS handshake, Finished (20):1553{ [52 bytes data]1554* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1555} [1 bytes data]1556* TLSv1.3 (OUT), TLS handshake, Finished (20):1557} [52 bytes data]1558* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1559* ALPN: server accepted h21560* Server certificate:1561* subject: CN=test.foo1562* start date: Sep 19 05:17:38 2026 GMT1563* expire date: Oct 19 05:17:38 2028 GMT1564* issuer: CN=minica root ca 4217031565* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841566* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841567* subjectAltName: "test.foo" matches cert's "test.foo"1568* OpenSSL verify result: 131569* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1570* closing connection #01571curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1572More details here: https://curl.se/docs/sslcerts.html15731574curl failed to verify the legitimacy of the server and therefore could not1575establish a secure connection to it. To learn more about this situation and1576how to fix it, please visit the webpage mentioned above.1577* Host test.foo:443 was resolved.1578* IPv6: 2001:db8:1::31579* IPv4: 192.168.1.31580* Trying [2001:db8:1::3]:443...1581* ALPN: curl offers h2,http/1.11582} [5 bytes data]1583* TLSv1.3 (OUT), TLS handshake, Client hello (1):1584} [1552 bytes data]1585* SSL Trust Anchors:1586* OpenSSL default paths (fallback)1587{ [5 bytes data]1588* TLSv1.3 (IN), TLS handshake, Server hello (2):1589{ [1210 bytes data]1590* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1591{ [1 bytes data]1592* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1593{ [19 bytes data]1594* TLSv1.3 (IN), TLS handshake, Certificate (11):1595{ [1009 bytes data]1596* TLSv1.3 (IN), TLS handshake, CERT verify (15):1597{ [111 bytes data]1598* TLSv1.3 (IN), TLS handshake, Finished (20):1599{ [52 bytes data]1600* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1601} [1 bytes data]1602* TLSv1.3 (OUT), TLS handshake, Finished (20):1603} [52 bytes data]1604* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1605* ALPN: server accepted h21606* Server certificate:1607* subject: CN=test.foo1608* start date: Sep 19 05:17:38 2026 GMT1609* expire date: Oct 19 05:17:38 2028 GMT1610* issuer: CN=minica root ca 4217031611* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841612* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841613* subjectAltName: "test.foo" matches cert's "test.foo"1614* OpenSSL verify result: 131615* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1616* closing connection #01617curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1618More details here: https://curl.se/docs/sslcerts.html16191620curl failed to verify the legitimacy of the server and therefore could not1621establish a secure connection to it. To learn more about this situation and1622how to fix it, please visit the webpage mentioned above.1623* Host test.foo:443 was resolved.1624* IPv6: 2001:db8:1::31625* IPv4: 192.168.1.31626* Trying [2001:db8:1::3]:443...1627* ALPN: curl offers h2,http/1.11628} [5 bytes data]1629* TLSv1.3 (OUT), TLS handshake, Client hello (1):1630} [1552 bytes data]1631* SSL Trust Anchors:1632* OpenSSL default paths (fallback)1633{ [5 bytes data]1634* TLSv1.3 (IN), TLS handshake, Server hello (2):1635{ [1210 bytes data]1636* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1637{ [1 bytes data]1638* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1639{ [19 bytes data]1640* TLSv1.3 (IN), TLS handshake, Certificate (11):1641{ [1009 bytes data]1642* TLSv1.3 (IN), TLS handshake, CERT verify (15):1643{ [112 bytes data]1644* TLSv1.3 (IN), TLS handshake, Finished (20):1645{ [52 bytes data]1646* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1647} [1 bytes data]1648* TLSv1.3 (OUT), TLS handshake, Finished (20):1649} [52 bytes data]1650* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1651* ALPN: server accepted h21652* Server certificate:1653* subject: CN=test.foo1654* start date: Sep 19 05:17:38 2026 GMT1655* expire date: Oct 19 05:17:38 2028 GMT1656* issuer: CN=minica root ca 4217031657* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841658* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841659* subjectAltName: "test.foo" matches cert's "test.foo"1660* OpenSSL verify result: 131661* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1662* closing connection #01663curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1664More details here: https://curl.se/docs/sslcerts.html16651666curl failed to verify the legitimacy of the server and therefore could not1667establish a secure connection to it. To learn more about this situation and1668how to fix it, please visit the webpage mentioned above.1669* Host test.foo:443 was resolved.1670* IPv6: 2001:db8:1::31671* IPv4: 192.168.1.31672* Trying [2001:db8:1::3]:443...1673* ALPN: curl offers h2,http/1.11674} [5 bytes data]1675* TLSv1.3 (OUT), TLS handshake, Client hello (1):1676} [1552 bytes data]1677* SSL Trust Anchors:1678* OpenSSL default paths (fallback)1679{ [5 bytes data]1680* TLSv1.3 (IN), TLS handshake, Server hello (2):1681{ [1210 bytes data]1682* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1683{ [1 bytes data]1684* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1685{ [19 bytes data]1686* TLSv1.3 (IN), TLS handshake, Certificate (11):1687{ [1009 bytes data]1688* TLSv1.3 (IN), TLS handshake, CERT verify (15):1689{ [111 bytes data]1690* TLSv1.3 (IN), TLS handshake, Finished (20):1691{ [52 bytes data]1692* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1693} [1 bytes data]1694* TLSv1.3 (OUT), TLS handshake, Finished (20):1695} [52 bytes data]1696* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1697* ALPN: server accepted h21698* Server certificate:1699* subject: CN=test.foo1700* start date: Sep 19 05:17:38 2026 GMT1701* expire date: Oct 19 05:17:38 2028 GMT1702* issuer: CN=minica root ca 4217031703* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841704* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841705* subjectAltName: "test.foo" matches cert's "test.foo"1706* OpenSSL verify result: 131707* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1708* closing connection #01709curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1710More details here: https://curl.se/docs/sslcerts.html17111712curl failed to verify the legitimacy of the server and therefore could not1713establish a secure connection to it. To learn more about this situation and1714how to fix it, please visit the webpage mentioned above.1715* Host test.foo:443 was resolved.1716* IPv6: 2001:db8:1::31717* IPv4: 192.168.1.31718* Trying [2001:db8:1::3]:443...1719* ALPN: curl offers h2,http/1.11720} [5 bytes data]1721* TLSv1.3 (OUT), TLS handshake, Client hello (1):1722} [1552 bytes data]1723* SSL Trust Anchors:1724* OpenSSL default paths (fallback)1725{ [5 bytes data]1726* TLSv1.3 (IN), TLS handshake, Server hello (2):1727{ [1210 bytes data]1728* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1729{ [1 bytes data]1730* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1731{ [19 bytes data]1732* TLSv1.3 (IN), TLS handshake, Certificate (11):1733{ [1009 bytes data]1734* TLSv1.3 (IN), TLS handshake, CERT verify (15):1735{ [110 bytes data]1736* TLSv1.3 (IN), TLS handshake, Finished (20):1737{ [52 bytes data]1738* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1739} [1 bytes data]1740* TLSv1.3 (OUT), TLS handshake, Finished (20):1741} [52 bytes data]1742* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1743* ALPN: server accepted h21744* Server certificate:1745* subject: CN=test.foo1746* start date: Sep 19 05:17:38 2026 GMT1747* expire date: Oct 19 05:17:38 2028 GMT1748* issuer: CN=minica root ca 4217031749* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841750* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841751* subjectAltName: "test.foo" matches cert's "test.foo"1752* OpenSSL verify result: 131753* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1754* closing connection #01755curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1756More details here: https://curl.se/docs/sslcerts.html17571758curl failed to verify the legitimacy of the server and therefore could not1759establish a secure connection to it. To learn more about this situation and1760how to fix it, please visit the webpage mentioned above.1761* Host test.foo:443 was resolved.1762* IPv6: 2001:db8:1::31763* IPv4: 192.168.1.31764* Trying [2001:db8:1::3]:443...1765* ALPN: curl offers h2,http/1.11766} [5 bytes data]1767* TLSv1.3 (OUT), TLS handshake, Client hello (1):1768} [1552 bytes data]1769* SSL Trust Anchors:1770* OpenSSL default paths (fallback)1771{ [5 bytes data]1772* TLSv1.3 (IN), TLS handshake, Server hello (2):1773{ [1210 bytes data]1774* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1775{ [1 bytes data]1776* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1777{ [19 bytes data]1778* TLSv1.3 (IN), TLS handshake, Certificate (11):1779{ [1009 bytes data]1780* TLSv1.3 (IN), TLS handshake, CERT verify (15):1781{ [110 bytes data]1782* TLSv1.3 (IN), TLS handshake, Finished (20):1783{ [52 bytes data]1784* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1785} [1 bytes data]1786* TLSv1.3 (OUT), TLS handshake, Finished (20):1787} [52 bytes data]1788* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1789* ALPN: server accepted h21790* Server certificate:1791* subject: CN=test.foo1792* start date: Sep 19 05:17:38 2026 GMT1793* expire date: Oct 19 05:17:38 2028 GMT1794* issuer: CN=minica root ca 4217031795* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841796* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841797* subjectAltName: "test.foo" matches cert's "test.foo"1798* OpenSSL verify result: 131799* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1800* closing connection #01801curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1802More details here: https://curl.se/docs/sslcerts.html18031804curl failed to verify the legitimacy of the server and therefore could not1805establish a secure connection to it. To learn more about this situation and1806how to fix it, please visit the webpage mentioned above.1807* Host test.foo:443 was resolved.1808* IPv6: 2001:db8:1::31809* IPv4: 192.168.1.31810* Trying [2001:db8:1::3]:443...1811* ALPN: curl offers h2,http/1.11812} [5 bytes data]1813* TLSv1.3 (OUT), TLS handshake, Client hello (1):1814} [1552 bytes data]1815* SSL Trust Anchors:1816* OpenSSL default paths (fallback)1817{ [5 bytes data]1818* TLSv1.3 (IN), TLS handshake, Server hello (2):1819{ [1210 bytes data]1820* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1821{ [1 bytes data]1822* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1823{ [19 bytes data]1824* TLSv1.3 (IN), TLS handshake, Certificate (11):1825{ [1009 bytes data]1826* TLSv1.3 (IN), TLS handshake, CERT verify (15):1827{ [111 bytes data]1828* TLSv1.3 (IN), TLS handshake, Finished (20):1829{ [52 bytes data]1830* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1831} [1 bytes data]1832* TLSv1.3 (OUT), TLS handshake, Finished (20):1833} [52 bytes data]1834* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1835* ALPN: server accepted h21836* Server certificate:1837* subject: CN=test.foo1838* start date: Sep 19 05:17:38 2026 GMT1839* expire date: Oct 19 05:17:38 2028 GMT1840* issuer: CN=minica root ca 4217031841* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841842* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841843* subjectAltName: "test.foo" matches cert's "test.foo"1844* OpenSSL verify result: 131845* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1846* closing connection #01847curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1848More details here: https://curl.se/docs/sslcerts.html18491850curl failed to verify the legitimacy of the server and therefore could not1851establish a secure connection to it. To learn more about this situation and1852how to fix it, please visit the webpage mentioned above.1853* Host test.foo:443 was resolved.1854* IPv6: 2001:db8:1::31855* IPv4: 192.168.1.31856* Trying [2001:db8:1::3]:443...1857* ALPN: curl offers h2,http/1.11858} [5 bytes data]1859* TLSv1.3 (OUT), TLS handshake, Client hello (1):1860} [1552 bytes data]1861* SSL Trust Anchors:1862* OpenSSL default paths (fallback)1863{ [5 bytes data]1864* TLSv1.3 (IN), TLS handshake, Server hello (2):1865{ [1210 bytes data]1866* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1867{ [1 bytes data]1868* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1869{ [19 bytes data]1870* TLSv1.3 (IN), TLS handshake, Certificate (11):1871{ [1009 bytes data]1872* TLSv1.3 (IN), TLS handshake, CERT verify (15):1873{ [110 bytes data]1874* TLSv1.3 (IN), TLS handshake, Finished (20):1875{ [52 bytes data]1876* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1877} [1 bytes data]1878* TLSv1.3 (OUT), TLS handshake, Finished (20):1879} [52 bytes data]1880* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1881* ALPN: server accepted h21882* Server certificate:1883* subject: CN=test.foo1884* start date: Sep 19 05:17:38 2026 GMT1885* expire date: Oct 19 05:17:38 2028 GMT1886* issuer: CN=minica root ca 4217031887* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841888* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841889* subjectAltName: "test.foo" matches cert's "test.foo"1890* OpenSSL verify result: 131891* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1892* closing connection #01893curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1894More details here: https://curl.se/docs/sslcerts.html18951896curl failed to verify the legitimacy of the server and therefore could not1897establish a secure connection to it. To learn more about this situation and1898how to fix it, please visit the webpage mentioned above.1899* Host test.foo:443 was resolved.1900* IPv6: 2001:db8:1::31901* IPv4: 192.168.1.31902* Trying [2001:db8:1::3]:443...1903* ALPN: curl offers h2,http/1.11904} [5 bytes data]1905* TLSv1.3 (OUT), TLS handshake, Client hello (1):1906} [1552 bytes data]1907* SSL Trust Anchors:1908* OpenSSL default paths (fallback)1909{ [5 bytes data]1910* TLSv1.3 (IN), TLS handshake, Server hello (2):1911{ [1210 bytes data]1912* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1913{ [1 bytes data]1914* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1915{ [19 bytes data]1916* TLSv1.3 (IN), TLS handshake, Certificate (11):1917{ [1009 bytes data]1918* TLSv1.3 (IN), TLS handshake, CERT verify (15):1919{ [112 bytes data]1920* TLSv1.3 (IN), TLS handshake, Finished (20):1921{ [52 bytes data]1922* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1923} [1 bytes data]1924* TLSv1.3 (OUT), TLS handshake, Finished (20):1925} [52 bytes data]1926* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1927* ALPN: server accepted h21928* Server certificate:1929* subject: CN=test.foo1930* start date: Sep 19 05:17:38 2026 GMT1931* expire date: Oct 19 05:17:38 2028 GMT1932* issuer: CN=minica root ca 4217031933* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841934* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841935* subjectAltName: "test.foo" matches cert's "test.foo"1936* OpenSSL verify result: 131937* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1938* closing connection #01939curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1940More details here: https://curl.se/docs/sslcerts.html19411942curl failed to verify the legitimacy of the server and therefore could not1943establish a secure connection to it. To learn more about this situation and1944how to fix it, please visit the webpage mentioned above.1945* Host test.foo:443 was resolved.1946* IPv6: 2001:db8:1::31947* IPv4: 192.168.1.31948* Trying [2001:db8:1::3]:443...1949* ALPN: curl offers h2,http/1.11950} [5 bytes data]1951* TLSv1.3 (OUT), TLS handshake, Client hello (1):1952} [1552 bytes data]1953* SSL Trust Anchors:1954* OpenSSL default paths (fallback)1955{ [5 bytes data]1956* TLSv1.3 (IN), TLS handshake, Server hello (2):1957{ [1210 bytes data]1958* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1959{ [1 bytes data]1960* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1961{ [19 bytes data]1962* TLSv1.3 (IN), TLS handshake, Certificate (11):1963{ [1009 bytes data]1964* TLSv1.3 (IN), TLS handshake, CERT verify (15):1965{ [111 bytes data]1966* TLSv1.3 (IN), TLS handshake, Finished (20):1967{ [52 bytes data]1968* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1969} [1 bytes data]1970* TLSv1.3 (OUT), TLS handshake, Finished (20):1971} [52 bytes data]1972* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1973* ALPN: server accepted h21974* Server certificate:1975* subject: CN=test.foo1976* start date: Sep 19 05:17:38 2026 GMT1977* expire date: Oct 19 05:17:38 2028 GMT1978* issuer: CN=minica root ca 4217031979* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841980* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841981* subjectAltName: "test.foo" matches cert's "test.foo"1982* OpenSSL verify result: 131983* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1984* closing connection #01985curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1986More details here: https://curl.se/docs/sslcerts.html19871988curl failed to verify the legitimacy of the server and therefore could not1989establish a secure connection to it. To learn more about this situation and1990how to fix it, please visit the webpage mentioned above.1991* Host test.foo:443 was resolved.1992* IPv6: 2001:db8:1::31993* IPv4: 192.168.1.31994* Trying [2001:db8:1::3]:443...1995* ALPN: curl offers h2,http/1.11996} [5 bytes data]1997* TLSv1.3 (OUT), TLS handshake, Client hello (1):1998} [1552 bytes data]1999* SSL Trust Anchors:2000* OpenSSL default paths (fallback)
loading 35,100 hidden lines…
37101{ [1210 bytes data]37102* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37103{ [1 bytes data]37104* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37105{ [19 bytes data]37106* TLSv1.3 (IN), TLS handshake, Certificate (11):37107{ [1009 bytes data]37108* TLSv1.3 (IN), TLS handshake, CERT verify (15):37109{ [111 bytes data]37110* TLSv1.3 (IN), TLS handshake, Finished (20):37111{ [52 bytes data]37112* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37113} [1 bytes data]37114* TLSv1.3 (OUT), TLS handshake, Finished (20):37115} [52 bytes data]37116* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37117* ALPN: server accepted h237118* Server certificate:37119* subject: CN=test.foo37120* start date: Sep 19 05:17:38 2026 GMT37121* expire date: Oct 19 05:17:38 2028 GMT37122* issuer: CN=minica root ca 42170337123* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437124* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437125* subjectAltName: "test.foo" matches cert's "test.foo"37126* OpenSSL verify result: 1337127* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37128* closing connection #037129curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37130More details here: https://curl.se/docs/sslcerts.html3713137132curl failed to verify the legitimacy of the server and therefore could not37133establish a secure connection to it. To learn more about this situation and37134how to fix it, please visit the webpage mentioned above.37135* Host test.foo:443 was resolved.37136* IPv6: 2001:db8:1::337137* IPv4: 192.168.1.337138* Trying [2001:db8:1::3]:443...37139* ALPN: curl offers h2,http/1.137140} [5 bytes data]37141* TLSv1.3 (OUT), TLS handshake, Client hello (1):37142} [1552 bytes data]37143* SSL Trust Anchors:37144* OpenSSL default paths (fallback)37145{ [5 bytes data]37146* TLSv1.3 (IN), TLS handshake, Server hello (2):37147{ [1210 bytes data]37148* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37149{ [1 bytes data]37150* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37151{ [19 bytes data]37152* TLSv1.3 (IN), TLS handshake, Certificate (11):37153{ [1009 bytes data]37154* TLSv1.3 (IN), TLS handshake, CERT verify (15):37155{ [111 bytes data]37156* TLSv1.3 (IN), TLS handshake, Finished (20):37157{ [52 bytes data]37158* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37159} [1 bytes data]37160* TLSv1.3 (OUT), TLS handshake, Finished (20):37161} [52 bytes data]37162* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37163* ALPN: server accepted h237164* Server certificate:37165* subject: CN=test.foo37166* start date: Sep 19 05:17:38 2026 GMT37167* expire date: Oct 19 05:17:38 2028 GMT37168* issuer: CN=minica root ca 42170337169* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437170* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437171* subjectAltName: "test.foo" matches cert's "test.foo"37172* OpenSSL verify result: 1337173* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37174* closing connection #037175curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37176More details here: https://curl.se/docs/sslcerts.html3717737178curl failed to verify the legitimacy of the server and therefore could not37179establish a secure connection to it. To learn more about this situation and37180how to fix it, please visit the webpage mentioned above.37181* Host test.foo:443 was resolved.37182* IPv6: 2001:db8:1::337183* IPv4: 192.168.1.337184* Trying [2001:db8:1::3]:443...37185* ALPN: curl offers h2,http/1.137186} [5 bytes data]37187* TLSv1.3 (OUT), TLS handshake, Client hello (1):37188} [1552 bytes data]37189* SSL Trust Anchors:37190* OpenSSL default paths (fallback)37191{ [5 bytes data]37192* TLSv1.3 (IN), TLS handshake, Server hello (2):37193{ [1210 bytes data]37194* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37195{ [1 bytes data]37196* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37197{ [19 bytes data]37198* TLSv1.3 (IN), TLS handshake, Certificate (11):37199{ [1009 bytes data]37200* TLSv1.3 (IN), TLS handshake, CERT verify (15):37201{ [111 bytes data]37202* TLSv1.3 (IN), TLS handshake, Finished (20):37203{ [52 bytes data]37204* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37205} [1 bytes data]37206* TLSv1.3 (OUT), TLS handshake, Finished (20):37207} [52 bytes data]37208* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37209* ALPN: server accepted h237210* Server certificate:37211* subject: CN=test.foo37212* start date: Sep 19 05:17:38 2026 GMT37213* expire date: Oct 19 05:17:38 2028 GMT37214* issuer: CN=minica root ca 42170337215* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437216* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437217* subjectAltName: "test.foo" matches cert's "test.foo"37218* OpenSSL verify result: 1337219* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37220* closing connection #037221curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37222More details here: https://curl.se/docs/sslcerts.html3722337224curl failed to verify the legitimacy of the server and therefore could not37225establish a secure connection to it. To learn more about this situation and37226how to fix it, please visit the webpage mentioned above.37227* Host test.foo:443 was resolved.37228* IPv6: 2001:db8:1::337229* IPv4: 192.168.1.337230* Trying [2001:db8:1::3]:443...37231* ALPN: curl offers h2,http/1.137232} [5 bytes data]37233* TLSv1.3 (OUT), TLS handshake, Client hello (1):37234} [1552 bytes data]37235* SSL Trust Anchors:37236* OpenSSL default paths (fallback)37237{ [5 bytes data]37238* TLSv1.3 (IN), TLS handshake, Server hello (2):37239{ [1210 bytes data]37240* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37241{ [1 bytes data]37242* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37243{ [19 bytes data]37244* TLSv1.3 (IN), TLS handshake, Certificate (11):37245{ [1009 bytes data]37246* TLSv1.3 (IN), TLS handshake, CERT verify (15):37247{ [111 bytes data]37248* TLSv1.3 (IN), TLS handshake, Finished (20):37249{ [52 bytes data]37250* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37251} [1 bytes data]37252* TLSv1.3 (OUT), TLS handshake, Finished (20):37253} [52 bytes data]37254* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37255* ALPN: server accepted h237256* Server certificate:37257* subject: CN=test.foo37258* start date: Sep 19 05:17:38 2026 GMT37259* expire date: Oct 19 05:17:38 2028 GMT37260* issuer: CN=minica root ca 42170337261* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437262* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437263* subjectAltName: "test.foo" matches cert's "test.foo"37264* OpenSSL verify result: 1337265* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37266* closing connection #037267curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37268More details here: https://curl.se/docs/sslcerts.html3726937270curl failed to verify the legitimacy of the server and therefore could not37271establish a secure connection to it. To learn more about this situation and37272how to fix it, please visit the webpage mentioned above.37273* Host test.foo:443 was resolved.37274* IPv6: 2001:db8:1::337275* IPv4: 192.168.1.337276* Trying [2001:db8:1::3]:443...37277* ALPN: curl offers h2,http/1.137278} [5 bytes data]37279* TLSv1.3 (OUT), TLS handshake, Client hello (1):37280} [1552 bytes data]37281* SSL Trust Anchors:37282* OpenSSL default paths (fallback)37283{ [5 bytes data]37284* TLSv1.3 (IN), TLS handshake, Server hello (2):37285{ [1210 bytes data]37286* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37287{ [1 bytes data]37288* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37289{ [19 bytes data]37290* TLSv1.3 (IN), TLS handshake, Certificate (11):37291{ [1009 bytes data]37292* TLSv1.3 (IN), TLS handshake, CERT verify (15):37293{ [112 bytes data]37294* TLSv1.3 (IN), TLS handshake, Finished (20):37295{ [52 bytes data]37296* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37297} [1 bytes data]37298* TLSv1.3 (OUT), TLS handshake, Finished (20):37299} [52 bytes data]37300* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37301* ALPN: server accepted h237302* Server certificate:37303* subject: CN=test.foo37304* start date: Sep 19 05:17:38 2026 GMT37305* expire date: Oct 19 05:17:38 2028 GMT37306* issuer: CN=minica root ca 42170337307* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437308* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437309* subjectAltName: "test.foo" matches cert's "test.foo"37310* OpenSSL verify result: 1337311* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37312* closing connection #037313curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37314More details here: https://curl.se/docs/sslcerts.html3731537316curl failed to verify the legitimacy of the server and therefore could not37317establish a secure connection to it. To learn more about this situation and37318how to fix it, please visit the webpage mentioned above.37319* Host test.foo:443 was resolved.37320* IPv6: 2001:db8:1::337321* IPv4: 192.168.1.337322* Trying [2001:db8:1::3]:443...37323* ALPN: curl offers h2,http/1.137324} [5 bytes data]37325* TLSv1.3 (OUT), TLS handshake, Client hello (1):37326} [1552 bytes data]37327* SSL Trust Anchors:37328* OpenSSL default paths (fallback)37329{ [5 bytes data]37330* TLSv1.3 (IN), TLS handshake, Server hello (2):37331{ [1210 bytes data]37332* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37333{ [1 bytes data]37334* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37335{ [19 bytes data]37336* TLSv1.3 (IN), TLS handshake, Certificate (11):37337{ [1009 bytes data]37338* TLSv1.3 (IN), TLS handshake, CERT verify (15):37339{ [111 bytes data]37340* TLSv1.3 (IN), TLS handshake, Finished (20):37341{ [52 bytes data]37342* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37343} [1 bytes data]37344* TLSv1.3 (OUT), TLS handshake, Finished (20):37345} [52 bytes data]37346* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37347* ALPN: server accepted h237348* Server certificate:37349* subject: CN=test.foo37350* start date: Sep 19 05:17:38 2026 GMT37351* expire date: Oct 19 05:17:38 2028 GMT37352* issuer: CN=minica root ca 42170337353* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437354* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437355* subjectAltName: "test.foo" matches cert's "test.foo"37356* OpenSSL verify result: 1337357* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37358* closing connection #037359curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37360More details here: https://curl.se/docs/sslcerts.html3736137362curl failed to verify the legitimacy of the server and therefore could not37363establish a secure connection to it. To learn more about this situation and37364how to fix it, please visit the webpage mentioned above.37365* Host test.foo:443 was resolved.37366* IPv6: 2001:db8:1::337367* IPv4: 192.168.1.337368* Trying [2001:db8:1::3]:443...37369* ALPN: curl offers h2,http/1.137370} [5 bytes data]37371* TLSv1.3 (OUT), TLS handshake, Client hello (1):37372} [1552 bytes data]37373* SSL Trust Anchors:37374* OpenSSL default paths (fallback)37375{ [5 bytes data]37376* TLSv1.3 (IN), TLS handshake, Server hello (2):37377{ [1210 bytes data]37378* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37379{ [1 bytes data]37380* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37381{ [19 bytes data]37382* TLSv1.3 (IN), TLS handshake, Certificate (11):37383{ [1009 bytes data]37384* TLSv1.3 (IN), TLS handshake, CERT verify (15):37385{ [111 bytes data]37386* TLSv1.3 (IN), TLS handshake, Finished (20):37387{ [52 bytes data]37388* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37389} [1 bytes data]37390* TLSv1.3 (OUT), TLS handshake, Finished (20):37391} [52 bytes data]37392* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37393* ALPN: server accepted h237394* Server certificate:37395* subject: CN=test.foo37396* start date: Sep 19 05:17:38 2026 GMT37397* expire date: Oct 19 05:17:38 2028 GMT37398* issuer: CN=minica root ca 42170337399* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437400* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437401* subjectAltName: "test.foo" matches cert's "test.foo"37402* OpenSSL verify result: 1337403* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37404* closing connection #037405curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37406More details here: https://curl.se/docs/sslcerts.html3740737408curl failed to verify the legitimacy of the server and therefore could not37409establish a secure connection to it. To learn more about this situation and37410how to fix it, please visit the webpage mentioned above.37411* Host test.foo:443 was resolved.37412* IPv6: 2001:db8:1::337413* IPv4: 192.168.1.337414* Trying [2001:db8:1::3]:443...37415* ALPN: curl offers h2,http/1.137416} [5 bytes data]37417* TLSv1.3 (OUT), TLS handshake, Client hello (1):37418} [1552 bytes data]37419* SSL Trust Anchors:37420* OpenSSL default paths (fallback)37421{ [5 bytes data]37422* TLSv1.3 (IN), TLS handshake, Server hello (2):37423{ [1210 bytes data]37424* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37425{ [1 bytes data]37426* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37427{ [19 bytes data]37428* TLSv1.3 (IN), TLS handshake, Certificate (11):37429{ [1009 bytes data]37430* TLSv1.3 (IN), TLS handshake, CERT verify (15):37431{ [110 bytes data]37432* TLSv1.3 (IN), TLS handshake, Finished (20):37433{ [52 bytes data]37434* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37435} [1 bytes data]37436* TLSv1.3 (OUT), TLS handshake, Finished (20):37437} [52 bytes data]37438* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37439* ALPN: server accepted h237440* Server certificate:37441* subject: CN=test.foo37442* start date: Sep 19 05:17:38 2026 GMT37443* expire date: Oct 19 05:17:38 2028 GMT37444* issuer: CN=minica root ca 42170337445* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437446* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437447* subjectAltName: "test.foo" matches cert's "test.foo"37448* OpenSSL verify result: 1337449* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37450* closing connection #037451curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37452More details here: https://curl.se/docs/sslcerts.html3745337454curl failed to verify the legitimacy of the server and therefore could not37455establish a secure connection to it. To learn more about this situation and37456how to fix it, please visit the webpage mentioned above.37457* Host test.foo:443 was resolved.37458* IPv6: 2001:db8:1::337459* IPv4: 192.168.1.337460* Trying [2001:db8:1::3]:443...37461* ALPN: curl offers h2,http/1.137462} [5 bytes data]37463* TLSv1.3 (OUT), TLS handshake, Client hello (1):37464} [1552 bytes data]37465* SSL Trust Anchors:37466* OpenSSL default paths (fallback)37467{ [5 bytes data]37468* TLSv1.3 (IN), TLS handshake, Server hello (2):37469{ [1210 bytes data]37470* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37471{ [1 bytes data]37472* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37473{ [19 bytes data]37474* TLSv1.3 (IN), TLS handshake, Certificate (11):37475{ [1009 bytes data]37476* TLSv1.3 (IN), TLS handshake, CERT verify (15):37477{ [112 bytes data]37478* TLSv1.3 (IN), TLS handshake, Finished (20):37479{ [52 bytes data]37480* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37481} [1 bytes data]37482* TLSv1.3 (OUT), TLS handshake, Finished (20):37483} [52 bytes data]37484* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37485* ALPN: server accepted h237486* Server certificate:37487* subject: CN=test.foo37488* start date: Sep 19 05:17:38 2026 GMT37489* expire date: Oct 19 05:17:38 2028 GMT37490* issuer: CN=minica root ca 42170337491* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437492* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437493* subjectAltName: "test.foo" matches cert's "test.foo"37494* OpenSSL verify result: 1337495* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37496* closing connection #037497curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37498More details here: https://curl.se/docs/sslcerts.html3749937500curl failed to verify the legitimacy of the server and therefore could not37501establish a secure connection to it. To learn more about this situation and37502how to fix it, please visit the webpage mentioned above.37503* Host test.foo:443 was resolved.37504* IPv6: 2001:db8:1::337505* IPv4: 192.168.1.337506* Trying [2001:db8:1::3]:443...37507* ALPN: curl offers h2,http/1.137508} [5 bytes data]37509* TLSv1.3 (OUT), TLS handshake, Client hello (1):37510} [1552 bytes data]37511* SSL Trust Anchors:37512* OpenSSL default paths (fallback)37513{ [5 bytes data]37514* TLSv1.3 (IN), TLS handshake, Server hello (2):37515{ [1210 bytes data]37516* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37517{ [1 bytes data]37518* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37519{ [19 bytes data]37520* TLSv1.3 (IN), TLS handshake, Certificate (11):37521{ [1009 bytes data]37522* TLSv1.3 (IN), TLS handshake, CERT verify (15):37523{ [112 bytes data]37524* TLSv1.3 (IN), TLS handshake, Finished (20):37525{ [52 bytes data]37526* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37527} [1 bytes data]37528* TLSv1.3 (OUT), TLS handshake, Finished (20):37529} [52 bytes data]37530* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37531* ALPN: server accepted h237532* Server certificate:37533* subject: CN=test.foo37534* start date: Sep 19 05:17:38 2026 GMT37535* expire date: Oct 19 05:17:38 2028 GMT37536* issuer: CN=minica root ca 42170337537* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437538* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437539* subjectAltName: "test.foo" matches cert's "test.foo"37540* OpenSSL verify result: 1337541* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37542* closing connection #037543curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37544More details here: https://curl.se/docs/sslcerts.html3754537546curl failed to verify the legitimacy of the server and therefore could not37547establish a secure connection to it. To learn more about this situation and37548how to fix it, please visit the webpage mentioned above.37549* Host test.foo:443 was resolved.37550* IPv6: 2001:db8:1::337551* IPv4: 192.168.1.337552* Trying [2001:db8:1::3]:443...37553* ALPN: curl offers h2,http/1.137554} [5 bytes data]37555* TLSv1.3 (OUT), TLS handshake, Client hello (1):37556} [1552 bytes data]37557* SSL Trust Anchors:37558* OpenSSL default paths (fallback)37559{ [5 bytes data]37560* TLSv1.3 (IN), TLS handshake, Server hello (2):37561{ [1210 bytes data]37562* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37563{ [1 bytes data]37564* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37565{ [19 bytes data]37566* TLSv1.3 (IN), TLS handshake, Certificate (11):37567{ [1009 bytes data]37568* TLSv1.3 (IN), TLS handshake, CERT verify (15):37569{ [111 bytes data]37570* TLSv1.3 (IN), TLS handshake, Finished (20):37571{ [52 bytes data]37572* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37573} [1 bytes data]37574* TLSv1.3 (OUT), TLS handshake, Finished (20):37575} [52 bytes data]37576* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37577* ALPN: server accepted h237578* Server certificate:37579* subject: CN=test.foo37580* start date: Sep 19 05:17:38 2026 GMT37581* expire date: Oct 19 05:17:38 2028 GMT37582* issuer: CN=minica root ca 42170337583* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437584* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437585* subjectAltName: "test.foo" matches cert's "test.foo"37586* OpenSSL verify result: 1337587* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37588* closing connection #037589curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37590More details here: https://curl.se/docs/sslcerts.html3759137592curl failed to verify the legitimacy of the server and therefore could not37593establish a secure connection to it. To learn more about this situation and37594how to fix it, please visit the webpage mentioned above.37595* Host test.foo:443 was resolved.37596* IPv6: 2001:db8:1::337597* IPv4: 192.168.1.337598* Trying [2001:db8:1::3]:443...37599* ALPN: curl offers h2,http/1.137600} [5 bytes data]37601* TLSv1.3 (OUT), TLS handshake, Client hello (1):37602} [1552 bytes data]37603* SSL Trust Anchors:37604* OpenSSL default paths (fallback)37605{ [5 bytes data]37606* TLSv1.3 (IN), TLS handshake, Server hello (2):37607{ [1210 bytes data]37608* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37609{ [1 bytes data]37610* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37611{ [19 bytes data]37612* TLSv1.3 (IN), TLS handshake, Certificate (11):37613{ [1009 bytes data]37614* TLSv1.3 (IN), TLS handshake, CERT verify (15):37615{ [111 bytes data]37616* TLSv1.3 (IN), TLS handshake, Finished (20):37617{ [52 bytes data]37618* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37619} [1 bytes data]37620* TLSv1.3 (OUT), TLS handshake, Finished (20):37621} [52 bytes data]37622* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37623* ALPN: server accepted h237624* Server certificate:37625* subject: CN=test.foo37626* start date: Sep 19 05:17:38 2026 GMT37627* expire date: Oct 19 05:17:38 2028 GMT37628* issuer: CN=minica root ca 42170337629* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437630* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437631* subjectAltName: "test.foo" matches cert's "test.foo"37632* OpenSSL verify result: 1337633* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37634* closing connection #037635curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37636More details here: https://curl.se/docs/sslcerts.html3763737638curl failed to verify the legitimacy of the server and therefore could not37639establish a secure connection to it. To learn more about this situation and37640how to fix it, please visit the webpage mentioned above.37641* Host test.foo:443 was resolved.37642* IPv6: 2001:db8:1::337643* IPv4: 192.168.1.337644* Trying [2001:db8:1::3]:443...37645* ALPN: curl offers h2,http/1.137646} [5 bytes data]37647* TLSv1.3 (OUT), TLS handshake, Client hello (1):37648} [1552 bytes data]37649* SSL Trust Anchors:37650* OpenSSL default paths (fallback)37651{ [5 bytes data]37652* TLSv1.3 (IN), TLS handshake, Server hello (2):37653{ [1210 bytes data]37654* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37655{ [1 bytes data]37656* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37657{ [19 bytes data]37658* TLSv1.3 (IN), TLS handshake, Certificate (11):37659{ [1009 bytes data]37660* TLSv1.3 (IN), TLS handshake, CERT verify (15):37661{ [111 bytes data]37662* TLSv1.3 (IN), TLS handshake, Finished (20):37663{ [52 bytes data]37664* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37665} [1 bytes data]37666* TLSv1.3 (OUT), TLS handshake, Finished (20):37667} [52 bytes data]37668* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37669* ALPN: server accepted h237670* Server certificate:37671* subject: CN=test.foo37672* start date: Sep 19 05:17:38 2026 GMT37673* expire date: Oct 19 05:17:38 2028 GMT37674* issuer: CN=minica root ca 42170337675* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437676* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437677* subjectAltName: "test.foo" matches cert's "test.foo"37678* OpenSSL verify result: 1337679* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37680* closing connection #037681curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37682More details here: https://curl.se/docs/sslcerts.html3768337684curl failed to verify the legitimacy of the server and therefore could not37685establish a secure connection to it. To learn more about this situation and37686how to fix it, please visit the webpage mentioned above.37687* Trying [2001:db8:1::3]:443...37688* Host test.foo:443 was resolved.37689* IPv6: 2001:db8:1::337690* IPv4: 192.168.1.337691* ALPN: curl offers h2,http/1.137692} [5 bytes data]37693* TLSv1.3 (OUT), TLS handshake, Client hello (1):37694} [1552 bytes data]37695* SSL Trust Anchors:37696* OpenSSL default paths (fallback)37697{ [5 bytes data]37698* TLSv1.3 (IN), TLS handshake, Server hello (2):37699{ [1210 bytes data]37700* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37701{ [1 bytes data]37702* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37703{ [19 bytes data]37704* TLSv1.3 (IN), TLS handshake, Certificate (11):37705{ [1009 bytes data]37706* TLSv1.3 (IN), TLS handshake, CERT verify (15):37707{ [110 bytes data]37708* TLSv1.3 (IN), TLS handshake, Finished (20):37709{ [52 bytes data]37710* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37711} [1 bytes data]37712* TLSv1.3 (OUT), TLS handshake, Finished (20):37713} [52 bytes data]37714* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37715* ALPN: server accepted h237716* Server certificate:37717* subject: CN=test.foo37718* start date: Sep 19 05:17:38 2026 GMT37719* expire date: Oct 19 05:17:38 2028 GMT37720* issuer: CN=minica root ca 42170337721* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437722* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437723* subjectAltName: "test.foo" matches cert's "test.foo"37724* OpenSSL verify result: 1337725* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37726* closing connection #037727curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37728More details here: https://curl.se/docs/sslcerts.html3772937730curl failed to verify the legitimacy of the server and therefore could not37731establish a secure connection to it. To learn more about this situation and37732how to fix it, please visit the webpage mentioned above.37733* Host test.foo:443 was resolved.37734* IPv6: 2001:db8:1::337735* IPv4: 192.168.1.337736* Trying [2001:db8:1::3]:443...37737* ALPN: curl offers h2,http/1.137738} [5 bytes data]37739* TLSv1.3 (OUT), TLS handshake, Client hello (1):37740} [1552 bytes data]37741* SSL Trust Anchors:37742* OpenSSL default paths (fallback)37743{ [5 bytes data]37744* TLSv1.3 (IN), TLS handshake, Server hello (2):37745{ [1210 bytes data]37746* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37747{ [1 bytes data]37748* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37749{ [19 bytes data]37750* TLSv1.3 (IN), TLS handshake, Certificate (11):37751{ [1009 bytes data]37752* TLSv1.3 (IN), TLS handshake, CERT verify (15):37753{ [111 bytes data]37754* TLSv1.3 (IN), TLS handshake, Finished (20):37755{ [52 bytes data]37756* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37757} [1 bytes data]37758* TLSv1.3 (OUT), TLS handshake, Finished (20):37759} [52 bytes data]37760* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37761* ALPN: server accepted h237762* Server certificate:37763* subject: CN=test.foo37764* start date: Sep 19 05:17:38 2026 GMT37765* expire date: Oct 19 05:17:38 2028 GMT37766* issuer: CN=minica root ca 42170337767* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437768* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437769* subjectAltName: "test.foo" matches cert's "test.foo"37770* OpenSSL verify result: 1337771* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37772* closing connection #037773curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37774More details here: https://curl.se/docs/sslcerts.html3777537776curl failed to verify the legitimacy of the server and therefore could not37777establish a secure connection to it. To learn more about this situation and37778how to fix it, please visit the webpage mentioned above.37779* Host test.foo:443 was resolved.37780* IPv6: 2001:db8:1::337781* IPv4: 192.168.1.337782* Trying [2001:db8:1::3]:443...37783* ALPN: curl offers h2,http/1.137784} [5 bytes data]37785* TLSv1.3 (OUT), TLS handshake, Client hello (1):37786} [1552 bytes data]37787* SSL Trust Anchors:37788* OpenSSL default paths (fallback)37789{ [5 bytes data]37790* TLSv1.3 (IN), TLS handshake, Server hello (2):37791{ [1210 bytes data]37792* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37793{ [1 bytes data]37794* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37795{ [19 bytes data]37796* TLSv1.3 (IN), TLS handshake, Certificate (11):37797{ [1009 bytes data]37798* TLSv1.3 (IN), TLS handshake, CERT verify (15):37799{ [111 bytes data]37800* TLSv1.3 (IN), TLS handshake, Finished (20):37801{ [52 bytes data]37802* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37803} [1 bytes data]37804* TLSv1.3 (OUT), TLS handshake, Finished (20):37805} [52 bytes data]37806* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37807* ALPN: server accepted h237808* Server certificate:37809* subject: CN=test.foo37810* start date: Sep 19 05:17:38 2026 GMT37811* expire date: Oct 19 05:17:38 2028 GMT37812* issuer: CN=minica root ca 42170337813* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437814* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437815* subjectAltName: "test.foo" matches cert's "test.foo"37816* OpenSSL verify result: 1337817* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37818* closing connection #037819curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37820More details here: https://curl.se/docs/sslcerts.html3782137822curl failed to verify the legitimacy of the server and therefore could not37823establish a secure connection to it. To learn more about this situation and37824how to fix it, please visit the webpage mentioned above.37825* Host test.foo:443 was resolved.37826* IPv6: 2001:db8:1::337827* IPv4: 192.168.1.337828* Trying [2001:db8:1::3]:443...37829* ALPN: curl offers h2,http/1.137830} [5 bytes data]37831* TLSv1.3 (OUT), TLS handshake, Client hello (1):37832} [1552 bytes data]37833* SSL Trust Anchors:37834* OpenSSL default paths (fallback)37835{ [5 bytes data]37836* TLSv1.3 (IN), TLS handshake, Server hello (2):37837{ [1210 bytes data]37838* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37839{ [1 bytes data]37840* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37841{ [19 bytes data]37842* TLSv1.3 (IN), TLS handshake, Certificate (11):37843{ [1009 bytes data]37844* TLSv1.3 (IN), TLS handshake, CERT verify (15):37845{ [111 bytes data]37846* TLSv1.3 (IN), TLS handshake, Finished (20):37847{ [52 bytes data]37848* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37849} [1 bytes data]37850* TLSv1.3 (OUT), TLS handshake, Finished (20):37851} [52 bytes data]37852* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37853* ALPN: server accepted h237854* Server certificate:37855* subject: CN=test.foo37856* start date: Sep 19 05:17:38 2026 GMT37857* expire date: Oct 19 05:17:38 2028 GMT37858* issuer: CN=minica root ca 42170337859* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437860* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437861* subjectAltName: "test.foo" matches cert's "test.foo"37862* OpenSSL verify result: 1337863* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37864* closing connection #037865curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37866More details here: https://curl.se/docs/sslcerts.html3786737868curl failed to verify the legitimacy of the server and therefore could not37869establish a secure connection to it. To learn more about this situation and37870how to fix it, please visit the webpage mentioned above.37871* Host test.foo:443 was resolved.37872* IPv6: 2001:db8:1::337873* IPv4: 192.168.1.337874* Trying [2001:db8:1::3]:443...37875* ALPN: curl offers h2,http/1.137876} [5 bytes data]37877* TLSv1.3 (OUT), TLS handshake, Client hello (1):37878} [1552 bytes data]37879* SSL Trust Anchors:37880* OpenSSL default paths (fallback)37881{ [5 bytes data]37882* TLSv1.3 (IN), TLS handshake, Server hello (2):37883{ [1210 bytes data]37884* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37885{ [1 bytes data]37886* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37887{ [19 bytes data]37888* TLSv1.3 (IN), TLS handshake, Certificate (11):37889{ [1009 bytes data]37890* TLSv1.3 (IN), TLS handshake, CERT verify (15):37891{ [112 bytes data]37892* TLSv1.3 (IN), TLS handshake, Finished (20):37893{ [52 bytes data]37894* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37895} [1 bytes data]37896* TLSv1.3 (OUT), TLS handshake, Finished (20):37897} [52 bytes data]37898* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37899* ALPN: server accepted h237900* Server certificate:37901* subject: CN=test.foo37902* start date: Sep 19 05:17:38 2026 GMT37903* expire date: Oct 19 05:17:38 2028 GMT37904* issuer: CN=minica root ca 42170337905* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437906* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437907* subjectAltName: "test.foo" matches cert's "test.foo"37908* OpenSSL verify result: 1337909* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37910* closing connection #037911curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37912More details here: https://curl.se/docs/sslcerts.html3791337914curl failed to verify the legitimacy of the server and therefore could not37915establish a secure connection to it. To learn more about this situation and37916how to fix it, please visit the webpage mentioned above.37917* Host test.foo:443 was resolved.37918* IPv6: 2001:db8:1::337919* IPv4: 192.168.1.337920* Trying [2001:db8:1::3]:443...37921* ALPN: curl offers h2,http/1.137922} [5 bytes data]37923* TLSv1.3 (OUT), TLS handshake, Client hello (1):37924} [1552 bytes data]37925* SSL Trust Anchors:37926* OpenSSL default paths (fallback)37927{ [5 bytes data]37928* TLSv1.3 (IN), TLS handshake, Server hello (2):37929{ [1210 bytes data]37930* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37931{ [1 bytes data]37932* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37933{ [19 bytes data]37934* TLSv1.3 (IN), TLS handshake, Certificate (11):37935{ [1009 bytes data]37936* TLSv1.3 (IN), TLS handshake, CERT verify (15):37937{ [110 bytes data]37938* TLSv1.3 (IN), TLS handshake, Finished (20):37939{ [52 bytes data]37940* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37941} [1 bytes data]37942* TLSv1.3 (OUT), TLS handshake, Finished (20):37943} [52 bytes data]37944* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37945* ALPN: server accepted h237946* Server certificate:37947* subject: CN=test.foo37948* start date: Sep 19 05:17:38 2026 GMT37949* expire date: Oct 19 05:17:38 2028 GMT37950* issuer: CN=minica root ca 42170337951* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437952* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437953* subjectAltName: "test.foo" matches cert's "test.foo"37954* OpenSSL verify result: 1337955* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37956* closing connection #037957curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37958More details here: https://curl.se/docs/sslcerts.html3795937960curl failed to verify the legitimacy of the server and therefore could not37961establish a secure connection to it. To learn more about this situation and37962how to fix it, please visit the webpage mentioned above.37963* Host test.foo:443 was resolved.37964* IPv6: 2001:db8:1::337965* IPv4: 192.168.1.337966* Trying [2001:db8:1::3]:443...37967* ALPN: curl offers h2,http/1.137968} [5 bytes data]37969* TLSv1.3 (OUT), TLS handshake, Client hello (1):37970} [1552 bytes data]37971* SSL Trust Anchors:37972* OpenSSL default paths (fallback)37973{ [5 bytes data]37974* TLSv1.3 (IN), TLS handshake, Server hello (2):37975{ [1210 bytes data]37976* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37977{ [1 bytes data]37978* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37979{ [19 bytes data]37980* TLSv1.3 (IN), TLS handshake, Certificate (11):37981{ [1009 bytes data]37982* TLSv1.3 (IN), TLS handshake, CERT verify (15):37983{ [111 bytes data]37984* TLSv1.3 (IN), TLS handshake, Finished (20):37985{ [52 bytes data]37986* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37987} [1 bytes data]37988* TLSv1.3 (OUT), TLS handshake, Finished (20):37989} [52 bytes data]37990* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37991* ALPN: server accepted h237992* Server certificate:37993* subject: CN=test.foo37994* start date: Sep 19 05:17:38 2026 GMT37995* expire date: Oct 19 05:17:38 2028 GMT37996* issuer: CN=minica root ca 42170337997* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437998* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437999* subjectAltName: "test.foo" matches cert's "test.foo"38000* OpenSSL verify result: 1338001* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38002* closing connection #038003curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38004More details here: https://curl.se/docs/sslcerts.html3800538006curl failed to verify the legitimacy of the server and therefore could not38007establish a secure connection to it. To learn more about this situation and38008how to fix it, please visit the webpage mentioned above.38009* Host test.foo:443 was resolved.38010* IPv6: 2001:db8:1::338011* IPv4: 192.168.1.338012* Trying [2001:db8:1::3]:443...38013* ALPN: curl offers h2,http/1.138014} [5 bytes data]38015* TLSv1.3 (OUT), TLS handshake, Client hello (1):38016} [1552 bytes data]38017* SSL Trust Anchors:38018* OpenSSL default paths (fallback)38019{ [5 bytes data]38020* TLSv1.3 (IN), TLS handshake, Server hello (2):38021{ [1210 bytes data]38022* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38023{ [1 bytes data]38024* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38025{ [19 bytes data]38026* TLSv1.3 (IN), TLS handshake, Certificate (11):38027{ [1009 bytes data]38028* TLSv1.3 (IN), TLS handshake, CERT verify (15):38029{ [112 bytes data]38030* TLSv1.3 (IN), TLS handshake, Finished (20):38031{ [52 bytes data]38032* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38033} [1 bytes data]38034* TLSv1.3 (OUT), TLS handshake, Finished (20):38035} [52 bytes data]38036* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38037* ALPN: server accepted h238038* Server certificate:38039* subject: CN=test.foo38040* start date: Sep 19 05:17:38 2026 GMT38041* expire date: Oct 19 05:17:38 2028 GMT38042* issuer: CN=minica root ca 42170338043* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438044* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438045* subjectAltName: "test.foo" matches cert's "test.foo"38046* OpenSSL verify result: 1338047* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38048* closing connection #038049curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38050More details here: https://curl.se/docs/sslcerts.html3805138052curl failed to verify the legitimacy of the server and therefore could not38053establish a secure connection to it. To learn more about this situation and38054how to fix it, please visit the webpage mentioned above.38055* Host test.foo:443 was resolved.38056* IPv6: 2001:db8:1::338057* IPv4: 192.168.1.338058* Trying [2001:db8:1::3]:443...38059* ALPN: curl offers h2,http/1.138060} [5 bytes data]38061* TLSv1.3 (OUT), TLS handshake, Client hello (1):38062} [1552 bytes data]38063* SSL Trust Anchors:38064* OpenSSL default paths (fallback)38065{ [5 bytes data]38066* TLSv1.3 (IN), TLS handshake, Server hello (2):38067{ [1210 bytes data]38068* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38069{ [1 bytes data]38070* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38071{ [19 bytes data]38072* TLSv1.3 (IN), TLS handshake, Certificate (11):38073{ [1009 bytes data]38074* TLSv1.3 (IN), TLS handshake, CERT verify (15):38075{ [112 bytes data]38076* TLSv1.3 (IN), TLS handshake, Finished (20):38077{ [52 bytes data]38078* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38079} [1 bytes data]38080* TLSv1.3 (OUT), TLS handshake, Finished (20):38081} [52 bytes data]38082* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38083* ALPN: server accepted h238084* Server certificate:38085* subject: CN=test.foo38086* start date: Sep 19 05:17:38 2026 GMT38087* expire date: Oct 19 05:17:38 2028 GMT38088* issuer: CN=minica root ca 42170338089* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438090* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438091* subjectAltName: "test.foo" matches cert's "test.foo"38092* OpenSSL verify result: 1338093* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38094* closing connection #038095curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38096More details here: https://curl.se/docs/sslcerts.html3809738098curl failed to verify the legitimacy of the server and therefore could not38099establish a secure connection to it. To learn more about this situation and38100how to fix it, please visit the webpage mentioned above.38101* Host test.foo:443 was resolved.38102* IPv6: 2001:db8:1::338103* IPv4: 192.168.1.338104* Trying [2001:db8:1::3]:443...38105* ALPN: curl offers h2,http/1.138106} [5 bytes data]38107* TLSv1.3 (OUT), TLS handshake, Client hello (1):38108} [1552 bytes data]38109* SSL Trust Anchors:38110* OpenSSL default paths (fallback)38111{ [5 bytes data]38112* TLSv1.3 (IN), TLS handshake, Server hello (2):38113{ [1210 bytes data]38114* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38115{ [1 bytes data]38116* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38117{ [19 bytes data]38118* TLSv1.3 (IN), TLS handshake, Certificate (11):38119{ [1009 bytes data]38120* TLSv1.3 (IN), TLS handshake, CERT verify (15):38121{ [111 bytes data]38122* TLSv1.3 (IN), TLS handshake, Finished (20):38123{ [52 bytes data]38124* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38125} [1 bytes data]38126* TLSv1.3 (OUT), TLS handshake, Finished (20):38127} [52 bytes data]38128* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38129* ALPN: server accepted h238130* Server certificate:38131* subject: CN=test.foo38132* start date: Sep 19 05:17:38 2026 GMT38133* expire date: Oct 19 05:17:38 2028 GMT38134* issuer: CN=minica root ca 42170338135* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438136* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438137* subjectAltName: "test.foo" matches cert's "test.foo"38138* OpenSSL verify result: 1338139* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38140* closing connection #038141curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38142More details here: https://curl.se/docs/sslcerts.html3814338144curl failed to verify the legitimacy of the server and therefore could not38145establish a secure connection to it. To learn more about this situation and38146how to fix it, please visit the webpage mentioned above.38147* Host test.foo:443 was resolved.38148* IPv6: 2001:db8:1::338149* IPv4: 192.168.1.338150* Trying [2001:db8:1::3]:443...38151* ALPN: curl offers h2,http/1.138152} [5 bytes data]38153* TLSv1.3 (OUT), TLS handshake, Client hello (1):38154} [1552 bytes data]38155* SSL Trust Anchors:38156* OpenSSL default paths (fallback)38157{ [5 bytes data]38158* TLSv1.3 (IN), TLS handshake, Server hello (2):38159{ [1210 bytes data]38160* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38161{ [1 bytes data]38162* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38163{ [19 bytes data]38164* TLSv1.3 (IN), TLS handshake, Certificate (11):38165{ [1009 bytes data]38166* TLSv1.3 (IN), TLS handshake, CERT verify (15):38167{ [110 bytes data]38168* TLSv1.3 (IN), TLS handshake, Finished (20):38169{ [52 bytes data]38170* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38171} [1 bytes data]38172* TLSv1.3 (OUT), TLS handshake, Finished (20):38173} [52 bytes data]38174* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38175* ALPN: server accepted h238176* Server certificate:38177* subject: CN=test.foo38178* start date: Sep 19 05:17:38 2026 GMT38179* expire date: Oct 19 05:17:38 2028 GMT38180* issuer: CN=minica root ca 42170338181* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438182* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438183* subjectAltName: "test.foo" matches cert's "test.foo"38184* OpenSSL verify result: 1338185* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38186* closing connection #038187curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38188More details here: https://curl.se/docs/sslcerts.html3818938190curl failed to verify the legitimacy of the server and therefore could not38191establish a secure connection to it. To learn more about this situation and38192how to fix it, please visit the webpage mentioned above.38193* Host test.foo:443 was resolved.38194* IPv6: 2001:db8:1::338195* IPv4: 192.168.1.338196* Trying [2001:db8:1::3]:443...38197* ALPN: curl offers h2,http/1.138198} [5 bytes data]38199* TLSv1.3 (OUT), TLS handshake, Client hello (1):38200} [1552 bytes data]38201* SSL Trust Anchors:38202* OpenSSL default paths (fallback)38203{ [5 bytes data]38204* TLSv1.3 (IN), TLS handshake, Server hello (2):38205{ [1210 bytes data]38206* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38207{ [1 bytes data]38208* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38209{ [19 bytes data]38210* TLSv1.3 (IN), TLS handshake, Certificate (11):38211{ [1009 bytes data]38212* TLSv1.3 (IN), TLS handshake, CERT verify (15):38213{ [111 bytes data]38214* TLSv1.3 (IN), TLS handshake, Finished (20):38215{ [52 bytes data]38216* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38217} [1 bytes data]38218* TLSv1.3 (OUT), TLS handshake, Finished (20):38219} [52 bytes data]38220* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38221* ALPN: server accepted h238222* Server certificate:38223* subject: CN=test.foo38224* start date: Sep 19 05:17:38 2026 GMT38225* expire date: Oct 19 05:17:38 2028 GMT38226* issuer: CN=minica root ca 42170338227* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438228* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438229* subjectAltName: "test.foo" matches cert's "test.foo"38230* OpenSSL verify result: 1338231* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38232* closing connection #038233curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38234More details here: https://curl.se/docs/sslcerts.html3823538236curl failed to verify the legitimacy of the server and therefore could not38237establish a secure connection to it. To learn more about this situation and38238how to fix it, please visit the webpage mentioned above.38239* Host test.foo:443 was resolved.38240* IPv6: 2001:db8:1::338241* IPv4: 192.168.1.338242* Trying [2001:db8:1::3]:443...38243* ALPN: curl offers h2,http/1.138244} [5 bytes data]38245* TLSv1.3 (OUT), TLS handshake, Client hello (1):38246} [1552 bytes data]38247* SSL Trust Anchors:38248* OpenSSL default paths (fallback)38249{ [5 bytes data]38250* TLSv1.3 (IN), TLS handshake, Server hello (2):38251{ [1210 bytes data]38252* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38253{ [1 bytes data]38254* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38255{ [19 bytes data]38256* TLSv1.3 (IN), TLS handshake, Certificate (11):38257{ [1009 bytes data]38258* TLSv1.3 (IN), TLS handshake, CERT verify (15):38259{ [111 bytes data]38260* TLSv1.3 (IN), TLS handshake, Finished (20):38261{ [52 bytes data]38262* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38263} [1 bytes data]38264* TLSv1.3 (OUT), TLS handshake, Finished (20):38265} [52 bytes data]38266* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38267* ALPN: server accepted h238268* Server certificate:38269* subject: CN=test.foo38270* start date: Sep 19 05:17:38 2026 GMT38271* expire date: Oct 19 05:17:38 2028 GMT38272* issuer: CN=minica root ca 42170338273* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438274* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438275* subjectAltName: "test.foo" matches cert's "test.foo"38276* OpenSSL verify result: 1338277* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38278* closing connection #038279curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38280More details here: https://curl.se/docs/sslcerts.html3828138282curl failed to verify the legitimacy of the server and therefore could not38283establish a secure connection to it. To learn more about this situation and38284how to fix it, please visit the webpage mentioned above.38285* Trying [2001:db8:1::3]:443...38286* Host test.foo:443 was resolved.38287* IPv6: 2001:db8:1::338288* IPv4: 192.168.1.338289* ALPN: curl offers h2,http/1.138290} [5 bytes data]38291* TLSv1.3 (OUT), TLS handshake, Client hello (1):38292} [1552 bytes data]38293* SSL Trust Anchors:38294* OpenSSL default paths (fallback)38295{ [5 bytes data]38296* TLSv1.3 (IN), TLS handshake, Server hello (2):38297{ [1210 bytes data]38298* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38299{ [1 bytes data]38300* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38301{ [19 bytes data]38302* TLSv1.3 (IN), TLS handshake, Certificate (11):38303{ [1009 bytes data]38304* TLSv1.3 (IN), TLS handshake, CERT verify (15):38305{ [112 bytes data]38306* TLSv1.3 (IN), TLS handshake, Finished (20):38307{ [52 bytes data]38308* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38309} [1 bytes data]38310* TLSv1.3 (OUT), TLS handshake, Finished (20):38311} [52 bytes data]38312* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38313* ALPN: server accepted h238314* Server certificate:38315* subject: CN=test.foo38316* start date: Sep 19 05:17:38 2026 GMT38317* expire date: Oct 19 05:17:38 2028 GMT38318* issuer: CN=minica root ca 42170338319* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438320* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438321* subjectAltName: "test.foo" matches cert's "test.foo"38322* OpenSSL verify result: 1338323* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38324* closing connection #038325curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38326More details here: https://curl.se/docs/sslcerts.html3832738328curl failed to verify the legitimacy of the server and therefore could not38329establish a secure connection to it. To learn more about this situation and38330how to fix it, please visit the webpage mentioned above.38331* Host test.foo:443 was resolved.38332* IPv6: 2001:db8:1::338333* IPv4: 192.168.1.338334* Trying [2001:db8:1::3]:443...38335* ALPN: curl offers h2,http/1.138336} [5 bytes data]38337* TLSv1.3 (OUT), TLS handshake, Client hello (1):38338} [1552 bytes data]38339* SSL Trust Anchors:38340* OpenSSL default paths (fallback)38341{ [5 bytes data]38342* TLSv1.3 (IN), TLS handshake, Server hello (2):38343{ [1210 bytes data]38344* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38345{ [1 bytes data]38346* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38347{ [19 bytes data]38348* TLSv1.3 (IN), TLS handshake, Certificate (11):38349{ [1009 bytes data]38350* TLSv1.3 (IN), TLS handshake, CERT verify (15):38351{ [111 bytes data]38352* TLSv1.3 (IN), TLS handshake, Finished (20):38353{ [52 bytes data]38354* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38355} [1 bytes data]38356* TLSv1.3 (OUT), TLS handshake, Finished (20):38357} [52 bytes data]38358* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38359* ALPN: server accepted h238360* Server certificate:38361* subject: CN=test.foo38362* start date: Sep 19 05:17:38 2026 GMT38363* expire date: Oct 19 05:17:38 2028 GMT38364* issuer: CN=minica root ca 42170338365* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438366* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438367* subjectAltName: "test.foo" matches cert's "test.foo"38368* OpenSSL verify result: 1338369* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38370* closing connection #038371curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38372More details here: https://curl.se/docs/sslcerts.html3837338374curl failed to verify the legitimacy of the server and therefore could not38375establish a secure connection to it. To learn more about this situation and38376how to fix it, please visit the webpage mentioned above.38377* Host test.foo:443 was resolved.38378* IPv6: 2001:db8:1::338379* IPv4: 192.168.1.338380* Trying [2001:db8:1::3]:443...38381* ALPN: curl offers h2,http/1.138382} [5 bytes data]38383* TLSv1.3 (OUT), TLS handshake, Client hello (1):38384} [1552 bytes data]38385* SSL Trust Anchors:38386* OpenSSL default paths (fallback)38387{ [5 bytes data]38388* TLSv1.3 (IN), TLS handshake, Server hello (2):38389{ [1210 bytes data]38390* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38391{ [1 bytes data]38392* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38393{ [19 bytes data]38394* TLSv1.3 (IN), TLS handshake, Certificate (11):38395{ [1009 bytes data]38396* TLSv1.3 (IN), TLS handshake, CERT verify (15):38397{ [111 bytes data]38398* TLSv1.3 (IN), TLS handshake, Finished (20):38399{ [52 bytes data]38400* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38401} [1 bytes data]38402* TLSv1.3 (OUT), TLS handshake, Finished (20):38403} [52 bytes data]38404* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38405* ALPN: server accepted h238406* Server certificate:38407* subject: CN=test.foo38408* start date: Sep 19 05:17:38 2026 GMT38409* expire date: Oct 19 05:17:38 2028 GMT38410* issuer: CN=minica root ca 42170338411* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438412* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438413* subjectAltName: "test.foo" matches cert's "test.foo"38414* OpenSSL verify result: 1338415* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38416* closing connection #038417curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38418More details here: https://curl.se/docs/sslcerts.html3841938420curl failed to verify the legitimacy of the server and therefore could not38421establish a secure connection to it. To learn more about this situation and38422how to fix it, please visit the webpage mentioned above.38423* Host test.foo:443 was resolved.38424* IPv6: 2001:db8:1::338425* IPv4: 192.168.1.338426* Trying [2001:db8:1::3]:443...38427* ALPN: curl offers h2,http/1.138428} [5 bytes data]38429* TLSv1.3 (OUT), TLS handshake, Client hello (1):38430} [1552 bytes data]38431* SSL Trust Anchors:38432* OpenSSL default paths (fallback)38433{ [5 bytes data]38434* TLSv1.3 (IN), TLS handshake, Server hello (2):38435{ [1210 bytes data]38436* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38437{ [1 bytes data]38438* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38439{ [19 bytes data]38440* TLSv1.3 (IN), TLS handshake, Certificate (11):38441{ [1009 bytes data]38442* TLSv1.3 (IN), TLS handshake, CERT verify (15):38443{ [112 bytes data]38444* TLSv1.3 (IN), TLS handshake, Finished (20):38445{ [52 bytes data]38446* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38447} [1 bytes data]38448* TLSv1.3 (OUT), TLS handshake, Finished (20):38449} [52 bytes data]38450* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38451* ALPN: server accepted h238452* Server certificate:38453* subject: CN=test.foo38454* start date: Sep 19 05:17:38 2026 GMT38455* expire date: Oct 19 05:17:38 2028 GMT38456* issuer: CN=minica root ca 42170338457* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438458* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438459* subjectAltName: "test.foo" matches cert's "test.foo"38460* OpenSSL verify result: 1338461* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38462* closing connection #038463curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38464More details here: https://curl.se/docs/sslcerts.html3846538466curl failed to verify the legitimacy of the server and therefore could not38467establish a secure connection to it. To learn more about this situation and38468how to fix it, please visit the webpage mentioned above.38469* Trying [2001:db8:1::3]:443...38470* Host test.foo:443 was resolved.38471* IPv6: 2001:db8:1::338472* IPv4: 192.168.1.338473* ALPN: curl offers h2,http/1.138474} [5 bytes data]38475* TLSv1.3 (OUT), TLS handshake, Client hello (1):38476} [1552 bytes data]38477* SSL Trust Anchors:38478* OpenSSL default paths (fallback)38479{ [5 bytes data]38480* TLSv1.3 (IN), TLS handshake, Server hello (2):38481{ [1210 bytes data]38482* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38483{ [1 bytes data]38484* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38485{ [19 bytes data]38486* TLSv1.3 (IN), TLS handshake, Certificate (11):38487{ [1009 bytes data]38488* TLSv1.3 (IN), TLS handshake, CERT verify (15):38489{ [112 bytes data]38490* TLSv1.3 (IN), TLS handshake, Finished (20):38491{ [52 bytes data]38492* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38493} [1 bytes data]38494* TLSv1.3 (OUT), TLS handshake, Finished (20):38495} [52 bytes data]38496* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38497* ALPN: server accepted h238498* Server certificate:38499* subject: CN=test.foo38500* start date: Sep 19 05:17:38 2026 GMT38501* expire date: Oct 19 05:17:38 2028 GMT38502* issuer: CN=minica root ca 42170338503* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438504* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438505* subjectAltName: "test.foo" matches cert's "test.foo"38506* OpenSSL verify result: 1338507* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38508* closing connection #038509curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38510More details here: https://curl.se/docs/sslcerts.html3851138512curl failed to verify the legitimacy of the server and therefore could not38513establish a secure connection to it. To learn more about this situation and38514how to fix it, please visit the webpage mentioned above.38515* Host test.foo:443 was resolved.38516* IPv6: 2001:db8:1::338517* IPv4: 192.168.1.338518* Trying [2001:db8:1::3]:443...38519* ALPN: curl offers h2,http/1.138520} [5 bytes data]38521* TLSv1.3 (OUT), TLS handshake, Client hello (1):38522} [1552 bytes data]38523* SSL Trust Anchors:38524* OpenSSL default paths (fallback)38525{ [5 bytes data]38526* TLSv1.3 (IN), TLS handshake, Server hello (2):38527{ [1210 bytes data]38528* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38529{ [1 bytes data]38530* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38531{ [19 bytes data]38532* TLSv1.3 (IN), TLS handshake, Certificate (11):38533{ [1009 bytes data]38534* TLSv1.3 (IN), TLS handshake, CERT verify (15):38535{ [111 bytes data]38536* TLSv1.3 (IN), TLS handshake, Finished (20):38537{ [52 bytes data]38538* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38539} [1 bytes data]38540* TLSv1.3 (OUT), TLS handshake, Finished (20):38541} [52 bytes data]38542* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38543* ALPN: server accepted h238544* Server certificate:38545* subject: CN=test.foo38546* start date: Sep 19 05:17:38 2026 GMT38547* expire date: Oct 19 05:17:38 2028 GMT38548* issuer: CN=minica root ca 42170338549* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438550* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438551* subjectAltName: "test.foo" matches cert's "test.foo"38552* OpenSSL verify result: 1338553* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38554* closing connection #038555curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38556More details here: https://curl.se/docs/sslcerts.html3855738558curl failed to verify the legitimacy of the server and therefore could not38559establish a secure connection to it. To learn more about this situation and38560how to fix it, please visit the webpage mentioned above.38561* Host test.foo:443 was resolved.38562* IPv6: 2001:db8:1::338563* IPv4: 192.168.1.338564* Trying [2001:db8:1::3]:443...38565* ALPN: curl offers h2,http/1.138566} [5 bytes data]38567* TLSv1.3 (OUT), TLS handshake, Client hello (1):38568} [1552 bytes data]38569* SSL Trust Anchors:38570* OpenSSL default paths (fallback)38571{ [5 bytes data]38572* TLSv1.3 (IN), TLS handshake, Server hello (2):38573{ [1210 bytes data]38574* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38575{ [1 bytes data]38576* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38577{ [19 bytes data]38578* TLSv1.3 (IN), TLS handshake, Certificate (11):38579{ [1009 bytes data]38580* TLSv1.3 (IN), TLS handshake, CERT verify (15):38581{ [111 bytes data]38582* TLSv1.3 (IN), TLS handshake, Finished (20):38583{ [52 bytes data]38584* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38585} [1 bytes data]38586* TLSv1.3 (OUT), TLS handshake, Finished (20):38587} [52 bytes data]38588* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38589* ALPN: server accepted h238590* Server certificate:38591* subject: CN=test.foo38592* start date: Sep 19 05:17:38 2026 GMT38593* expire date: Oct 19 05:17:38 2028 GMT38594* issuer: CN=minica root ca 42170338595* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438596* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438597* subjectAltName: "test.foo" matches cert's "test.foo"38598* OpenSSL verify result: 1338599* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38600* closing connection #038601curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38602More details here: https://curl.se/docs/sslcerts.html3860338604curl failed to verify the legitimacy of the server and therefore could not38605establish a secure connection to it. To learn more about this situation and38606how to fix it, please visit the webpage mentioned above.38607* Host test.foo:443 was resolved.38608* IPv6: 2001:db8:1::338609* IPv4: 192.168.1.338610* Trying [2001:db8:1::3]:443...38611* ALPN: curl offers h2,http/1.138612} [5 bytes data]38613* TLSv1.3 (OUT), TLS handshake, Client hello (1):38614} [1552 bytes data]38615* SSL Trust Anchors:38616* OpenSSL default paths (fallback)38617{ [5 bytes data]38618* TLSv1.3 (IN), TLS handshake, Server hello (2):38619{ [1210 bytes data]38620* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38621{ [1 bytes data]38622* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38623{ [19 bytes data]38624* TLSv1.3 (IN), TLS handshake, Certificate (11):38625{ [1009 bytes data]38626* TLSv1.3 (IN), TLS handshake, CERT verify (15):38627{ [111 bytes data]38628* TLSv1.3 (IN), TLS handshake, Finished (20):38629{ [52 bytes data]38630* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38631} [1 bytes data]38632* TLSv1.3 (OUT), TLS handshake, Finished (20):38633} [52 bytes data]38634* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38635* ALPN: server accepted h238636* Server certificate:38637* subject: CN=test.foo38638* start date: Sep 19 05:17:38 2026 GMT38639* expire date: Oct 19 05:17:38 2028 GMT38640* issuer: CN=minica root ca 42170338641* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438642* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438643* subjectAltName: "test.foo" matches cert's "test.foo"38644* OpenSSL verify result: 1338645* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38646* closing connection #038647curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38648More details here: https://curl.se/docs/sslcerts.html3864938650curl failed to verify the legitimacy of the server and therefore could not38651establish a secure connection to it. To learn more about this situation and38652how to fix it, please visit the webpage mentioned above.38653* Host test.foo:443 was resolved.38654* IPv6: 2001:db8:1::338655* IPv4: 192.168.1.338656* Trying [2001:db8:1::3]:443...38657* ALPN: curl offers h2,http/1.138658} [5 bytes data]38659* TLSv1.3 (OUT), TLS handshake, Client hello (1):38660} [1552 bytes data]38661* SSL Trust Anchors:38662* OpenSSL default paths (fallback)38663{ [5 bytes data]38664* TLSv1.3 (IN), TLS handshake, Server hello (2):38665{ [1210 bytes data]38666* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38667{ [1 bytes data]38668* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38669{ [19 bytes data]38670* TLSv1.3 (IN), TLS handshake, Certificate (11):38671{ [1009 bytes data]38672* TLSv1.3 (IN), TLS handshake, CERT verify (15):38673{ [112 bytes data]38674* TLSv1.3 (IN), TLS handshake, Finished (20):38675{ [52 bytes data]38676* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38677} [1 bytes data]38678* TLSv1.3 (OUT), TLS handshake, Finished (20):38679} [52 bytes data]38680* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38681* ALPN: server accepted h238682* Server certificate:38683* subject: CN=test.foo38684* start date: Sep 19 05:17:38 2026 GMT38685* expire date: Oct 19 05:17:38 2028 GMT38686* issuer: CN=minica root ca 42170338687* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438688* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438689* subjectAltName: "test.foo" matches cert's "test.foo"38690* OpenSSL verify result: 1338691* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38692* closing connection #038693curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38694More details here: https://curl.se/docs/sslcerts.html3869538696curl failed to verify the legitimacy of the server and therefore could not38697establish a secure connection to it. To learn more about this situation and38698how to fix it, please visit the webpage mentioned above.38699* Trying [2001:db8:1::3]:443...38700* ALPN: curl offers h2,http/1.138701} [5 bytes data]38702* TLSv1.3 (OUT), TLS handshake, Client hello (1):38703} [1552 bytes data]38704* SSL Trust Anchors:38705* OpenSSL default paths (fallback)38706* Host test.foo:443 was resolved.38707* IPv6: 2001:db8:1::338708* IPv4: 192.168.1.338709{ [5 bytes data]38710* TLSv1.3 (IN), TLS handshake, Server hello (2):38711{ [1210 bytes data]38712* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38713{ [1 bytes data]38714* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38715{ [19 bytes data]38716* TLSv1.3 (IN), TLS handshake, Certificate (11):38717{ [1009 bytes data]38718* TLSv1.3 (IN), TLS handshake, CERT verify (15):38719{ [111 bytes data]38720* TLSv1.3 (IN), TLS handshake, Finished (20):38721{ [52 bytes data]38722* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38723} [1 bytes data]38724* TLSv1.3 (OUT), TLS handshake, Finished (20):38725} [52 bytes data]38726* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38727* ALPN: server accepted h238728* Server certificate:38729* subject: CN=test.foo38730* start date: Sep 19 05:17:38 2026 GMT38731* expire date: Oct 19 05:17:38 2028 GMT38732* issuer: CN=minica root ca 42170338733* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438734* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438735* subjectAltName: "test.foo" matches cert's "test.foo"38736* OpenSSL verify result: 1338737* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38738* closing connection #038739curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38740More details here: https://curl.se/docs/sslcerts.html3874138742curl failed to verify the legitimacy of the server and therefore could not38743establish a secure connection to it. To learn more about this situation and38744how to fix it, please visit the webpage mentioned above.38745* Host test.foo:443 was resolved.38746* IPv6: 2001:db8:1::338747* IPv4: 192.168.1.338748* Trying [2001:db8:1::3]:443...38749* ALPN: curl offers h2,http/1.138750} [5 bytes data]38751* TLSv1.3 (OUT), TLS handshake, Client hello (1):38752} [1552 bytes data]38753* SSL Trust Anchors:38754* OpenSSL default paths (fallback)38755{ [5 bytes data]38756* TLSv1.3 (IN), TLS handshake, Server hello (2):38757{ [1210 bytes data]38758* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38759{ [1 bytes data]38760* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38761{ [19 bytes data]38762* TLSv1.3 (IN), TLS handshake, Certificate (11):38763{ [1009 bytes data]38764* TLSv1.3 (IN), TLS handshake, CERT verify (15):38765{ [112 bytes data]38766* TLSv1.3 (IN), TLS handshake, Finished (20):38767{ [52 bytes data]38768* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38769} [1 bytes data]38770* TLSv1.3 (OUT), TLS handshake, Finished (20):38771} [52 bytes data]38772* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38773* ALPN: server accepted h238774* Server certificate:38775* subject: CN=test.foo38776* start date: Sep 19 05:17:38 2026 GMT38777* expire date: Oct 19 05:17:38 2028 GMT38778* issuer: CN=minica root ca 42170338779* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438780* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438781* subjectAltName: "test.foo" matches cert's "test.foo"38782* OpenSSL verify result: 1338783* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38784* closing connection #038785curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38786More details here: https://curl.se/docs/sslcerts.html3878738788curl failed to verify the legitimacy of the server and therefore could not38789establish a secure connection to it. To learn more about this situation and38790how to fix it, please visit the webpage mentioned above.38791* Host test.foo:443 was resolved.38792* IPv6: 2001:db8:1::338793* IPv4: 192.168.1.338794* Trying [2001:db8:1::3]:443...38795* ALPN: curl offers h2,http/1.138796} [5 bytes data]38797* TLSv1.3 (OUT), TLS handshake, Client hello (1):38798} [1552 bytes data]38799* SSL Trust Anchors:38800* OpenSSL default paths (fallback)38801{ [5 bytes data]38802* TLSv1.3 (IN), TLS handshake, Server hello (2):38803{ [1210 bytes data]38804* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38805{ [1 bytes data]38806* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38807{ [19 bytes data]38808* TLSv1.3 (IN), TLS handshake, Certificate (11):38809{ [1009 bytes data]38810* TLSv1.3 (IN), TLS handshake, CERT verify (15):38811{ [112 bytes data]38812* TLSv1.3 (IN), TLS handshake, Finished (20):38813{ [52 bytes data]38814* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38815} [1 bytes data]38816* TLSv1.3 (OUT), TLS handshake, Finished (20):38817} [52 bytes data]38818* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38819* ALPN: server accepted h238820* Server certificate:38821* subject: CN=test.foo38822* start date: Sep 19 05:17:38 2026 GMT38823* expire date: Oct 19 05:17:38 2028 GMT38824* issuer: CN=minica root ca 42170338825* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438826* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438827* subjectAltName: "test.foo" matches cert's "test.foo"38828* OpenSSL verify result: 1338829* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38830* closing connection #038831curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38832More details here: https://curl.se/docs/sslcerts.html3883338834curl failed to verify the legitimacy of the server and therefore could not38835establish a secure connection to it. To learn more about this situation and38836how to fix it, please visit the webpage mentioned above.38837* Host test.foo:443 was resolved.38838* IPv6: 2001:db8:1::338839* IPv4: 192.168.1.338840* Trying [2001:db8:1::3]:443...38841* ALPN: curl offers h2,http/1.138842} [5 bytes data]38843* TLSv1.3 (OUT), TLS handshake, Client hello (1):38844} [1552 bytes data]38845* SSL Trust Anchors:38846* OpenSSL default paths (fallback)38847{ [5 bytes data]38848* TLSv1.3 (IN), TLS handshake, Server hello (2):38849{ [1210 bytes data]38850* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38851{ [1 bytes data]38852* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38853{ [19 bytes data]38854* TLSv1.3 (IN), TLS handshake, Certificate (11):38855{ [1009 bytes data]38856* TLSv1.3 (IN), TLS handshake, CERT verify (15):38857{ [112 bytes data]38858* TLSv1.3 (IN), TLS handshake, Finished (20):38859{ [52 bytes data]38860* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38861} [1 bytes data]38862* TLSv1.3 (OUT), TLS handshake, Finished (20):38863} [52 bytes data]38864* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38865* ALPN: server accepted h238866* Server certificate:38867* subject: CN=test.foo38868* start date: Sep 19 05:17:38 2026 GMT38869* expire date: Oct 19 05:17:38 2028 GMT38870* issuer: CN=minica root ca 42170338871* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438872* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438873* subjectAltName: "test.foo" matches cert's "test.foo"38874* OpenSSL verify result: 1338875* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38876* closing connection #038877curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38878More details here: https://curl.se/docs/sslcerts.html3887938880curl failed to verify the legitimacy of the server and therefore could not38881establish a secure connection to it. To learn more about this situation and38882how to fix it, please visit the webpage mentioned above.38883* Host test.foo:443 was resolved.38884* IPv6: 2001:db8:1::338885* IPv4: 192.168.1.338886* Trying [2001:db8:1::3]:443...38887* ALPN: curl offers h2,http/1.138888} [5 bytes data]38889* TLSv1.3 (OUT), TLS handshake, Client hello (1):38890} [1552 bytes data]38891* SSL Trust Anchors:38892* OpenSSL default paths (fallback)38893{ [5 bytes data]38894* TLSv1.3 (IN), TLS handshake, Server hello (2):38895{ [1210 bytes data]38896* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38897{ [1 bytes data]38898* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38899{ [19 bytes data]38900* TLSv1.3 (IN), TLS handshake, Certificate (11):38901{ [1009 bytes data]38902* TLSv1.3 (IN), TLS handshake, CERT verify (15):38903{ [111 bytes data]38904* TLSv1.3 (IN), TLS handshake, Finished (20):38905{ [52 bytes data]38906* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38907} [1 bytes data]38908* TLSv1.3 (OUT), TLS handshake, Finished (20):38909} [52 bytes data]38910* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38911* ALPN: server accepted h238912* Server certificate:38913* subject: CN=test.foo38914* start date: Sep 19 05:17:38 2026 GMT38915* expire date: Oct 19 05:17:38 2028 GMT38916* issuer: CN=minica root ca 42170338917* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438918* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438919* subjectAltName: "test.foo" matches cert's "test.foo"38920* OpenSSL verify result: 1338921* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38922* closing connection #038923curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38924More details here: https://curl.se/docs/sslcerts.html3892538926curl failed to verify the legitimacy of the server and therefore could not38927establish a secure connection to it. To learn more about this situation and38928how to fix it, please visit the webpage mentioned above.38929* Host test.foo:443 was resolved.38930* IPv6: 2001:db8:1::338931* IPv4: 192.168.1.338932* Trying [2001:db8:1::3]:443...38933* ALPN: curl offers h2,http/1.138934} [5 bytes data]38935* TLSv1.3 (OUT), TLS handshake, Client hello (1):38936} [1552 bytes data]38937* SSL Trust Anchors:38938* OpenSSL default paths (fallback)38939{ [5 bytes data]38940* TLSv1.3 (IN), TLS handshake, Server hello (2):38941{ [1210 bytes data]38942* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38943{ [1 bytes data]38944* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38945{ [19 bytes data]38946* TLSv1.3 (IN), TLS handshake, Certificate (11):38947{ [1009 bytes data]38948* TLSv1.3 (IN), TLS handshake, CERT verify (15):38949{ [112 bytes data]38950* TLSv1.3 (IN), TLS handshake, Finished (20):38951{ [52 bytes data]38952* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38953} [1 bytes data]38954* TLSv1.3 (OUT), TLS handshake, Finished (20):38955} [52 bytes data]38956* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38957* ALPN: server accepted h238958* Server certificate:38959* subject: CN=test.foo38960* start date: Sep 19 05:17:38 2026 GMT38961* expire date: Oct 19 05:17:38 2028 GMT38962* issuer: CN=minica root ca 42170338963* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438964* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438965* subjectAltName: "test.foo" matches cert's "test.foo"38966* OpenSSL verify result: 1338967* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38968* closing connection #038969curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38970More details here: https://curl.se/docs/sslcerts.html3897138972curl failed to verify the legitimacy of the server and therefore could not38973establish a secure connection to it. To learn more about this situation and38974how to fix it, please visit the webpage mentioned above.38975* Trying [2001:db8:1::3]:443...38976* Host test.foo:443 was resolved.38977* IPv6: 2001:db8:1::338978* IPv4: 192.168.1.338979* ALPN: curl offers h2,http/1.138980} [5 bytes data]38981* TLSv1.3 (OUT), TLS handshake, Client hello (1):38982} [1552 bytes data]38983* SSL Trust Anchors:38984* OpenSSL default paths (fallback)38985{ [5 bytes data]38986* TLSv1.3 (IN), TLS handshake, Server hello (2):38987{ [1210 bytes data]38988* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38989{ [1 bytes data]38990* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38991{ [19 bytes data]38992* TLSv1.3 (IN), TLS handshake, Certificate (11):38993{ [1009 bytes data]38994* TLSv1.3 (IN), TLS handshake, CERT verify (15):38995{ [112 bytes data]38996* TLSv1.3 (IN), TLS handshake, Finished (20):38997{ [52 bytes data]38998* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38999} [1 bytes data]39000* TLSv1.3 (OUT), TLS handshake, Finished (20):39001} [52 bytes data]39002* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39003* ALPN: server accepted h239004* Server certificate:39005* subject: CN=test.foo39006* start date: Sep 19 05:17:38 2026 GMT39007* expire date: Oct 19 05:17:38 2028 GMT39008* issuer: CN=minica root ca 42170339009* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439010* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439011* subjectAltName: "test.foo" matches cert's "test.foo"39012* OpenSSL verify result: 1339013* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39014* closing connection #039015curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39016More details here: https://curl.se/docs/sslcerts.html3901739018curl failed to verify the legitimacy of the server and therefore could not39019establish a secure connection to it. To learn more about this situation and39020how to fix it, please visit the webpage mentioned above.39021* Host test.foo:443 was resolved.39022* IPv6: 2001:db8:1::339023* IPv4: 192.168.1.339024* Trying [2001:db8:1::3]:443...39025* ALPN: curl offers h2,http/1.139026} [5 bytes data]39027* TLSv1.3 (OUT), TLS handshake, Client hello (1):39028} [1552 bytes data]39029* SSL Trust Anchors:39030* OpenSSL default paths (fallback)39031{ [5 bytes data]39032* TLSv1.3 (IN), TLS handshake, Server hello (2):39033{ [1210 bytes data]39034* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39035{ [1 bytes data]39036* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39037{ [19 bytes data]39038* TLSv1.3 (IN), TLS handshake, Certificate (11):39039{ [1009 bytes data]39040* TLSv1.3 (IN), TLS handshake, CERT verify (15):39041{ [111 bytes data]39042* TLSv1.3 (IN), TLS handshake, Finished (20):39043{ [52 bytes data]39044* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39045} [1 bytes data]39046* TLSv1.3 (OUT), TLS handshake, Finished (20):39047} [52 bytes data]39048* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39049* ALPN: server accepted h239050* Server certificate:39051* subject: CN=test.foo39052* start date: Sep 19 05:17:38 2026 GMT39053* expire date: Oct 19 05:17:38 2028 GMT39054* issuer: CN=minica root ca 42170339055* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439056* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439057* subjectAltName: "test.foo" matches cert's "test.foo"39058* OpenSSL verify result: 1339059* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39060* closing connection #039061curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39062More details here: https://curl.se/docs/sslcerts.html3906339064curl failed to verify the legitimacy of the server and therefore could not39065establish a secure connection to it. To learn more about this situation and39066how to fix it, please visit the webpage mentioned above.39067* Host test.foo:443 was resolved.39068* IPv6: 2001:db8:1::339069* IPv4: 192.168.1.339070* Trying [2001:db8:1::3]:443...39071* ALPN: curl offers h2,http/1.139072} [5 bytes data]39073* TLSv1.3 (OUT), TLS handshake, Client hello (1):39074} [1552 bytes data]39075* SSL Trust Anchors:39076* OpenSSL default paths (fallback)39077{ [5 bytes data]39078* TLSv1.3 (IN), TLS handshake, Server hello (2):39079{ [1210 bytes data]39080* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39081{ [1 bytes data]39082* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39083{ [19 bytes data]39084* TLSv1.3 (IN), TLS handshake, Certificate (11):39085{ [1009 bytes data]39086* TLSv1.3 (IN), TLS handshake, CERT verify (15):39087{ [112 bytes data]39088* TLSv1.3 (IN), TLS handshake, Finished (20):39089{ [52 bytes data]39090* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39091} [1 bytes data]39092* TLSv1.3 (OUT), TLS handshake, Finished (20):39093} [52 bytes data]39094* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39095* ALPN: server accepted h239096* Server certificate:39097* subject: CN=test.foo39098* start date: Sep 19 05:17:38 2026 GMT39099* expire date: Oct 19 05:17:38 2028 GMT39100* issuer: CN=minica root ca 42170339101* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439102* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439103* subjectAltName: "test.foo" matches cert's "test.foo"39104* OpenSSL verify result: 1339105* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39106* closing connection #039107curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39108More details here: https://curl.se/docs/sslcerts.html3910939110curl failed to verify the legitimacy of the server and therefore could not39111establish a secure connection to it. To learn more about this situation and39112how to fix it, please visit the webpage mentioned above.39113* Trying [2001:db8:1::3]:443...39114* Host test.foo:443 was resolved.39115* IPv6: 2001:db8:1::339116* IPv4: 192.168.1.339117* ALPN: curl offers h2,http/1.139118} [5 bytes data]39119* TLSv1.3 (OUT), TLS handshake, Client hello (1):39120} [1552 bytes data]39121* SSL Trust Anchors:39122* OpenSSL default paths (fallback)39123{ [5 bytes data]39124* TLSv1.3 (IN), TLS handshake, Server hello (2):39125{ [1210 bytes data]39126* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39127{ [1 bytes data]39128* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39129{ [19 bytes data]39130* TLSv1.3 (IN), TLS handshake, Certificate (11):39131{ [1009 bytes data]39132* TLSv1.3 (IN), TLS handshake, CERT verify (15):39133{ [111 bytes data]39134* TLSv1.3 (IN), TLS handshake, Finished (20):39135{ [52 bytes data]39136* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39137} [1 bytes data]39138* TLSv1.3 (OUT), TLS handshake, Finished (20):39139} [52 bytes data]39140* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39141* ALPN: server accepted h239142* Server certificate:39143* subject: CN=test.foo39144* start date: Sep 19 05:17:38 2026 GMT39145* expire date: Oct 19 05:17:38 2028 GMT39146* issuer: CN=minica root ca 42170339147* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439148* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439149* subjectAltName: "test.foo" matches cert's "test.foo"39150* OpenSSL verify result: 1339151* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39152* closing connection #039153curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39154More details here: https://curl.se/docs/sslcerts.html3915539156curl failed to verify the legitimacy of the server and therefore could not39157establish a secure connection to it. To learn more about this situation and39158how to fix it, please visit the webpage mentioned above.39159* Trying [2001:db8:1::3]:443...39160* ALPN: curl offers h2,http/1.139161} [5 bytes data]39162* TLSv1.3 (OUT), TLS handshake, Client hello (1):39163} [1552 bytes data]39164* SSL Trust Anchors:39165* OpenSSL default paths (fallback)39166* Host test.foo:443 was resolved.39167* IPv6: 2001:db8:1::339168* IPv4: 192.168.1.339169{ [5 bytes data]39170* TLSv1.3 (IN), TLS handshake, Server hello (2):39171{ [1210 bytes data]39172* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39173{ [1 bytes data]39174* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39175{ [19 bytes data]39176* TLSv1.3 (IN), TLS handshake, Certificate (11):39177{ [1009 bytes data]39178* TLSv1.3 (IN), TLS handshake, CERT verify (15):39179{ [110 bytes data]39180* TLSv1.3 (IN), TLS handshake, Finished (20):39181{ [52 bytes data]39182* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39183} [1 bytes data]39184* TLSv1.3 (OUT), TLS handshake, Finished (20):39185} [52 bytes data]39186* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39187* ALPN: server accepted h239188* Server certificate:39189* subject: CN=test.foo39190* start date: Sep 19 05:17:38 2026 GMT39191* expire date: Oct 19 05:17:38 2028 GMT39192* issuer: CN=minica root ca 42170339193* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439194* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439195* subjectAltName: "test.foo" matches cert's "test.foo"39196* OpenSSL verify result: 1339197* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39198* closing connection #039199curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39200More details here: https://curl.se/docs/sslcerts.html3920139202curl failed to verify the legitimacy of the server and therefore could not39203establish a secure connection to it. To learn more about this situation and39204how to fix it, please visit the webpage mentioned above.39205* Host test.foo:443 was resolved.39206* IPv6: 2001:db8:1::339207* IPv4: 192.168.1.339208* Trying [2001:db8:1::3]:443...39209* ALPN: curl offers h2,http/1.139210} [5 bytes data]39211* TLSv1.3 (OUT), TLS handshake, Client hello (1):39212} [1552 bytes data]39213* SSL Trust Anchors:39214* OpenSSL default paths (fallback)39215{ [5 bytes data]39216* TLSv1.3 (IN), TLS handshake, Server hello (2):39217{ [1210 bytes data]39218* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39219{ [1 bytes data]39220* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39221{ [19 bytes data]39222* TLSv1.3 (IN), TLS handshake, Certificate (11):39223{ [1009 bytes data]39224* TLSv1.3 (IN), TLS handshake, CERT verify (15):39225{ [111 bytes data]39226* TLSv1.3 (IN), TLS handshake, Finished (20):39227{ [52 bytes data]39228* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39229} [1 bytes data]39230* TLSv1.3 (OUT), TLS handshake, Finished (20):39231} [52 bytes data]39232* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39233* ALPN: server accepted h239234* Server certificate:39235* subject: CN=test.foo39236* start date: Sep 19 05:17:38 2026 GMT39237* expire date: Oct 19 05:17:38 2028 GMT39238* issuer: CN=minica root ca 42170339239* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439240* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439241* subjectAltName: "test.foo" matches cert's "test.foo"39242* OpenSSL verify result: 1339243* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39244* closing connection #039245curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39246More details here: https://curl.se/docs/sslcerts.html3924739248curl failed to verify the legitimacy of the server and therefore could not39249establish a secure connection to it. To learn more about this situation and39250how to fix it, please visit the webpage mentioned above.39251* Host test.foo:443 was resolved.39252* IPv6: 2001:db8:1::339253* IPv4: 192.168.1.339254* Trying [2001:db8:1::3]:443...39255* ALPN: curl offers h2,http/1.139256} [5 bytes data]39257* TLSv1.3 (OUT), TLS handshake, Client hello (1):39258} [1552 bytes data]39259* SSL Trust Anchors:39260* OpenSSL default paths (fallback)39261{ [5 bytes data]39262* TLSv1.3 (IN), TLS handshake, Server hello (2):39263{ [1210 bytes data]39264* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39265{ [1 bytes data]39266* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39267{ [19 bytes data]39268* TLSv1.3 (IN), TLS handshake, Certificate (11):39269{ [1009 bytes data]39270* TLSv1.3 (IN), TLS handshake, CERT verify (15):39271{ [111 bytes data]39272* TLSv1.3 (IN), TLS handshake, Finished (20):39273{ [52 bytes data]39274* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39275} [1 bytes data]39276* TLSv1.3 (OUT), TLS handshake, Finished (20):39277} [52 bytes data]39278* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39279* ALPN: server accepted h239280* Server certificate:39281* subject: CN=test.foo39282* start date: Sep 19 05:17:38 2026 GMT39283* expire date: Oct 19 05:17:38 2028 GMT39284* issuer: CN=minica root ca 42170339285* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439286* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439287* subjectAltName: "test.foo" matches cert's "test.foo"39288* OpenSSL verify result: 1339289* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39290* closing connection #039291curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39292More details here: https://curl.se/docs/sslcerts.html3929339294curl failed to verify the legitimacy of the server and therefore could not39295establish a secure connection to it. To learn more about this situation and39296how to fix it, please visit the webpage mentioned above.39297* Trying [2001:db8:1::3]:443...39298* ALPN: curl offers h2,http/1.139299} [5 bytes data]39300* TLSv1.3 (OUT), TLS handshake, Client hello (1):39301} [1552 bytes data]39302* SSL Trust Anchors:39303* OpenSSL default paths (fallback)39304* Host test.foo:443 was resolved.39305* IPv6: 2001:db8:1::339306* IPv4: 192.168.1.339307{ [5 bytes data]39308* TLSv1.3 (IN), TLS handshake, Server hello (2):39309{ [1210 bytes data]39310* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39311{ [1 bytes data]39312* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39313{ [19 bytes data]39314* TLSv1.3 (IN), TLS handshake, Certificate (11):39315{ [1009 bytes data]39316* TLSv1.3 (IN), TLS handshake, CERT verify (15):39317{ [111 bytes data]39318* TLSv1.3 (IN), TLS handshake, Finished (20):39319{ [52 bytes data]39320* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39321} [1 bytes data]39322* TLSv1.3 (OUT), TLS handshake, Finished (20):39323} [52 bytes data]39324* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39325* ALPN: server accepted h239326* Server certificate:39327* subject: CN=test.foo39328* start date: Sep 19 05:17:38 2026 GMT39329* expire date: Oct 19 05:17:38 2028 GMT39330* issuer: CN=minica root ca 42170339331* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439332* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439333* subjectAltName: "test.foo" matches cert's "test.foo"39334* OpenSSL verify result: 1339335* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39336* closing connection #039337curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39338More details here: https://curl.se/docs/sslcerts.html3933939340curl failed to verify the legitimacy of the server and therefore could not39341establish a secure connection to it. To learn more about this situation and39342how to fix it, please visit the webpage mentioned above.39343* Host test.foo:443 was resolved.39344* IPv6: 2001:db8:1::339345* IPv4: 192.168.1.339346* Trying [2001:db8:1::3]:443...39347* ALPN: curl offers h2,http/1.139348} [5 bytes data]39349* TLSv1.3 (OUT), TLS handshake, Client hello (1):39350} [1552 bytes data]39351* SSL Trust Anchors:39352* OpenSSL default paths (fallback)39353{ [5 bytes data]39354* TLSv1.3 (IN), TLS handshake, Server hello (2):39355{ [1210 bytes data]39356* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39357{ [1 bytes data]39358* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39359{ [19 bytes data]39360* TLSv1.3 (IN), TLS handshake, Certificate (11):39361{ [1009 bytes data]39362* TLSv1.3 (IN), TLS handshake, CERT verify (15):39363{ [111 bytes data]39364* TLSv1.3 (IN), TLS handshake, Finished (20):39365{ [52 bytes data]39366* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39367} [1 bytes data]39368* TLSv1.3 (OUT), TLS handshake, Finished (20):39369} [52 bytes data]39370* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39371* ALPN: server accepted h239372* Server certificate:39373* subject: CN=test.foo39374* start date: Sep 19 05:17:38 2026 GMT39375* expire date: Oct 19 05:17:38 2028 GMT39376* issuer: CN=minica root ca 42170339377* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439378* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439379* subjectAltName: "test.foo" matches cert's "test.foo"39380* OpenSSL verify result: 1339381* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39382* closing connection #039383curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39384More details here: https://curl.se/docs/sslcerts.html3938539386curl failed to verify the legitimacy of the server and therefore could not39387establish a secure connection to it. To learn more about this situation and39388how to fix it, please visit the webpage mentioned above.39389* Host test.foo:443 was resolved.39390* IPv6: 2001:db8:1::339391* IPv4: 192.168.1.339392* Trying [2001:db8:1::3]:443...39393* ALPN: curl offers h2,http/1.139394} [5 bytes data]39395* TLSv1.3 (OUT), TLS handshake, Client hello (1):39396} [1552 bytes data]39397* SSL Trust Anchors:39398* OpenSSL default paths (fallback)39399{ [5 bytes data]39400* TLSv1.3 (IN), TLS handshake, Server hello (2):39401{ [1210 bytes data]39402* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39403{ [1 bytes data]39404* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39405{ [19 bytes data]39406* TLSv1.3 (IN), TLS handshake, Certificate (11):39407{ [1009 bytes data]39408* TLSv1.3 (IN), TLS handshake, CERT verify (15):39409{ [111 bytes data]39410* TLSv1.3 (IN), TLS handshake, Finished (20):39411{ [52 bytes data]39412* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39413} [1 bytes data]39414* TLSv1.3 (OUT), TLS handshake, Finished (20):39415} [52 bytes data]39416* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39417* ALPN: server accepted h239418* Server certificate:39419* subject: CN=test.foo39420* start date: Sep 19 05:17:38 2026 GMT39421* expire date: Oct 19 05:17:38 2028 GMT39422* issuer: CN=minica root ca 42170339423* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439424* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439425* subjectAltName: "test.foo" matches cert's "test.foo"39426* OpenSSL verify result: 1339427* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39428* closing connection #039429curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39430More details here: https://curl.se/docs/sslcerts.html3943139432curl failed to verify the legitimacy of the server and therefore could not39433establish a secure connection to it. To learn more about this situation and39434how to fix it, please visit the webpage mentioned above.39435* Host test.foo:443 was resolved.39436* IPv6: 2001:db8:1::339437* IPv4: 192.168.1.339438* Trying [2001:db8:1::3]:443...39439* ALPN: curl offers h2,http/1.139440} [5 bytes data]39441* TLSv1.3 (OUT), TLS handshake, Client hello (1):39442} [1552 bytes data]39443* SSL Trust Anchors:39444* OpenSSL default paths (fallback)39445{ [5 bytes data]39446* TLSv1.3 (IN), TLS handshake, Server hello (2):39447{ [1210 bytes data]39448* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39449{ [1 bytes data]39450* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39451{ [19 bytes data]39452* TLSv1.3 (IN), TLS handshake, Certificate (11):39453{ [1009 bytes data]39454* TLSv1.3 (IN), TLS handshake, CERT verify (15):39455{ [112 bytes data]39456* TLSv1.3 (IN), TLS handshake, Finished (20):39457{ [52 bytes data]39458* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39459} [1 bytes data]39460* TLSv1.3 (OUT), TLS handshake, Finished (20):39461} [52 bytes data]39462* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39463* ALPN: server accepted h239464* Server certificate:39465* subject: CN=test.foo39466* start date: Sep 19 05:17:38 2026 GMT39467* expire date: Oct 19 05:17:38 2028 GMT39468* issuer: CN=minica root ca 42170339469* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439470* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439471* subjectAltName: "test.foo" matches cert's "test.foo"39472* OpenSSL verify result: 1339473* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39474* closing connection #039475curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39476More details here: https://curl.se/docs/sslcerts.html3947739478curl failed to verify the legitimacy of the server and therefore could not39479establish a secure connection to it. To learn more about this situation and39480how to fix it, please visit the webpage mentioned above.39481* Host test.foo:443 was resolved.39482* IPv6: 2001:db8:1::339483* IPv4: 192.168.1.339484* Trying [2001:db8:1::3]:443...39485* ALPN: curl offers h2,http/1.139486} [5 bytes data]39487* TLSv1.3 (OUT), TLS handshake, Client hello (1):39488} [1552 bytes data]39489* SSL Trust Anchors:39490* OpenSSL default paths (fallback)39491{ [5 bytes data]39492* TLSv1.3 (IN), TLS handshake, Server hello (2):39493{ [1210 bytes data]39494* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39495{ [1 bytes data]39496* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39497{ [19 bytes data]39498* TLSv1.3 (IN), TLS handshake, Certificate (11):39499{ [1009 bytes data]39500* TLSv1.3 (IN), TLS handshake, CERT verify (15):39501{ [112 bytes data]39502* TLSv1.3 (IN), TLS handshake, Finished (20):39503{ [52 bytes data]39504* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39505} [1 bytes data]39506* TLSv1.3 (OUT), TLS handshake, Finished (20):39507} [52 bytes data]39508* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39509* ALPN: server accepted h239510* Server certificate:39511* subject: CN=test.foo39512* start date: Sep 19 05:17:38 2026 GMT39513* expire date: Oct 19 05:17:38 2028 GMT39514* issuer: CN=minica root ca 42170339515* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439516* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439517* subjectAltName: "test.foo" matches cert's "test.foo"39518* OpenSSL verify result: 1339519* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39520* closing connection #039521curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39522More details here: https://curl.se/docs/sslcerts.html3952339524curl failed to verify the legitimacy of the server and therefore could not39525establish a secure connection to it. To learn more about this situation and39526how to fix it, please visit the webpage mentioned above.39527* Host test.foo:443 was resolved.39528* IPv6: 2001:db8:1::339529* IPv4: 192.168.1.339530* Trying [2001:db8:1::3]:443...39531* ALPN: curl offers h2,http/1.139532} [5 bytes data]39533* TLSv1.3 (OUT), TLS handshake, Client hello (1):39534} [1552 bytes data]39535* SSL Trust Anchors:39536* OpenSSL default paths (fallback)39537{ [5 bytes data]39538* TLSv1.3 (IN), TLS handshake, Server hello (2):39539{ [1210 bytes data]39540* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39541{ [1 bytes data]39542* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39543{ [19 bytes data]39544* TLSv1.3 (IN), TLS handshake, Certificate (11):39545{ [1009 bytes data]39546* TLSv1.3 (IN), TLS handshake, CERT verify (15):39547{ [111 bytes data]39548* TLSv1.3 (IN), TLS handshake, Finished (20):39549{ [52 bytes data]39550* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39551} [1 bytes data]39552* TLSv1.3 (OUT), TLS handshake, Finished (20):39553} [52 bytes data]39554* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39555* ALPN: server accepted h239556* Server certificate:39557* subject: CN=test.foo39558* start date: Sep 19 05:17:38 2026 GMT39559* expire date: Oct 19 05:17:38 2028 GMT39560* issuer: CN=minica root ca 42170339561* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439562* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439563* subjectAltName: "test.foo" matches cert's "test.foo"39564* OpenSSL verify result: 1339565* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39566* closing connection #039567curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39568More details here: https://curl.se/docs/sslcerts.html3956939570curl failed to verify the legitimacy of the server and therefore could not39571establish a secure connection to it. To learn more about this situation and39572how to fix it, please visit the webpage mentioned above.39573* Host test.foo:443 was resolved.39574* IPv6: 2001:db8:1::339575* IPv4: 192.168.1.339576* Trying [2001:db8:1::3]:443...39577* ALPN: curl offers h2,http/1.139578} [5 bytes data]39579* TLSv1.3 (OUT), TLS handshake, Client hello (1):39580} [1552 bytes data]39581* SSL Trust Anchors:39582* OpenSSL default paths (fallback)39583{ [5 bytes data]39584* TLSv1.3 (IN), TLS handshake, Server hello (2):39585{ [1210 bytes data]39586* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39587{ [1 bytes data]39588* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39589{ [19 bytes data]39590* TLSv1.3 (IN), TLS handshake, Certificate (11):39591{ [1009 bytes data]39592* TLSv1.3 (IN), TLS handshake, CERT verify (15):39593{ [111 bytes data]39594* TLSv1.3 (IN), TLS handshake, Finished (20):39595{ [52 bytes data]39596* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39597} [1 bytes data]39598* TLSv1.3 (OUT), TLS handshake, Finished (20):39599} [52 bytes data]39600* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39601* ALPN: server accepted h239602* Server certificate:39603* subject: CN=test.foo39604* start date: Sep 19 05:17:38 2026 GMT39605* expire date: Oct 19 05:17:38 2028 GMT39606* issuer: CN=minica root ca 42170339607* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439608* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439609* subjectAltName: "test.foo" matches cert's "test.foo"39610* OpenSSL verify result: 1339611* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39612* closing connection #039613curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39614More details here: https://curl.se/docs/sslcerts.html3961539616curl failed to verify the legitimacy of the server and therefore could not39617establish a secure connection to it. To learn more about this situation and39618how to fix it, please visit the webpage mentioned above.39619* Host test.foo:443 was resolved.39620* IPv6: 2001:db8:1::339621* IPv4: 192.168.1.339622* Trying [2001:db8:1::3]:443...39623* ALPN: curl offers h2,http/1.139624} [5 bytes data]39625* TLSv1.3 (OUT), TLS handshake, Client hello (1):39626} [1552 bytes data]39627* SSL Trust Anchors:39628* OpenSSL default paths (fallback)39629{ [5 bytes data]39630* TLSv1.3 (IN), TLS handshake, Server hello (2):39631{ [1210 bytes data]39632* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39633{ [1 bytes data]39634* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39635{ [19 bytes data]39636* TLSv1.3 (IN), TLS handshake, Certificate (11):39637{ [1009 bytes data]39638* TLSv1.3 (IN), TLS handshake, CERT verify (15):39639{ [111 bytes data]39640* TLSv1.3 (IN), TLS handshake, Finished (20):39641{ [52 bytes data]39642* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39643} [1 bytes data]39644* TLSv1.3 (OUT), TLS handshake, Finished (20):39645} [52 bytes data]39646* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39647* ALPN: server accepted h239648* Server certificate:39649* subject: CN=test.foo39650* start date: Sep 19 05:17:38 2026 GMT39651* expire date: Oct 19 05:17:38 2028 GMT39652* issuer: CN=minica root ca 42170339653* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439654* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439655* subjectAltName: "test.foo" matches cert's "test.foo"39656* OpenSSL verify result: 1339657* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39658* closing connection #039659curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39660More details here: https://curl.se/docs/sslcerts.html3966139662curl failed to verify the legitimacy of the server and therefore could not39663establish a secure connection to it. To learn more about this situation and39664how to fix it, please visit the webpage mentioned above.39665client # [1289139.951954] client systemd[1]: Starting Cleanup of Temporary Directories...39666client # [1289140.048740] client systemd[1]: systemd-tmpfiles-clean.service: Deactivated successfully.39667client # [1289140.049153] client systemd[1]: Finished Cleanup of Temporary Directories.39668* Host test.foo:443 was resolved.39669* IPv6: 2001:db8:1::339670* IPv4: 192.168.1.339671* Trying [2001:db8:1::3]:443...39672* ALPN: curl offers h2,http/1.139673} [5 bytes data]39674* TLSv1.3 (OUT), TLS handshake, Client hello (1):39675} [1552 bytes data]39676* SSL Trust Anchors:39677* OpenSSL default paths (fallback)39678{ [5 bytes data]39679* TLSv1.3 (IN), TLS handshake, Server hello (2):39680{ [1210 bytes data]39681* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39682{ [1 bytes data]39683* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39684{ [19 bytes data]39685* TLSv1.3 (IN), TLS handshake, Certificate (11):39686{ [1009 bytes data]39687* TLSv1.3 (IN), TLS handshake, CERT verify (15):39688{ [110 bytes data]39689* TLSv1.3 (IN), TLS handshake, Finished (20):39690{ [52 bytes data]39691* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39692} [1 bytes data]39693* TLSv1.3 (OUT), TLS handshake, Finished (20):39694} [52 bytes data]39695* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39696* ALPN: server accepted h239697* Server certificate:39698* subject: CN=test.foo39699* start date: Sep 19 05:17:38 2026 GMT39700* expire date: Oct 19 05:17:38 2028 GMT39701* issuer: CN=minica root ca 42170339702* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439703* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439704* subjectAltName: "test.foo" matches cert's "test.foo"39705* OpenSSL verify result: 1339706* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39707* closing connection #039708curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39709More details here: https://curl.se/docs/sslcerts.html3971039711curl failed to verify the legitimacy of the server and therefore could not39712establish a secure connection to it. To learn more about this situation and39713how to fix it, please visit the webpage mentioned above.39714* Host test.foo:443 was resolved.39715* IPv6: 2001:db8:1::339716* IPv4: 192.168.1.339717* Trying [2001:db8:1::3]:443...39718* ALPN: curl offers h2,http/1.139719} [5 bytes data]39720* TLSv1.3 (OUT), TLS handshake, Client hello (1):39721} [1552 bytes data]39722* SSL Trust Anchors:39723* OpenSSL default paths (fallback)39724{ [5 bytes data]39725* TLSv1.3 (IN), TLS handshake, Server hello (2):39726{ [1210 bytes data]39727* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39728{ [1 bytes data]39729* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39730{ [19 bytes data]39731* TLSv1.3 (IN), TLS handshake, Certificate (11):39732{ [1009 bytes data]39733* TLSv1.3 (IN), TLS handshake, CERT verify (15):39734{ [110 bytes data]39735* TLSv1.3 (IN), TLS handshake, Finished (20):39736{ [52 bytes data]39737* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39738} [1 bytes data]39739* TLSv1.3 (OUT), TLS handshake, Finished (20):39740} [52 bytes data]39741* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39742* ALPN: server accepted h239743* Server certificate:39744* subject: CN=test.foo39745* start date: Sep 19 05:17:38 2026 GMT39746* expire date: Oct 19 05:17:38 2028 GMT39747* issuer: CN=minica root ca 42170339748* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439749* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439750* subjectAltName: "test.foo" matches cert's "test.foo"39751* OpenSSL verify result: 1339752* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39753* closing connection #039754curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39755More details here: https://curl.se/docs/sslcerts.html3975639757curl failed to verify the legitimacy of the server and therefore could not39758establish a secure connection to it. To learn more about this situation and39759how to fix it, please visit the webpage mentioned above.39760* Host test.foo:443 was resolved.39761* IPv6: 2001:db8:1::339762* IPv4: 192.168.1.339763* Trying [2001:db8:1::3]:443...39764* ALPN: curl offers h2,http/1.139765} [5 bytes data]39766* TLSv1.3 (OUT), TLS handshake, Client hello (1):39767} [1552 bytes data]39768* SSL Trust Anchors:39769* OpenSSL default paths (fallback)39770{ [5 bytes data]39771* TLSv1.3 (IN), TLS handshake, Server hello (2):39772{ [1210 bytes data]39773* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39774{ [1 bytes data]39775* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39776{ [19 bytes data]39777* TLSv1.3 (IN), TLS handshake, Certificate (11):39778{ [1009 bytes data]39779* TLSv1.3 (IN), TLS handshake, CERT verify (15):39780{ [111 bytes data]39781* TLSv1.3 (IN), TLS handshake, Finished (20):39782{ [52 bytes data]39783* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39784} [1 bytes data]39785* TLSv1.3 (OUT), TLS handshake, Finished (20):39786} [52 bytes data]39787* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39788* ALPN: server accepted h239789* Server certificate:39790* subject: CN=test.foo39791* start date: Sep 19 05:17:38 2026 GMT39792* expire date: Oct 19 05:17:38 2028 GMT39793* issuer: CN=minica root ca 42170339794* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439795* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439796* subjectAltName: "test.foo" matches cert's "test.foo"39797* OpenSSL verify result: 1339798* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39799* closing connection #039800curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39801More details here: https://curl.se/docs/sslcerts.html3980239803curl failed to verify the legitimacy of the server and therefore could not39804establish a secure connection to it. To learn more about this situation and39805how to fix it, please visit the webpage mentioned above.39806* Host test.foo:443 was resolved.39807* IPv6: 2001:db8:1::339808* IPv4: 192.168.1.339809* Trying [2001:db8:1::3]:443...39810* ALPN: curl offers h2,http/1.139811} [5 bytes data]39812* TLSv1.3 (OUT), TLS handshake, Client hello (1):39813} [1552 bytes data]39814* SSL Trust Anchors:39815* OpenSSL default paths (fallback)39816{ [5 bytes data]39817* TLSv1.3 (IN), TLS handshake, Server hello (2):39818{ [1210 bytes data]39819* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39820{ [1 bytes data]39821* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39822{ [19 bytes data]39823* TLSv1.3 (IN), TLS handshake, Certificate (11):39824{ [1009 bytes data]39825* TLSv1.3 (IN), TLS handshake, CERT verify (15):39826{ [111 bytes data]39827* TLSv1.3 (IN), TLS handshake, Finished (20):39828{ [52 bytes data]39829* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39830} [1 bytes data]39831* TLSv1.3 (OUT), TLS handshake, Finished (20):39832} [52 bytes data]39833* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39834* ALPN: server accepted h239835* Server certificate:39836* subject: CN=test.foo39837* start date: Sep 19 05:17:38 2026 GMT39838* expire date: Oct 19 05:17:38 2028 GMT39839* issuer: CN=minica root ca 42170339840* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439841* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439842* subjectAltName: "test.foo" matches cert's "test.foo"39843* OpenSSL verify result: 1339844* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39845* closing connection #039846curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39847More details here: https://curl.se/docs/sslcerts.html3984839849curl failed to verify the legitimacy of the server and therefore could not39850establish a secure connection to it. To learn more about this situation and39851how to fix it, please visit the webpage mentioned above.39852server # [1289144.499995] server systemd[1]: Starting Cleanup of Temporary Directories...39853server # [1289144.612245] server systemd[1]: systemd-tmpfiles-clean.service: Deactivated successfully.39854server # [1289144.612611] server systemd[1]: Finished Cleanup of Temporary Directories.39855* Host test.foo:443 was resolved.39856* IPv6: 2001:db8:1::339857* IPv4: 192.168.1.339858* Trying [2001:db8:1::3]:443...39859* ALPN: curl offers h2,http/1.139860} [5 bytes data]39861* TLSv1.3 (OUT), TLS handshake, Client hello (1):39862} [1552 bytes data]39863* SSL Trust Anchors:39864ca # [1289144.719776] ca systemd[1]: Starting Cleanup of Temporary Directories...39865ca # [1289144.838556] ca systemd[1]: systemd-tmpfiles-clean.service: Deactivated successfully.39866ca # [1289144.838872] ca systemd[1]: Finished Cleanup of Temporary Directories.39867* OpenSSL default paths (fallback)39868{ [5 bytes data]39869* TLSv1.3 (IN), TLS handshake, Server hello (2):39870{ [1210 bytes data]39871* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39872{ [1 bytes data]39873* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39874{ [19 bytes data]39875* TLSv1.3 (IN), TLS handshake, Certificate (11):39876{ [1009 bytes data]39877* TLSv1.3 (IN), TLS handshake, CERT verify (15):39878{ [111 bytes data]39879* TLSv1.3 (IN), TLS handshake, Finished (20):39880{ [52 bytes data]39881* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39882} [1 bytes data]39883* TLSv1.3 (OUT), TLS handshake, Finished (20):39884} [52 bytes data]39885* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39886* ALPN: server accepted h239887* Server certificate:39888* subject: CN=test.foo39889* start date: Sep 19 05:17:38 2026 GMT39890* expire date: Oct 19 05:17:38 2028 GMT39891* issuer: CN=minica root ca 42170339892* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439893* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439894* subjectAltName: "test.foo" matches cert's "test.foo"39895* OpenSSL verify result: 1339896* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39897* closing connection #039898curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39899More details here: https://curl.se/docs/sslcerts.html3990039901curl failed to verify the legitimacy of the server and therefore could not39902establish a secure connection to it. To learn more about this situation and39903how to fix it, please visit the webpage mentioned above.39904* Host test.foo:443 was resolved.39905* IPv6: 2001:db8:1::339906* IPv4: 192.168.1.339907* Trying [2001:db8:1::3]:443...39908* ALPN: curl offers h2,http/1.139909} [5 bytes data]39910* TLSv1.3 (OUT), TLS handshake, Client hello (1):39911} [1552 bytes data]39912* SSL Trust Anchors:39913* OpenSSL default paths (fallback)39914{ [5 bytes data]39915* TLSv1.3 (IN), TLS handshake, Server hello (2):39916{ [1210 bytes data]39917* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39918{ [1 bytes data]39919* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39920{ [19 bytes data]39921* TLSv1.3 (IN), TLS handshake, Certificate (11):39922{ [1009 bytes data]39923* TLSv1.3 (IN), TLS handshake, CERT verify (15):39924{ [111 bytes data]39925* TLSv1.3 (IN), TLS handshake, Finished (20):39926{ [52 bytes data]39927* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39928} [1 bytes data]39929* TLSv1.3 (OUT), TLS handshake, Finished (20):39930} [52 bytes data]39931* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39932* ALPN: server accepted h239933* Server certificate:39934* subject: CN=test.foo39935* start date: Sep 19 05:17:38 2026 GMT39936* expire date: Oct 19 05:17:38 2028 GMT39937* issuer: CN=minica root ca 42170339938* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439939* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439940* subjectAltName: "test.foo" matches cert's "test.foo"39941* OpenSSL verify result: 1339942* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39943* closing connection #039944curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39945More details here: https://curl.se/docs/sslcerts.html3994639947curl failed to verify the legitimacy of the server and therefore could not39948establish a secure connection to it. To learn more about this situation and39949how to fix it, please visit the webpage mentioned above.39950* Host test.foo:443 was resolved.39951* IPv6: 2001:db8:1::339952* IPv4: 192.168.1.339953* Trying [2001:db8:1::3]:443...39954* ALPN: curl offers h2,http/1.139955} [5 bytes data]39956* TLSv1.3 (OUT), TLS handshake, Client hello (1):39957} [1552 bytes data]39958* SSL Trust Anchors:39959* OpenSSL default paths (fallback)39960{ [5 bytes data]39961* TLSv1.3 (IN), TLS handshake, Server hello (2):39962{ [1210 bytes data]39963* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39964{ [1 bytes data]39965* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39966{ [19 bytes data]39967* TLSv1.3 (IN), TLS handshake, Certificate (11):39968{ [1009 bytes data]39969* TLSv1.3 (IN), TLS handshake, CERT verify (15):39970{ [111 bytes data]39971* TLSv1.3 (IN), TLS handshake, Finished (20):39972{ [52 bytes data]39973* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39974} [1 bytes data]39975* TLSv1.3 (OUT), TLS handshake, Finished (20):39976} [52 bytes data]39977* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39978* ALPN: server accepted h239979* Server certificate:39980* subject: CN=test.foo39981* start date: Sep 19 05:17:38 2026 GMT39982* expire date: Oct 19 05:17:38 2028 GMT39983* issuer: CN=minica root ca 42170339984* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439985* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439986* subjectAltName: "test.foo" matches cert's "test.foo"39987* OpenSSL verify result: 1339988* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39989* closing connection #039990curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39991More details here: https://curl.se/docs/sslcerts.html3999239993curl failed to verify the legitimacy of the server and therefore could not39994establish a secure connection to it. To learn more about this situation and39995how to fix it, please visit the webpage mentioned above.39996* Host test.foo:443 was resolved.39997* IPv6: 2001:db8:1::339998* IPv4: 192.168.1.339999* Trying [2001:db8:1::3]:443...40000* ALPN: curl offers h2,http/1.140001} [5 bytes data]40002* TLSv1.3 (OUT), TLS handshake, Client hello (1):40003} [1552 bytes data]40004* SSL Trust Anchors:40005* OpenSSL default paths (fallback)40006{ [5 bytes data]40007* TLSv1.3 (IN), TLS handshake, Server hello (2):40008{ [1210 bytes data]40009* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):40010{ [1 bytes data]40011* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):40012{ [19 bytes data]40013* TLSv1.3 (IN), TLS handshake, Certificate (11):40014{ [1009 bytes data]40015* TLSv1.3 (IN), TLS handshake, CERT verify (15):40016{ [112 bytes data]40017* TLSv1.3 (IN), TLS handshake, Finished (20):40018{ [52 bytes data]40019* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):40020} [1 bytes data]40021* TLSv1.3 (OUT), TLS handshake, Finished (20):40022} [52 bytes data]40023* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey40024* ALPN: server accepted h240025* Server certificate:40026* subject: CN=test.foo40027* start date: Sep 19 05:17:38 2026 GMT40028* expire date: Oct 19 05:17:38 2028 GMT40029* issuer: CN=minica root ca 42170340030* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38440031* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38440032* subjectAltName: "test.foo" matches cert's "test.foo"40033* OpenSSL verify result: 1340034* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)40035* closing connection #040036curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)40037More details here: https://curl.se/docs/sslcerts.html4003840039curl failed to verify the legitimacy of the server and therefore could not40040establish a secure connection to it. To learn more about this situation and40041how to fix it, please visit the webpage mentioned above.40042* Host test.foo:443 was resolved.40043* IPv6: 2001:db8:1::340044* IPv4: 192.168.1.340045* Trying [2001:db8:1::3]:443...40046* ALPN: curl offers h2,http/1.140047} [5 bytes data]40048* TLSv1.3 (OUT), TLS handshake, Client hello (1):40049} [1552 bytes data]40050* SSL Trust Anchors:40051* OpenSSL default paths (fallback)40052{ [5 bytes data]40053* TLSv1.3 (IN), TLS handshake, Server hello (2):40054{ [1210 bytes data]40055* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):40056{ [1 bytes data]40057* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):40058{ [19 bytes data]40059* TLSv1.3 (IN), TLS handshake, Certificate (11):40060{ [1009 bytes data]40061* TLSv1.3 (IN), TLS handshake, CERT verify (15):40062{ [110 bytes data]40063* TLSv1.3 (IN), TLS handshake, Finished (20):40064{ [52 bytes data]40065* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):40066} [1 bytes data]40067* TLSv1.3 (OUT), TLS handshake, Finished (20):40068} [52 bytes data]40069* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey40070* ALPN: server accepted h240071* Server certificate:40072* subject: CN=test.foo40073* start date: Sep 19 05:17:38 2026 GMT40074* expire date: Oct 19 05:17:38 2028 GMT40075* issuer: CN=minica root ca 42170340076* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38440077* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38440078* subjectAltName: "test.foo" matches cert's "test.foo"40079* OpenSSL verify result: 1340080* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)40081* closing connection #040082curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)40083More details here: https://curl.se/docs/sslcerts.html4008440085curl failed to verify the legitimacy of the server and therefore could not40086establish a secure connection to it. To learn more about this situation and40087how to fix it, please visit the webpage mentioned above.40088!!! Traceback (most recent call last):40089!!! File "<string>", line 13, in <module>40090!!! client.wait_until_succeeds("curl -v https://test.foo")40091!!! 40092!!! RequestedAssertionFailed: action timed out after 900.52 seconds (timeout=900.0)40093cleanup40094kill NspawnMachine (pid 53)40095kill NspawnMachine (pid 54)40096Container ca terminated by signal KILL.40097kill NspawnMachine (pid 55)40098Container client terminated by signal KILL.40099Container server terminated by signal KILL.40100(finished: cleanup, in 0.49 seconds)