container-test-run-certificates
checks.aarch64-linux.certificates
· build #713
· raw
1Machine state will be reset. To keep it, pass --keep-machine-state2start all VLans3(finished: start all VLans, in 0.00 seconds)45Test will time out and terminate in 3600.0 seconds6run the VM test script7additionally exposed symbols:8 ca, client, server,9 vlan1,10 start_all, test_script, machines, machines_qemu, machines_nspawn, vlans, driver, log, os, create_machine, subtest, run_tests, join_all, retry, serial_stdout_off, serial_stdout_on, polling_condition, BaseMachine, QemuMachine, NspawnMachine, t, debug, dump_machine_ssh11start all VMs12ca: systemd-nspawn running (pid 52)13client: systemd-nspawn running (pid 54)14ca: Waiting for journal at /build/vm-state-ca/var/log/journal...15server: systemd-nspawn running (pid 56)16client: Waiting for journal at /build/vm-state-client/var/log/journal...17server: Waiting for journal at /build/vm-state-server/var/log/journal...18(finished: start all VMs, in 0.00 seconds)19nixos-nspawn(ca): TAP vde-tap1 not found; container will be isolated from VDE20nixos-nspawn(ca): A common reason for this is that /dev/net is not available in the Nix sandbox. Try adding /dev/net to extra-sandbox-paths.21nixos-nspawn(client): TAP vde-tap1 not found; container will be isolated from VDE22nixos-nspawn(client): A common reason for this is that /dev/net is not available in the Nix sandbox. Try adding /dev/net to extra-sandbox-paths.23nixos-nspawn(server): TAP vde-tap1 not found; container will be isolated from VDE24nixos-nspawn(server): A common reason for this is that /dev/net is not available in the Nix sandbox. Try adding /dev/net to extra-sandbox-paths.25Note: in a future version of systemd-nspawn the default set of permitted socket address families will be restricted to AF_INET, AF_INET6 and AF_UNIX. Use --restrict-address-families= to configure the set of permitted socket address families, or set RestrictAddressFamilies= in a .nspawn file.26Note: in a future version of systemd-nspawn the default set of permitted socket address families will be restricted to AF_INET, AF_INET6 and AF_UNIX. Use --restrict-address-families= to configure the set of permitted socket address families, or set RestrictAddressFamilies= in a .nspawn file.27Note: in a future version of systemd-nspawn the default set of permitted socket address families will be restricted to AF_INET, AF_INET6 and AF_UNIX. Use --restrict-address-families= to configure the set of permitted socket address families, or set RestrictAddressFamilies= in a .nspawn file.28░ Spawning container ca on /build/vm-state-ca.29░ Spawning container client on /build/vm-state-client.30░ Spawning container server on /build/vm-state-server.31ca # No journal files were found.32ca # No journal boot entry found for the specified boot (+0).33client # No journal files were found.34client # No journal boot entry found for the specified boot (+0).35server # No journal files were found.36server # No journal boot entry found for the specified boot (+0).37ca # [1306180.980763] ca systemd-journald[80]: Journal started38ca # [1306180.980825] ca systemd-journald[80]: Runtime Journal (/run/log/journal/1953463bc7e64bda933ad5d1eb307dbe) is 8M, max 2.5G, 2.4G free.39client # [1306180.980868] client systemd-journald[72]: Journal started40ca # [1306180.987023] ca systemd[1]: Finished Apply Kernel Variables.41client # [1306180.980926] client systemd-journald[72]: Runtime Journal (/run/log/journal/ee81c37a73904a15a5e0cc41aa7f2d97) is 8M, max 2.5G, 2.4G free.42ca # [1306180.999648] ca systemd[1]: Finished Create Static Device Nodes in /dev gracefully.43client # [1306180.984841] client systemd[1]: Finished Apply Kernel Variables.44ca # [1306181.013873] ca systemd[1]: Starting Flush Journal to Persistent Storage...45client # [1306180.997238] client systemd[1]: Finished Create Static Device Nodes in /dev gracefully.46ca # [1306181.014652] ca systemd[1]: Starting Network Name Resolution...47client # [1306181.011337] client systemd[1]: Starting Flush Journal to Persistent Storage...48ca # [1306181.015394] ca systemd[1]: Starting Create Static Device Nodes in /dev...49client # [1306181.012366] client systemd[1]: Starting Network Name Resolution...50server # [1306180.981392] server systemd-journald[72]: Journal started51client # [1306181.013040] client systemd[1]: Starting Create Static Device Nodes in /dev...52server # [1306180.981449] server systemd-journald[72]: Runtime Journal (/run/log/journal/f70fa9e57dac44039b0b17f7f140d972) is 8M, max 2.5G, 2.4G free.53client # [1306181.022853] client systemd-journald[72]: Time spent on flushing to /var/log/journal/ee81c37a73904a15a5e0cc41aa7f2d97 is 1.640ms for 7 entries.54server # [1306180.988934] server systemd[1]: Finished Apply Kernel Variables.55ca # [1306181.024686] ca systemd-journald[80]: Time spent on flushing to /var/log/journal/1953463bc7e64bda933ad5d1eb307dbe is 2.806ms for 7 entries.56server # [1306181.001700] server systemd[1]: Finished Create Static Device Nodes in /dev gracefully.57ca # [1306181.024686] ca systemd-journald[80]: System Journal (/var/log/journal/1953463bc7e64bda933ad5d1eb307dbe) is 8M, max 4G, 3.9G free.58client # [1306181.022853] client systemd-journald[72]: System Journal (/var/log/journal/ee81c37a73904a15a5e0cc41aa7f2d97) is 8M, max 4G, 3.9G free.59server # [1306181.016734] server systemd[1]: Starting Flush Journal to Persistent Storage...60client # [1306181.031852] client systemd[1]: Finished Flush Journal to Persistent Storage.61server # [1306181.017503] server systemd[1]: Starting Network Name Resolution...62client # [1306181.036900] client systemd[1]: Finished Create Static Device Nodes in /dev.63server # [1306181.018359] server systemd[1]: Starting Create Static Device Nodes in /dev...64client # [1306181.038050] client systemd[1]: Reached target Preparation for Local File Systems.65server # [1306181.027708] server systemd-journald[72]: Time spent on flushing to /var/log/journal/f70fa9e57dac44039b0b17f7f140d972 is 1.775ms for 7 entries.66client # [1306181.038192] client systemd[1]: Reached target Local File Systems.67server # [1306181.027708] server systemd-journald[72]: System Journal (/var/log/journal/f70fa9e57dac44039b0b17f7f140d972) is 8M, max 4G, 3.9G free.68ca # [1306181.047592] ca systemd[1]: Finished Flush Journal to Persistent Storage.69server # [1306181.057708] server systemd[1]: Finished Flush Journal to Persistent Storage.70ca # [1306181.047975] ca systemd[1]: Finished Create Static Device Nodes in /dev.71client # [1306181.039050] client systemd[1]: Listening on Boot Loader Control Service Socket.72ca # [1306181.049040] ca systemd[1]: Reached target Preparation for Local File Systems.73client # [1306181.039103] client systemd[1]: Update Boot Loader Random Seed skipped, unmet condition check ConditionVirtualization=!container74client # [1306181.040007] client systemd[1]: Starting Save Transient machine-id to Disk...75server # [1306181.058456] server systemd[1]: Finished Create Static Device Nodes in /dev.76ca # [1306181.049166] ca systemd[1]: Reached target Local File Systems.77client # [1306181.040729] client systemd[1]: Starting Create System Files and Directories...78server # [1306181.059654] server systemd[1]: Reached target Preparation for Local File Systems.79client # [1306181.040763] client systemd[1]: Rule-based Manager for Device Events and Files skipped, unmet condition check ConditionPathIsReadWrite=/sys80ca # [1306181.050033] ca systemd[1]: Listening on Boot Loader Control Service Socket.81client # [1306181.056497] client systemd-tmpfiles[123]: Cannot set file attributes for '/var/empty', value=0x00000010, mask=0x00000010, ignoring: Operation not permitted82ca # [1306181.050086] ca systemd[1]: Update Boot Loader Random Seed skipped, unmet condition check ConditionVirtualization=!container83client # [1306181.056687] client systemd-tmpfiles[123]: fchmod() of /var/log/journal failed: Operation not permitted84ca # [1306181.050885] ca systemd[1]: Starting Save Transient machine-id to Disk...85client # [1306181.056820] client systemd-tmpfiles[123]: fchmod() of /var/log/journal/ee81c37a73904a15a5e0cc41aa7f2d97 failed: Operation not permitted86server # [1306181.059808] server systemd[1]: Reached target Local File Systems.87client # [1306181.057019] client systemd-tmpfiles[123]: fchmod() of /run/log/journal failed: Operation not permitted88client # [1306181.058357] client systemd[1]: Finished Create System Files and Directories.89ca # [1306181.051648] ca systemd[1]: Starting Create System Files and Directories...90server # [1306181.060874] server systemd[1]: Listening on Boot Loader Control Service Socket.91server # [1306181.060935] server systemd[1]: Update Boot Loader Random Seed skipped, unmet condition check ConditionVirtualization=!container92server # [1306181.061935] server systemd[1]: Starting Save Transient machine-id to Disk...93client # [1306181.059541] client systemd[1]: Starting Rebuild Journal Catalog...94client # [1306181.060307] client systemd[1]: Starting Record System Boot/Shutdown in UTMP...95ca # [1306181.051680] ca systemd[1]: Rule-based Manager for Device Events and Files skipped, unmet condition check ConditionPathIsReadWrite=/sys96server # [1306181.062670] server systemd[1]: Starting Create System Files and Directories...97server # [1306181.062704] server systemd[1]: Rule-based Manager for Device Events and Files skipped, unmet condition check ConditionPathIsReadWrite=/sys98server # [1306181.079018] server systemd-tmpfiles[135]: Cannot set file attributes for '/var/empty', value=0x00000010, mask=0x00000010, ignoring: Operation not permitted99client # [1306181.075412] client systemd[1]: Finished Record System Boot/Shutdown in UTMP.100client # [1306181.083738] client systemd[1]: Finished Rebuild Journal Catalog.101ca # [1306181.067769] ca systemd-tmpfiles[138]: Cannot set file attributes for '/var/empty', value=0x00000010, mask=0x00000010, ignoring: Operation not permitted102server # [1306181.079205] server systemd-tmpfiles[135]: fchmod() of /var/log/journal failed: Operation not permitted103ca # [1306181.067952] ca systemd-tmpfiles[138]: fchmod() of /var/log/journal failed: Operation not permitted104server # [1306181.079334] server systemd-tmpfiles[135]: fchmod() of /var/log/journal/f70fa9e57dac44039b0b17f7f140d972 failed: Operation not permitted105ca # [1306181.068085] ca systemd-tmpfiles[138]: fchmod() of /var/log/journal/1953463bc7e64bda933ad5d1eb307dbe failed: Operation not permitted106server # [1306181.079523] server systemd-tmpfiles[135]: fchmod() of /run/log/journal failed: Operation not permitted107ca # [1306181.068272] ca systemd-tmpfiles[138]: fchmod() of /run/log/journal failed: Operation not permitted108server # [1306181.083883] server systemd[1]: Finished Create System Files and Directories.109ca # [1306181.069650] ca systemd[1]: Finished Create System Files and Directories.110server # [1306181.084985] server systemd[1]: Starting Rebuild Journal Catalog...111ca # [1306181.070732] ca systemd[1]: Starting Rebuild Journal Catalog...112server # [1306181.086524] server systemd[1]: Starting Record System Boot/Shutdown in UTMP...113ca # [1306181.071668] ca systemd[1]: Starting Record System Boot/Shutdown in UTMP...114server # [1306181.093445] server systemd[1]: Finished Save Transient machine-id to Disk.115ca # [1306181.087353] ca systemd[1]: Finished Record System Boot/Shutdown in UTMP.116server # [1306181.100906] server systemd[1]: Finished Record System Boot/Shutdown in UTMP.117ca # [1306181.093567] ca systemd[1]: Finished Save Transient machine-id to Disk.118server # [1306181.109025] server systemd[1]: Finished Rebuild Journal Catalog.119ca # [1306181.095193] ca systemd[1]: Finished Rebuild Journal Catalog.120server # [1306181.110390] server systemd[1]: Starting Update is Completed...121ca # [1306181.096182] ca systemd[1]: systemd-update-done.service: Failed to spawn executor: No such file or directory122server # [1306181.122156] server systemd[1]: Finished Update is Completed.123ca # [1306181.096207] ca systemd[1]: systemd-update-done.service: Failed to spawn 'start' task: No such file or directory124server # [1306181.153549] server systemd[1]: Finished Firewall.125ca # [1306181.096249] ca systemd[1]: systemd-update-done.service: Failed with result 'resources'.126server # [1306181.153652] server systemd[1]: Reached target Preparation for Network.127ca # [1306181.096300] ca systemd[1]: Failed to start Update is Completed.128server # [1306181.153884] server systemd[1]: Listening on Network Management Resolve Hook Socket.129ca # [1306181.156308] ca systemd[1]: Finished Firewall.130server # [1306181.154926] server systemd[1]: Starting Network Management...131ca # [1306181.156509] ca systemd[1]: Reached target Preparation for Network.132server # [1306181.855641] server systemd-networkd[190]: Failed to increase receive buffer size for general netlink socket, ignoring: Operation not permitted133ca # [1306181.156792] ca systemd[1]: Listening on Network Management Resolve Hook Socket.134server # [1306181.855728] server systemd-networkd[190]: Failed to increase receive buffer size for nftables netlink socket, ignoring: Operation not permitted135ca # [1306181.158286] ca systemd[1]: Starting Network Management...136server # [1306181.865747] server systemd-networkd[190]: /etc/systemd/network/99-ethernet-default-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section.137ca # [1306181.858247] ca systemd-networkd[196]: Failed to increase receive buffer size for general netlink socket, ignoring: Operation not permitted138server # [1306181.865916] server systemd-networkd[190]: /etc/systemd/network/99-wireless-client-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section.139ca # [1306181.858327] ca systemd-networkd[196]: Failed to increase receive buffer size for nftables netlink socket, ignoring: Operation not permitted140server # [1306181.866060] server systemd-networkd[190]: lo: Link UP141ca # [1306181.867965] ca systemd-networkd[196]: /etc/systemd/network/99-ethernet-default-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section.142server # [1306181.866065] server systemd-networkd[190]: lo: Gained carrier143ca # [1306181.868147] ca systemd-networkd[196]: /etc/systemd/network/99-wireless-client-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section.144server # [1306181.866255] server systemd-networkd[190]: eth1: Configuring with /etc/systemd/network/40-eth1.network.145ca # [1306181.868281] ca systemd-networkd[196]: lo: Link UP146server # [1306181.866618] server systemd[1]: Started Network Management.147ca # [1306181.868286] ca systemd-networkd[196]: lo: Gained carrier148server # [1306181.888304] server systemd-networkd[190]: eth1: Link UP149ca # [1306181.868440] ca systemd-networkd[196]: eth1: Configuring with /etc/systemd/network/40-eth1.network.150server # [1306181.888635] server systemd-networkd[190]: eth1: Gained carrier151ca # [1306181.868873] ca systemd[1]: Started Network Management.152server # [1306181.889360] server systemd[1]: Starting Enable Persistent Storage in systemd-networkd...153ca # [1306181.889230] ca systemd-networkd[196]: eth1: Link UP154server # [1306181.950438] server systemd[1]: Finished Enable Persistent Storage in systemd-networkd.155ca # [1306181.889520] ca systemd-networkd[196]: eth1: Gained carrier156server # [1306181.990852] server systemd[1]: etc-machine\x2did.mount: Deactivated successfully.157ca # [1306181.889674] ca systemd[1]: Starting Enable Persistent Storage in systemd-networkd...158client # [1306181.085514] client systemd[1]: Starting Update is Completed...159ca # [1306181.934250] ca systemd[1]: Finished Enable Persistent Storage in systemd-networkd.160client # [1306181.093436] client systemd[1]: Finished Save Transient machine-id to Disk.161ca # [1306181.990456] ca systemd[1]: etc-machine\x2did.mount: Deactivated successfully.162client # [1306181.095990] client systemd[1]: Finished Update is Completed.163client # [1306181.149835] client systemd[1]: Finished Firewall.164client # [1306181.149998] client systemd[1]: Reached target Preparation for Network.165client # [1306181.150234] client systemd[1]: Listening on Network Management Resolve Hook Socket.166client # [1306181.151348] client systemd[1]: Starting Network Management...167client # [1306181.830348] client systemd-networkd[186]: Failed to increase receive buffer size for general netlink socket, ignoring: Operation not permitted168client # [1306181.830437] client systemd-networkd[186]: Failed to increase receive buffer size for nftables netlink socket, ignoring: Operation not permitted169client # [1306181.841407] client systemd-networkd[186]: /etc/systemd/network/99-ethernet-default-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section.170client # [1306181.841780] client systemd-networkd[186]: /etc/systemd/network/99-wireless-client-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section.171client # [1306181.841917] client systemd-networkd[186]: lo: Link UP172client # [1306181.841921] client systemd-networkd[186]: lo: Gained carrier173client # [1306181.842108] client systemd-networkd[186]: eth1: Configuring with /etc/systemd/network/40-eth1.network.174client # [1306181.842674] client systemd-networkd[186]: eth1: Link UP175client # [1306181.842701] client systemd[1]: Started Network Management.176client # [1306181.843048] client systemd-networkd[186]: eth1: Gained carrier177client # [1306181.844753] client systemd[1]: Starting Enable Persistent Storage in systemd-networkd...178client # [1306181.897644] client systemd[1]: Finished Enable Persistent Storage in systemd-networkd.179client # [1306181.990560] client systemd[1]: etc-machine\x2did.mount: Deactivated successfully.180server # [1306182.252899] server systemd-resolved[107]: Positive Trust Anchors:181server # [1306182.252910] server systemd-resolved[107]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d182server # [1306182.252914] server systemd-resolved[107]: . IN DS 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16183server # [1306182.252946] server systemd-resolved[107]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 170.0.0.192.in-addr.arpa 171.0.0.192.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa ipv4only.arpa resolver.arpa corp home internal intranet lan local private test184server # [1306182.274703] server systemd-resolved[107]: Using system hostname 'server'.185server # [1306182.276077] server systemd[1]: Started Network Name Resolution.186server # [1306182.276195] server systemd[1]: Reached target Network.187server # [1306182.276298] server systemd[1]: Reached target Network is Online.188server # [1306182.276380] server systemd[1]: Reached target System Initialization.189server # [1306182.276758] server systemd[1]: Started Renew ACME Certificate for test.foo.190server # [1306182.276812] server systemd[1]: Discard unused filesystem blocks once a week skipped, unmet condition check ConditionVirtualization=!container191server # [1306182.276858] server systemd[1]: Started Daily Cleanup of Temporary Directories.192server # [1306182.276900] server systemd[1]: Reached target Timer Units.193server # [1306182.296417] server systemd[1]: Listening on D-Bus System Message Bus Socket.194server # [1306182.296654] server systemd[1]: Listening on Nix Daemon Socket.195server # [1306182.296877] server systemd[1]: Listening on Virtual Machine and Container Registration Service Socket.196server # [1306182.296924] server systemd[1]: Reached target Socket Units.197server # [1306182.297021] server systemd[1]: Reached target Basic System.198server # [1306182.299877] server systemd[1]: Starting Set up the ACME certificate renewal infrastructure...199server # [1306182.301431] server systemd[1]: Starting Import lastlog data into lastlog2 database...200server # [1306182.301502] server systemd[1]: nginx-config-reload.service skipped, unmet condition check ConditionPathExists=/var/lib/acme/test.foo/fullchain.pem201server # [1306182.302961] server systemd[1]: Starting Name Service Cache Daemon (nsncd)...202server # [1306182.305087] server systemd[1]: Starting D-Bus System Message Bus...203server # [1306182.325113] server systemd[1]: Finished Import lastlog data into lastlog2 database.204server # [1306182.507893] server acme-setup-privileged[195]: + set -euo pipefail205server # [1306182.507893] server acme-setup-privileged[195]: + cd /var/lib/acme206server # [1306182.507893] server acme-setup-privileged[195]: + chmod -R u=rwX,g=,o= .lego/accounts207ca # [1306182.233557] ca systemd-resolved[113]: Positive Trust Anchors:208ca # [1306182.233569] ca systemd-resolved[113]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d209ca # [1306182.233572] ca systemd-resolved[113]: . IN DS 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16210ca # [1306182.233608] ca systemd-resolved[113]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 170.0.0.192.in-addr.arpa 171.0.0.192.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa ipv4only.arpa resolver.arpa corp home internal intranet lan local private test211ca # [1306182.256040] ca systemd-resolved[113]: Using system hostname 'ca'.212ca # [1306182.257404] ca systemd[1]: Started Network Name Resolution.213ca # [1306182.257530] ca systemd[1]: Reached target Network.214ca # [1306182.257646] ca systemd[1]: Reached target Network is Online.215ca # [1306182.257735] ca systemd[1]: Reached target System Initialization.216ca # [1306182.258113] ca systemd[1]: Started Renew ACME Certificate for ca.foo.217ca # [1306182.258174] ca systemd[1]: Discard unused filesystem blocks once a week skipped, unmet condition check ConditionVirtualization=!container218ca # [1306182.258221] ca systemd[1]: Started Daily Cleanup of Temporary Directories.219ca # [1306182.258264] ca systemd[1]: Reached target Timer Units.220ca # [1306182.258488] ca systemd[1]: Listening on D-Bus System Message Bus Socket.221ca # [1306182.258685] ca systemd[1]: Listening on Nix Daemon Socket.222ca # [1306182.258904] ca systemd[1]: Listening on Virtual Machine and Container Registration Service Socket.223ca # [1306182.258949] ca systemd[1]: Reached target Socket Units.224ca # [1306182.259041] ca systemd[1]: Reached target Basic System.225ca # [1306182.261789] ca systemd[1]: Starting Set up the ACME certificate renewal infrastructure...226ca # [1306182.263215] ca systemd[1]: Starting Import lastlog data into lastlog2 database...227ca # [1306182.263283] ca systemd[1]: nginx-config-reload.service skipped, unmet condition check ConditionPathExists=/var/lib/acme/ca.foo/fullchain.pem228ca # [1306182.264825] ca systemd[1]: Starting Name Service Cache Daemon (nsncd)...229ca # [1306182.266618] ca systemd[1]: Starting step-ca service...230ca # [1306182.297212] ca systemd[1]: Starting D-Bus System Message Bus...231ca # [1306182.399590] ca systemd[1]: lastlog2-import.service: Failed to spawn executor: No such file or directory232ca # [1306182.399634] ca systemd[1]: lastlog2-import.service: Failed to spawn 'start-post' task: No such file or directory233ca # [1306182.399703] ca systemd[1]: lastlog2-import.service: Failed with result 'resources'.234ca # [1306182.399805] ca systemd[1]: Failed to start Import lastlog data into lastlog2 database.235ca # [1306182.543648] ca acme-setup-privileged[201]: + set -euo pipefail236ca # [1306182.543648] ca acme-setup-privileged[201]: + cd /var/lib/acme237ca # [1306182.543648] ca acme-setup-privileged[201]: + chmod -R u=rwX,g=,o= .lego/accounts238client # [1306182.239452] client systemd-resolved[104]: Positive Trust Anchors:239client # [1306182.239462] client systemd-resolved[104]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d240client # [1306182.239466] client systemd-resolved[104]: . IN DS 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16241client # [1306182.239501] client systemd-resolved[104]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 170.0.0.192.in-addr.arpa 171.0.0.192.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa ipv4only.arpa resolver.arpa corp home internal intranet lan local private test242client # [1306182.261673] client systemd-resolved[104]: Using system hostname 'client'.243client # [1306182.262985] client systemd[1]: Started Network Name Resolution.244client # [1306182.263106] client systemd[1]: Reached target Network.245client # [1306182.263221] client systemd[1]: Reached target System Initialization.246client # [1306182.263315] client systemd[1]: Discard unused filesystem blocks once a week skipped, unmet condition check ConditionVirtualization=!container247client # [1306182.263372] client systemd[1]: Started Daily Cleanup of Temporary Directories.248client # [1306182.263409] client systemd[1]: Reached target Timer Units.249client # [1306182.263637] client systemd[1]: Listening on D-Bus System Message Bus Socket.250client # [1306182.263981] client systemd[1]: Listening on Nix Daemon Socket.251client # [1306182.264257] client systemd[1]: Listening on Virtual Machine and Container Registration Service Socket.252client # [1306182.264310] client systemd[1]: Reached target Socket Units.253client # [1306182.264398] client systemd[1]: Reached target Basic System.254client # [1306182.266878] client systemd[1]: Starting Import lastlog data into lastlog2 database...255client # [1306182.296759] client systemd[1]: Starting Name Service Cache Daemon (nsncd)...256client # [1306182.298943] client systemd[1]: Starting D-Bus System Message Bus...257client # [1306182.315372] client systemd[1]: Finished Import lastlog data into lastlog2 database.258client # [1306182.550019] client systemd[1]: Started Name Service Cache Daemon (nsncd).259client # [1306182.550223] client nsncd[192]: Sep 19 10:16:42.535 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket"260client # [1306182.550128] client systemd[1]: Reached target Host and Network Name Lookups.261client # [1306182.550234] client systemd[1]: Reached target User and Group Name Lookups.262server # [1306182.510002] server acme-setup-privileged[195]: + chown -R acme .lego/accounts263server # [1306182.512416] server acme-setup-privileged[195]: + for fixpath in test.foo .lego/test.foo264server # [1306182.512416] server acme-setup-privileged[195]: + '[' -d test.foo ']'265server # [1306182.512553] server acme-setup-privileged[195]: + for fixpath in test.foo .lego/test.foo266server # [1306182.512553] server acme-setup-privileged[195]: + '[' -d .lego/test.foo ']'267server # [1306182.550031] server systemd[1]: Started Name Service Cache Daemon (nsncd).268server # [1306182.550145] server systemd[1]: Reached target Host and Network Name Lookups.269server # [1306182.550251] server systemd[1]: Reached target User and Group Name Lookups.270server # [1306182.550493] server nsncd[197]: Sep 19 10:16:42.536 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket"271server # [1306182.561531] server systemd[1]: Starting User Login Management...272server # [1306182.563055] server systemd[1]: Starting Permit User Sessions...273server # [1306182.575246] server systemd[1]: Finished Permit User Sessions.274server # [1306182.576991] server systemd[1]: Started Console Getty.275server # [1306182.577068] server systemd[1]: Getty on tty1 skipped, unmet condition check ConditionPathExists=/dev/tty0276server # [1306182.577109] server systemd[1]: Reached target Login Prompts.277server # [1306182.762748] server dbus-broker-launch[198]: Looking up NSS user entry for 'systemd-timesync'...278ca # [1306182.545794] ca acme-setup-privileged[201]: + chown -R acme .lego/accounts279ca # [1306182.547538] ca acme-setup-privileged[201]: + for fixpath in ca.foo .lego/ca.foo280ca # [1306182.547607] ca acme-setup-privileged[201]: + '[' -d ca.foo ']'281ca # [1306182.547607] ca acme-setup-privileged[201]: + for fixpath in ca.foo .lego/ca.foo282ca # [1306182.547607] ca acme-setup-privileged[201]: + '[' -d .lego/ca.foo ']'283ca # [1306182.580126] ca systemd[1]: Started Name Service Cache Daemon (nsncd).284ca # [1306182.580244] ca systemd[1]: Reached target Host and Network Name Lookups.285ca # [1306182.580343] ca nsncd[203]: Sep 19 10:16:42.566 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket"286ca # [1306182.580359] ca systemd[1]: Reached target User and Group Name Lookups.287ca # [1306182.582419] ca systemd[1]: Starting User Login Management...288ca # [1306182.583754] ca systemd[1]: Starting Permit User Sessions...289ca # [1306182.594906] ca systemd[1]: Finished Permit User Sessions.290ca # [1306182.596533] ca systemd[1]: Started Console Getty.291ca # [1306182.596607] ca systemd[1]: Getty on tty1 skipped, unmet condition check ConditionPathExists=/dev/tty0292ca # [1306182.596648] ca systemd[1]: Reached target Login Prompts.293ca # [1306182.787079] ca dbus-broker-launch[207]: Looking up NSS user entry for 'systemd-timesync'...294ca # [1306182.789038] ca dbus-broker-launch[207]: NSS returned no entry for 'systemd-timesync'295ca # [1306182.789038] ca dbus-broker-launch[207]: Invalid user-name in /nix/store/bh2gmvmbmbp0nqf3m5qaqnfjair6v85q-system-path/share/dbus-1/system.d/org.freedesktop.timesync1.conf +16: user="systemd-timesync"296ca # [1306182.789583] ca systemd[1]: Started D-Bus System Message Bus.297ca # [1306182.799623] ca dbus-broker-launch[207]: Ready298client # [1306182.561560] client systemd[1]: Starting User Login Management...299client # [1306182.562954] client systemd[1]: Starting Permit User Sessions...300client # [1306182.575181] client systemd[1]: Finished Permit User Sessions.301client # [1306182.576963] client systemd[1]: Started Console Getty.302client # [1306182.577047] client systemd[1]: Getty on tty1 skipped, unmet condition check ConditionPathExists=/dev/tty0303client # [1306182.577088] client systemd[1]: Reached target Login Prompts.304client # [1306182.756101] client dbus-broker-launch[193]: Looking up NSS user entry for 'systemd-timesync'...305client # [1306182.757915] client dbus-broker-launch[193]: NSS returned no entry for 'systemd-timesync'306client # [1306182.757915] client dbus-broker-launch[193]: Invalid user-name in /nix/store/g0a3fan1ykqwgcwicjzjgnwxr95dlfi7-system-path/share/dbus-1/system.d/org.freedesktop.timesync1.conf +16: user="systemd-timesync"307client # [1306182.758551] client systemd[1]: Started D-Bus System Message Bus.308client # [1306182.766356] client dbus-broker-launch[193]: Ready309ca: must succeed: systemctl restart acme-order-renew-ca.foo.service 310server # [1306182.764146] server dbus-broker-launch[198]: NSS returned no entry for 'systemd-timesync'311server # [1306182.764146] server dbus-broker-launch[198]: Invalid user-name in /nix/store/zzss1678mb50nlwag2hiw11lg128jpl3-system-path/share/dbus-1/system.d/org.freedesktop.timesync1.conf +16: user="systemd-timesync"312server # [1306182.764625] server systemd[1]: Started D-Bus System Message Bus.313server # [1306182.772199] server dbus-broker-launch[198]: Ready314ca # [1306183.232118] ca systemd-networkd[196]: eth1: Gained IPv6LL315ca # [1306183.456226] ca systemd-logind[233]: New seat seat0.316ca # [1306183.456449] ca systemd[1]: Started User Login Management.317ca # [1306183.472836] ca systemd[1]: Starting linger-users.service...318server # [1306183.448969] server systemd-logind[223]: New seat seat0.319server # [1306183.449143] server systemd[1]: Started User Login Management.320server # [1306183.456099] server systemd-networkd[190]: eth1: Gained IPv6LL321server # [1306183.472674] server systemd[1]: Starting linger-users.service...322server # [1306183.486612] server systemd[1]: linger-users.service: Deactivated successfully.323server # [1306183.486901] server systemd[1]: Finished linger-users.service.324server # [1306183.535882] server acme-setup-start[211]: + set -euo pipefail325server # [1306183.535882] server acme-setup-start[211]: + test -e ca/key.pem326server # [1306183.536383] server acme-setup-start[211]: + minica --ca-key ca/key.pem --ca-cert ca/cert.pem --domains selfsigned.local327server # [1306183.559292] server systemd[1]: Finished Set up the ACME certificate renewal infrastructure.328server # [1306183.562003] server systemd[1]: Starting Ensure certificate for test.foo...329ca # [1306183.487363] ca systemd[1]: linger-users.service: Deactivated successfully.330ca # [1306183.487458] ca systemd[1]: Finished linger-users.service.331ca # [1306183.518292] ca acme-setup-start[217]: + set -euo pipefail332ca # [1306183.518292] ca acme-setup-start[217]: + test -e ca/key.pem333ca # [1306183.518669] ca acme-setup-start[217]: + minica --ca-key ca/key.pem --ca-cert ca/cert.pem --domains selfsigned.local334ca # [1306183.542275] ca systemd[1]: Finished Set up the ACME certificate renewal infrastructure.335ca # [1306183.544242] ca systemd[1]: Starting Ensure certificate for ca.foo...336ca # [1306183.686014] ca step-ca[204]: badger 2026/09/19 10:16:43 INFO: All 0 tables opened in 0s337ca # [1306183.690702] ca step-ca[204]: 2026/09/19 10:16:43 Building new tls configuration using step-ca x509 Signer Interface338ca # [1306183.695217] ca step-ca[204]: 2026/09/19 10:16:43 Starting Smallstep CA/0.30.2 (linux/arm64)339ca # [1306183.695217] ca step-ca[204]: 2026/09/19 10:16:43 Documentation: https://u.step.sm/docs/ca340ca # [1306183.695217] ca step-ca[204]: 2026/09/19 10:16:43 Community Discord: https://u.step.sm/discord341ca # [1306183.695217] ca step-ca[204]: 2026/09/19 10:16:43 Config file: /etc/smallstep/ca.json342ca # [1306183.695217] ca step-ca[204]: 2026/09/19 10:16:43 The primary server URL is https://ca.foo:1443343ca # [1306183.695217] ca step-ca[204]: 2026/09/19 10:16:43 Root certificates are available at https://ca.foo:1443/roots.pem344ca # [1306183.695217] ca step-ca[204]: 2026/09/19 10:16:43 X.509 Root Fingerprint: 73a51e13ceeb202e4a617c48c0cd308f9567bdcba2ae26dbaab91234245a452e345ca # [1306183.695561] ca step-ca[204]: 2026/09/19 10:16:43 Serving HTTPS on 0.0.0.0:1443 ...346ca # [1306183.695391] ca systemd[1]: Started step-ca service.347client # [1306183.438889] client systemd-logind[208]: New seat seat0.348client # [1306183.439107] client systemd[1]: Started User Login Management.349client # [1306183.441197] client systemd[1]: Starting linger-users.service...350client # [1306183.482592] client systemd[1]: linger-users.service: Deactivated successfully.351client # [1306183.482879] client systemd[1]: Finished linger-users.service.352client # [1306183.483774] client systemd[1]: Reached target Multi-User System.353client # [1306183.484166] client systemd[1]: Startup finished in 2.961s.354client # [1306183.840129] client systemd-networkd[186]: eth1: Gained IPv6LL355server # [1306184.454130] server acme-test.foo-start[248]: Waiting to acquire lock in /run/acme/356server # [1306184.457567] server acme-test.foo-start[248]: + '[' -e out/acme-success ']'357server # [1306184.457648] server acme-test.foo-start[248]: + minica --ca-cert=ca/cert.pem --ca-key=ca/key.pem --domains=test.foo --ip-addresses=358server # [1306184.472487] server acme-test.foo-start[258]: + cd test.foo359server # [1306184.472956] server acme-test.foo-start[258]: + cp -vp cert.pem ../out/cert.pem360server # [1306184.474256] server acme-test.foo-start[259]: 'cert.pem' -> '../out/cert.pem'361server # [1306184.474594] server acme-test.foo-start[258]: + cp -vp key.pem ../out/key.pem362server # [1306184.475893] server acme-test.foo-start[258]: 'key.pem' -> '../out/key.pem'363server # [1306184.476139] server acme-test.foo-start[248]: + cat out/cert.pem ca/cert.pem364server # [1306184.478005] server acme-test.foo-start[248]: + cp ca/cert.pem out/chain.pem365server # [1306184.479742] server acme-test.foo-start[248]: + cat out/key.pem out/fullchain.pem366server # [1306184.481503] server acme-test.foo-start[248]: + for fixpath in out certificates367server # [1306184.481503] server acme-test.foo-start[248]: + '[' -d out ']'368server # [1306184.481621] server acme-test.foo-start[248]: + chmod -R u=rwX,g=rX,o= out369server # [1306184.483361] server acme-test.foo-start[248]: + chown -R acme:nginx out370server # [1306184.487497] server acme-test.foo-start[248]: + for fixpath in out certificates371server # [1306184.487497] server acme-test.foo-start[248]: + '[' -d certificates ']'372server # [1306184.492464] server systemd[1]: Finished Ensure certificate for test.foo.373server # [1306184.495026] server systemd[1]: Starting Nginx Web Server...374ca # [1306184.461207] ca acme-ca.foo-start[253]: Waiting to acquire lock in /run/acme/375ca # [1306184.464904] ca acme-ca.foo-start[253]: + '[' -e out/acme-success ']'376ca # [1306184.464996] ca acme-ca.foo-start[253]: + minica --ca-cert=ca/cert.pem --ca-key=ca/key.pem --domains=ca.foo --ip-addresses=377ca # [1306184.479970] ca acme-ca.foo-start[291]: + cd ca.foo378ca # [1306184.480532] ca acme-ca.foo-start[291]: + cp -vp cert.pem ../out/cert.pem379ca # [1306184.481758] ca acme-ca.foo-start[292]: 'cert.pem' -> '../out/cert.pem'380ca # [1306184.482098] ca acme-ca.foo-start[291]: + cp -vp key.pem ../out/key.pem381ca # [1306184.483441] ca acme-ca.foo-start[291]: 'key.pem' -> '../out/key.pem'382ca # [1306184.483733] ca acme-ca.foo-start[253]: + cat out/cert.pem ca/cert.pem383ca # [1306184.485544] ca acme-ca.foo-start[253]: + cp ca/cert.pem out/chain.pem384ca # [1306184.487106] ca acme-ca.foo-start[253]: + cat out/key.pem out/fullchain.pem385ca # [1306184.489319] ca acme-ca.foo-start[253]: + for fixpath in out certificates386ca # [1306184.489319] ca acme-ca.foo-start[253]: + '[' -d out ']'387ca # [1306184.489454] ca acme-ca.foo-start[253]: + chmod -R u=rwX,g=rX,o= out388ca # [1306184.491195] ca acme-ca.foo-start[253]: + chown -R acme:nginx out389ca # [1306184.495466] ca acme-ca.foo-start[253]: + for fixpath in out certificates390ca # [1306184.495466] ca acme-ca.foo-start[253]: + '[' -d certificates ']'391ca # [1306184.500296] ca systemd[1]: Finished Ensure certificate for ca.foo.392ca # [1306184.532584] ca systemd[1]: Starting Nginx Web Server...393server # [1306185.454328] server nginx-pre-start[270]: nginx: the configuration file /nix/store/bw9jgq9jgvw8ia747pppjhkzskqcy6wl-nginx.conf syntax is ok394server # [1306185.454941] server nginx-pre-start[270]: nginx: configuration file /nix/store/bw9jgq9jgvw8ia747pppjhkzskqcy6wl-nginx.conf test is successful395server # [1306185.460123] server systemd[1]: Started Nginx Web Server.396server # [1306185.461513] server systemd[1]: Reached target Multi-User System.397server # [1306185.464054] server systemd[1]: Starting Order (and renew) ACME certificate for test.foo...398ca # [1306185.470431] ca nginx-pre-start[303]: nginx: the configuration file /nix/store/9xdq48zsmbzh971fy8df0q5bz7cca117-nginx.conf syntax is ok399ca # [1306185.471056] ca nginx-pre-start[303]: nginx: configuration file /nix/store/9xdq48zsmbzh971fy8df0q5bz7cca117-nginx.conf test is successful400ca # [1306185.508985] ca systemd[1]: Started Nginx Web Server.401ca # [1306185.509796] ca systemd[1]: Reached target Multi-User System.402ca # [1306185.512244] ca systemd[1]: Starting Order (and renew) ACME certificate for ca.foo...403server # [1306186.426194] server acme-order-renew-test.foo-start[273]: Waiting to acquire lock in /run/acme/404server # [1306186.429774] server acme-order-renew-test.foo-start[273]: + set -euo pipefail405server # [1306186.429858] server acme-order-renew-test.foo-start[273]: + exec406server # [1306186.429925] server acme-order-renew-test.foo-start[273]: + /nix/store/fxkh6pl0y4nfbhdqdnhfkvsq7pbxq655-flock-0.4.0/bin/flock 11407server # [1306186.431839] server acme-order-renew-test.foo-start[284]: ++ find accounts -path '*/keys/*.key' -print -quit408server # [1306186.434961] server acme-order-renew-test.foo-start[273]: + '[' -n '' ']'409server # [1306186.435033] server acme-order-renew-test.foo-start[273]: + exec410server # [1306186.435084] server acme-order-renew-test.foo-start[273]: + '[' -e certificates/test.foo.key ']'411server # [1306186.435132] server acme-order-renew-test.foo-start[273]: + lego run --accept-tos --path . --email none@none.tld --http --http.webroot /var/lib/acme/acme-challenge --server https://ca.foo/acme/acme/directory --key-type ec256 -d test.foo --no-random-sleep --renew-force --ari-disable --force-cert-domains412server # [1306186.456249] server acme-order-renew-test.foo-start[285]: 2026-09-19T10:16:46.442037907Z INFO Private key saved. filepath=accounts/ca.foo/none@none.tld/none@none.tld.key413ca # [1306186.443542] ca acme-order-renew-ca.foo-start[306]: Waiting to acquire lock in /run/acme/414ca # [1306186.447049] ca acme-order-renew-ca.foo-start[306]: + set -euo pipefail415ca # [1306186.447443] ca acme-order-renew-ca.foo-start[306]: + exec416ca # [1306186.447595] ca acme-order-renew-ca.foo-start[306]: + /nix/store/fxkh6pl0y4nfbhdqdnhfkvsq7pbxq655-flock-0.4.0/bin/flock 11417ca # [1306186.449568] ca acme-order-renew-ca.foo-start[317]: ++ find accounts -path '*/keys/*.key' -print -quit418ca # [1306186.452976] ca acme-order-renew-ca.foo-start[306]: + '[' -n '' ']'419ca # [1306186.453014] ca acme-order-renew-ca.foo-start[306]: + exec420ca # [1306186.453116] ca acme-order-renew-ca.foo-start[306]: + '[' -e certificates/ca.foo.key ']'421ca # [1306186.453116] ca acme-order-renew-ca.foo-start[306]: + lego run --accept-tos --path . --email none@none.tld --http --http.webroot /var/lib/acme/acme-challenge --server https://ca.foo:1443/acme/acme/directory --key-type ec256 -d ca.foo --no-random-sleep --renew-force --ari-disable --force-cert-domains422ca # [1306186.472682] ca acme-order-renew-ca.foo-start[318]: 2026-09-19T10:16:46.458479613Z INFO Private key saved. filepath=accounts/ca.foo_1443/none@none.tld/none@none.tld.key423ca # [1306186.505651] ca step-ca[204]: time="2026-09-19T10:16:46Z" level=info duration="96.122µs" duration-ns=96122 fields.time="2026-09-19T10:16:46Z" method=GET name=ca path=/acme/acme/directory protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=553382f5-6a6d-4ade-b325-93767185cff4 response="{\"newNonce\":\"https://ca.foo:1443/acme/acme/new-nonce\",\"newAccount\":\"https://ca.foo:1443/acme/acme/new-account\",\"newOrder\":\"https://ca.foo:1443/acme/acme/new-order\",\"revokeCert\":\"https://ca.foo:1443/acme/acme/revoke-cert\",\"keyChange\":\"https://ca.foo:1443/acme/acme/key-change\"}" size=277 status=200 user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; arm64)" user-id=424ca # [1306186.506245] ca acme-order-renew-ca.foo-start[318]: 2026-09-19T10:16:46.492033832Z INFO Registering the account. email=none@none.tld425ca # [1306186.507586] ca step-ca[204]: time="2026-09-19T10:16:46Z" level=info duration="949.893µs" duration-ns=949893 fields.time="2026-09-19T10:16:46Z" method=HEAD name=ca nonce=SUZBTVpUYmx2Y092VnJiU2JDV0N6ZXk3alpCR1c4dGU path=/acme/acme/new-nonce protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=0b961d1a-b402-4373-9961-e97b5b200414 size=0 status=200 user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; arm64)" user-id=426ca # [1306186.510204] ca step-ca[204]: time="2026-09-19T10:16:46Z" level=info duration=1.526461ms duration-ns=1526461 fields.time="2026-09-19T10:16:46Z" method=POST name=ca nonce=ZHRtNkZSTDNGajRBZG5HU1ZHWnVKNGpucmNsYnROSFM path=/acme/acme/new-account protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=02d69c64-4f00-4bf4-a54e-57ac2333938c response="{\"contact\":[\"mailto:none@none.tld\"],\"status\":\"valid\",\"orders\":\"https://ca.foo:1443/acme/acme/account/eIVB5J0IvJ8D3JQPohxIUVWCjR3gQ3Zi/orders\"}" size=143 status=201 user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; arm64)" user-id=427ca # [1306186.510759] ca acme-order-renew-ca.foo-start[318]: 2026-09-19T10:16:46.496567294Z WARN !!!! HEADS UP !!!!428ca # [1306186.510759] ca acme-order-renew-ca.foo-start[318]: Your account credentials have been saved in your429ca # [1306186.510759] ca acme-order-renew-ca.foo-start[318]: configuration directory at "accounts".430ca # [1306186.510759] ca acme-order-renew-ca.foo-start[318]: You should make a secure backup of this folder now. This431ca # [1306186.510759] ca acme-order-renew-ca.foo-start[318]: configuration directory will also contain private keys432ca # [1306186.510759] ca acme-order-renew-ca.foo-start[318]: generated by lego and certificates obtained from the ACME433ca # [1306186.510759] ca acme-order-renew-ca.foo-start[318]: server. Making regular backups of this folder is ideal.434ca # [1306186.510993] ca acme-order-renew-ca.foo-start[318]: 2026-09-19T10:16:46.496810658Z INFO Obtaining bundled SAN certificate. domains=ca.foo435ca # [1306186.514677] ca step-ca[204]: time="2026-09-19T10:16:46Z" level=info duration=2.822639ms duration-ns=2822639 fields.time="2026-09-19T10:16:46Z" method=POST name=ca nonce=Y25NV1QyVEhnOU5hcHRPVG02SVdaRjBYT1k1RVVKYzk path=/acme/acme/new-order protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=caac30ba-7dad-409a-a96f-5da268a4553c response="{\"id\":\"Rd2MaqNK2t8LPXaliZViUiz3VNt1FtWp\",\"status\":\"pending\",\"expires\":\"2026-09-20T10:16:46Z\",\"identifiers\":[{\"type\":\"dns\",\"value\":\"ca.foo\"}],\"notBefore\":\"2026-09-19T10:15:46Z\",\"notAfter\":\"2026-12-18T10:16:46Z\",\"authorizations\":[\"https://ca.foo:1443/acme/acme/authz/IpGp7MHPk3t5yWGGAZ9bxfDc8lyeD0fN\"],\"finalize\":\"https://ca.foo:1443/acme/acme/order/Rd2MaqNK2t8LPXaliZViUiz3VNt1FtWp/finalize\"}" size=392 status=201 user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; arm64)" user-id=436ca # [1306186.574954] ca step-ca[204]: time="2026-09-19T10:16:46Z" level=info duration=1.999628ms duration-ns=1999628 fields.time="2026-09-19T10:16:46Z" method=POST name=ca nonce=ZE1pUGNleFBjc280VzlXazVWNGdoM041M1dCUjJnS20 path=/acme/acme/authz/IpGp7MHPk3t5yWGGAZ9bxfDc8lyeD0fN protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=9fe681b2-b8b1-4f07-8ca0-6ccd81086fc4 response="{\"identifier\":{\"type\":\"dns\",\"value\":\"ca.foo\"},\"status\":\"pending\",\"challenges\":[{\"type\":\"dns-01\",\"status\":\"pending\",\"token\":\"jdclwM6AaVrPsCc56IDb42saxau7Mtbb\",\"url\":\"https://ca.foo:1443/acme/acme/challenge/IpGp7MHPk3t5yWGGAZ9bxfDc8lyeD0fN/ErtIM98jpwc8mIJfdUHOs9LPTicVPkNR\"},{\"type\":\"http-01\",\"status\":\"pending\",\"token\":\"jdclwM6AaVrPsCc56IDb42saxau7Mtbb\",\"url\":\"https://ca.foo:1443/acme/acme/challenge/IpGp7MHPk3t5yWGGAZ9bxfDc8lyeD0fN/VRLBAT4N9nmtBoFdI2g6exVm9zBoYUG7\"},{\"type\":\"tls-alpn-01\",\"status\":\"pending\",\"token\":\"jdclwM6AaVrPsCc56IDb42saxau7Mtbb\",\"url\":\"https://ca.foo:1443/acme/acme/challenge/IpGp7MHPk3t5yWGGAZ9bxfDc8lyeD0fN/KI0HpBtaXq15qvdBC0Abe6XpOcSCRn5a\"}],\"wildcard\":false,\"expires\":\"2026-09-20T10:16:46Z\"}" size=719 status=200 user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; arm64)" user-id=437ca # [1306186.575398] ca acme-order-renew-ca.foo-start[318]: 2026-09-19T10:16:46.561191900Z INFO Use solver. domain=ca.foo type=http-01438ca # [1306186.575475] ca acme-order-renew-ca.foo-start[318]: 2026-09-19T10:16:46.561241460Z INFO http01: Trying to solve HTTP-01. domain=ca.foo439ca # [1306186.581650] ca step-ca[204]: time="2026-09-19T10:16:46Z" level=info duration=5.130191ms duration-ns=5130191 fields.time="2026-09-19T10:16:46Z" method=POST name=ca nonce=b0RjVTBJZVFFemFwR0dsVHZSNkg5RzZ6c09OWHBRb2M path=/acme/acme/challenge/IpGp7MHPk3t5yWGGAZ9bxfDc8lyeD0fN/VRLBAT4N9nmtBoFdI2g6exVm9zBoYUG7 protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=be4b06aa-1489-4a32-b01a-182096e62087 response="{\"type\":\"http-01\",\"status\":\"valid\",\"token\":\"jdclwM6AaVrPsCc56IDb42saxau7Mtbb\",\"validated\":\"2026-09-19T10:16:46Z\",\"url\":\"https://ca.foo:1443/acme/acme/challenge/IpGp7MHPk3t5yWGGAZ9bxfDc8lyeD0fN/VRLBAT4N9nmtBoFdI2g6exVm9zBoYUG7\"}" size=228 status=200 user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; arm64)" user-id=440ca # [1306186.582016] ca acme-order-renew-ca.foo-start[318]: 2026-09-19T10:16:46.567818710Z INFO The server validated our request. domain=ca.foo441ca # [1306186.582133] ca acme-order-renew-ca.foo-start[318]: 2026-09-19T10:16:46.567945712Z INFO Validations succeeded; requesting certificates. domains=ca.foo442ca # [1306186.588642] ca step-ca[204]: time="2026-09-19T10:16:46Z" level=info duration=4.847266ms duration-ns=4847266 fields.time="2026-09-19T10:16:46Z" method=POST name=ca nonce=ejhXaXlOcllialk0OHl6U3FBSXppTHNTSjg1dzlSUzY path=/acme/acme/order/Rd2MaqNK2t8LPXaliZViUiz3VNt1FtWp/finalize protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=91674b5d-5fb3-4350-8003-03f9dbf3bf9a response="{\"id\":\"Rd2MaqNK2t8LPXaliZViUiz3VNt1FtWp\",\"status\":\"valid\",\"expires\":\"2026-09-20T10:16:46Z\",\"identifiers\":[{\"type\":\"dns\",\"value\":\"ca.foo\"}],\"notBefore\":\"2026-09-19T10:15:46Z\",\"notAfter\":\"2026-12-18T10:16:46Z\",\"authorizations\":[\"https://ca.foo:1443/acme/acme/authz/IpGp7MHPk3t5yWGGAZ9bxfDc8lyeD0fN\"],\"finalize\":\"https://ca.foo:1443/acme/acme/order/Rd2MaqNK2t8LPXaliZViUiz3VNt1FtWp/finalize\",\"certificate\":\"https://ca.foo:1443/acme/acme/certificate/x2f3kLFYsjey7OClTLhcYLPgugZp1DOm\"}" size=481 status=200 user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; arm64)" user-id=443ca # [1306186.591155] ca step-ca[204]: time="2026-09-19T10:16:46Z" level=info certificate="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" duration=1.950986ms duration-ns=1950986 fields.time="2026-09-19T10:16:46Z" issuer="Clan Intermediate CA" method=POST name=ca nonce=Zk51ZlFkZk9UeTYwcHJYYnhLRHJlWGRFakEwcktXWUY path=/acme/acme/certificate/x2f3kLFYsjey7OClTLhcYLPgugZp1DOm protocol=HTTP/1.1 provisioner=acme public-key="ECDSA P-256" referer= remote-address="2001:db8:1::1" request-id=f72ccade-3c3e-4af0-9aa6-434e5386fc9f sans="map[dns:[ca.foo]]" serial=247090780430436831646286806397292834173 size=1344 status=200 subject=ca.foo user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; arm64)" user-id= valid-from="2026-09-19T10:15:46Z" valid-to="2026-12-18T10:16:46Z"444ca # [1306186.591468] ca acme-order-renew-ca.foo-start[318]: 2026-09-19T10:16:46.577266720Z INFO Server responded with a certificate. domains=ca.foo445ca # [1306186.591553] ca acme-order-renew-ca.foo-start[318]: 2026-09-19T10:16:46.577367441Z INFO Writing file. filepath=certificates/ca.foo.crt446ca # [1306186.591703] ca acme-order-renew-ca.foo-start[318]: 2026-09-19T10:16:46.577514963Z INFO Writing file. filepath=certificates/ca.foo.issuer.crt447ca # [1306186.591778] ca acme-order-renew-ca.foo-start[318]: 2026-09-19T10:16:46.577593524Z INFO Writing file. filepath=certificates/ca.foo.key448ca # [1306186.591914] ca acme-order-renew-ca.foo-start[318]: 2026-09-19T10:16:46.577727726Z INFO Writing file. filepath=certificates/ca.foo.json449ca # [1306186.598323] ca acme-order-renew-ca.foo-start[306]: + touch out/acme-success450ca # [1306186.600456] ca acme-order-renew-ca.foo-start[306]: + cmp -s certificates/ca.foo.crt out/fullchain.pem451ca # [1306186.602105] ca acme-order-renew-ca.foo-start[306]: + touch out/renewed452ca # [1306186.603720] ca acme-order-renew-ca.foo-start[306]: + echo Installing new certificate453ca # [1306186.603720] ca acme-order-renew-ca.foo-start[306]: Installing new certificate454ca # [1306186.603720] ca acme-order-renew-ca.foo-start[306]: + cp -vp certificates/ca.foo.crt out/fullchain.pem455ca # [1306186.605522] ca acme-order-renew-ca.foo-start[350]: 'certificates/ca.foo.crt' -> 'out/fullchain.pem'456ca # [1306186.605889] ca acme-order-renew-ca.foo-start[306]: + cp -vp certificates/ca.foo.key out/key.pem457ca # [1306186.607345] ca acme-order-renew-ca.foo-start[351]: 'certificates/ca.foo.key' -> 'out/key.pem'458ca # [1306186.607654] ca acme-order-renew-ca.foo-start[306]: + cp -vp certificates/ca.foo.issuer.crt out/chain.pem459ca # [1306186.609494] ca acme-order-renew-ca.foo-start[352]: 'certificates/ca.foo.issuer.crt' -> 'out/chain.pem'460ca # [1306186.609807] ca acme-order-renew-ca.foo-start[306]: + ln -sf fullchain.pem out/cert.pem461ca # [1306186.611543] ca acme-order-renew-ca.foo-start[306]: + cat out/key.pem out/fullchain.pem462ca # [1306186.613565] ca acme-order-renew-ca.foo-start[306]: + for fixpath in out certificates463ca # [1306186.613565] ca acme-order-renew-ca.foo-start[306]: + '[' -d out ']'464ca # [1306186.613660] ca acme-order-renew-ca.foo-start[306]: + chmod -R u=rwX,g=rX,o= out465ca # [1306186.615304] ca acme-order-renew-ca.foo-start[306]: + chown -R acme:nginx out466ca # [1306186.619144] ca acme-order-renew-ca.foo-start[306]: + for fixpath in out certificates467ca # [1306186.619144] ca acme-order-renew-ca.foo-start[306]: + '[' -d certificates ']'468ca # [1306186.619235] ca acme-order-renew-ca.foo-start[306]: + chmod -R u=rwX,g=rX,o= certificates469ca # [1306186.621224] ca acme-order-renew-ca.foo-start[306]: + chown -R acme:nginx certificates470ca # [1306186.624336] ca acme-order-renew-ca.foo-start[306]: + chmod -R u=rwX,g=,o= accounts/.471ca # [1306186.832782] ca systemd[1]: Reloading Nginx Web Server...472ca # [1306186.837470] ca systemd[1]: acme-order-renew-ca.foo.service: Deactivated successfully.473ca # [1306186.837696] ca systemd[1]: Finished Order (and renew) ACME certificate for ca.foo.474ca # [1306186.837906] ca systemd[1]: acme-order-renew-ca.foo.service: Consumed 1.205s CPU time over 1.325s wall clock time.475server # [1306187.509938] server acme-order-renew-test.foo-start[285]: 2026-09-19T10:16:47.495726142Z ERROR Error error="registration: set up client: new client: get directory at 'https://ca.foo/acme/acme/directory': unable to communicate with the API server: error: Get \"https://ca.foo/acme/acme/directory\": GET https://ca.foo/acme/acme/directory giving up after 2 attempt(s): Get \"https://ca.foo/acme/acme/directory\": tls: failed to verify certificate: x509: certificate signed by unknown authority"476server # [1306187.516132] server acme-order-renew-test.foo-start[273]: + echo Failed to fetch certificates. This may mean your DNS records are set up incorrectly. Self-signed certs are in place and dependant services will still start.477server # [1306187.516132] server acme-order-renew-test.foo-start[273]: Failed to fetch certificates. This may mean your DNS records are set up incorrectly. Self-signed certs are in place and dependant services will still start.478server # [1306187.516132] server acme-order-renew-test.foo-start[273]: + exit 10479server # [1306187.520878] server systemd[1]: acme-order-renew-test.foo.service: Main process exited, code=exited, status=10/n/a480server # [1306187.521083] server systemd[1]: acme-order-renew-test.foo.service: Failed with result 'exit-code'.481server # [1306187.521485] server systemd[1]: Failed to start Order (and renew) ACME certificate for test.foo.482server # [1306187.522004] server systemd[1]: Startup finished in 6.992s.483server # [1306187.522052] server systemd[1]: acme-order-renew-test.foo.service: Consumed 1.010s CPU time over 2.057s wall clock time.484ca # [1306187.801863] ca nginx[368]: nginx: the configuration file /nix/store/9xdq48zsmbzh971fy8df0q5bz7cca117-nginx.conf syntax is ok485ca # [1306187.802367] ca nginx[368]: nginx: configuration file /nix/store/9xdq48zsmbzh971fy8df0q5bz7cca117-nginx.conf test is successful486ca # [1306188.775871] ca systemd[1]: Reloaded Nginx Web Server.487ca # [1306188.776462] ca systemd[1]: Startup finished in 8.245s.488ca # [1306189.146471] ca systemd[1]: Starting Order (and renew) ACME certificate for ca.foo...489ca # [1306190.110883] ca acme-order-renew-ca.foo-start[383]: Waiting to acquire lock in /run/acme/490ca # [1306190.114459] ca acme-order-renew-ca.foo-start[383]: + set -euo pipefail491ca # [1306190.114532] ca acme-order-renew-ca.foo-start[383]: + exec492ca # [1306190.114583] ca acme-order-renew-ca.foo-start[383]: + /nix/store/fxkh6pl0y4nfbhdqdnhfkvsq7pbxq655-flock-0.4.0/bin/flock 11493ca # [1306190.115983] ca acme-order-renew-ca.foo-start[391]: ++ find accounts -path '*/keys/*.key' -print -quit494ca # [1306190.119053] ca acme-order-renew-ca.foo-start[383]: + '[' -n '' ']'495ca # [1306190.119119] ca acme-order-renew-ca.foo-start[383]: + exec496ca # [1306190.119168] ca acme-order-renew-ca.foo-start[383]: + '[' -e certificates/ca.foo.key ']'497ca # [1306190.119168] ca acme-order-renew-ca.foo-start[383]: + '[' -e certificates/ca.foo.crt ']'498ca # [1306190.119606] ca acme-order-renew-ca.foo-start[392]: ++ find accounts -name none@none.tld.key499ca # [1306190.122613] ca acme-order-renew-ca.foo-start[383]: + '[' -n accounts/ca.foo_1443/none@none.tld/none@none.tld.key ']'500ca # [1306190.122692] ca acme-order-renew-ca.foo-start[383]: + lego run --accept-tos --path . --email none@none.tld --http --http.webroot /var/lib/acme/acme-challenge --server https://ca.foo:1443/acme/acme/directory --key-type ec256 -d ca.foo --no-random-sleep --force-cert-domains501ca # [1306190.142916] ca acme-order-renew-ca.foo-start[393]: 2026-09-19T10:16:50.128706173Z INFO Renewing certificate cert-name=ca.foo502ca # [1306190.178604] ca step-ca[204]: time="2026-09-19T10:16:50Z" level=info duration="65.721µs" duration-ns=65721 fields.time="2026-09-19T10:16:50Z" method=GET name=ca path=/acme/acme/directory protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=18f5ff94-9dd3-41a4-ab88-72d42130ae43 response="{\"newNonce\":\"https://ca.foo:1443/acme/acme/new-nonce\",\"newAccount\":\"https://ca.foo:1443/acme/acme/new-account\",\"newOrder\":\"https://ca.foo:1443/acme/acme/new-order\",\"revokeCert\":\"https://ca.foo:1443/acme/acme/revoke-cert\",\"keyChange\":\"https://ca.foo:1443/acme/acme/key-change\"}" size=277 status=200 user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; arm64)" user-id=503ca # [1306190.179279] ca acme-order-renew-ca.foo-start[393]: 2026-09-19T10:16:50.165062111Z WARN The server does not advertise a renewal info endpoint. cert-name=ca.foo error="renewalInfo[get/post]: server does not advertise a renewal info endpoint"504ca # [1306190.179370] ca acme-order-renew-ca.foo-start[393]: 2026-09-19T10:16:50.165146672Z INFO Skip renewal: The certificate expires at 2026-12-18T10:16:46Z, the renewal can be performed in 59d23h59m35s834867408ns. cert-name=ca.foo505ca # [1306190.179891] ca acme-order-renew-ca.foo-start[383]: + touch out/acme-success506ca # [1306190.181970] ca acme-order-renew-ca.foo-start[383]: + cmp -s certificates/ca.foo.crt out/fullchain.pem507ca # [1306190.183204] ca acme-order-renew-ca.foo-start[383]: + for fixpath in out certificates508ca # [1306190.183204] ca acme-order-renew-ca.foo-start[383]: + '[' -d out ']'509ca # [1306190.183296] ca acme-order-renew-ca.foo-start[383]: + chmod -R u=rwX,g=rX,o= out510ca # [1306190.185230] ca acme-order-renew-ca.foo-start[383]: + chown -R acme:nginx out511ca # [1306190.188303] ca acme-order-renew-ca.foo-start[383]: + for fixpath in out certificates512ca # [1306190.188303] ca acme-order-renew-ca.foo-start[383]: + '[' -d certificates ']'513ca # [1306190.188398] ca acme-order-renew-ca.foo-start[383]: + chmod -R u=rwX,g=rX,o= certificates514ca # [1306190.190038] ca acme-order-renew-ca.foo-start[383]: + chown -R acme:nginx certificates515ca # [1306190.192927] ca acme-order-renew-ca.foo-start[383]: + chmod -R u=rwX,g=,o= accounts/.516ca: (finished: must succeed: systemctl restart acme-order-renew-ca.foo.service , in 7.42 seconds)517ca # [1306190.380638] ca systemd[1]: acme-order-renew-ca.foo.service: Deactivated successfully.518ca # [1306190.380997] ca systemd[1]: Finished Order (and renew) ACME certificate for ca.foo.519ca # [1306190.381545] ca systemd[1]: acme-order-renew-ca.foo.service: Consumed 1.160s CPU time over 1.234s wall clock time.520server: must succeed: systemctl restart acme-test.foo.service521server # [1306193.419798] server systemd[1]: acme-test.foo.service: Deactivated successfully.522server # [1306193.420027] server systemd[1]: Stopped Ensure certificate for test.foo.523server # [1306193.421115] server systemd[1]: Stopping Ensure certificate for test.foo...524server # [1306193.423043] server systemd[1]: Starting Ensure certificate for test.foo...525server: (finished: must succeed: systemctl restart acme-test.foo.service, in 1.00 seconds)526client: waiting for success: curl -v https://test.foo527* Host test.foo:443 was resolved.528* IPv6: 2001:db8:1::3529* IPv4: 192.168.1.3530* Trying [2001:db8:1::3]:443...531* ALPN: curl offers h2,http/1.1532} [5 bytes data]533* TLSv1.3 (OUT), TLS handshake, Client hello (1):534} [1552 bytes data]535* SSL Trust Anchors:536* OpenSSL default paths (fallback)537{ [5 bytes data]538* TLSv1.3 (IN), TLS handshake, Server hello (2):539{ [1210 bytes data]540* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):541{ [1 bytes data]542* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):543{ [19 bytes data]544* TLSv1.3 (IN), TLS handshake, Certificate (11):545{ [1010 bytes data]546* TLSv1.3 (IN), TLS handshake, CERT verify (15):547{ [110 bytes data]548* TLSv1.3 (IN), TLS handshake, Finished (20):549{ [52 bytes data]550* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):551} [1 bytes data]552* TLSv1.3 (OUT), TLS handshake, Finished (20):553} [52 bytes data]554* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey555* ALPN: server accepted h2556* Server certificate:557* subject: CN=test.foo558* start date: Sep 19 10:16:44 2026 GMT559* expire date: Oct 19 10:16:44 2028 GMT560* issuer: CN=minica root ca 2eeab3561* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384562* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384563* subjectAltName: "test.foo" matches cert's "test.foo"564* OpenSSL verify result: 13565* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)566* closing connection #0567curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)568More details here: https://curl.se/docs/sslcerts.html569570curl failed to verify the legitimacy of the server and therefore could not571establish a secure connection to it. To learn more about this situation and572how to fix it, please visit the webpage mentioned above.573server # [1306194.365665] server acme-test.foo-start[319]: Waiting to acquire lock in /run/acme/574server # [1306194.369067] server acme-test.foo-start[319]: + '[' -e out/acme-success ']'575server # [1306194.369067] server acme-test.foo-start[319]: + minica --ca-cert=ca/cert.pem --ca-key=ca/key.pem --domains=test.foo --ip-addresses=576server # [1306194.384226] server acme-test.foo-start[329]: + cd test.foo577server # [1306194.384802] server acme-test.foo-start[329]: + cp -vp cert.pem ../out/cert.pem578server # [1306194.385934] server acme-test.foo-start[330]: 'cert.pem' -> '../out/cert.pem'579server # [1306194.386265] server acme-test.foo-start[329]: + cp -vp key.pem ../out/key.pem580server # [1306194.387657] server acme-test.foo-start[329]: 'key.pem' -> '../out/key.pem'581server # [1306194.387913] server acme-test.foo-start[319]: + cat out/cert.pem ca/cert.pem582server # [1306194.389760] server acme-test.foo-start[319]: + cp ca/cert.pem out/chain.pem583server # [1306194.391425] server acme-test.foo-start[319]: + cat out/key.pem out/fullchain.pem584server # [1306194.393667] server acme-test.foo-start[319]: + for fixpath in out certificates585server # [1306194.393667] server acme-test.foo-start[319]: + '[' -d out ']'586server # [1306194.393760] server acme-test.foo-start[319]: + chmod -R u=rwX,g=rX,o= out587server # [1306194.395372] server acme-test.foo-start[319]: + chown -R acme:nginx out588server # [1306194.398331] server acme-test.foo-start[319]: + for fixpath in out certificates589server # [1306194.398386] server acme-test.foo-start[319]: + '[' -d certificates ']'590server # [1306194.403062] server systemd[1]: Finished Ensure certificate for test.foo.591server # [1306194.407669] server systemd[1]: Starting Order (and renew) ACME certificate for test.foo...592* Host test.foo:443 was resolved.593* IPv6: 2001:db8:1::3594* IPv4: 192.168.1.3595* Trying [2001:db8:1::3]:443...596* ALPN: curl offers h2,http/1.1597} [5 bytes data]598* TLSv1.3 (OUT), TLS handshake, Client hello (1):599} [1552 bytes data]600* SSL Trust Anchors:601* OpenSSL default paths (fallback)602{ [5 bytes data]603* TLSv1.3 (IN), TLS handshake, Server hello (2):604{ [1210 bytes data]605* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):606{ [1 bytes data]607* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):608{ [19 bytes data]609* TLSv1.3 (IN), TLS handshake, Certificate (11):610{ [1010 bytes data]611* TLSv1.3 (IN), TLS handshake, CERT verify (15):612{ [111 bytes data]613* TLSv1.3 (IN), TLS handshake, Finished (20):614{ [52 bytes data]615* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):616} [1 bytes data]617* TLSv1.3 (OUT), TLS handshake, Finished (20):618} [52 bytes data]619* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey620* ALPN: server accepted h2621* Server certificate:622* subject: CN=test.foo623* start date: Sep 19 10:16:44 2026 GMT624* expire date: Oct 19 10:16:44 2028 GMT625* issuer: CN=minica root ca 2eeab3626* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384627* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384628* subjectAltName: "test.foo" matches cert's "test.foo"629* OpenSSL verify result: 13630* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)631* closing connection #0632curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)633More details here: https://curl.se/docs/sslcerts.html634635curl failed to verify the legitimacy of the server and therefore could not636establish a secure connection to it. To learn more about this situation and637how to fix it, please visit the webpage mentioned above.638server # [1306195.316636] server acme-order-renew-test.foo-start[337]: Waiting to acquire lock in /run/acme/639server # [1306195.319932] server acme-order-renew-test.foo-start[337]: + set -euo pipefail640server # [1306195.320030] server acme-order-renew-test.foo-start[337]: + exec641server # [1306195.320084] server acme-order-renew-test.foo-start[337]: + /nix/store/fxkh6pl0y4nfbhdqdnhfkvsq7pbxq655-flock-0.4.0/bin/flock 11642server # [1306195.321451] server acme-order-renew-test.foo-start[345]: ++ find accounts -path '*/keys/*.key' -print -quit643server # [1306195.324605] server acme-order-renew-test.foo-start[337]: + '[' -n '' ']'644server # [1306195.324669] server acme-order-renew-test.foo-start[337]: + exec645server # [1306195.324717] server acme-order-renew-test.foo-start[337]: + '[' -e certificates/test.foo.key ']'646server # [1306195.324765] server acme-order-renew-test.foo-start[337]: + lego run --accept-tos --path . --email none@none.tld --http --http.webroot /var/lib/acme/acme-challenge --server https://ca.foo/acme/acme/directory --key-type ec256 -d test.foo --no-random-sleep --renew-force --ari-disable --force-cert-domains647server # [1306195.383388] server acme-order-renew-test.foo-start[346]: 2026-09-19T10:16:55.369160485Z INFO Trying to resolve the account by key648server # [1306195.395830] server acme-order-renew-test.foo-start[346]: 2026-09-19T10:16:55.381629536Z WARN retry: acme: error: 0 :: urn:ietf:params:acme:error:accountDoesNotExist :: Account does not exist649server # [1306195.396147] server acme-order-renew-test.foo-start[346]: 2026-09-19T10:16:55.381941260Z ERROR Error error="registration: resolve account by key: unable to communicate with the API server: error: Post \"https://ca.foo/acme/acme/new-account\": POST https://ca.foo/acme/acme/new-account giving up after 1 attempt(s): acme: error: 0 :: urn:ietf:params:acme:error:accountDoesNotExist :: Account does not exist"650server # [1306195.396578] server acme-order-renew-test.foo-start[337]: + echo Failed to fetch certificates. This may mean your DNS records are set up incorrectly. Self-signed certs are in place and dependant services will still start.651server # [1306195.396578] server acme-order-renew-test.foo-start[337]: Failed to fetch certificates. This may mean your DNS records are set up incorrectly. Self-signed certs are in place and dependant services will still start.652server # [1306195.396578] server acme-order-renew-test.foo-start[337]: + exit 10653server # [1306195.400897] server systemd[1]: acme-order-renew-test.foo.service: Main process exited, code=exited, status=10/n/a654server # [1306195.401097] server systemd[1]: acme-order-renew-test.foo.service: Failed with result 'exit-code'.655server # [1306195.401508] server systemd[1]: Failed to start Order (and renew) ACME certificate for test.foo.656ca # [1306195.382887] ca step-ca[204]: time="2026-09-19T10:16:55Z" level=info duration="63.921µs" duration-ns=63921 fields.time="2026-09-19T10:16:55Z" method=GET name=ca path=/acme/acme/directory protocol=HTTP/1.1 referer= remote-address="::1" request-id=9a5c06e7-43ec-4ffe-aedf-0f9967932d05 response="{\"newNonce\":\"https://ca.foo/acme/acme/new-nonce\",\"newAccount\":\"https://ca.foo/acme/acme/new-account\",\"newOrder\":\"https://ca.foo/acme/acme/new-order\",\"revokeCert\":\"https://ca.foo/acme/acme/revoke-cert\",\"keyChange\":\"https://ca.foo/acme/acme/key-change\"}" size=252 status=200 user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; arm64)" user-id=657ca # [1306195.388901] ca step-ca[204]: time="2026-09-19T10:16:55Z" level=info duration=1.174217ms duration-ns=1174217 fields.time="2026-09-19T10:16:55Z" method=HEAD name=ca nonce=U0NVSkJKckpWWGp1YXNwb1ZSRlkyRUhxUmtyMFJ3RFc path=/acme/acme/new-nonce protocol=HTTP/1.1 referer= remote-address=127.0.0.1 request-id=da785657-8474-4200-81a5-659b7939d77e size=0 status=200 user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; arm64)" user-id=658ca # [1306195.395125] ca step-ca[204]: time="2026-09-19T10:16:55Z" level=warning duration=1.853266ms duration-ns=1853266 error="account does not exist" fields.time="2026-09-19T10:16:55Z" method=POST name=ca nonce=eEFhNUVMMFVhdHY4amVuR0VqT1NoSGZhNEFHM1dTMlk path=/acme/acme/new-account protocol=HTTP/1.1 referer= remote-address="::1" request-id=aa96b905-560a-4303-a7ee-bdf9b4d432a0 response="{\"type\":\"urn:ietf:params:acme:error:accountDoesNotExist\",\"detail\":\"Account does not exist\"}" size=92 status=400 user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; arm64)" user-id=659* Trying [2001:db8:1::3]:443...660* Host test.foo:443 was resolved.661* IPv6: 2001:db8:1::3662* IPv4: 192.168.1.3663* ALPN: curl offers h2,http/1.1664} [5 bytes data]665* TLSv1.3 (OUT), TLS handshake, Client hello (1):666} [1552 bytes data]667* SSL Trust Anchors:668* OpenSSL default paths (fallback)669{ [5 bytes data]670* TLSv1.3 (IN), TLS handshake, Server hello (2):671{ [1210 bytes data]672* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):673{ [1 bytes data]674* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):675{ [19 bytes data]676* TLSv1.3 (IN), TLS handshake, Certificate (11):677{ [1010 bytes data]678* TLSv1.3 (IN), TLS handshake, CERT verify (15):679{ [112 bytes data]680* TLSv1.3 (IN), TLS handshake, Finished (20):681{ [52 bytes data]682* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):683} [1 bytes data]684* TLSv1.3 (OUT), TLS handshake, Finished (20):685} [52 bytes data]686* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey687* ALPN: server accepted h2688* Server certificate:689* subject: CN=test.foo690* start date: Sep 19 10:16:44 2026 GMT691* expire date: Oct 19 10:16:44 2028 GMT692* issuer: CN=minica root ca 2eeab3693* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384694* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384695* subjectAltName: "test.foo" matches cert's "test.foo"696* OpenSSL verify result: 13697* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)698* closing connection #0699curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)700More details here: https://curl.se/docs/sslcerts.html701702curl failed to verify the legitimacy of the server and therefore could not703establish a secure connection to it. To learn more about this situation and704how to fix it, please visit the webpage mentioned above.705* Host test.foo:443 was resolved.706* IPv6: 2001:db8:1::3707* IPv4: 192.168.1.3708* Trying [2001:db8:1::3]:443...709* ALPN: curl offers h2,http/1.1710} [5 bytes data]711* TLSv1.3 (OUT), TLS handshake, Client hello (1):712} [1552 bytes data]713* SSL Trust Anchors:714* OpenSSL default paths (fallback)715{ [5 bytes data]716* TLSv1.3 (IN), TLS handshake, Server hello (2):717{ [1210 bytes data]718* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):719{ [1 bytes data]720* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):721{ [19 bytes data]722* TLSv1.3 (IN), TLS handshake, Certificate (11):723{ [1010 bytes data]724* TLSv1.3 (IN), TLS handshake, CERT verify (15):725{ [110 bytes data]726* TLSv1.3 (IN), TLS handshake, Finished (20):727{ [52 bytes data]728* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):729} [1 bytes data]730* TLSv1.3 (OUT), TLS handshake, Finished (20):731} [52 bytes data]732* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey733* ALPN: server accepted h2734* Server certificate:735* subject: CN=test.foo736* start date: Sep 19 10:16:44 2026 GMT737* expire date: Oct 19 10:16:44 2028 GMT738* issuer: CN=minica root ca 2eeab3739* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384740* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384741* subjectAltName: "test.foo" matches cert's "test.foo"742* OpenSSL verify result: 13743* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)744* closing connection #0745curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)746More details here: https://curl.se/docs/sslcerts.html747748curl failed to verify the legitimacy of the server and therefore could not749establish a secure connection to it. To learn more about this situation and750how to fix it, please visit the webpage mentioned above.751* Host test.foo:443 was resolved.752* IPv6: 2001:db8:1::3753* IPv4: 192.168.1.3754* Trying [2001:db8:1::3]:443...755* ALPN: curl offers h2,http/1.1756} [5 bytes data]757* TLSv1.3 (OUT), TLS handshake, Client hello (1):758} [1552 bytes data]759* SSL Trust Anchors:760* OpenSSL default paths (fallback)761{ [5 bytes data]762* TLSv1.3 (IN), TLS handshake, Server hello (2):763{ [1210 bytes data]764* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):765{ [1 bytes data]766* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):767{ [19 bytes data]768* TLSv1.3 (IN), TLS handshake, Certificate (11):769{ [1010 bytes data]770* TLSv1.3 (IN), TLS handshake, CERT verify (15):771{ [111 bytes data]772* TLSv1.3 (IN), TLS handshake, Finished (20):773{ [52 bytes data]774* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):775} [1 bytes data]776* TLSv1.3 (OUT), TLS handshake, Finished (20):777} [52 bytes data]778* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey779* ALPN: server accepted h2780* Server certificate:781* subject: CN=test.foo782* start date: Sep 19 10:16:44 2026 GMT783* expire date: Oct 19 10:16:44 2028 GMT784* issuer: CN=minica root ca 2eeab3785* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384786* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384787* subjectAltName: "test.foo" matches cert's "test.foo"788* OpenSSL verify result: 13789* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)790* closing connection #0791curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)792More details here: https://curl.se/docs/sslcerts.html793794curl failed to verify the legitimacy of the server and therefore could not795establish a secure connection to it. To learn more about this situation and796how to fix it, please visit the webpage mentioned above.797* Trying [2001:db8:1::3]:443...798* Host test.foo:443 was resolved.799* IPv6: 2001:db8:1::3800* IPv4: 192.168.1.3801* ALPN: curl offers h2,http/1.1802} [5 bytes data]803* TLSv1.3 (OUT), TLS handshake, Client hello (1):804} [1552 bytes data]805* SSL Trust Anchors:806* OpenSSL default paths (fallback)807{ [5 bytes data]808* TLSv1.3 (IN), TLS handshake, Server hello (2):809{ [1210 bytes data]810* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):811{ [1 bytes data]812* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):813{ [19 bytes data]814* TLSv1.3 (IN), TLS handshake, Certificate (11):815{ [1010 bytes data]816* TLSv1.3 (IN), TLS handshake, CERT verify (15):817{ [111 bytes data]818* TLSv1.3 (IN), TLS handshake, Finished (20):819{ [52 bytes data]820* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):821} [1 bytes data]822* TLSv1.3 (OUT), TLS handshake, Finished (20):823} [52 bytes data]824* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey825* ALPN: server accepted h2826* Server certificate:827* subject: CN=test.foo828* start date: Sep 19 10:16:44 2026 GMT829* expire date: Oct 19 10:16:44 2028 GMT830* issuer: CN=minica root ca 2eeab3831* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384832* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384833* subjectAltName: "test.foo" matches cert's "test.foo"834* OpenSSL verify result: 13835* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)836* closing connection #0837curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)838More details here: https://curl.se/docs/sslcerts.html839840curl failed to verify the legitimacy of the server and therefore could not841establish a secure connection to it. To learn more about this situation and842how to fix it, please visit the webpage mentioned above.843* Trying [2001:db8:1::3]:443...844* Host test.foo:443 was resolved.845* IPv6: 2001:db8:1::3846* IPv4: 192.168.1.3847* ALPN: curl offers h2,http/1.1848} [5 bytes data]849* TLSv1.3 (OUT), TLS handshake, Client hello (1):850} [1552 bytes data]851* SSL Trust Anchors:852* OpenSSL default paths (fallback)853{ [5 bytes data]854* TLSv1.3 (IN), TLS handshake, Server hello (2):855{ [1210 bytes data]856* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):857{ [1 bytes data]858* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):859{ [19 bytes data]860* TLSv1.3 (IN), TLS handshake, Certificate (11):861{ [1010 bytes data]862* TLSv1.3 (IN), TLS handshake, CERT verify (15):863{ [112 bytes data]864* TLSv1.3 (IN), TLS handshake, Finished (20):865{ [52 bytes data]866* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):867} [1 bytes data]868* TLSv1.3 (OUT), TLS handshake, Finished (20):869} [52 bytes data]870* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey871* ALPN: server accepted h2872* Server certificate:873* subject: CN=test.foo874* start date: Sep 19 10:16:44 2026 GMT875* expire date: Oct 19 10:16:44 2028 GMT876* issuer: CN=minica root ca 2eeab3877* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384878* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384879* subjectAltName: "test.foo" matches cert's "test.foo"880* OpenSSL verify result: 13881* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)882* closing connection #0883curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)884More details here: https://curl.se/docs/sslcerts.html885886curl failed to verify the legitimacy of the server and therefore could not887establish a secure connection to it. To learn more about this situation and888how to fix it, please visit the webpage mentioned above.889* Host test.foo:443 was resolved.890* IPv6: 2001:db8:1::3891* IPv4: 192.168.1.3892* Trying [2001:db8:1::3]:443...893* ALPN: curl offers h2,http/1.1894} [5 bytes data]895* TLSv1.3 (OUT), TLS handshake, Client hello (1):896} [1552 bytes data]897* SSL Trust Anchors:898* OpenSSL default paths (fallback)899{ [5 bytes data]900* TLSv1.3 (IN), TLS handshake, Server hello (2):901{ [1210 bytes data]902* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):903{ [1 bytes data]904* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):905{ [19 bytes data]906* TLSv1.3 (IN), TLS handshake, Certificate (11):907{ [1010 bytes data]908* TLSv1.3 (IN), TLS handshake, CERT verify (15):909{ [111 bytes data]910* TLSv1.3 (IN), TLS handshake, Finished (20):911{ [52 bytes data]912* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):913} [1 bytes data]914* TLSv1.3 (OUT), TLS handshake, Finished (20):915} [52 bytes data]916* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey917* ALPN: server accepted h2918* Server certificate:919* subject: CN=test.foo920* start date: Sep 19 10:16:44 2026 GMT921* expire date: Oct 19 10:16:44 2028 GMT922* issuer: CN=minica root ca 2eeab3923* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384924* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384925* subjectAltName: "test.foo" matches cert's "test.foo"926* OpenSSL verify result: 13927* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)928* closing connection #0929curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)930More details here: https://curl.se/docs/sslcerts.html931932curl failed to verify the legitimacy of the server and therefore could not933establish a secure connection to it. To learn more about this situation and934how to fix it, please visit the webpage mentioned above.935* Host test.foo:443 was resolved.936* IPv6: 2001:db8:1::3937* IPv4: 192.168.1.3938* Trying [2001:db8:1::3]:443...939* ALPN: curl offers h2,http/1.1940} [5 bytes data]941* TLSv1.3 (OUT), TLS handshake, Client hello (1):942} [1552 bytes data]943* SSL Trust Anchors:944* OpenSSL default paths (fallback)945{ [5 bytes data]946* TLSv1.3 (IN), TLS handshake, Server hello (2):947{ [1210 bytes data]948* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):949{ [1 bytes data]950* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):951{ [19 bytes data]952* TLSv1.3 (IN), TLS handshake, Certificate (11):953{ [1010 bytes data]954* TLSv1.3 (IN), TLS handshake, CERT verify (15):955{ [110 bytes data]956* TLSv1.3 (IN), TLS handshake, Finished (20):957{ [52 bytes data]958* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):959} [1 bytes data]960* TLSv1.3 (OUT), TLS handshake, Finished (20):961} [52 bytes data]962* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey963* ALPN: server accepted h2964* Server certificate:965* subject: CN=test.foo966* start date: Sep 19 10:16:44 2026 GMT967* expire date: Oct 19 10:16:44 2028 GMT968* issuer: CN=minica root ca 2eeab3969* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384970* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384971* subjectAltName: "test.foo" matches cert's "test.foo"972* OpenSSL verify result: 13973* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)974* closing connection #0975curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)976More details here: https://curl.se/docs/sslcerts.html977978curl failed to verify the legitimacy of the server and therefore could not979establish a secure connection to it. To learn more about this situation and980how to fix it, please visit the webpage mentioned above.981* Host test.foo:443 was resolved.982* IPv6: 2001:db8:1::3983* IPv4: 192.168.1.3984* Trying [2001:db8:1::3]:443...985* ALPN: curl offers h2,http/1.1986} [5 bytes data]987* TLSv1.3 (OUT), TLS handshake, Client hello (1):988} [1552 bytes data]989* SSL Trust Anchors:990* OpenSSL default paths (fallback)991{ [5 bytes data]992* TLSv1.3 (IN), TLS handshake, Server hello (2):993{ [1210 bytes data]994* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):995{ [1 bytes data]996* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):997{ [19 bytes data]998* TLSv1.3 (IN), TLS handshake, Certificate (11):999{ [1010 bytes data]1000* TLSv1.3 (IN), TLS handshake, CERT verify (15):1001{ [110 bytes data]1002* TLSv1.3 (IN), TLS handshake, Finished (20):1003{ [52 bytes data]1004* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1005} [1 bytes data]1006* TLSv1.3 (OUT), TLS handshake, Finished (20):1007} [52 bytes data]1008* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1009* ALPN: server accepted h21010* Server certificate:1011* subject: CN=test.foo1012* start date: Sep 19 10:16:44 2026 GMT1013* expire date: Oct 19 10:16:44 2028 GMT1014* issuer: CN=minica root ca 2eeab31015* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841016* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841017* subjectAltName: "test.foo" matches cert's "test.foo"1018* OpenSSL verify result: 131019* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1020* closing connection #01021curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1022More details here: https://curl.se/docs/sslcerts.html10231024curl failed to verify the legitimacy of the server and therefore could not1025establish a secure connection to it. To learn more about this situation and1026how to fix it, please visit the webpage mentioned above.1027* Host test.foo:443 was resolved.1028* IPv6: 2001:db8:1::31029* IPv4: 192.168.1.31030* Trying [2001:db8:1::3]:443...1031* ALPN: curl offers h2,http/1.11032} [5 bytes data]1033* TLSv1.3 (OUT), TLS handshake, Client hello (1):1034} [1552 bytes data]1035* SSL Trust Anchors:1036* OpenSSL default paths (fallback)1037{ [5 bytes data]1038* TLSv1.3 (IN), TLS handshake, Server hello (2):1039{ [1210 bytes data]1040* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1041{ [1 bytes data]1042* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1043{ [19 bytes data]1044* TLSv1.3 (IN), TLS handshake, Certificate (11):1045{ [1010 bytes data]1046* TLSv1.3 (IN), TLS handshake, CERT verify (15):1047{ [110 bytes data]1048* TLSv1.3 (IN), TLS handshake, Finished (20):1049{ [52 bytes data]1050* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1051} [1 bytes data]1052* TLSv1.3 (OUT), TLS handshake, Finished (20):1053} [52 bytes data]1054* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1055* ALPN: server accepted h21056* Server certificate:1057* subject: CN=test.foo1058* start date: Sep 19 10:16:44 2026 GMT1059* expire date: Oct 19 10:16:44 2028 GMT1060* issuer: CN=minica root ca 2eeab31061* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841062* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841063* subjectAltName: "test.foo" matches cert's "test.foo"1064* OpenSSL verify result: 131065* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1066* closing connection #01067curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1068More details here: https://curl.se/docs/sslcerts.html10691070curl failed to verify the legitimacy of the server and therefore could not1071establish a secure connection to it. To learn more about this situation and1072how to fix it, please visit the webpage mentioned above.1073* Trying [2001:db8:1::3]:443...1074* Host test.foo:443 was resolved.1075* IPv6: 2001:db8:1::31076* IPv4: 192.168.1.31077* ALPN: curl offers h2,http/1.11078} [5 bytes data]1079* TLSv1.3 (OUT), TLS handshake, Client hello (1):1080} [1552 bytes data]1081* SSL Trust Anchors:1082* OpenSSL default paths (fallback)1083{ [5 bytes data]1084* TLSv1.3 (IN), TLS handshake, Server hello (2):1085{ [1210 bytes data]1086* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1087{ [1 bytes data]1088* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1089{ [19 bytes data]1090* TLSv1.3 (IN), TLS handshake, Certificate (11):1091{ [1010 bytes data]1092* TLSv1.3 (IN), TLS handshake, CERT verify (15):1093{ [112 bytes data]1094* TLSv1.3 (IN), TLS handshake, Finished (20):1095{ [52 bytes data]1096* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1097} [1 bytes data]1098* TLSv1.3 (OUT), TLS handshake, Finished (20):1099} [52 bytes data]1100* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1101* ALPN: server accepted h21102* Server certificate:1103* subject: CN=test.foo1104* start date: Sep 19 10:16:44 2026 GMT1105* expire date: Oct 19 10:16:44 2028 GMT1106* issuer: CN=minica root ca 2eeab31107* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841108* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841109* subjectAltName: "test.foo" matches cert's "test.foo"1110* OpenSSL verify result: 131111* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1112* closing connection #01113curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1114More details here: https://curl.se/docs/sslcerts.html11151116curl failed to verify the legitimacy of the server and therefore could not1117establish a secure connection to it. To learn more about this situation and1118how to fix it, please visit the webpage mentioned above.1119* Host test.foo:443 was resolved.1120* IPv6: 2001:db8:1::31121* IPv4: 192.168.1.31122* Trying [2001:db8:1::3]:443...1123* ALPN: curl offers h2,http/1.11124} [5 bytes data]1125* TLSv1.3 (OUT), TLS handshake, Client hello (1):1126} [1552 bytes data]1127* SSL Trust Anchors:1128* OpenSSL default paths (fallback)1129{ [5 bytes data]1130* TLSv1.3 (IN), TLS handshake, Server hello (2):1131{ [1210 bytes data]1132* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1133{ [1 bytes data]1134* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1135{ [19 bytes data]1136* TLSv1.3 (IN), TLS handshake, Certificate (11):1137{ [1010 bytes data]1138* TLSv1.3 (IN), TLS handshake, CERT verify (15):1139{ [111 bytes data]1140* TLSv1.3 (IN), TLS handshake, Finished (20):1141{ [52 bytes data]1142* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1143} [1 bytes data]1144* TLSv1.3 (OUT), TLS handshake, Finished (20):1145} [52 bytes data]1146* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1147* ALPN: server accepted h21148* Server certificate:1149* subject: CN=test.foo1150* start date: Sep 19 10:16:44 2026 GMT1151* expire date: Oct 19 10:16:44 2028 GMT1152* issuer: CN=minica root ca 2eeab31153* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841154* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841155* subjectAltName: "test.foo" matches cert's "test.foo"1156* OpenSSL verify result: 131157* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1158* closing connection #01159curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1160More details here: https://curl.se/docs/sslcerts.html11611162curl failed to verify the legitimacy of the server and therefore could not1163establish a secure connection to it. To learn more about this situation and1164how to fix it, please visit the webpage mentioned above.1165* Host test.foo:443 was resolved.1166* IPv6: 2001:db8:1::31167* IPv4: 192.168.1.31168* Trying [2001:db8:1::3]:443...1169* ALPN: curl offers h2,http/1.11170} [5 bytes data]1171* TLSv1.3 (OUT), TLS handshake, Client hello (1):1172} [1552 bytes data]1173* SSL Trust Anchors:1174* OpenSSL default paths (fallback)1175{ [5 bytes data]1176* TLSv1.3 (IN), TLS handshake, Server hello (2):1177{ [1210 bytes data]1178* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1179{ [1 bytes data]1180* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1181{ [19 bytes data]1182* TLSv1.3 (IN), TLS handshake, Certificate (11):1183{ [1010 bytes data]1184* TLSv1.3 (IN), TLS handshake, CERT verify (15):1185{ [112 bytes data]1186* TLSv1.3 (IN), TLS handshake, Finished (20):1187{ [52 bytes data]1188* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1189} [1 bytes data]1190* TLSv1.3 (OUT), TLS handshake, Finished (20):1191} [52 bytes data]1192* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1193* ALPN: server accepted h21194* Server certificate:1195* subject: CN=test.foo1196* start date: Sep 19 10:16:44 2026 GMT1197* expire date: Oct 19 10:16:44 2028 GMT1198* issuer: CN=minica root ca 2eeab31199* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841200* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841201* subjectAltName: "test.foo" matches cert's "test.foo"1202* OpenSSL verify result: 131203* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1204* closing connection #01205curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1206More details here: https://curl.se/docs/sslcerts.html12071208curl failed to verify the legitimacy of the server and therefore could not1209establish a secure connection to it. To learn more about this situation and1210how to fix it, please visit the webpage mentioned above.1211* Host test.foo:443 was resolved.1212* IPv6: 2001:db8:1::31213* IPv4: 192.168.1.31214* Trying [2001:db8:1::3]:443...1215* ALPN: curl offers h2,http/1.11216} [5 bytes data]1217* TLSv1.3 (OUT), TLS handshake, Client hello (1):1218} [1552 bytes data]1219* SSL Trust Anchors:1220* OpenSSL default paths (fallback)1221{ [5 bytes data]1222* TLSv1.3 (IN), TLS handshake, Server hello (2):1223{ [1210 bytes data]1224* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1225{ [1 bytes data]1226* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1227{ [19 bytes data]1228* TLSv1.3 (IN), TLS handshake, Certificate (11):1229{ [1010 bytes data]1230* TLSv1.3 (IN), TLS handshake, CERT verify (15):1231{ [110 bytes data]1232* TLSv1.3 (IN), TLS handshake, Finished (20):1233{ [52 bytes data]1234* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1235} [1 bytes data]1236* TLSv1.3 (OUT), TLS handshake, Finished (20):1237} [52 bytes data]1238* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1239* ALPN: server accepted h21240* Server certificate:1241* subject: CN=test.foo1242* start date: Sep 19 10:16:44 2026 GMT1243* expire date: Oct 19 10:16:44 2028 GMT1244* issuer: CN=minica root ca 2eeab31245* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841246* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841247* subjectAltName: "test.foo" matches cert's "test.foo"1248* OpenSSL verify result: 131249* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1250* closing connection #01251curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1252More details here: https://curl.se/docs/sslcerts.html12531254curl failed to verify the legitimacy of the server and therefore could not1255establish a secure connection to it. To learn more about this situation and1256how to fix it, please visit the webpage mentioned above.1257* Host test.foo:443 was resolved.1258* IPv6: 2001:db8:1::31259* IPv4: 192.168.1.31260* Trying [2001:db8:1::3]:443...1261* ALPN: curl offers h2,http/1.11262} [5 bytes data]1263* TLSv1.3 (OUT), TLS handshake, Client hello (1):1264} [1552 bytes data]1265* SSL Trust Anchors:1266* OpenSSL default paths (fallback)1267{ [5 bytes data]1268* TLSv1.3 (IN), TLS handshake, Server hello (2):1269{ [1210 bytes data]1270* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1271{ [1 bytes data]1272* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1273{ [19 bytes data]1274* TLSv1.3 (IN), TLS handshake, Certificate (11):1275{ [1010 bytes data]1276* TLSv1.3 (IN), TLS handshake, CERT verify (15):1277{ [111 bytes data]1278* TLSv1.3 (IN), TLS handshake, Finished (20):1279{ [52 bytes data]1280* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1281} [1 bytes data]1282* TLSv1.3 (OUT), TLS handshake, Finished (20):1283} [52 bytes data]1284* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1285* ALPN: server accepted h21286* Server certificate:1287* subject: CN=test.foo1288* start date: Sep 19 10:16:44 2026 GMT1289* expire date: Oct 19 10:16:44 2028 GMT1290* issuer: CN=minica root ca 2eeab31291* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841292* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841293* subjectAltName: "test.foo" matches cert's "test.foo"1294* OpenSSL verify result: 131295* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1296* closing connection #01297curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1298More details here: https://curl.se/docs/sslcerts.html12991300curl failed to verify the legitimacy of the server and therefore could not1301establish a secure connection to it. To learn more about this situation and1302how to fix it, please visit the webpage mentioned above.1303* Host test.foo:443 was resolved.1304* IPv6: 2001:db8:1::31305* IPv4: 192.168.1.31306* Trying [2001:db8:1::3]:443...1307* ALPN: curl offers h2,http/1.11308} [5 bytes data]1309* TLSv1.3 (OUT), TLS handshake, Client hello (1):1310} [1552 bytes data]1311* SSL Trust Anchors:1312* OpenSSL default paths (fallback)1313{ [5 bytes data]1314* TLSv1.3 (IN), TLS handshake, Server hello (2):1315{ [1210 bytes data]1316* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1317{ [1 bytes data]1318* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1319{ [19 bytes data]1320* TLSv1.3 (IN), TLS handshake, Certificate (11):1321{ [1010 bytes data]1322* TLSv1.3 (IN), TLS handshake, CERT verify (15):1323{ [110 bytes data]1324* TLSv1.3 (IN), TLS handshake, Finished (20):1325{ [52 bytes data]1326* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1327} [1 bytes data]1328* TLSv1.3 (OUT), TLS handshake, Finished (20):1329} [52 bytes data]1330* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1331* ALPN: server accepted h21332* Server certificate:1333* subject: CN=test.foo1334* start date: Sep 19 10:16:44 2026 GMT1335* expire date: Oct 19 10:16:44 2028 GMT1336* issuer: CN=minica root ca 2eeab31337* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841338* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841339* subjectAltName: "test.foo" matches cert's "test.foo"1340* OpenSSL verify result: 131341* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1342* closing connection #01343curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1344More details here: https://curl.se/docs/sslcerts.html13451346curl failed to verify the legitimacy of the server and therefore could not1347establish a secure connection to it. To learn more about this situation and1348how to fix it, please visit the webpage mentioned above.1349* Host test.foo:443 was resolved.1350* IPv6: 2001:db8:1::31351* IPv4: 192.168.1.31352* Trying [2001:db8:1::3]:443...1353* ALPN: curl offers h2,http/1.11354} [5 bytes data]1355* TLSv1.3 (OUT), TLS handshake, Client hello (1):1356} [1552 bytes data]1357* SSL Trust Anchors:1358* OpenSSL default paths (fallback)1359{ [5 bytes data]1360* TLSv1.3 (IN), TLS handshake, Server hello (2):1361{ [1210 bytes data]1362* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1363{ [1 bytes data]1364* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1365{ [19 bytes data]1366* TLSv1.3 (IN), TLS handshake, Certificate (11):1367{ [1010 bytes data]1368* TLSv1.3 (IN), TLS handshake, CERT verify (15):1369{ [111 bytes data]1370* TLSv1.3 (IN), TLS handshake, Finished (20):1371{ [52 bytes data]1372* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1373} [1 bytes data]1374* TLSv1.3 (OUT), TLS handshake, Finished (20):1375} [52 bytes data]1376* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1377* ALPN: server accepted h21378* Server certificate:1379* subject: CN=test.foo1380* start date: Sep 19 10:16:44 2026 GMT1381* expire date: Oct 19 10:16:44 2028 GMT1382* issuer: CN=minica root ca 2eeab31383* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841384* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841385* subjectAltName: "test.foo" matches cert's "test.foo"1386* OpenSSL verify result: 131387* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1388* closing connection #01389curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1390More details here: https://curl.se/docs/sslcerts.html13911392curl failed to verify the legitimacy of the server and therefore could not1393establish a secure connection to it. To learn more about this situation and1394how to fix it, please visit the webpage mentioned above.1395* Host test.foo:443 was resolved.1396* IPv6: 2001:db8:1::31397* IPv4: 192.168.1.31398* Trying [2001:db8:1::3]:443...1399* ALPN: curl offers h2,http/1.11400} [5 bytes data]1401* TLSv1.3 (OUT), TLS handshake, Client hello (1):1402} [1552 bytes data]1403* SSL Trust Anchors:1404* OpenSSL default paths (fallback)1405{ [5 bytes data]1406* TLSv1.3 (IN), TLS handshake, Server hello (2):1407{ [1210 bytes data]1408* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1409{ [1 bytes data]1410* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1411{ [19 bytes data]1412* TLSv1.3 (IN), TLS handshake, Certificate (11):1413{ [1010 bytes data]1414* TLSv1.3 (IN), TLS handshake, CERT verify (15):1415{ [111 bytes data]1416* TLSv1.3 (IN), TLS handshake, Finished (20):1417{ [52 bytes data]1418* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1419} [1 bytes data]1420* TLSv1.3 (OUT), TLS handshake, Finished (20):1421} [52 bytes data]1422* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1423* ALPN: server accepted h21424* Server certificate:1425* subject: CN=test.foo1426* start date: Sep 19 10:16:44 2026 GMT1427* expire date: Oct 19 10:16:44 2028 GMT1428* issuer: CN=minica root ca 2eeab31429* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841430* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841431* subjectAltName: "test.foo" matches cert's "test.foo"1432* OpenSSL verify result: 131433* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1434* closing connection #01435curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1436More details here: https://curl.se/docs/sslcerts.html14371438curl failed to verify the legitimacy of the server and therefore could not1439establish a secure connection to it. To learn more about this situation and1440how to fix it, please visit the webpage mentioned above.1441* Trying [2001:db8:1::3]:443...1442* ALPN: curl offers h2,http/1.11443} [5 bytes data]1444* TLSv1.3 (OUT), TLS handshake, Client hello (1):1445} [1552 bytes data]1446* SSL Trust Anchors:1447* OpenSSL default paths (fallback)1448* Host test.foo:443 was resolved.1449* IPv6: 2001:db8:1::31450* IPv4: 192.168.1.31451{ [5 bytes data]1452* TLSv1.3 (IN), TLS handshake, Server hello (2):1453{ [1210 bytes data]1454* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1455{ [1 bytes data]1456* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1457{ [19 bytes data]1458* TLSv1.3 (IN), TLS handshake, Certificate (11):1459{ [1010 bytes data]1460* TLSv1.3 (IN), TLS handshake, CERT verify (15):1461{ [112 bytes data]1462* TLSv1.3 (IN), TLS handshake, Finished (20):1463{ [52 bytes data]1464* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1465} [1 bytes data]1466* TLSv1.3 (OUT), TLS handshake, Finished (20):1467} [52 bytes data]1468* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1469* ALPN: server accepted h21470* Server certificate:1471* subject: CN=test.foo1472* start date: Sep 19 10:16:44 2026 GMT1473* expire date: Oct 19 10:16:44 2028 GMT1474* issuer: CN=minica root ca 2eeab31475* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841476* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841477* subjectAltName: "test.foo" matches cert's "test.foo"1478* OpenSSL verify result: 131479* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1480* closing connection #01481curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1482More details here: https://curl.se/docs/sslcerts.html14831484curl failed to verify the legitimacy of the server and therefore could not1485establish a secure connection to it. To learn more about this situation and1486how to fix it, please visit the webpage mentioned above.1487* Host test.foo:443 was resolved.1488* IPv6: 2001:db8:1::31489* IPv4: 192.168.1.31490* Trying [2001:db8:1::3]:443...1491* ALPN: curl offers h2,http/1.11492} [5 bytes data]1493* TLSv1.3 (OUT), TLS handshake, Client hello (1):1494} [1552 bytes data]1495* SSL Trust Anchors:1496* OpenSSL default paths (fallback)1497{ [5 bytes data]1498* TLSv1.3 (IN), TLS handshake, Server hello (2):1499{ [1210 bytes data]1500* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1501{ [1 bytes data]1502* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1503{ [19 bytes data]1504* TLSv1.3 (IN), TLS handshake, Certificate (11):1505{ [1010 bytes data]1506* TLSv1.3 (IN), TLS handshake, CERT verify (15):1507{ [111 bytes data]1508* TLSv1.3 (IN), TLS handshake, Finished (20):1509{ [52 bytes data]1510* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1511} [1 bytes data]1512* TLSv1.3 (OUT), TLS handshake, Finished (20):1513} [52 bytes data]1514* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1515* ALPN: server accepted h21516* Server certificate:1517* subject: CN=test.foo1518* start date: Sep 19 10:16:44 2026 GMT1519* expire date: Oct 19 10:16:44 2028 GMT1520* issuer: CN=minica root ca 2eeab31521* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841522* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841523* subjectAltName: "test.foo" matches cert's "test.foo"1524* OpenSSL verify result: 131525* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1526* closing connection #01527curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1528More details here: https://curl.se/docs/sslcerts.html15291530curl failed to verify the legitimacy of the server and therefore could not1531establish a secure connection to it. To learn more about this situation and1532how to fix it, please visit the webpage mentioned above.1533* Host test.foo:443 was resolved.1534* IPv6: 2001:db8:1::31535* IPv4: 192.168.1.31536* Trying [2001:db8:1::3]:443...1537* ALPN: curl offers h2,http/1.11538} [5 bytes data]1539* TLSv1.3 (OUT), TLS handshake, Client hello (1):1540} [1552 bytes data]1541* SSL Trust Anchors:1542* OpenSSL default paths (fallback)1543{ [5 bytes data]1544* TLSv1.3 (IN), TLS handshake, Server hello (2):1545{ [1210 bytes data]1546* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1547{ [1 bytes data]1548* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1549{ [19 bytes data]1550* TLSv1.3 (IN), TLS handshake, Certificate (11):1551{ [1010 bytes data]1552* TLSv1.3 (IN), TLS handshake, CERT verify (15):1553{ [110 bytes data]1554* TLSv1.3 (IN), TLS handshake, Finished (20):1555{ [52 bytes data]1556* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1557} [1 bytes data]1558* TLSv1.3 (OUT), TLS handshake, Finished (20):1559} [52 bytes data]1560* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1561* ALPN: server accepted h21562* Server certificate:1563* subject: CN=test.foo1564* start date: Sep 19 10:16:44 2026 GMT1565* expire date: Oct 19 10:16:44 2028 GMT1566* issuer: CN=minica root ca 2eeab31567* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841568* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841569* subjectAltName: "test.foo" matches cert's "test.foo"1570* OpenSSL verify result: 131571* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1572* closing connection #01573curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1574More details here: https://curl.se/docs/sslcerts.html15751576curl failed to verify the legitimacy of the server and therefore could not1577establish a secure connection to it. To learn more about this situation and1578how to fix it, please visit the webpage mentioned above.1579* Host test.foo:443 was resolved.1580* IPv6: 2001:db8:1::31581* IPv4: 192.168.1.31582* Trying [2001:db8:1::3]:443...1583* ALPN: curl offers h2,http/1.11584} [5 bytes data]1585* TLSv1.3 (OUT), TLS handshake, Client hello (1):1586} [1552 bytes data]1587* SSL Trust Anchors:1588* OpenSSL default paths (fallback)1589{ [5 bytes data]1590* TLSv1.3 (IN), TLS handshake, Server hello (2):1591{ [1210 bytes data]1592* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1593{ [1 bytes data]1594* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1595{ [19 bytes data]1596* TLSv1.3 (IN), TLS handshake, Certificate (11):1597{ [1010 bytes data]1598* TLSv1.3 (IN), TLS handshake, CERT verify (15):1599{ [112 bytes data]1600* TLSv1.3 (IN), TLS handshake, Finished (20):1601{ [52 bytes data]1602* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1603} [1 bytes data]1604* TLSv1.3 (OUT), TLS handshake, Finished (20):1605} [52 bytes data]1606* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1607* ALPN: server accepted h21608* Server certificate:1609* subject: CN=test.foo1610* start date: Sep 19 10:16:44 2026 GMT1611* expire date: Oct 19 10:16:44 2028 GMT1612* issuer: CN=minica root ca 2eeab31613* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841614* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841615* subjectAltName: "test.foo" matches cert's "test.foo"1616* OpenSSL verify result: 131617* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1618* closing connection #01619curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1620More details here: https://curl.se/docs/sslcerts.html16211622curl failed to verify the legitimacy of the server and therefore could not1623establish a secure connection to it. To learn more about this situation and1624how to fix it, please visit the webpage mentioned above.1625* Host test.foo:443 was resolved.1626* IPv6: 2001:db8:1::31627* IPv4: 192.168.1.31628* Trying [2001:db8:1::3]:443...1629* ALPN: curl offers h2,http/1.11630} [5 bytes data]1631* TLSv1.3 (OUT), TLS handshake, Client hello (1):1632} [1552 bytes data]1633* SSL Trust Anchors:1634* OpenSSL default paths (fallback)1635{ [5 bytes data]1636* TLSv1.3 (IN), TLS handshake, Server hello (2):1637{ [1210 bytes data]1638* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1639{ [1 bytes data]1640* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1641{ [19 bytes data]1642* TLSv1.3 (IN), TLS handshake, Certificate (11):1643{ [1010 bytes data]1644* TLSv1.3 (IN), TLS handshake, CERT verify (15):1645{ [110 bytes data]1646* TLSv1.3 (IN), TLS handshake, Finished (20):1647{ [52 bytes data]1648* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1649} [1 bytes data]1650* TLSv1.3 (OUT), TLS handshake, Finished (20):1651} [52 bytes data]1652* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1653* ALPN: server accepted h21654* Server certificate:1655* subject: CN=test.foo1656* start date: Sep 19 10:16:44 2026 GMT1657* expire date: Oct 19 10:16:44 2028 GMT1658* issuer: CN=minica root ca 2eeab31659* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841660* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841661* subjectAltName: "test.foo" matches cert's "test.foo"1662* OpenSSL verify result: 131663* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1664* closing connection #01665curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1666More details here: https://curl.se/docs/sslcerts.html16671668curl failed to verify the legitimacy of the server and therefore could not1669establish a secure connection to it. To learn more about this situation and1670how to fix it, please visit the webpage mentioned above.1671* Host test.foo:443 was resolved.1672* IPv6: 2001:db8:1::31673* IPv4: 192.168.1.31674* Trying [2001:db8:1::3]:443...1675* ALPN: curl offers h2,http/1.11676} [5 bytes data]1677* TLSv1.3 (OUT), TLS handshake, Client hello (1):1678} [1552 bytes data]1679* SSL Trust Anchors:1680* OpenSSL default paths (fallback)1681{ [5 bytes data]1682* TLSv1.3 (IN), TLS handshake, Server hello (2):1683{ [1210 bytes data]1684* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1685{ [1 bytes data]1686* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1687{ [19 bytes data]1688* TLSv1.3 (IN), TLS handshake, Certificate (11):1689{ [1010 bytes data]1690* TLSv1.3 (IN), TLS handshake, CERT verify (15):1691{ [112 bytes data]1692* TLSv1.3 (IN), TLS handshake, Finished (20):1693{ [52 bytes data]1694* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1695} [1 bytes data]1696* TLSv1.3 (OUT), TLS handshake, Finished (20):1697} [52 bytes data]1698* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1699* ALPN: server accepted h21700* Server certificate:1701* subject: CN=test.foo1702* start date: Sep 19 10:16:44 2026 GMT1703* expire date: Oct 19 10:16:44 2028 GMT1704* issuer: CN=minica root ca 2eeab31705* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841706* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841707* subjectAltName: "test.foo" matches cert's "test.foo"1708* OpenSSL verify result: 131709* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1710* closing connection #01711curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1712More details here: https://curl.se/docs/sslcerts.html17131714curl failed to verify the legitimacy of the server and therefore could not1715establish a secure connection to it. To learn more about this situation and1716how to fix it, please visit the webpage mentioned above.1717* Host test.foo:443 was resolved.1718* IPv6: 2001:db8:1::31719* IPv4: 192.168.1.31720* Trying [2001:db8:1::3]:443...1721* ALPN: curl offers h2,http/1.11722} [5 bytes data]1723* TLSv1.3 (OUT), TLS handshake, Client hello (1):1724} [1552 bytes data]1725* SSL Trust Anchors:1726* OpenSSL default paths (fallback)1727{ [5 bytes data]1728* TLSv1.3 (IN), TLS handshake, Server hello (2):1729{ [1210 bytes data]1730* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1731{ [1 bytes data]1732* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1733{ [19 bytes data]1734* TLSv1.3 (IN), TLS handshake, Certificate (11):1735{ [1010 bytes data]1736* TLSv1.3 (IN), TLS handshake, CERT verify (15):1737{ [112 bytes data]1738* TLSv1.3 (IN), TLS handshake, Finished (20):1739{ [52 bytes data]1740* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1741} [1 bytes data]1742* TLSv1.3 (OUT), TLS handshake, Finished (20):1743} [52 bytes data]1744* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1745* ALPN: server accepted h21746* Server certificate:1747* subject: CN=test.foo1748* start date: Sep 19 10:16:44 2026 GMT1749* expire date: Oct 19 10:16:44 2028 GMT1750* issuer: CN=minica root ca 2eeab31751* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841752* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841753* subjectAltName: "test.foo" matches cert's "test.foo"1754* OpenSSL verify result: 131755* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1756* closing connection #01757curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1758More details here: https://curl.se/docs/sslcerts.html17591760curl failed to verify the legitimacy of the server and therefore could not1761establish a secure connection to it. To learn more about this situation and1762how to fix it, please visit the webpage mentioned above.1763* Host test.foo:443 was resolved.1764* IPv6: 2001:db8:1::31765* IPv4: 192.168.1.31766* Trying [2001:db8:1::3]:443...1767* ALPN: curl offers h2,http/1.11768} [5 bytes data]1769* TLSv1.3 (OUT), TLS handshake, Client hello (1):1770} [1552 bytes data]1771* SSL Trust Anchors:1772* OpenSSL default paths (fallback)1773{ [5 bytes data]1774* TLSv1.3 (IN), TLS handshake, Server hello (2):1775{ [1210 bytes data]1776* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1777{ [1 bytes data]1778* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1779{ [19 bytes data]1780* TLSv1.3 (IN), TLS handshake, Certificate (11):1781{ [1010 bytes data]1782* TLSv1.3 (IN), TLS handshake, CERT verify (15):1783{ [110 bytes data]1784* TLSv1.3 (IN), TLS handshake, Finished (20):1785{ [52 bytes data]1786* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1787} [1 bytes data]1788* TLSv1.3 (OUT), TLS handshake, Finished (20):1789} [52 bytes data]1790* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1791* ALPN: server accepted h21792* Server certificate:1793* subject: CN=test.foo1794* start date: Sep 19 10:16:44 2026 GMT1795* expire date: Oct 19 10:16:44 2028 GMT1796* issuer: CN=minica root ca 2eeab31797* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841798* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841799* subjectAltName: "test.foo" matches cert's "test.foo"1800* OpenSSL verify result: 131801* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1802* closing connection #01803curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1804More details here: https://curl.se/docs/sslcerts.html18051806curl failed to verify the legitimacy of the server and therefore could not1807establish a secure connection to it. To learn more about this situation and1808how to fix it, please visit the webpage mentioned above.1809* Host test.foo:443 was resolved.1810* IPv6: 2001:db8:1::31811* IPv4: 192.168.1.31812* Trying [2001:db8:1::3]:443...1813* ALPN: curl offers h2,http/1.11814} [5 bytes data]1815* TLSv1.3 (OUT), TLS handshake, Client hello (1):1816} [1552 bytes data]1817* SSL Trust Anchors:1818* OpenSSL default paths (fallback)1819{ [5 bytes data]1820* TLSv1.3 (IN), TLS handshake, Server hello (2):1821{ [1210 bytes data]1822* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1823{ [1 bytes data]1824* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1825{ [19 bytes data]1826* TLSv1.3 (IN), TLS handshake, Certificate (11):1827{ [1010 bytes data]1828* TLSv1.3 (IN), TLS handshake, CERT verify (15):1829{ [111 bytes data]1830* TLSv1.3 (IN), TLS handshake, Finished (20):1831{ [52 bytes data]1832* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1833} [1 bytes data]1834* TLSv1.3 (OUT), TLS handshake, Finished (20):1835} [52 bytes data]1836* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1837* ALPN: server accepted h21838* Server certificate:1839* subject: CN=test.foo1840* start date: Sep 19 10:16:44 2026 GMT1841* expire date: Oct 19 10:16:44 2028 GMT1842* issuer: CN=minica root ca 2eeab31843* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841844* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841845* subjectAltName: "test.foo" matches cert's "test.foo"1846* OpenSSL verify result: 131847* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1848* closing connection #01849curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1850More details here: https://curl.se/docs/sslcerts.html18511852curl failed to verify the legitimacy of the server and therefore could not1853establish a secure connection to it. To learn more about this situation and1854how to fix it, please visit the webpage mentioned above.1855* Host test.foo:443 was resolved.1856* IPv6: 2001:db8:1::31857* IPv4: 192.168.1.31858* Trying [2001:db8:1::3]:443...1859* ALPN: curl offers h2,http/1.11860} [5 bytes data]1861* TLSv1.3 (OUT), TLS handshake, Client hello (1):1862} [1552 bytes data]1863* SSL Trust Anchors:1864* OpenSSL default paths (fallback)1865{ [5 bytes data]1866* TLSv1.3 (IN), TLS handshake, Server hello (2):1867{ [1210 bytes data]1868* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1869{ [1 bytes data]1870* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1871{ [19 bytes data]1872* TLSv1.3 (IN), TLS handshake, Certificate (11):1873{ [1010 bytes data]1874* TLSv1.3 (IN), TLS handshake, CERT verify (15):1875{ [110 bytes data]1876* TLSv1.3 (IN), TLS handshake, Finished (20):1877{ [52 bytes data]1878* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1879} [1 bytes data]1880* TLSv1.3 (OUT), TLS handshake, Finished (20):1881} [52 bytes data]1882* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1883* ALPN: server accepted h21884* Server certificate:1885* subject: CN=test.foo1886* start date: Sep 19 10:16:44 2026 GMT1887* expire date: Oct 19 10:16:44 2028 GMT1888* issuer: CN=minica root ca 2eeab31889* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841890* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841891* subjectAltName: "test.foo" matches cert's "test.foo"1892* OpenSSL verify result: 131893* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1894* closing connection #01895curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1896More details here: https://curl.se/docs/sslcerts.html18971898curl failed to verify the legitimacy of the server and therefore could not1899establish a secure connection to it. To learn more about this situation and1900how to fix it, please visit the webpage mentioned above.1901* Host test.foo:443 was resolved.1902* IPv6: 2001:db8:1::31903* IPv4: 192.168.1.31904* Trying [2001:db8:1::3]:443...1905* ALPN: curl offers h2,http/1.11906} [5 bytes data]1907* TLSv1.3 (OUT), TLS handshake, Client hello (1):1908} [1552 bytes data]1909* SSL Trust Anchors:1910* OpenSSL default paths (fallback)1911{ [5 bytes data]1912* TLSv1.3 (IN), TLS handshake, Server hello (2):1913{ [1210 bytes data]1914* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1915{ [1 bytes data]1916* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1917{ [19 bytes data]1918* TLSv1.3 (IN), TLS handshake, Certificate (11):1919{ [1010 bytes data]1920* TLSv1.3 (IN), TLS handshake, CERT verify (15):1921{ [111 bytes data]1922* TLSv1.3 (IN), TLS handshake, Finished (20):1923{ [52 bytes data]1924* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1925} [1 bytes data]1926* TLSv1.3 (OUT), TLS handshake, Finished (20):1927} [52 bytes data]1928* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1929* ALPN: server accepted h21930* Server certificate:1931* subject: CN=test.foo1932* start date: Sep 19 10:16:44 2026 GMT1933* expire date: Oct 19 10:16:44 2028 GMT1934* issuer: CN=minica root ca 2eeab31935* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841936* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841937* subjectAltName: "test.foo" matches cert's "test.foo"1938* OpenSSL verify result: 131939* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1940* closing connection #01941curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1942More details here: https://curl.se/docs/sslcerts.html19431944curl failed to verify the legitimacy of the server and therefore could not1945establish a secure connection to it. To learn more about this situation and1946how to fix it, please visit the webpage mentioned above.1947* Host test.foo:443 was resolved.1948* IPv6: 2001:db8:1::31949* IPv4: 192.168.1.31950* Trying [2001:db8:1::3]:443...1951* ALPN: curl offers h2,http/1.11952} [5 bytes data]1953* TLSv1.3 (OUT), TLS handshake, Client hello (1):1954} [1552 bytes data]1955* SSL Trust Anchors:1956* OpenSSL default paths (fallback)1957{ [5 bytes data]1958* TLSv1.3 (IN), TLS handshake, Server hello (2):1959{ [1210 bytes data]1960* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1961{ [1 bytes data]1962* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1963{ [19 bytes data]1964* TLSv1.3 (IN), TLS handshake, Certificate (11):1965{ [1010 bytes data]1966* TLSv1.3 (IN), TLS handshake, CERT verify (15):1967{ [111 bytes data]1968* TLSv1.3 (IN), TLS handshake, Finished (20):1969{ [52 bytes data]1970* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1971} [1 bytes data]1972* TLSv1.3 (OUT), TLS handshake, Finished (20):1973} [52 bytes data]1974* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1975* ALPN: server accepted h21976* Server certificate:1977* subject: CN=test.foo1978* start date: Sep 19 10:16:44 2026 GMT1979* expire date: Oct 19 10:16:44 2028 GMT1980* issuer: CN=minica root ca 2eeab31981* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841982* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841983* subjectAltName: "test.foo" matches cert's "test.foo"1984* OpenSSL verify result: 131985* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1986* closing connection #01987curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1988More details here: https://curl.se/docs/sslcerts.html19891990curl failed to verify the legitimacy of the server and therefore could not1991establish a secure connection to it. To learn more about this situation and1992how to fix it, please visit the webpage mentioned above.1993* Host test.foo:443 was resolved.1994* IPv6: 2001:db8:1::31995* IPv4: 192.168.1.31996* Trying [2001:db8:1::3]:443...1997* ALPN: curl offers h2,http/1.11998} [5 bytes data]1999* TLSv1.3 (OUT), TLS handshake, Client hello (1):2000} [1552 bytes data]
loading 35,148 hidden lines…
37149{ [1210 bytes data]37150* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37151{ [1 bytes data]37152* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37153{ [19 bytes data]37154* TLSv1.3 (IN), TLS handshake, Certificate (11):37155{ [1010 bytes data]37156* TLSv1.3 (IN), TLS handshake, CERT verify (15):37157{ [111 bytes data]37158* TLSv1.3 (IN), TLS handshake, Finished (20):37159{ [52 bytes data]37160* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37161} [1 bytes data]37162* TLSv1.3 (OUT), TLS handshake, Finished (20):37163} [52 bytes data]37164* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37165* ALPN: server accepted h237166* Server certificate:37167* subject: CN=test.foo37168* start date: Sep 19 10:16:44 2026 GMT37169* expire date: Oct 19 10:16:44 2028 GMT37170* issuer: CN=minica root ca 2eeab337171* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437172* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437173* subjectAltName: "test.foo" matches cert's "test.foo"37174* OpenSSL verify result: 1337175* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37176* closing connection #037177curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37178More details here: https://curl.se/docs/sslcerts.html3717937180curl failed to verify the legitimacy of the server and therefore could not37181establish a secure connection to it. To learn more about this situation and37182how to fix it, please visit the webpage mentioned above.37183* Host test.foo:443 was resolved.37184* IPv6: 2001:db8:1::337185* IPv4: 192.168.1.337186* Trying [2001:db8:1::3]:443...37187* ALPN: curl offers h2,http/1.137188} [5 bytes data]37189* TLSv1.3 (OUT), TLS handshake, Client hello (1):37190} [1552 bytes data]37191* SSL Trust Anchors:37192* OpenSSL default paths (fallback)37193{ [5 bytes data]37194* TLSv1.3 (IN), TLS handshake, Server hello (2):37195{ [1210 bytes data]37196* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37197{ [1 bytes data]37198* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37199{ [19 bytes data]37200* TLSv1.3 (IN), TLS handshake, Certificate (11):37201{ [1010 bytes data]37202* TLSv1.3 (IN), TLS handshake, CERT verify (15):37203{ [111 bytes data]37204* TLSv1.3 (IN), TLS handshake, Finished (20):37205{ [52 bytes data]37206* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37207} [1 bytes data]37208* TLSv1.3 (OUT), TLS handshake, Finished (20):37209} [52 bytes data]37210* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37211* ALPN: server accepted h237212* Server certificate:37213* subject: CN=test.foo37214* start date: Sep 19 10:16:44 2026 GMT37215* expire date: Oct 19 10:16:44 2028 GMT37216* issuer: CN=minica root ca 2eeab337217* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437218* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437219* subjectAltName: "test.foo" matches cert's "test.foo"37220* OpenSSL verify result: 1337221* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37222* closing connection #037223curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37224More details here: https://curl.se/docs/sslcerts.html3722537226curl failed to verify the legitimacy of the server and therefore could not37227establish a secure connection to it. To learn more about this situation and37228how to fix it, please visit the webpage mentioned above.37229* Host test.foo:443 was resolved.37230* IPv6: 2001:db8:1::337231* IPv4: 192.168.1.337232* Trying [2001:db8:1::3]:443...37233* ALPN: curl offers h2,http/1.137234} [5 bytes data]37235* TLSv1.3 (OUT), TLS handshake, Client hello (1):37236} [1552 bytes data]37237* SSL Trust Anchors:37238* OpenSSL default paths (fallback)37239{ [5 bytes data]37240* TLSv1.3 (IN), TLS handshake, Server hello (2):37241{ [1210 bytes data]37242* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37243{ [1 bytes data]37244* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37245{ [19 bytes data]37246* TLSv1.3 (IN), TLS handshake, Certificate (11):37247{ [1010 bytes data]37248* TLSv1.3 (IN), TLS handshake, CERT verify (15):37249{ [110 bytes data]37250* TLSv1.3 (IN), TLS handshake, Finished (20):37251{ [52 bytes data]37252* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37253} [1 bytes data]37254* TLSv1.3 (OUT), TLS handshake, Finished (20):37255} [52 bytes data]37256* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37257* ALPN: server accepted h237258* Server certificate:37259* subject: CN=test.foo37260* start date: Sep 19 10:16:44 2026 GMT37261* expire date: Oct 19 10:16:44 2028 GMT37262* issuer: CN=minica root ca 2eeab337263* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437264* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437265* subjectAltName: "test.foo" matches cert's "test.foo"37266* OpenSSL verify result: 1337267* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37268* closing connection #037269curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37270More details here: https://curl.se/docs/sslcerts.html3727137272curl failed to verify the legitimacy of the server and therefore could not37273establish a secure connection to it. To learn more about this situation and37274how to fix it, please visit the webpage mentioned above.37275* Host test.foo:443 was resolved.37276* IPv6: 2001:db8:1::337277* IPv4: 192.168.1.337278* Trying [2001:db8:1::3]:443...37279* ALPN: curl offers h2,http/1.137280} [5 bytes data]37281* TLSv1.3 (OUT), TLS handshake, Client hello (1):37282} [1552 bytes data]37283* SSL Trust Anchors:37284* OpenSSL default paths (fallback)37285{ [5 bytes data]37286* TLSv1.3 (IN), TLS handshake, Server hello (2):37287{ [1210 bytes data]37288* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37289{ [1 bytes data]37290* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37291{ [19 bytes data]37292* TLSv1.3 (IN), TLS handshake, Certificate (11):37293{ [1010 bytes data]37294* TLSv1.3 (IN), TLS handshake, CERT verify (15):37295{ [112 bytes data]37296* TLSv1.3 (IN), TLS handshake, Finished (20):37297{ [52 bytes data]37298* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37299} [1 bytes data]37300* TLSv1.3 (OUT), TLS handshake, Finished (20):37301} [52 bytes data]37302* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37303* ALPN: server accepted h237304* Server certificate:37305* subject: CN=test.foo37306* start date: Sep 19 10:16:44 2026 GMT37307* expire date: Oct 19 10:16:44 2028 GMT37308* issuer: CN=minica root ca 2eeab337309* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437310* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437311* subjectAltName: "test.foo" matches cert's "test.foo"37312* OpenSSL verify result: 1337313* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37314* closing connection #037315curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37316More details here: https://curl.se/docs/sslcerts.html3731737318curl failed to verify the legitimacy of the server and therefore could not37319establish a secure connection to it. To learn more about this situation and37320how to fix it, please visit the webpage mentioned above.37321* Host test.foo:443 was resolved.37322* IPv6: 2001:db8:1::337323* IPv4: 192.168.1.337324* Trying [2001:db8:1::3]:443...37325* ALPN: curl offers h2,http/1.137326} [5 bytes data]37327* TLSv1.3 (OUT), TLS handshake, Client hello (1):37328} [1552 bytes data]37329* SSL Trust Anchors:37330* OpenSSL default paths (fallback)37331{ [5 bytes data]37332* TLSv1.3 (IN), TLS handshake, Server hello (2):37333{ [1210 bytes data]37334* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37335{ [1 bytes data]37336* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37337{ [19 bytes data]37338* TLSv1.3 (IN), TLS handshake, Certificate (11):37339{ [1010 bytes data]37340* TLSv1.3 (IN), TLS handshake, CERT verify (15):37341{ [111 bytes data]37342* TLSv1.3 (IN), TLS handshake, Finished (20):37343{ [52 bytes data]37344* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37345} [1 bytes data]37346* TLSv1.3 (OUT), TLS handshake, Finished (20):37347} [52 bytes data]37348* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37349* ALPN: server accepted h237350* Server certificate:37351* subject: CN=test.foo37352* start date: Sep 19 10:16:44 2026 GMT37353* expire date: Oct 19 10:16:44 2028 GMT37354* issuer: CN=minica root ca 2eeab337355* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437356* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437357* subjectAltName: "test.foo" matches cert's "test.foo"37358* OpenSSL verify result: 1337359* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37360* closing connection #037361curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37362More details here: https://curl.se/docs/sslcerts.html3736337364curl failed to verify the legitimacy of the server and therefore could not37365establish a secure connection to it. To learn more about this situation and37366how to fix it, please visit the webpage mentioned above.37367* Host test.foo:443 was resolved.37368* IPv6: 2001:db8:1::337369* IPv4: 192.168.1.337370* Trying [2001:db8:1::3]:443...37371* ALPN: curl offers h2,http/1.137372} [5 bytes data]37373* TLSv1.3 (OUT), TLS handshake, Client hello (1):37374} [1552 bytes data]37375* SSL Trust Anchors:37376* OpenSSL default paths (fallback)37377{ [5 bytes data]37378* TLSv1.3 (IN), TLS handshake, Server hello (2):37379{ [1210 bytes data]37380* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37381{ [1 bytes data]37382* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37383{ [19 bytes data]37384* TLSv1.3 (IN), TLS handshake, Certificate (11):37385{ [1010 bytes data]37386* TLSv1.3 (IN), TLS handshake, CERT verify (15):37387{ [111 bytes data]37388* TLSv1.3 (IN), TLS handshake, Finished (20):37389{ [52 bytes data]37390* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37391} [1 bytes data]37392* TLSv1.3 (OUT), TLS handshake, Finished (20):37393} [52 bytes data]37394* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37395* ALPN: server accepted h237396* Server certificate:37397* subject: CN=test.foo37398* start date: Sep 19 10:16:44 2026 GMT37399* expire date: Oct 19 10:16:44 2028 GMT37400* issuer: CN=minica root ca 2eeab337401* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437402* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437403* subjectAltName: "test.foo" matches cert's "test.foo"37404* OpenSSL verify result: 1337405* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37406* closing connection #037407curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37408More details here: https://curl.se/docs/sslcerts.html3740937410curl failed to verify the legitimacy of the server and therefore could not37411establish a secure connection to it. To learn more about this situation and37412how to fix it, please visit the webpage mentioned above.37413* Host test.foo:443 was resolved.37414* IPv6: 2001:db8:1::337415* IPv4: 192.168.1.337416* Trying [2001:db8:1::3]:443...37417* ALPN: curl offers h2,http/1.137418} [5 bytes data]37419* TLSv1.3 (OUT), TLS handshake, Client hello (1):37420} [1552 bytes data]37421* SSL Trust Anchors:37422* OpenSSL default paths (fallback)37423{ [5 bytes data]37424* TLSv1.3 (IN), TLS handshake, Server hello (2):37425{ [1210 bytes data]37426* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37427{ [1 bytes data]37428* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37429{ [19 bytes data]37430* TLSv1.3 (IN), TLS handshake, Certificate (11):37431{ [1010 bytes data]37432* TLSv1.3 (IN), TLS handshake, CERT verify (15):37433{ [111 bytes data]37434* TLSv1.3 (IN), TLS handshake, Finished (20):37435{ [52 bytes data]37436* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37437} [1 bytes data]37438* TLSv1.3 (OUT), TLS handshake, Finished (20):37439} [52 bytes data]37440* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37441* ALPN: server accepted h237442* Server certificate:37443* subject: CN=test.foo37444* start date: Sep 19 10:16:44 2026 GMT37445* expire date: Oct 19 10:16:44 2028 GMT37446* issuer: CN=minica root ca 2eeab337447* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437448* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437449* subjectAltName: "test.foo" matches cert's "test.foo"37450* OpenSSL verify result: 1337451* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37452* closing connection #037453curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37454More details here: https://curl.se/docs/sslcerts.html3745537456curl failed to verify the legitimacy of the server and therefore could not37457establish a secure connection to it. To learn more about this situation and37458how to fix it, please visit the webpage mentioned above.37459* Host test.foo:443 was resolved.37460* IPv6: 2001:db8:1::337461* IPv4: 192.168.1.337462* Trying [2001:db8:1::3]:443...37463* ALPN: curl offers h2,http/1.137464} [5 bytes data]37465* TLSv1.3 (OUT), TLS handshake, Client hello (1):37466} [1552 bytes data]37467* SSL Trust Anchors:37468* OpenSSL default paths (fallback)37469{ [5 bytes data]37470* TLSv1.3 (IN), TLS handshake, Server hello (2):37471{ [1210 bytes data]37472* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37473{ [1 bytes data]37474* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37475{ [19 bytes data]37476* TLSv1.3 (IN), TLS handshake, Certificate (11):37477{ [1010 bytes data]37478* TLSv1.3 (IN), TLS handshake, CERT verify (15):37479{ [110 bytes data]37480* TLSv1.3 (IN), TLS handshake, Finished (20):37481{ [52 bytes data]37482* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37483} [1 bytes data]37484* TLSv1.3 (OUT), TLS handshake, Finished (20):37485} [52 bytes data]37486* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37487* ALPN: server accepted h237488* Server certificate:37489* subject: CN=test.foo37490* start date: Sep 19 10:16:44 2026 GMT37491* expire date: Oct 19 10:16:44 2028 GMT37492* issuer: CN=minica root ca 2eeab337493* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437494* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437495* subjectAltName: "test.foo" matches cert's "test.foo"37496* OpenSSL verify result: 1337497* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37498* closing connection #037499curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37500More details here: https://curl.se/docs/sslcerts.html3750137502curl failed to verify the legitimacy of the server and therefore could not37503establish a secure connection to it. To learn more about this situation and37504how to fix it, please visit the webpage mentioned above.37505* Host test.foo:443 was resolved.37506* IPv6: 2001:db8:1::337507* IPv4: 192.168.1.337508* Trying [2001:db8:1::3]:443...37509* ALPN: curl offers h2,http/1.137510} [5 bytes data]37511* TLSv1.3 (OUT), TLS handshake, Client hello (1):37512} [1552 bytes data]37513* SSL Trust Anchors:37514* OpenSSL default paths (fallback)37515{ [5 bytes data]37516* TLSv1.3 (IN), TLS handshake, Server hello (2):37517{ [1210 bytes data]37518* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37519{ [1 bytes data]37520* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37521{ [19 bytes data]37522* TLSv1.3 (IN), TLS handshake, Certificate (11):37523{ [1010 bytes data]37524* TLSv1.3 (IN), TLS handshake, CERT verify (15):37525{ [112 bytes data]37526* TLSv1.3 (IN), TLS handshake, Finished (20):37527{ [52 bytes data]37528* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37529} [1 bytes data]37530* TLSv1.3 (OUT), TLS handshake, Finished (20):37531} [52 bytes data]37532* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37533* ALPN: server accepted h237534* Server certificate:37535* subject: CN=test.foo37536* start date: Sep 19 10:16:44 2026 GMT37537* expire date: Oct 19 10:16:44 2028 GMT37538* issuer: CN=minica root ca 2eeab337539* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437540* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437541* subjectAltName: "test.foo" matches cert's "test.foo"37542* OpenSSL verify result: 1337543* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37544* closing connection #037545curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37546More details here: https://curl.se/docs/sslcerts.html3754737548curl failed to verify the legitimacy of the server and therefore could not37549establish a secure connection to it. To learn more about this situation and37550how to fix it, please visit the webpage mentioned above.37551* Host test.foo:443 was resolved.37552* IPv6: 2001:db8:1::337553* IPv4: 192.168.1.337554* Trying [2001:db8:1::3]:443...37555* ALPN: curl offers h2,http/1.137556} [5 bytes data]37557* TLSv1.3 (OUT), TLS handshake, Client hello (1):37558} [1552 bytes data]37559* SSL Trust Anchors:37560* OpenSSL default paths (fallback)37561{ [5 bytes data]37562* TLSv1.3 (IN), TLS handshake, Server hello (2):37563{ [1210 bytes data]37564* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37565{ [1 bytes data]37566* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37567{ [19 bytes data]37568* TLSv1.3 (IN), TLS handshake, Certificate (11):37569{ [1010 bytes data]37570* TLSv1.3 (IN), TLS handshake, CERT verify (15):37571{ [110 bytes data]37572* TLSv1.3 (IN), TLS handshake, Finished (20):37573{ [52 bytes data]37574* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37575} [1 bytes data]37576* TLSv1.3 (OUT), TLS handshake, Finished (20):37577} [52 bytes data]37578* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37579* ALPN: server accepted h237580* Server certificate:37581* subject: CN=test.foo37582* start date: Sep 19 10:16:44 2026 GMT37583* expire date: Oct 19 10:16:44 2028 GMT37584* issuer: CN=minica root ca 2eeab337585* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437586* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437587* subjectAltName: "test.foo" matches cert's "test.foo"37588* OpenSSL verify result: 1337589* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37590* closing connection #037591curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37592More details here: https://curl.se/docs/sslcerts.html3759337594curl failed to verify the legitimacy of the server and therefore could not37595establish a secure connection to it. To learn more about this situation and37596how to fix it, please visit the webpage mentioned above.37597* Host test.foo:443 was resolved.37598* IPv6: 2001:db8:1::337599* IPv4: 192.168.1.337600* Trying [2001:db8:1::3]:443...37601* ALPN: curl offers h2,http/1.137602} [5 bytes data]37603* TLSv1.3 (OUT), TLS handshake, Client hello (1):37604} [1552 bytes data]37605* SSL Trust Anchors:37606* OpenSSL default paths (fallback)37607{ [5 bytes data]37608* TLSv1.3 (IN), TLS handshake, Server hello (2):37609{ [1210 bytes data]37610* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37611{ [1 bytes data]37612* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37613{ [19 bytes data]37614* TLSv1.3 (IN), TLS handshake, Certificate (11):37615{ [1010 bytes data]37616* TLSv1.3 (IN), TLS handshake, CERT verify (15):37617{ [112 bytes data]37618* TLSv1.3 (IN), TLS handshake, Finished (20):37619{ [52 bytes data]37620* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37621} [1 bytes data]37622* TLSv1.3 (OUT), TLS handshake, Finished (20):37623} [52 bytes data]37624* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37625* ALPN: server accepted h237626* Server certificate:37627* subject: CN=test.foo37628* start date: Sep 19 10:16:44 2026 GMT37629* expire date: Oct 19 10:16:44 2028 GMT37630* issuer: CN=minica root ca 2eeab337631* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437632* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437633* subjectAltName: "test.foo" matches cert's "test.foo"37634* OpenSSL verify result: 1337635* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37636* closing connection #037637curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37638More details here: https://curl.se/docs/sslcerts.html3763937640curl failed to verify the legitimacy of the server and therefore could not37641establish a secure connection to it. To learn more about this situation and37642how to fix it, please visit the webpage mentioned above.37643* Host test.foo:443 was resolved.37644* IPv6: 2001:db8:1::337645* IPv4: 192.168.1.337646* Trying [2001:db8:1::3]:443...37647* ALPN: curl offers h2,http/1.137648} [5 bytes data]37649* TLSv1.3 (OUT), TLS handshake, Client hello (1):37650} [1552 bytes data]37651* SSL Trust Anchors:37652* OpenSSL default paths (fallback)37653{ [5 bytes data]37654* TLSv1.3 (IN), TLS handshake, Server hello (2):37655{ [1210 bytes data]37656* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37657{ [1 bytes data]37658* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37659{ [19 bytes data]37660* TLSv1.3 (IN), TLS handshake, Certificate (11):37661{ [1010 bytes data]37662* TLSv1.3 (IN), TLS handshake, CERT verify (15):37663{ [111 bytes data]37664* TLSv1.3 (IN), TLS handshake, Finished (20):37665{ [52 bytes data]37666* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37667} [1 bytes data]37668* TLSv1.3 (OUT), TLS handshake, Finished (20):37669} [52 bytes data]37670* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37671* ALPN: server accepted h237672* Server certificate:37673* subject: CN=test.foo37674* start date: Sep 19 10:16:44 2026 GMT37675* expire date: Oct 19 10:16:44 2028 GMT37676* issuer: CN=minica root ca 2eeab337677* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437678* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437679* subjectAltName: "test.foo" matches cert's "test.foo"37680* OpenSSL verify result: 1337681* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37682* closing connection #037683curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37684More details here: https://curl.se/docs/sslcerts.html3768537686curl failed to verify the legitimacy of the server and therefore could not37687establish a secure connection to it. To learn more about this situation and37688how to fix it, please visit the webpage mentioned above.37689* Host test.foo:443 was resolved.37690* IPv6: 2001:db8:1::337691* IPv4: 192.168.1.337692* Trying [2001:db8:1::3]:443...37693* ALPN: curl offers h2,http/1.137694} [5 bytes data]37695* TLSv1.3 (OUT), TLS handshake, Client hello (1):37696} [1552 bytes data]37697* SSL Trust Anchors:37698* OpenSSL default paths (fallback)37699{ [5 bytes data]37700* TLSv1.3 (IN), TLS handshake, Server hello (2):37701{ [1210 bytes data]37702* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37703{ [1 bytes data]37704* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37705{ [19 bytes data]37706* TLSv1.3 (IN), TLS handshake, Certificate (11):37707{ [1010 bytes data]37708* TLSv1.3 (IN), TLS handshake, CERT verify (15):37709{ [111 bytes data]37710* TLSv1.3 (IN), TLS handshake, Finished (20):37711{ [52 bytes data]37712* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37713} [1 bytes data]37714* TLSv1.3 (OUT), TLS handshake, Finished (20):37715} [52 bytes data]37716* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37717* ALPN: server accepted h237718* Server certificate:37719* subject: CN=test.foo37720* start date: Sep 19 10:16:44 2026 GMT37721* expire date: Oct 19 10:16:44 2028 GMT37722* issuer: CN=minica root ca 2eeab337723* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437724* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437725* subjectAltName: "test.foo" matches cert's "test.foo"37726* OpenSSL verify result: 1337727* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37728* closing connection #037729curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37730More details here: https://curl.se/docs/sslcerts.html3773137732curl failed to verify the legitimacy of the server and therefore could not37733establish a secure connection to it. To learn more about this situation and37734how to fix it, please visit the webpage mentioned above.37735* Host test.foo:443 was resolved.37736* IPv6: 2001:db8:1::337737* IPv4: 192.168.1.337738* Trying [2001:db8:1::3]:443...37739* ALPN: curl offers h2,http/1.137740} [5 bytes data]37741* TLSv1.3 (OUT), TLS handshake, Client hello (1):37742} [1552 bytes data]37743* SSL Trust Anchors:37744* OpenSSL default paths (fallback)37745{ [5 bytes data]37746* TLSv1.3 (IN), TLS handshake, Server hello (2):37747{ [1210 bytes data]37748* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37749{ [1 bytes data]37750* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37751{ [19 bytes data]37752* TLSv1.3 (IN), TLS handshake, Certificate (11):37753{ [1010 bytes data]37754* TLSv1.3 (IN), TLS handshake, CERT verify (15):37755{ [111 bytes data]37756* TLSv1.3 (IN), TLS handshake, Finished (20):37757{ [52 bytes data]37758* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37759} [1 bytes data]37760* TLSv1.3 (OUT), TLS handshake, Finished (20):37761} [52 bytes data]37762* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37763* ALPN: server accepted h237764* Server certificate:37765* subject: CN=test.foo37766* start date: Sep 19 10:16:44 2026 GMT37767* expire date: Oct 19 10:16:44 2028 GMT37768* issuer: CN=minica root ca 2eeab337769* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437770* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437771* subjectAltName: "test.foo" matches cert's "test.foo"37772* OpenSSL verify result: 1337773* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37774* closing connection #037775curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37776More details here: https://curl.se/docs/sslcerts.html3777737778curl failed to verify the legitimacy of the server and therefore could not37779establish a secure connection to it. To learn more about this situation and37780how to fix it, please visit the webpage mentioned above.37781* Host test.foo:443 was resolved.37782* IPv6: 2001:db8:1::337783* IPv4: 192.168.1.337784* Trying [2001:db8:1::3]:443...37785* ALPN: curl offers h2,http/1.137786} [5 bytes data]37787* TLSv1.3 (OUT), TLS handshake, Client hello (1):37788} [1552 bytes data]37789* SSL Trust Anchors:37790* OpenSSL default paths (fallback)37791{ [5 bytes data]37792* TLSv1.3 (IN), TLS handshake, Server hello (2):37793{ [1210 bytes data]37794* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37795{ [1 bytes data]37796* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37797{ [19 bytes data]37798* TLSv1.3 (IN), TLS handshake, Certificate (11):37799{ [1010 bytes data]37800* TLSv1.3 (IN), TLS handshake, CERT verify (15):37801{ [111 bytes data]37802* TLSv1.3 (IN), TLS handshake, Finished (20):37803{ [52 bytes data]37804* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37805} [1 bytes data]37806* TLSv1.3 (OUT), TLS handshake, Finished (20):37807} [52 bytes data]37808* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37809* ALPN: server accepted h237810* Server certificate:37811* subject: CN=test.foo37812* start date: Sep 19 10:16:44 2026 GMT37813* expire date: Oct 19 10:16:44 2028 GMT37814* issuer: CN=minica root ca 2eeab337815* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437816* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437817* subjectAltName: "test.foo" matches cert's "test.foo"37818* OpenSSL verify result: 1337819* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37820* closing connection #037821curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37822More details here: https://curl.se/docs/sslcerts.html3782337824curl failed to verify the legitimacy of the server and therefore could not37825establish a secure connection to it. To learn more about this situation and37826how to fix it, please visit the webpage mentioned above.37827* Host test.foo:443 was resolved.37828* IPv6: 2001:db8:1::337829* IPv4: 192.168.1.337830* Trying [2001:db8:1::3]:443...37831* ALPN: curl offers h2,http/1.137832} [5 bytes data]37833* TLSv1.3 (OUT), TLS handshake, Client hello (1):37834} [1552 bytes data]37835* SSL Trust Anchors:37836* OpenSSL default paths (fallback)37837{ [5 bytes data]37838* TLSv1.3 (IN), TLS handshake, Server hello (2):37839{ [1210 bytes data]37840* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37841{ [1 bytes data]37842* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37843{ [19 bytes data]37844* TLSv1.3 (IN), TLS handshake, Certificate (11):37845{ [1010 bytes data]37846* TLSv1.3 (IN), TLS handshake, CERT verify (15):37847{ [110 bytes data]37848* TLSv1.3 (IN), TLS handshake, Finished (20):37849{ [52 bytes data]37850* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37851} [1 bytes data]37852* TLSv1.3 (OUT), TLS handshake, Finished (20):37853} [52 bytes data]37854* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37855* ALPN: server accepted h237856* Server certificate:37857* subject: CN=test.foo37858* start date: Sep 19 10:16:44 2026 GMT37859* expire date: Oct 19 10:16:44 2028 GMT37860* issuer: CN=minica root ca 2eeab337861* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437862* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437863* subjectAltName: "test.foo" matches cert's "test.foo"37864* OpenSSL verify result: 1337865* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37866* closing connection #037867curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37868More details here: https://curl.se/docs/sslcerts.html3786937870curl failed to verify the legitimacy of the server and therefore could not37871establish a secure connection to it. To learn more about this situation and37872how to fix it, please visit the webpage mentioned above.37873* Host test.foo:443 was resolved.37874* IPv6: 2001:db8:1::337875* IPv4: 192.168.1.337876* Trying [2001:db8:1::3]:443...37877* ALPN: curl offers h2,http/1.137878} [5 bytes data]37879* TLSv1.3 (OUT), TLS handshake, Client hello (1):37880} [1552 bytes data]37881* SSL Trust Anchors:37882* OpenSSL default paths (fallback)37883{ [5 bytes data]37884* TLSv1.3 (IN), TLS handshake, Server hello (2):37885{ [1210 bytes data]37886* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37887{ [1 bytes data]37888* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37889{ [19 bytes data]37890* TLSv1.3 (IN), TLS handshake, Certificate (11):37891{ [1010 bytes data]37892* TLSv1.3 (IN), TLS handshake, CERT verify (15):37893{ [112 bytes data]37894* TLSv1.3 (IN), TLS handshake, Finished (20):37895{ [52 bytes data]37896* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37897} [1 bytes data]37898* TLSv1.3 (OUT), TLS handshake, Finished (20):37899} [52 bytes data]37900* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37901* ALPN: server accepted h237902* Server certificate:37903* subject: CN=test.foo37904* start date: Sep 19 10:16:44 2026 GMT37905* expire date: Oct 19 10:16:44 2028 GMT37906* issuer: CN=minica root ca 2eeab337907* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437908* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437909* subjectAltName: "test.foo" matches cert's "test.foo"37910* OpenSSL verify result: 1337911* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37912* closing connection #037913curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37914More details here: https://curl.se/docs/sslcerts.html3791537916curl failed to verify the legitimacy of the server and therefore could not37917establish a secure connection to it. To learn more about this situation and37918how to fix it, please visit the webpage mentioned above.37919* Host test.foo:443 was resolved.37920* IPv6: 2001:db8:1::337921* IPv4: 192.168.1.337922* Trying [2001:db8:1::3]:443...37923* ALPN: curl offers h2,http/1.137924} [5 bytes data]37925* TLSv1.3 (OUT), TLS handshake, Client hello (1):37926} [1552 bytes data]37927* SSL Trust Anchors:37928* OpenSSL default paths (fallback)37929{ [5 bytes data]37930* TLSv1.3 (IN), TLS handshake, Server hello (2):37931{ [1210 bytes data]37932* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37933{ [1 bytes data]37934* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37935{ [19 bytes data]37936* TLSv1.3 (IN), TLS handshake, Certificate (11):37937{ [1010 bytes data]37938* TLSv1.3 (IN), TLS handshake, CERT verify (15):37939{ [111 bytes data]37940* TLSv1.3 (IN), TLS handshake, Finished (20):37941{ [52 bytes data]37942* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37943} [1 bytes data]37944* TLSv1.3 (OUT), TLS handshake, Finished (20):37945} [52 bytes data]37946* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37947* ALPN: server accepted h237948* Server certificate:37949* subject: CN=test.foo37950* start date: Sep 19 10:16:44 2026 GMT37951* expire date: Oct 19 10:16:44 2028 GMT37952* issuer: CN=minica root ca 2eeab337953* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437954* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437955* subjectAltName: "test.foo" matches cert's "test.foo"37956* OpenSSL verify result: 1337957* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37958* closing connection #037959curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37960More details here: https://curl.se/docs/sslcerts.html3796137962curl failed to verify the legitimacy of the server and therefore could not37963establish a secure connection to it. To learn more about this situation and37964how to fix it, please visit the webpage mentioned above.37965* Trying [2001:db8:1::3]:443...37966* Host test.foo:443 was resolved.37967* IPv6: 2001:db8:1::337968* IPv4: 192.168.1.337969* ALPN: curl offers h2,http/1.137970} [5 bytes data]37971* TLSv1.3 (OUT), TLS handshake, Client hello (1):37972} [1552 bytes data]37973* SSL Trust Anchors:37974* OpenSSL default paths (fallback)37975{ [5 bytes data]37976* TLSv1.3 (IN), TLS handshake, Server hello (2):37977{ [1210 bytes data]37978* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37979{ [1 bytes data]37980* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37981{ [19 bytes data]37982* TLSv1.3 (IN), TLS handshake, Certificate (11):37983{ [1010 bytes data]37984* TLSv1.3 (IN), TLS handshake, CERT verify (15):37985{ [111 bytes data]37986* TLSv1.3 (IN), TLS handshake, Finished (20):37987{ [52 bytes data]37988* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37989} [1 bytes data]37990* TLSv1.3 (OUT), TLS handshake, Finished (20):37991} [52 bytes data]37992* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37993* ALPN: server accepted h237994* Server certificate:37995* subject: CN=test.foo37996* start date: Sep 19 10:16:44 2026 GMT37997* expire date: Oct 19 10:16:44 2028 GMT37998* issuer: CN=minica root ca 2eeab337999* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438000* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438001* subjectAltName: "test.foo" matches cert's "test.foo"38002* OpenSSL verify result: 1338003* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38004* closing connection #038005curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38006More details here: https://curl.se/docs/sslcerts.html3800738008curl failed to verify the legitimacy of the server and therefore could not38009establish a secure connection to it. To learn more about this situation and38010how to fix it, please visit the webpage mentioned above.38011* Host test.foo:443 was resolved.38012* IPv6: 2001:db8:1::338013* IPv4: 192.168.1.338014* Trying [2001:db8:1::3]:443...38015* ALPN: curl offers h2,http/1.138016} [5 bytes data]38017* TLSv1.3 (OUT), TLS handshake, Client hello (1):38018} [1552 bytes data]38019* SSL Trust Anchors:38020* OpenSSL default paths (fallback)38021{ [5 bytes data]38022* TLSv1.3 (IN), TLS handshake, Server hello (2):38023{ [1210 bytes data]38024* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38025{ [1 bytes data]38026* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38027{ [19 bytes data]38028* TLSv1.3 (IN), TLS handshake, Certificate (11):38029{ [1010 bytes data]38030* TLSv1.3 (IN), TLS handshake, CERT verify (15):38031{ [111 bytes data]38032* TLSv1.3 (IN), TLS handshake, Finished (20):38033{ [52 bytes data]38034* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38035} [1 bytes data]38036* TLSv1.3 (OUT), TLS handshake, Finished (20):38037} [52 bytes data]38038* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38039* ALPN: server accepted h238040* Server certificate:38041* subject: CN=test.foo38042* start date: Sep 19 10:16:44 2026 GMT38043* expire date: Oct 19 10:16:44 2028 GMT38044* issuer: CN=minica root ca 2eeab338045* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438046* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438047* subjectAltName: "test.foo" matches cert's "test.foo"38048* OpenSSL verify result: 1338049* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38050* closing connection #038051curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38052More details here: https://curl.se/docs/sslcerts.html3805338054curl failed to verify the legitimacy of the server and therefore could not38055establish a secure connection to it. To learn more about this situation and38056how to fix it, please visit the webpage mentioned above.38057* Host test.foo:443 was resolved.38058* IPv6: 2001:db8:1::338059* IPv4: 192.168.1.338060* Trying [2001:db8:1::3]:443...38061* ALPN: curl offers h2,http/1.138062} [5 bytes data]38063* TLSv1.3 (OUT), TLS handshake, Client hello (1):38064} [1552 bytes data]38065* SSL Trust Anchors:38066* OpenSSL default paths (fallback)38067{ [5 bytes data]38068* TLSv1.3 (IN), TLS handshake, Server hello (2):38069{ [1210 bytes data]38070* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38071{ [1 bytes data]38072* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38073{ [19 bytes data]38074* TLSv1.3 (IN), TLS handshake, Certificate (11):38075{ [1010 bytes data]38076* TLSv1.3 (IN), TLS handshake, CERT verify (15):38077{ [112 bytes data]38078* TLSv1.3 (IN), TLS handshake, Finished (20):38079{ [52 bytes data]38080* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38081} [1 bytes data]38082* TLSv1.3 (OUT), TLS handshake, Finished (20):38083} [52 bytes data]38084* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38085* ALPN: server accepted h238086* Server certificate:38087* subject: CN=test.foo38088* start date: Sep 19 10:16:44 2026 GMT38089* expire date: Oct 19 10:16:44 2028 GMT38090* issuer: CN=minica root ca 2eeab338091* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438092* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438093* subjectAltName: "test.foo" matches cert's "test.foo"38094* OpenSSL verify result: 1338095* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38096* closing connection #038097curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38098More details here: https://curl.se/docs/sslcerts.html3809938100curl failed to verify the legitimacy of the server and therefore could not38101establish a secure connection to it. To learn more about this situation and38102how to fix it, please visit the webpage mentioned above.38103* Host test.foo:443 was resolved.38104* IPv6: 2001:db8:1::338105* IPv4: 192.168.1.338106* Trying [2001:db8:1::3]:443...38107* ALPN: curl offers h2,http/1.138108} [5 bytes data]38109* TLSv1.3 (OUT), TLS handshake, Client hello (1):38110} [1552 bytes data]38111* SSL Trust Anchors:38112* OpenSSL default paths (fallback)38113{ [5 bytes data]38114* TLSv1.3 (IN), TLS handshake, Server hello (2):38115{ [1210 bytes data]38116* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38117{ [1 bytes data]38118* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38119{ [19 bytes data]38120* TLSv1.3 (IN), TLS handshake, Certificate (11):38121{ [1010 bytes data]38122* TLSv1.3 (IN), TLS handshake, CERT verify (15):38123{ [112 bytes data]38124* TLSv1.3 (IN), TLS handshake, Finished (20):38125{ [52 bytes data]38126* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38127} [1 bytes data]38128* TLSv1.3 (OUT), TLS handshake, Finished (20):38129} [52 bytes data]38130* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38131* ALPN: server accepted h238132* Server certificate:38133* subject: CN=test.foo38134* start date: Sep 19 10:16:44 2026 GMT38135* expire date: Oct 19 10:16:44 2028 GMT38136* issuer: CN=minica root ca 2eeab338137* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438138* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438139* subjectAltName: "test.foo" matches cert's "test.foo"38140* OpenSSL verify result: 1338141* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38142* closing connection #038143curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38144More details here: https://curl.se/docs/sslcerts.html3814538146curl failed to verify the legitimacy of the server and therefore could not38147establish a secure connection to it. To learn more about this situation and38148how to fix it, please visit the webpage mentioned above.38149* Host test.foo:443 was resolved.38150* IPv6: 2001:db8:1::338151* IPv4: 192.168.1.338152* Trying [2001:db8:1::3]:443...38153* ALPN: curl offers h2,http/1.138154} [5 bytes data]38155* TLSv1.3 (OUT), TLS handshake, Client hello (1):38156} [1552 bytes data]38157* SSL Trust Anchors:38158* OpenSSL default paths (fallback)38159{ [5 bytes data]38160* TLSv1.3 (IN), TLS handshake, Server hello (2):38161{ [1210 bytes data]38162* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38163{ [1 bytes data]38164* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38165{ [19 bytes data]38166* TLSv1.3 (IN), TLS handshake, Certificate (11):38167{ [1010 bytes data]38168* TLSv1.3 (IN), TLS handshake, CERT verify (15):38169{ [111 bytes data]38170* TLSv1.3 (IN), TLS handshake, Finished (20):38171{ [52 bytes data]38172* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38173} [1 bytes data]38174* TLSv1.3 (OUT), TLS handshake, Finished (20):38175} [52 bytes data]38176* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38177* ALPN: server accepted h238178* Server certificate:38179* subject: CN=test.foo38180* start date: Sep 19 10:16:44 2026 GMT38181* expire date: Oct 19 10:16:44 2028 GMT38182* issuer: CN=minica root ca 2eeab338183* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438184* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438185* subjectAltName: "test.foo" matches cert's "test.foo"38186* OpenSSL verify result: 1338187* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38188* closing connection #038189curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38190More details here: https://curl.se/docs/sslcerts.html3819138192curl failed to verify the legitimacy of the server and therefore could not38193establish a secure connection to it. To learn more about this situation and38194how to fix it, please visit the webpage mentioned above.38195* Host test.foo:443 was resolved.38196* IPv6: 2001:db8:1::338197* IPv4: 192.168.1.338198* Trying [2001:db8:1::3]:443...38199* ALPN: curl offers h2,http/1.138200} [5 bytes data]38201* TLSv1.3 (OUT), TLS handshake, Client hello (1):38202} [1552 bytes data]38203* SSL Trust Anchors:38204* OpenSSL default paths (fallback)38205{ [5 bytes data]38206* TLSv1.3 (IN), TLS handshake, Server hello (2):38207{ [1210 bytes data]38208* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38209{ [1 bytes data]38210* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38211{ [19 bytes data]38212* TLSv1.3 (IN), TLS handshake, Certificate (11):38213{ [1010 bytes data]38214* TLSv1.3 (IN), TLS handshake, CERT verify (15):38215{ [110 bytes data]38216* TLSv1.3 (IN), TLS handshake, Finished (20):38217{ [52 bytes data]38218* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38219} [1 bytes data]38220* TLSv1.3 (OUT), TLS handshake, Finished (20):38221} [52 bytes data]38222* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38223* ALPN: server accepted h238224* Server certificate:38225* subject: CN=test.foo38226* start date: Sep 19 10:16:44 2026 GMT38227* expire date: Oct 19 10:16:44 2028 GMT38228* issuer: CN=minica root ca 2eeab338229* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438230* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438231* subjectAltName: "test.foo" matches cert's "test.foo"38232* OpenSSL verify result: 1338233* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38234* closing connection #038235curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38236More details here: https://curl.se/docs/sslcerts.html3823738238curl failed to verify the legitimacy of the server and therefore could not38239establish a secure connection to it. To learn more about this situation and38240how to fix it, please visit the webpage mentioned above.38241* Host test.foo:443 was resolved.38242* IPv6: 2001:db8:1::338243* IPv4: 192.168.1.338244* Trying [2001:db8:1::3]:443...38245* ALPN: curl offers h2,http/1.138246} [5 bytes data]38247* TLSv1.3 (OUT), TLS handshake, Client hello (1):38248} [1552 bytes data]38249* SSL Trust Anchors:38250* OpenSSL default paths (fallback)38251{ [5 bytes data]38252* TLSv1.3 (IN), TLS handshake, Server hello (2):38253{ [1210 bytes data]38254* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38255{ [1 bytes data]38256* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38257{ [19 bytes data]38258* TLSv1.3 (IN), TLS handshake, Certificate (11):38259{ [1010 bytes data]38260* TLSv1.3 (IN), TLS handshake, CERT verify (15):38261{ [111 bytes data]38262* TLSv1.3 (IN), TLS handshake, Finished (20):38263{ [52 bytes data]38264* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38265} [1 bytes data]38266* TLSv1.3 (OUT), TLS handshake, Finished (20):38267} [52 bytes data]38268* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38269* ALPN: server accepted h238270* Server certificate:38271* subject: CN=test.foo38272* start date: Sep 19 10:16:44 2026 GMT38273* expire date: Oct 19 10:16:44 2028 GMT38274* issuer: CN=minica root ca 2eeab338275* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438276* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438277* subjectAltName: "test.foo" matches cert's "test.foo"38278* OpenSSL verify result: 1338279* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38280* closing connection #038281curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38282More details here: https://curl.se/docs/sslcerts.html3828338284curl failed to verify the legitimacy of the server and therefore could not38285establish a secure connection to it. To learn more about this situation and38286how to fix it, please visit the webpage mentioned above.38287* Host test.foo:443 was resolved.38288* IPv6: 2001:db8:1::338289* IPv4: 192.168.1.338290* Trying [2001:db8:1::3]:443...38291* ALPN: curl offers h2,http/1.138292} [5 bytes data]38293* TLSv1.3 (OUT), TLS handshake, Client hello (1):38294} [1552 bytes data]38295* SSL Trust Anchors:38296* OpenSSL default paths (fallback)38297{ [5 bytes data]38298* TLSv1.3 (IN), TLS handshake, Server hello (2):38299{ [1210 bytes data]38300* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38301{ [1 bytes data]38302* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38303{ [19 bytes data]38304* TLSv1.3 (IN), TLS handshake, Certificate (11):38305{ [1010 bytes data]38306* TLSv1.3 (IN), TLS handshake, CERT verify (15):38307{ [112 bytes data]38308* TLSv1.3 (IN), TLS handshake, Finished (20):38309{ [52 bytes data]38310* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38311} [1 bytes data]38312* TLSv1.3 (OUT), TLS handshake, Finished (20):38313} [52 bytes data]38314* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38315* ALPN: server accepted h238316* Server certificate:38317* subject: CN=test.foo38318* start date: Sep 19 10:16:44 2026 GMT38319* expire date: Oct 19 10:16:44 2028 GMT38320* issuer: CN=minica root ca 2eeab338321* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438322* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438323* subjectAltName: "test.foo" matches cert's "test.foo"38324* OpenSSL verify result: 1338325* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38326* closing connection #038327curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38328More details here: https://curl.se/docs/sslcerts.html3832938330curl failed to verify the legitimacy of the server and therefore could not38331establish a secure connection to it. To learn more about this situation and38332how to fix it, please visit the webpage mentioned above.38333* Host test.foo:443 was resolved.38334* IPv6: 2001:db8:1::338335* IPv4: 192.168.1.338336* Trying [2001:db8:1::3]:443...38337* ALPN: curl offers h2,http/1.138338} [5 bytes data]38339* TLSv1.3 (OUT), TLS handshake, Client hello (1):38340} [1552 bytes data]38341* SSL Trust Anchors:38342* OpenSSL default paths (fallback)38343{ [5 bytes data]38344* TLSv1.3 (IN), TLS handshake, Server hello (2):38345{ [1210 bytes data]38346* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38347{ [1 bytes data]38348* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38349{ [19 bytes data]38350* TLSv1.3 (IN), TLS handshake, Certificate (11):38351{ [1010 bytes data]38352* TLSv1.3 (IN), TLS handshake, CERT verify (15):38353{ [112 bytes data]38354* TLSv1.3 (IN), TLS handshake, Finished (20):38355{ [52 bytes data]38356* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38357} [1 bytes data]38358* TLSv1.3 (OUT), TLS handshake, Finished (20):38359} [52 bytes data]38360* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38361* ALPN: server accepted h238362* Server certificate:38363* subject: CN=test.foo38364* start date: Sep 19 10:16:44 2026 GMT38365* expire date: Oct 19 10:16:44 2028 GMT38366* issuer: CN=minica root ca 2eeab338367* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438368* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438369* subjectAltName: "test.foo" matches cert's "test.foo"38370* OpenSSL verify result: 1338371* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38372* closing connection #038373curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38374More details here: https://curl.se/docs/sslcerts.html3837538376curl failed to verify the legitimacy of the server and therefore could not38377establish a secure connection to it. To learn more about this situation and38378how to fix it, please visit the webpage mentioned above.38379* Host test.foo:443 was resolved.38380* IPv6: 2001:db8:1::338381* IPv4: 192.168.1.338382* Trying [2001:db8:1::3]:443...38383* ALPN: curl offers h2,http/1.138384} [5 bytes data]38385* TLSv1.3 (OUT), TLS handshake, Client hello (1):38386} [1552 bytes data]38387* SSL Trust Anchors:38388* OpenSSL default paths (fallback)38389{ [5 bytes data]38390* TLSv1.3 (IN), TLS handshake, Server hello (2):38391{ [1210 bytes data]38392* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38393{ [1 bytes data]38394* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38395{ [19 bytes data]38396* TLSv1.3 (IN), TLS handshake, Certificate (11):38397{ [1010 bytes data]38398* TLSv1.3 (IN), TLS handshake, CERT verify (15):38399{ [110 bytes data]38400* TLSv1.3 (IN), TLS handshake, Finished (20):38401{ [52 bytes data]38402* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38403} [1 bytes data]38404* TLSv1.3 (OUT), TLS handshake, Finished (20):38405} [52 bytes data]38406* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38407* ALPN: server accepted h238408* Server certificate:38409* subject: CN=test.foo38410* start date: Sep 19 10:16:44 2026 GMT38411* expire date: Oct 19 10:16:44 2028 GMT38412* issuer: CN=minica root ca 2eeab338413* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438414* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438415* subjectAltName: "test.foo" matches cert's "test.foo"38416* OpenSSL verify result: 1338417* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38418* closing connection #038419curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38420More details here: https://curl.se/docs/sslcerts.html3842138422curl failed to verify the legitimacy of the server and therefore could not38423establish a secure connection to it. To learn more about this situation and38424how to fix it, please visit the webpage mentioned above.38425* Host test.foo:443 was resolved.38426* IPv6: 2001:db8:1::338427* IPv4: 192.168.1.338428* Trying [2001:db8:1::3]:443...38429* ALPN: curl offers h2,http/1.138430} [5 bytes data]38431* TLSv1.3 (OUT), TLS handshake, Client hello (1):38432} [1552 bytes data]38433* SSL Trust Anchors:38434* OpenSSL default paths (fallback)38435{ [5 bytes data]38436* TLSv1.3 (IN), TLS handshake, Server hello (2):38437{ [1210 bytes data]38438* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38439{ [1 bytes data]38440* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38441{ [19 bytes data]38442* TLSv1.3 (IN), TLS handshake, Certificate (11):38443{ [1010 bytes data]38444* TLSv1.3 (IN), TLS handshake, CERT verify (15):38445{ [112 bytes data]38446* TLSv1.3 (IN), TLS handshake, Finished (20):38447{ [52 bytes data]38448* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38449} [1 bytes data]38450* TLSv1.3 (OUT), TLS handshake, Finished (20):38451} [52 bytes data]38452* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38453* ALPN: server accepted h238454* Server certificate:38455* subject: CN=test.foo38456* start date: Sep 19 10:16:44 2026 GMT38457* expire date: Oct 19 10:16:44 2028 GMT38458* issuer: CN=minica root ca 2eeab338459* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438460* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438461* subjectAltName: "test.foo" matches cert's "test.foo"38462* OpenSSL verify result: 1338463* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38464* closing connection #038465curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38466More details here: https://curl.se/docs/sslcerts.html3846738468curl failed to verify the legitimacy of the server and therefore could not38469establish a secure connection to it. To learn more about this situation and38470how to fix it, please visit the webpage mentioned above.38471* Host test.foo:443 was resolved.38472* IPv6: 2001:db8:1::338473* IPv4: 192.168.1.338474* Trying [2001:db8:1::3]:443...38475* ALPN: curl offers h2,http/1.138476} [5 bytes data]38477* TLSv1.3 (OUT), TLS handshake, Client hello (1):38478} [1552 bytes data]38479* SSL Trust Anchors:38480* OpenSSL default paths (fallback)38481{ [5 bytes data]38482* TLSv1.3 (IN), TLS handshake, Server hello (2):38483{ [1210 bytes data]38484* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38485{ [1 bytes data]38486* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38487{ [19 bytes data]38488* TLSv1.3 (IN), TLS handshake, Certificate (11):38489{ [1010 bytes data]38490* TLSv1.3 (IN), TLS handshake, CERT verify (15):38491{ [110 bytes data]38492* TLSv1.3 (IN), TLS handshake, Finished (20):38493{ [52 bytes data]38494* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38495} [1 bytes data]38496* TLSv1.3 (OUT), TLS handshake, Finished (20):38497} [52 bytes data]38498* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38499* ALPN: server accepted h238500* Server certificate:38501* subject: CN=test.foo38502* start date: Sep 19 10:16:44 2026 GMT38503* expire date: Oct 19 10:16:44 2028 GMT38504* issuer: CN=minica root ca 2eeab338505* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438506* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438507* subjectAltName: "test.foo" matches cert's "test.foo"38508* OpenSSL verify result: 1338509* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38510* closing connection #038511curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38512More details here: https://curl.se/docs/sslcerts.html3851338514curl failed to verify the legitimacy of the server and therefore could not38515establish a secure connection to it. To learn more about this situation and38516how to fix it, please visit the webpage mentioned above.38517* Host test.foo:443 was resolved.38518* IPv6: 2001:db8:1::338519* IPv4: 192.168.1.338520* Trying [2001:db8:1::3]:443...38521* ALPN: curl offers h2,http/1.138522} [5 bytes data]38523* TLSv1.3 (OUT), TLS handshake, Client hello (1):38524} [1552 bytes data]38525* SSL Trust Anchors:38526* OpenSSL default paths (fallback)38527{ [5 bytes data]38528* TLSv1.3 (IN), TLS handshake, Server hello (2):38529{ [1210 bytes data]38530* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38531{ [1 bytes data]38532* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38533{ [19 bytes data]38534* TLSv1.3 (IN), TLS handshake, Certificate (11):38535{ [1010 bytes data]38536* TLSv1.3 (IN), TLS handshake, CERT verify (15):38537{ [112 bytes data]38538* TLSv1.3 (IN), TLS handshake, Finished (20):38539{ [52 bytes data]38540* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38541} [1 bytes data]38542* TLSv1.3 (OUT), TLS handshake, Finished (20):38543} [52 bytes data]38544* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38545* ALPN: server accepted h238546* Server certificate:38547* subject: CN=test.foo38548* start date: Sep 19 10:16:44 2026 GMT38549* expire date: Oct 19 10:16:44 2028 GMT38550* issuer: CN=minica root ca 2eeab338551* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438552* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438553* subjectAltName: "test.foo" matches cert's "test.foo"38554* OpenSSL verify result: 1338555* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38556* closing connection #038557curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38558More details here: https://curl.se/docs/sslcerts.html3855938560curl failed to verify the legitimacy of the server and therefore could not38561establish a secure connection to it. To learn more about this situation and38562how to fix it, please visit the webpage mentioned above.38563* Trying [2001:db8:1::3]:443...38564* Host test.foo:443 was resolved.38565* IPv6: 2001:db8:1::338566* IPv4: 192.168.1.338567* ALPN: curl offers h2,http/1.138568} [5 bytes data]38569* TLSv1.3 (OUT), TLS handshake, Client hello (1):38570} [1552 bytes data]38571* SSL Trust Anchors:38572* OpenSSL default paths (fallback)38573{ [5 bytes data]38574* TLSv1.3 (IN), TLS handshake, Server hello (2):38575{ [1210 bytes data]38576* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38577{ [1 bytes data]38578* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38579{ [19 bytes data]38580* TLSv1.3 (IN), TLS handshake, Certificate (11):38581{ [1010 bytes data]38582* TLSv1.3 (IN), TLS handshake, CERT verify (15):38583{ [111 bytes data]38584* TLSv1.3 (IN), TLS handshake, Finished (20):38585{ [52 bytes data]38586* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38587} [1 bytes data]38588* TLSv1.3 (OUT), TLS handshake, Finished (20):38589} [52 bytes data]38590* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38591* ALPN: server accepted h238592* Server certificate:38593* subject: CN=test.foo38594* start date: Sep 19 10:16:44 2026 GMT38595* expire date: Oct 19 10:16:44 2028 GMT38596* issuer: CN=minica root ca 2eeab338597* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438598* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438599* subjectAltName: "test.foo" matches cert's "test.foo"38600* OpenSSL verify result: 1338601* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38602* closing connection #038603curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38604More details here: https://curl.se/docs/sslcerts.html3860538606curl failed to verify the legitimacy of the server and therefore could not38607establish a secure connection to it. To learn more about this situation and38608how to fix it, please visit the webpage mentioned above.38609* Host test.foo:443 was resolved.38610* IPv6: 2001:db8:1::338611* IPv4: 192.168.1.338612* Trying [2001:db8:1::3]:443...38613* ALPN: curl offers h2,http/1.138614} [5 bytes data]38615* TLSv1.3 (OUT), TLS handshake, Client hello (1):38616} [1552 bytes data]38617* SSL Trust Anchors:38618* OpenSSL default paths (fallback)38619{ [5 bytes data]38620* TLSv1.3 (IN), TLS handshake, Server hello (2):38621{ [1210 bytes data]38622* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38623{ [1 bytes data]38624* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38625{ [19 bytes data]38626* TLSv1.3 (IN), TLS handshake, Certificate (11):38627{ [1010 bytes data]38628* TLSv1.3 (IN), TLS handshake, CERT verify (15):38629{ [111 bytes data]38630* TLSv1.3 (IN), TLS handshake, Finished (20):38631{ [52 bytes data]38632* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38633} [1 bytes data]38634* TLSv1.3 (OUT), TLS handshake, Finished (20):38635} [52 bytes data]38636* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38637* ALPN: server accepted h238638* Server certificate:38639* subject: CN=test.foo38640* start date: Sep 19 10:16:44 2026 GMT38641* expire date: Oct 19 10:16:44 2028 GMT38642* issuer: CN=minica root ca 2eeab338643* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438644* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438645* subjectAltName: "test.foo" matches cert's "test.foo"38646* OpenSSL verify result: 1338647* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38648* closing connection #038649curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38650More details here: https://curl.se/docs/sslcerts.html3865138652curl failed to verify the legitimacy of the server and therefore could not38653establish a secure connection to it. To learn more about this situation and38654how to fix it, please visit the webpage mentioned above.38655* Host test.foo:443 was resolved.38656* IPv6: 2001:db8:1::338657* IPv4: 192.168.1.338658* Trying [2001:db8:1::3]:443...38659* ALPN: curl offers h2,http/1.138660} [5 bytes data]38661* TLSv1.3 (OUT), TLS handshake, Client hello (1):38662} [1552 bytes data]38663* SSL Trust Anchors:38664* OpenSSL default paths (fallback)38665{ [5 bytes data]38666* TLSv1.3 (IN), TLS handshake, Server hello (2):38667{ [1210 bytes data]38668* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38669{ [1 bytes data]38670* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38671{ [19 bytes data]38672* TLSv1.3 (IN), TLS handshake, Certificate (11):38673{ [1010 bytes data]38674* TLSv1.3 (IN), TLS handshake, CERT verify (15):38675{ [110 bytes data]38676* TLSv1.3 (IN), TLS handshake, Finished (20):38677{ [52 bytes data]38678* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38679} [1 bytes data]38680* TLSv1.3 (OUT), TLS handshake, Finished (20):38681} [52 bytes data]38682* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38683* ALPN: server accepted h238684* Server certificate:38685* subject: CN=test.foo38686* start date: Sep 19 10:16:44 2026 GMT38687* expire date: Oct 19 10:16:44 2028 GMT38688* issuer: CN=minica root ca 2eeab338689* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438690* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438691* subjectAltName: "test.foo" matches cert's "test.foo"38692* OpenSSL verify result: 1338693* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38694* closing connection #038695curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38696More details here: https://curl.se/docs/sslcerts.html3869738698curl failed to verify the legitimacy of the server and therefore could not38699establish a secure connection to it. To learn more about this situation and38700how to fix it, please visit the webpage mentioned above.38701* Host test.foo:443 was resolved.38702* IPv6: 2001:db8:1::338703* IPv4: 192.168.1.338704* Trying [2001:db8:1::3]:443...38705* ALPN: curl offers h2,http/1.138706} [5 bytes data]38707* TLSv1.3 (OUT), TLS handshake, Client hello (1):38708} [1552 bytes data]38709* SSL Trust Anchors:38710* OpenSSL default paths (fallback)38711{ [5 bytes data]38712* TLSv1.3 (IN), TLS handshake, Server hello (2):38713{ [1210 bytes data]38714* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38715{ [1 bytes data]38716* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38717{ [19 bytes data]38718* TLSv1.3 (IN), TLS handshake, Certificate (11):38719{ [1010 bytes data]38720* TLSv1.3 (IN), TLS handshake, CERT verify (15):38721{ [110 bytes data]38722* TLSv1.3 (IN), TLS handshake, Finished (20):38723{ [52 bytes data]38724* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38725} [1 bytes data]38726* TLSv1.3 (OUT), TLS handshake, Finished (20):38727} [52 bytes data]38728* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38729* ALPN: server accepted h238730* Server certificate:38731* subject: CN=test.foo38732* start date: Sep 19 10:16:44 2026 GMT38733* expire date: Oct 19 10:16:44 2028 GMT38734* issuer: CN=minica root ca 2eeab338735* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438736* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438737* subjectAltName: "test.foo" matches cert's "test.foo"38738* OpenSSL verify result: 1338739* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38740* closing connection #038741curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38742More details here: https://curl.se/docs/sslcerts.html3874338744curl failed to verify the legitimacy of the server and therefore could not38745establish a secure connection to it. To learn more about this situation and38746how to fix it, please visit the webpage mentioned above.38747* Host test.foo:443 was resolved.38748* IPv6: 2001:db8:1::338749* IPv4: 192.168.1.338750* Trying [2001:db8:1::3]:443...38751* ALPN: curl offers h2,http/1.138752} [5 bytes data]38753* TLSv1.3 (OUT), TLS handshake, Client hello (1):38754} [1552 bytes data]38755* SSL Trust Anchors:38756* OpenSSL default paths (fallback)38757{ [5 bytes data]38758* TLSv1.3 (IN), TLS handshake, Server hello (2):38759{ [1210 bytes data]38760* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38761{ [1 bytes data]38762* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38763{ [19 bytes data]38764* TLSv1.3 (IN), TLS handshake, Certificate (11):38765{ [1010 bytes data]38766* TLSv1.3 (IN), TLS handshake, CERT verify (15):38767{ [111 bytes data]38768* TLSv1.3 (IN), TLS handshake, Finished (20):38769{ [52 bytes data]38770* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38771} [1 bytes data]38772* TLSv1.3 (OUT), TLS handshake, Finished (20):38773} [52 bytes data]38774* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38775* ALPN: server accepted h238776* Server certificate:38777* subject: CN=test.foo38778* start date: Sep 19 10:16:44 2026 GMT38779* expire date: Oct 19 10:16:44 2028 GMT38780* issuer: CN=minica root ca 2eeab338781* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438782* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438783* subjectAltName: "test.foo" matches cert's "test.foo"38784* OpenSSL verify result: 1338785* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38786* closing connection #038787curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38788More details here: https://curl.se/docs/sslcerts.html3878938790curl failed to verify the legitimacy of the server and therefore could not38791establish a secure connection to it. To learn more about this situation and38792how to fix it, please visit the webpage mentioned above.38793* Host test.foo:443 was resolved.38794* IPv6: 2001:db8:1::338795* IPv4: 192.168.1.338796* Trying [2001:db8:1::3]:443...38797* ALPN: curl offers h2,http/1.138798} [5 bytes data]38799* TLSv1.3 (OUT), TLS handshake, Client hello (1):38800} [1552 bytes data]38801* SSL Trust Anchors:38802* OpenSSL default paths (fallback)38803{ [5 bytes data]38804* TLSv1.3 (IN), TLS handshake, Server hello (2):38805{ [1210 bytes data]38806* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38807{ [1 bytes data]38808* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38809{ [19 bytes data]38810* TLSv1.3 (IN), TLS handshake, Certificate (11):38811{ [1010 bytes data]38812* TLSv1.3 (IN), TLS handshake, CERT verify (15):38813{ [111 bytes data]38814* TLSv1.3 (IN), TLS handshake, Finished (20):38815{ [52 bytes data]38816* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38817} [1 bytes data]38818* TLSv1.3 (OUT), TLS handshake, Finished (20):38819} [52 bytes data]38820* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38821* ALPN: server accepted h238822* Server certificate:38823* subject: CN=test.foo38824* start date: Sep 19 10:16:44 2026 GMT38825* expire date: Oct 19 10:16:44 2028 GMT38826* issuer: CN=minica root ca 2eeab338827* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438828* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438829* subjectAltName: "test.foo" matches cert's "test.foo"38830* OpenSSL verify result: 1338831* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38832* closing connection #038833curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38834More details here: https://curl.se/docs/sslcerts.html3883538836curl failed to verify the legitimacy of the server and therefore could not38837establish a secure connection to it. To learn more about this situation and38838how to fix it, please visit the webpage mentioned above.38839* Host test.foo:443 was resolved.38840* IPv6: 2001:db8:1::338841* IPv4: 192.168.1.338842* Trying [2001:db8:1::3]:443...38843* ALPN: curl offers h2,http/1.138844} [5 bytes data]38845* TLSv1.3 (OUT), TLS handshake, Client hello (1):38846} [1552 bytes data]38847* SSL Trust Anchors:38848* OpenSSL default paths (fallback)38849{ [5 bytes data]38850* TLSv1.3 (IN), TLS handshake, Server hello (2):38851{ [1210 bytes data]38852* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38853{ [1 bytes data]38854* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38855{ [19 bytes data]38856* TLSv1.3 (IN), TLS handshake, Certificate (11):38857{ [1010 bytes data]38858* TLSv1.3 (IN), TLS handshake, CERT verify (15):38859{ [111 bytes data]38860* TLSv1.3 (IN), TLS handshake, Finished (20):38861{ [52 bytes data]38862* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38863} [1 bytes data]38864* TLSv1.3 (OUT), TLS handshake, Finished (20):38865} [52 bytes data]38866* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38867* ALPN: server accepted h238868* Server certificate:38869* subject: CN=test.foo38870* start date: Sep 19 10:16:44 2026 GMT38871* expire date: Oct 19 10:16:44 2028 GMT38872* issuer: CN=minica root ca 2eeab338873* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438874* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438875* subjectAltName: "test.foo" matches cert's "test.foo"38876* OpenSSL verify result: 1338877* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38878* closing connection #038879curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38880More details here: https://curl.se/docs/sslcerts.html3888138882curl failed to verify the legitimacy of the server and therefore could not38883establish a secure connection to it. To learn more about this situation and38884how to fix it, please visit the webpage mentioned above.38885* Host test.foo:443 was resolved.38886* IPv6: 2001:db8:1::338887* IPv4: 192.168.1.338888* Trying [2001:db8:1::3]:443...38889* ALPN: curl offers h2,http/1.138890} [5 bytes data]38891* TLSv1.3 (OUT), TLS handshake, Client hello (1):38892} [1552 bytes data]38893* SSL Trust Anchors:38894* OpenSSL default paths (fallback)38895{ [5 bytes data]38896* TLSv1.3 (IN), TLS handshake, Server hello (2):38897{ [1210 bytes data]38898* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38899{ [1 bytes data]38900* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38901{ [19 bytes data]38902* TLSv1.3 (IN), TLS handshake, Certificate (11):38903{ [1010 bytes data]38904* TLSv1.3 (IN), TLS handshake, CERT verify (15):38905{ [111 bytes data]38906* TLSv1.3 (IN), TLS handshake, Finished (20):38907{ [52 bytes data]38908* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38909} [1 bytes data]38910* TLSv1.3 (OUT), TLS handshake, Finished (20):38911} [52 bytes data]38912* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38913* ALPN: server accepted h238914* Server certificate:38915* subject: CN=test.foo38916* start date: Sep 19 10:16:44 2026 GMT38917* expire date: Oct 19 10:16:44 2028 GMT38918* issuer: CN=minica root ca 2eeab338919* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438920* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438921* subjectAltName: "test.foo" matches cert's "test.foo"38922* OpenSSL verify result: 1338923* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38924* closing connection #038925curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38926More details here: https://curl.se/docs/sslcerts.html3892738928curl failed to verify the legitimacy of the server and therefore could not38929establish a secure connection to it. To learn more about this situation and38930how to fix it, please visit the webpage mentioned above.38931* Host test.foo:443 was resolved.38932* IPv6: 2001:db8:1::338933* IPv4: 192.168.1.338934* Trying [2001:db8:1::3]:443...38935* ALPN: curl offers h2,http/1.138936} [5 bytes data]38937* TLSv1.3 (OUT), TLS handshake, Client hello (1):38938} [1552 bytes data]38939* SSL Trust Anchors:38940* OpenSSL default paths (fallback)38941{ [5 bytes data]38942* TLSv1.3 (IN), TLS handshake, Server hello (2):38943{ [1210 bytes data]38944* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38945{ [1 bytes data]38946* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38947{ [19 bytes data]38948* TLSv1.3 (IN), TLS handshake, Certificate (11):38949{ [1010 bytes data]38950* TLSv1.3 (IN), TLS handshake, CERT verify (15):38951{ [112 bytes data]38952* TLSv1.3 (IN), TLS handshake, Finished (20):38953{ [52 bytes data]38954* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38955} [1 bytes data]38956* TLSv1.3 (OUT), TLS handshake, Finished (20):38957} [52 bytes data]38958* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38959* ALPN: server accepted h238960* Server certificate:38961* subject: CN=test.foo38962* start date: Sep 19 10:16:44 2026 GMT38963* expire date: Oct 19 10:16:44 2028 GMT38964* issuer: CN=minica root ca 2eeab338965* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438966* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438967* subjectAltName: "test.foo" matches cert's "test.foo"38968* OpenSSL verify result: 1338969* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38970* closing connection #038971curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38972More details here: https://curl.se/docs/sslcerts.html3897338974curl failed to verify the legitimacy of the server and therefore could not38975establish a secure connection to it. To learn more about this situation and38976how to fix it, please visit the webpage mentioned above.38977* Host test.foo:443 was resolved.38978* IPv6: 2001:db8:1::338979* IPv4: 192.168.1.338980* Trying [2001:db8:1::3]:443...38981* ALPN: curl offers h2,http/1.138982} [5 bytes data]38983* TLSv1.3 (OUT), TLS handshake, Client hello (1):38984} [1552 bytes data]38985* SSL Trust Anchors:38986* OpenSSL default paths (fallback)38987{ [5 bytes data]38988* TLSv1.3 (IN), TLS handshake, Server hello (2):38989{ [1210 bytes data]38990* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38991{ [1 bytes data]38992* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38993{ [19 bytes data]38994* TLSv1.3 (IN), TLS handshake, Certificate (11):38995{ [1010 bytes data]38996* TLSv1.3 (IN), TLS handshake, CERT verify (15):38997{ [111 bytes data]38998* TLSv1.3 (IN), TLS handshake, Finished (20):38999{ [52 bytes data]39000* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39001} [1 bytes data]39002* TLSv1.3 (OUT), TLS handshake, Finished (20):39003} [52 bytes data]39004* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39005* ALPN: server accepted h239006* Server certificate:39007* subject: CN=test.foo39008* start date: Sep 19 10:16:44 2026 GMT39009* expire date: Oct 19 10:16:44 2028 GMT39010* issuer: CN=minica root ca 2eeab339011* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439012* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439013* subjectAltName: "test.foo" matches cert's "test.foo"39014* OpenSSL verify result: 1339015* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39016* closing connection #039017curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39018More details here: https://curl.se/docs/sslcerts.html3901939020curl failed to verify the legitimacy of the server and therefore could not39021establish a secure connection to it. To learn more about this situation and39022how to fix it, please visit the webpage mentioned above.39023* Host test.foo:443 was resolved.39024* IPv6: 2001:db8:1::339025* IPv4: 192.168.1.339026* Trying [2001:db8:1::3]:443...39027* ALPN: curl offers h2,http/1.139028} [5 bytes data]39029* TLSv1.3 (OUT), TLS handshake, Client hello (1):39030} [1552 bytes data]39031* SSL Trust Anchors:39032* OpenSSL default paths (fallback)39033{ [5 bytes data]39034* TLSv1.3 (IN), TLS handshake, Server hello (2):39035{ [1210 bytes data]39036* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39037{ [1 bytes data]39038* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39039{ [19 bytes data]39040* TLSv1.3 (IN), TLS handshake, Certificate (11):39041{ [1010 bytes data]39042* TLSv1.3 (IN), TLS handshake, CERT verify (15):39043{ [111 bytes data]39044* TLSv1.3 (IN), TLS handshake, Finished (20):39045{ [52 bytes data]39046* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39047} [1 bytes data]39048* TLSv1.3 (OUT), TLS handshake, Finished (20):39049} [52 bytes data]39050* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39051* ALPN: server accepted h239052* Server certificate:39053* subject: CN=test.foo39054* start date: Sep 19 10:16:44 2026 GMT39055* expire date: Oct 19 10:16:44 2028 GMT39056* issuer: CN=minica root ca 2eeab339057* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439058* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439059* subjectAltName: "test.foo" matches cert's "test.foo"39060* OpenSSL verify result: 1339061* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39062* closing connection #039063curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39064More details here: https://curl.se/docs/sslcerts.html3906539066curl failed to verify the legitimacy of the server and therefore could not39067establish a secure connection to it. To learn more about this situation and39068how to fix it, please visit the webpage mentioned above.39069* Host test.foo:443 was resolved.39070* IPv6: 2001:db8:1::339071* IPv4: 192.168.1.339072* Trying [2001:db8:1::3]:443...39073* ALPN: curl offers h2,http/1.139074} [5 bytes data]39075* TLSv1.3 (OUT), TLS handshake, Client hello (1):39076} [1552 bytes data]39077* SSL Trust Anchors:39078* OpenSSL default paths (fallback)39079{ [5 bytes data]39080* TLSv1.3 (IN), TLS handshake, Server hello (2):39081{ [1210 bytes data]39082* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39083{ [1 bytes data]39084* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39085{ [19 bytes data]39086* TLSv1.3 (IN), TLS handshake, Certificate (11):39087{ [1010 bytes data]39088* TLSv1.3 (IN), TLS handshake, CERT verify (15):39089{ [112 bytes data]39090* TLSv1.3 (IN), TLS handshake, Finished (20):39091{ [52 bytes data]39092* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39093} [1 bytes data]39094* TLSv1.3 (OUT), TLS handshake, Finished (20):39095} [52 bytes data]39096* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39097* ALPN: server accepted h239098* Server certificate:39099* subject: CN=test.foo39100* start date: Sep 19 10:16:44 2026 GMT39101* expire date: Oct 19 10:16:44 2028 GMT39102* issuer: CN=minica root ca 2eeab339103* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439104* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439105* subjectAltName: "test.foo" matches cert's "test.foo"39106* OpenSSL verify result: 1339107* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39108* closing connection #039109curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39110More details here: https://curl.se/docs/sslcerts.html3911139112curl failed to verify the legitimacy of the server and therefore could not39113establish a secure connection to it. To learn more about this situation and39114how to fix it, please visit the webpage mentioned above.39115* Host test.foo:443 was resolved.39116* IPv6: 2001:db8:1::339117* IPv4: 192.168.1.339118* Trying [2001:db8:1::3]:443...39119* ALPN: curl offers h2,http/1.139120} [5 bytes data]39121* TLSv1.3 (OUT), TLS handshake, Client hello (1):39122} [1552 bytes data]39123* SSL Trust Anchors:39124* OpenSSL default paths (fallback)39125{ [5 bytes data]39126* TLSv1.3 (IN), TLS handshake, Server hello (2):39127{ [1210 bytes data]39128* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39129{ [1 bytes data]39130* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39131{ [19 bytes data]39132* TLSv1.3 (IN), TLS handshake, Certificate (11):39133{ [1010 bytes data]39134* TLSv1.3 (IN), TLS handshake, CERT verify (15):39135{ [111 bytes data]39136* TLSv1.3 (IN), TLS handshake, Finished (20):39137{ [52 bytes data]39138* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39139} [1 bytes data]39140* TLSv1.3 (OUT), TLS handshake, Finished (20):39141} [52 bytes data]39142* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39143* ALPN: server accepted h239144* Server certificate:39145* subject: CN=test.foo39146* start date: Sep 19 10:16:44 2026 GMT39147* expire date: Oct 19 10:16:44 2028 GMT39148* issuer: CN=minica root ca 2eeab339149* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439150* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439151* subjectAltName: "test.foo" matches cert's "test.foo"39152* OpenSSL verify result: 1339153* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39154* closing connection #039155curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39156More details here: https://curl.se/docs/sslcerts.html3915739158curl failed to verify the legitimacy of the server and therefore could not39159establish a secure connection to it. To learn more about this situation and39160how to fix it, please visit the webpage mentioned above.39161* Host test.foo:443 was resolved.39162* IPv6: 2001:db8:1::339163* IPv4: 192.168.1.339164* Trying [2001:db8:1::3]:443...39165* ALPN: curl offers h2,http/1.139166} [5 bytes data]39167* TLSv1.3 (OUT), TLS handshake, Client hello (1):39168} [1552 bytes data]39169* SSL Trust Anchors:39170* OpenSSL default paths (fallback)39171{ [5 bytes data]39172* TLSv1.3 (IN), TLS handshake, Server hello (2):39173{ [1210 bytes data]39174* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39175{ [1 bytes data]39176* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39177{ [19 bytes data]39178* TLSv1.3 (IN), TLS handshake, Certificate (11):39179{ [1010 bytes data]39180* TLSv1.3 (IN), TLS handshake, CERT verify (15):39181{ [111 bytes data]39182* TLSv1.3 (IN), TLS handshake, Finished (20):39183{ [52 bytes data]39184* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39185} [1 bytes data]39186* TLSv1.3 (OUT), TLS handshake, Finished (20):39187} [52 bytes data]39188* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39189* ALPN: server accepted h239190* Server certificate:39191* subject: CN=test.foo39192* start date: Sep 19 10:16:44 2026 GMT39193* expire date: Oct 19 10:16:44 2028 GMT39194* issuer: CN=minica root ca 2eeab339195* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439196* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439197* subjectAltName: "test.foo" matches cert's "test.foo"39198* OpenSSL verify result: 1339199* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39200* closing connection #039201curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39202More details here: https://curl.se/docs/sslcerts.html3920339204curl failed to verify the legitimacy of the server and therefore could not39205establish a secure connection to it. To learn more about this situation and39206how to fix it, please visit the webpage mentioned above.39207* Host test.foo:443 was resolved.39208* IPv6: 2001:db8:1::339209* IPv4: 192.168.1.339210* Trying [2001:db8:1::3]:443...39211* ALPN: curl offers h2,http/1.139212} [5 bytes data]39213* TLSv1.3 (OUT), TLS handshake, Client hello (1):39214} [1552 bytes data]39215* SSL Trust Anchors:39216* OpenSSL default paths (fallback)39217{ [5 bytes data]39218* TLSv1.3 (IN), TLS handshake, Server hello (2):39219{ [1210 bytes data]39220* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39221{ [1 bytes data]39222* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39223{ [19 bytes data]39224* TLSv1.3 (IN), TLS handshake, Certificate (11):39225{ [1010 bytes data]39226* TLSv1.3 (IN), TLS handshake, CERT verify (15):39227{ [111 bytes data]39228* TLSv1.3 (IN), TLS handshake, Finished (20):39229{ [52 bytes data]39230* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39231} [1 bytes data]39232* TLSv1.3 (OUT), TLS handshake, Finished (20):39233} [52 bytes data]39234* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39235* ALPN: server accepted h239236* Server certificate:39237* subject: CN=test.foo39238* start date: Sep 19 10:16:44 2026 GMT39239* expire date: Oct 19 10:16:44 2028 GMT39240* issuer: CN=minica root ca 2eeab339241* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439242* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439243* subjectAltName: "test.foo" matches cert's "test.foo"39244* OpenSSL verify result: 1339245* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39246* closing connection #039247curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39248More details here: https://curl.se/docs/sslcerts.html3924939250curl failed to verify the legitimacy of the server and therefore could not39251establish a secure connection to it. To learn more about this situation and39252how to fix it, please visit the webpage mentioned above.39253* Trying [2001:db8:1::3]:443...39254* Host test.foo:443 was resolved.39255* IPv6: 2001:db8:1::339256* IPv4: 192.168.1.339257* ALPN: curl offers h2,http/1.139258} [5 bytes data]39259* TLSv1.3 (OUT), TLS handshake, Client hello (1):39260} [1552 bytes data]39261* SSL Trust Anchors:39262* OpenSSL default paths (fallback)39263{ [5 bytes data]39264* TLSv1.3 (IN), TLS handshake, Server hello (2):39265{ [1210 bytes data]39266* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39267{ [1 bytes data]39268* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39269{ [19 bytes data]39270* TLSv1.3 (IN), TLS handshake, Certificate (11):39271{ [1010 bytes data]39272* TLSv1.3 (IN), TLS handshake, CERT verify (15):39273{ [110 bytes data]39274* TLSv1.3 (IN), TLS handshake, Finished (20):39275{ [52 bytes data]39276* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39277} [1 bytes data]39278* TLSv1.3 (OUT), TLS handshake, Finished (20):39279} [52 bytes data]39280* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39281* ALPN: server accepted h239282* Server certificate:39283* subject: CN=test.foo39284* start date: Sep 19 10:16:44 2026 GMT39285* expire date: Oct 19 10:16:44 2028 GMT39286* issuer: CN=minica root ca 2eeab339287* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439288* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439289* subjectAltName: "test.foo" matches cert's "test.foo"39290* OpenSSL verify result: 1339291* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39292* closing connection #039293curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39294More details here: https://curl.se/docs/sslcerts.html3929539296curl failed to verify the legitimacy of the server and therefore could not39297establish a secure connection to it. To learn more about this situation and39298how to fix it, please visit the webpage mentioned above.39299* Host test.foo:443 was resolved.39300* IPv6: 2001:db8:1::339301* IPv4: 192.168.1.339302* Trying [2001:db8:1::3]:443...39303* ALPN: curl offers h2,http/1.139304} [5 bytes data]39305* TLSv1.3 (OUT), TLS handshake, Client hello (1):39306} [1552 bytes data]39307* SSL Trust Anchors:39308* OpenSSL default paths (fallback)39309{ [5 bytes data]39310* TLSv1.3 (IN), TLS handshake, Server hello (2):39311{ [1210 bytes data]39312* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39313{ [1 bytes data]39314* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39315{ [19 bytes data]39316* TLSv1.3 (IN), TLS handshake, Certificate (11):39317{ [1010 bytes data]39318* TLSv1.3 (IN), TLS handshake, CERT verify (15):39319{ [110 bytes data]39320* TLSv1.3 (IN), TLS handshake, Finished (20):39321{ [52 bytes data]39322* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39323} [1 bytes data]39324* TLSv1.3 (OUT), TLS handshake, Finished (20):39325} [52 bytes data]39326* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39327* ALPN: server accepted h239328* Server certificate:39329* subject: CN=test.foo39330* start date: Sep 19 10:16:44 2026 GMT39331* expire date: Oct 19 10:16:44 2028 GMT39332* issuer: CN=minica root ca 2eeab339333* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439334* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439335* subjectAltName: "test.foo" matches cert's "test.foo"39336* OpenSSL verify result: 1339337* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39338* closing connection #039339curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39340More details here: https://curl.se/docs/sslcerts.html3934139342curl failed to verify the legitimacy of the server and therefore could not39343establish a secure connection to it. To learn more about this situation and39344how to fix it, please visit the webpage mentioned above.39345* Host test.foo:443 was resolved.39346* IPv6: 2001:db8:1::339347* IPv4: 192.168.1.339348* Trying [2001:db8:1::3]:443...39349* ALPN: curl offers h2,http/1.139350} [5 bytes data]39351* TLSv1.3 (OUT), TLS handshake, Client hello (1):39352} [1552 bytes data]39353* SSL Trust Anchors:39354* OpenSSL default paths (fallback)39355{ [5 bytes data]39356* TLSv1.3 (IN), TLS handshake, Server hello (2):39357{ [1210 bytes data]39358* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39359{ [1 bytes data]39360* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39361{ [19 bytes data]39362* TLSv1.3 (IN), TLS handshake, Certificate (11):39363{ [1010 bytes data]39364* TLSv1.3 (IN), TLS handshake, CERT verify (15):39365{ [110 bytes data]39366* TLSv1.3 (IN), TLS handshake, Finished (20):39367{ [52 bytes data]39368* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39369} [1 bytes data]39370* TLSv1.3 (OUT), TLS handshake, Finished (20):39371} [52 bytes data]39372* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39373* ALPN: server accepted h239374* Server certificate:39375* subject: CN=test.foo39376* start date: Sep 19 10:16:44 2026 GMT39377* expire date: Oct 19 10:16:44 2028 GMT39378* issuer: CN=minica root ca 2eeab339379* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439380* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439381* subjectAltName: "test.foo" matches cert's "test.foo"39382* OpenSSL verify result: 1339383* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39384* closing connection #039385curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39386More details here: https://curl.se/docs/sslcerts.html3938739388curl failed to verify the legitimacy of the server and therefore could not39389establish a secure connection to it. To learn more about this situation and39390how to fix it, please visit the webpage mentioned above.39391* Host test.foo:443 was resolved.39392* IPv6: 2001:db8:1::339393* IPv4: 192.168.1.339394* Trying [2001:db8:1::3]:443...39395* ALPN: curl offers h2,http/1.139396} [5 bytes data]39397* TLSv1.3 (OUT), TLS handshake, Client hello (1):39398} [1552 bytes data]39399* SSL Trust Anchors:39400* OpenSSL default paths (fallback)39401{ [5 bytes data]39402* TLSv1.3 (IN), TLS handshake, Server hello (2):39403{ [1210 bytes data]39404* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39405{ [1 bytes data]39406* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39407{ [19 bytes data]39408* TLSv1.3 (IN), TLS handshake, Certificate (11):39409{ [1010 bytes data]39410* TLSv1.3 (IN), TLS handshake, CERT verify (15):39411{ [112 bytes data]39412* TLSv1.3 (IN), TLS handshake, Finished (20):39413{ [52 bytes data]39414* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39415} [1 bytes data]39416* TLSv1.3 (OUT), TLS handshake, Finished (20):39417} [52 bytes data]39418* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39419* ALPN: server accepted h239420* Server certificate:39421* subject: CN=test.foo39422* start date: Sep 19 10:16:44 2026 GMT39423* expire date: Oct 19 10:16:44 2028 GMT39424* issuer: CN=minica root ca 2eeab339425* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439426* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439427* subjectAltName: "test.foo" matches cert's "test.foo"39428* OpenSSL verify result: 1339429* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39430* closing connection #039431curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39432More details here: https://curl.se/docs/sslcerts.html3943339434curl failed to verify the legitimacy of the server and therefore could not39435establish a secure connection to it. To learn more about this situation and39436how to fix it, please visit the webpage mentioned above.39437* Host test.foo:443 was resolved.39438* IPv6: 2001:db8:1::339439* IPv4: 192.168.1.339440* Trying [2001:db8:1::3]:443...39441* ALPN: curl offers h2,http/1.139442} [5 bytes data]39443* TLSv1.3 (OUT), TLS handshake, Client hello (1):39444} [1552 bytes data]39445* SSL Trust Anchors:39446* OpenSSL default paths (fallback)39447{ [5 bytes data]39448* TLSv1.3 (IN), TLS handshake, Server hello (2):39449{ [1210 bytes data]39450* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39451{ [1 bytes data]39452* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39453{ [19 bytes data]39454* TLSv1.3 (IN), TLS handshake, Certificate (11):39455{ [1010 bytes data]39456* TLSv1.3 (IN), TLS handshake, CERT verify (15):39457{ [110 bytes data]39458* TLSv1.3 (IN), TLS handshake, Finished (20):39459{ [52 bytes data]39460* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39461} [1 bytes data]39462* TLSv1.3 (OUT), TLS handshake, Finished (20):39463} [52 bytes data]39464* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39465* ALPN: server accepted h239466* Server certificate:39467* subject: CN=test.foo39468* start date: Sep 19 10:16:44 2026 GMT39469* expire date: Oct 19 10:16:44 2028 GMT39470* issuer: CN=minica root ca 2eeab339471* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439472* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439473* subjectAltName: "test.foo" matches cert's "test.foo"39474* OpenSSL verify result: 1339475* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39476* closing connection #039477curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39478More details here: https://curl.se/docs/sslcerts.html3947939480curl failed to verify the legitimacy of the server and therefore could not39481establish a secure connection to it. To learn more about this situation and39482how to fix it, please visit the webpage mentioned above.39483* Trying [2001:db8:1::3]:443...39484* Host test.foo:443 was resolved.39485* IPv6: 2001:db8:1::339486* IPv4: 192.168.1.339487* ALPN: curl offers h2,http/1.139488} [5 bytes data]39489* TLSv1.3 (OUT), TLS handshake, Client hello (1):39490} [1552 bytes data]39491* SSL Trust Anchors:39492* OpenSSL default paths (fallback)39493{ [5 bytes data]39494* TLSv1.3 (IN), TLS handshake, Server hello (2):39495{ [1210 bytes data]39496* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39497{ [1 bytes data]39498* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39499{ [19 bytes data]39500* TLSv1.3 (IN), TLS handshake, Certificate (11):39501{ [1010 bytes data]39502* TLSv1.3 (IN), TLS handshake, CERT verify (15):39503{ [111 bytes data]39504* TLSv1.3 (IN), TLS handshake, Finished (20):39505{ [52 bytes data]39506* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39507} [1 bytes data]39508* TLSv1.3 (OUT), TLS handshake, Finished (20):39509} [52 bytes data]39510* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39511* ALPN: server accepted h239512* Server certificate:39513* subject: CN=test.foo39514* start date: Sep 19 10:16:44 2026 GMT39515* expire date: Oct 19 10:16:44 2028 GMT39516* issuer: CN=minica root ca 2eeab339517* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439518* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439519* subjectAltName: "test.foo" matches cert's "test.foo"39520* OpenSSL verify result: 1339521* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39522* closing connection #039523curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39524More details here: https://curl.se/docs/sslcerts.html3952539526curl failed to verify the legitimacy of the server and therefore could not39527establish a secure connection to it. To learn more about this situation and39528how to fix it, please visit the webpage mentioned above.39529* Host test.foo:443 was resolved.39530* IPv6: 2001:db8:1::339531* IPv4: 192.168.1.339532* Trying [2001:db8:1::3]:443...39533* ALPN: curl offers h2,http/1.139534} [5 bytes data]39535* TLSv1.3 (OUT), TLS handshake, Client hello (1):39536} [1552 bytes data]39537* SSL Trust Anchors:39538* OpenSSL default paths (fallback)39539{ [5 bytes data]39540* TLSv1.3 (IN), TLS handshake, Server hello (2):39541{ [1210 bytes data]39542* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39543{ [1 bytes data]39544* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39545{ [19 bytes data]39546* TLSv1.3 (IN), TLS handshake, Certificate (11):39547{ [1010 bytes data]39548* TLSv1.3 (IN), TLS handshake, CERT verify (15):39549{ [111 bytes data]39550* TLSv1.3 (IN), TLS handshake, Finished (20):39551{ [52 bytes data]39552* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39553} [1 bytes data]39554* TLSv1.3 (OUT), TLS handshake, Finished (20):39555} [52 bytes data]39556* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39557* ALPN: server accepted h239558* Server certificate:39559* subject: CN=test.foo39560* start date: Sep 19 10:16:44 2026 GMT39561* expire date: Oct 19 10:16:44 2028 GMT39562* issuer: CN=minica root ca 2eeab339563* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439564* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439565* subjectAltName: "test.foo" matches cert's "test.foo"39566* OpenSSL verify result: 1339567* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39568* closing connection #039569curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39570More details here: https://curl.se/docs/sslcerts.html3957139572curl failed to verify the legitimacy of the server and therefore could not39573establish a secure connection to it. To learn more about this situation and39574how to fix it, please visit the webpage mentioned above.39575* Host test.foo:443 was resolved.39576* IPv6: 2001:db8:1::339577* IPv4: 192.168.1.339578* Trying [2001:db8:1::3]:443...39579* ALPN: curl offers h2,http/1.139580} [5 bytes data]39581* TLSv1.3 (OUT), TLS handshake, Client hello (1):39582} [1552 bytes data]39583* SSL Trust Anchors:39584* OpenSSL default paths (fallback)39585{ [5 bytes data]39586* TLSv1.3 (IN), TLS handshake, Server hello (2):39587{ [1210 bytes data]39588* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39589{ [1 bytes data]39590* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39591{ [19 bytes data]39592* TLSv1.3 (IN), TLS handshake, Certificate (11):39593{ [1010 bytes data]39594* TLSv1.3 (IN), TLS handshake, CERT verify (15):39595{ [111 bytes data]39596* TLSv1.3 (IN), TLS handshake, Finished (20):39597{ [52 bytes data]39598* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39599} [1 bytes data]39600* TLSv1.3 (OUT), TLS handshake, Finished (20):39601} [52 bytes data]39602* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39603* ALPN: server accepted h239604* Server certificate:39605* subject: CN=test.foo39606* start date: Sep 19 10:16:44 2026 GMT39607* expire date: Oct 19 10:16:44 2028 GMT39608* issuer: CN=minica root ca 2eeab339609* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439610* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439611* subjectAltName: "test.foo" matches cert's "test.foo"39612* OpenSSL verify result: 1339613* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39614* closing connection #039615curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39616More details here: https://curl.se/docs/sslcerts.html3961739618curl failed to verify the legitimacy of the server and therefore could not39619establish a secure connection to it. To learn more about this situation and39620how to fix it, please visit the webpage mentioned above.39621* Host test.foo:443 was resolved.39622* IPv6: 2001:db8:1::339623* IPv4: 192.168.1.339624* Trying [2001:db8:1::3]:443...39625* ALPN: curl offers h2,http/1.139626} [5 bytes data]39627* TLSv1.3 (OUT), TLS handshake, Client hello (1):39628} [1552 bytes data]39629* SSL Trust Anchors:39630* OpenSSL default paths (fallback)39631{ [5 bytes data]39632* TLSv1.3 (IN), TLS handshake, Server hello (2):39633{ [1210 bytes data]39634* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39635{ [1 bytes data]39636* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39637{ [19 bytes data]39638* TLSv1.3 (IN), TLS handshake, Certificate (11):39639{ [1010 bytes data]39640* TLSv1.3 (IN), TLS handshake, CERT verify (15):39641{ [110 bytes data]39642* TLSv1.3 (IN), TLS handshake, Finished (20):39643{ [52 bytes data]39644* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39645} [1 bytes data]39646* TLSv1.3 (OUT), TLS handshake, Finished (20):39647} [52 bytes data]39648* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39649* ALPN: server accepted h239650* Server certificate:39651* subject: CN=test.foo39652* start date: Sep 19 10:16:44 2026 GMT39653* expire date: Oct 19 10:16:44 2028 GMT39654* issuer: CN=minica root ca 2eeab339655* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439656* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439657* subjectAltName: "test.foo" matches cert's "test.foo"39658* OpenSSL verify result: 1339659* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39660* closing connection #039661curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39662More details here: https://curl.se/docs/sslcerts.html3966339664curl failed to verify the legitimacy of the server and therefore could not39665establish a secure connection to it. To learn more about this situation and39666how to fix it, please visit the webpage mentioned above.39667client # [1307084.882863] client systemd[1]: Starting Cleanup of Temporary Directories...39668client # [1307084.978707] client systemd[1]: systemd-tmpfiles-clean.service: Deactivated successfully.39669client # [1307084.979159] client systemd[1]: Finished Cleanup of Temporary Directories.39670* Host test.foo:443 was resolved.39671* IPv6: 2001:db8:1::339672* IPv4: 192.168.1.339673* Trying [2001:db8:1::3]:443...39674* ALPN: curl offers h2,http/1.139675} [5 bytes data]39676* TLSv1.3 (OUT), TLS handshake, Client hello (1):39677} [1552 bytes data]39678* SSL Trust Anchors:39679* OpenSSL default paths (fallback)39680{ [5 bytes data]39681* TLSv1.3 (IN), TLS handshake, Server hello (2):39682{ [1210 bytes data]39683* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39684{ [1 bytes data]39685* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39686{ [19 bytes data]39687* TLSv1.3 (IN), TLS handshake, Certificate (11):39688{ [1010 bytes data]39689* TLSv1.3 (IN), TLS handshake, CERT verify (15):39690{ [112 bytes data]39691* TLSv1.3 (IN), TLS handshake, Finished (20):39692{ [52 bytes data]39693* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39694} [1 bytes data]39695* TLSv1.3 (OUT), TLS handshake, Finished (20):39696} [52 bytes data]39697* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39698* ALPN: server accepted h239699* Server certificate:39700* subject: CN=test.foo39701* start date: Sep 19 10:16:44 2026 GMT39702* expire date: Oct 19 10:16:44 2028 GMT39703* issuer: CN=minica root ca 2eeab339704* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439705* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439706* subjectAltName: "test.foo" matches cert's "test.foo"39707* OpenSSL verify result: 1339708* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39709* closing connection #039710curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39711More details here: https://curl.se/docs/sslcerts.html3971239713curl failed to verify the legitimacy of the server and therefore could not39714establish a secure connection to it. To learn more about this situation and39715how to fix it, please visit the webpage mentioned above.39716* Host test.foo:443 was resolved.39717* IPv6: 2001:db8:1::339718* IPv4: 192.168.1.339719* Trying [2001:db8:1::3]:443...39720* ALPN: curl offers h2,http/1.139721} [5 bytes data]39722* TLSv1.3 (OUT), TLS handshake, Client hello (1):39723} [1552 bytes data]39724* SSL Trust Anchors:39725* OpenSSL default paths (fallback)39726{ [5 bytes data]39727* TLSv1.3 (IN), TLS handshake, Server hello (2):39728{ [1210 bytes data]39729* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39730{ [1 bytes data]39731* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39732{ [19 bytes data]39733* TLSv1.3 (IN), TLS handshake, Certificate (11):39734{ [1010 bytes data]39735* TLSv1.3 (IN), TLS handshake, CERT verify (15):39736{ [110 bytes data]39737* TLSv1.3 (IN), TLS handshake, Finished (20):39738{ [52 bytes data]39739* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39740} [1 bytes data]39741* TLSv1.3 (OUT), TLS handshake, Finished (20):39742} [52 bytes data]39743* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39744* ALPN: server accepted h239745* Server certificate:39746* subject: CN=test.foo39747* start date: Sep 19 10:16:44 2026 GMT39748* expire date: Oct 19 10:16:44 2028 GMT39749* issuer: CN=minica root ca 2eeab339750* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439751* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439752* subjectAltName: "test.foo" matches cert's "test.foo"39753* OpenSSL verify result: 1339754* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39755* closing connection #039756curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39757More details here: https://curl.se/docs/sslcerts.html3975839759curl failed to verify the legitimacy of the server and therefore could not39760establish a secure connection to it. To learn more about this situation and39761how to fix it, please visit the webpage mentioned above.39762* Host test.foo:443 was resolved.39763* IPv6: 2001:db8:1::339764* IPv4: 192.168.1.339765* Trying [2001:db8:1::3]:443...39766* ALPN: curl offers h2,http/1.139767} [5 bytes data]39768* TLSv1.3 (OUT), TLS handshake, Client hello (1):39769} [1552 bytes data]39770* SSL Trust Anchors:39771* OpenSSL default paths (fallback)39772{ [5 bytes data]39773* TLSv1.3 (IN), TLS handshake, Server hello (2):39774{ [1210 bytes data]39775* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39776{ [1 bytes data]39777* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39778{ [19 bytes data]39779* TLSv1.3 (IN), TLS handshake, Certificate (11):39780{ [1010 bytes data]39781* TLSv1.3 (IN), TLS handshake, CERT verify (15):39782{ [111 bytes data]39783* TLSv1.3 (IN), TLS handshake, Finished (20):39784{ [52 bytes data]39785* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39786} [1 bytes data]39787* TLSv1.3 (OUT), TLS handshake, Finished (20):39788} [52 bytes data]39789* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39790* ALPN: server accepted h239791* Server certificate:39792* subject: CN=test.foo39793* start date: Sep 19 10:16:44 2026 GMT39794* expire date: Oct 19 10:16:44 2028 GMT39795* issuer: CN=minica root ca 2eeab339796* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439797* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439798* subjectAltName: "test.foo" matches cert's "test.foo"39799* OpenSSL verify result: 1339800* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39801* closing connection #039802curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39803More details here: https://curl.se/docs/sslcerts.html3980439805curl failed to verify the legitimacy of the server and therefore could not39806establish a secure connection to it. To learn more about this situation and39807how to fix it, please visit the webpage mentioned above.39808* Host test.foo:443 was resolved.39809* IPv6: 2001:db8:1::339810* IPv4: 192.168.1.339811* Trying [2001:db8:1::3]:443...39812* ALPN: curl offers h2,http/1.139813} [5 bytes data]39814* TLSv1.3 (OUT), TLS handshake, Client hello (1):39815} [1552 bytes data]39816* SSL Trust Anchors:39817* OpenSSL default paths (fallback)39818{ [5 bytes data]39819* TLSv1.3 (IN), TLS handshake, Server hello (2):39820{ [1210 bytes data]39821* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39822{ [1 bytes data]39823* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39824{ [19 bytes data]39825* TLSv1.3 (IN), TLS handshake, Certificate (11):39826{ [1010 bytes data]39827* TLSv1.3 (IN), TLS handshake, CERT verify (15):39828{ [110 bytes data]39829* TLSv1.3 (IN), TLS handshake, Finished (20):39830{ [52 bytes data]39831* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39832} [1 bytes data]39833* TLSv1.3 (OUT), TLS handshake, Finished (20):39834} [52 bytes data]39835* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39836* ALPN: server accepted h239837* Server certificate:39838* subject: CN=test.foo39839* start date: Sep 19 10:16:44 2026 GMT39840* expire date: Oct 19 10:16:44 2028 GMT39841* issuer: CN=minica root ca 2eeab339842* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439843* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439844* subjectAltName: "test.foo" matches cert's "test.foo"39845* OpenSSL verify result: 1339846* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39847* closing connection #039848curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39849More details here: https://curl.se/docs/sslcerts.html3985039851curl failed to verify the legitimacy of the server and therefore could not39852establish a secure connection to it. To learn more about this situation and39853how to fix it, please visit the webpage mentioned above.39854* Host test.foo:443 was resolved.39855* IPv6: 2001:db8:1::339856* IPv4: 192.168.1.339857* Trying [2001:db8:1::3]:443...39858* ALPN: curl offers h2,http/1.139859} [5 bytes data]39860* TLSv1.3 (OUT), TLS handshake, Client hello (1):39861} [1552 bytes data]39862* SSL Trust Anchors:39863* OpenSSL default paths (fallback)39864{ [5 bytes data]39865* TLSv1.3 (IN), TLS handshake, Server hello (2):39866{ [1210 bytes data]39867* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39868{ [1 bytes data]39869* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39870{ [19 bytes data]39871* TLSv1.3 (IN), TLS handshake, Certificate (11):39872{ [1010 bytes data]39873* TLSv1.3 (IN), TLS handshake, CERT verify (15):39874{ [111 bytes data]39875* TLSv1.3 (IN), TLS handshake, Finished (20):39876{ [52 bytes data]39877* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39878} [1 bytes data]39879* TLSv1.3 (OUT), TLS handshake, Finished (20):39880} [52 bytes data]39881* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39882* ALPN: server accepted h239883* Server certificate:39884* subject: CN=test.foo39885* start date: Sep 19 10:16:44 2026 GMT39886* expire date: Oct 19 10:16:44 2028 GMT39887* issuer: CN=minica root ca 2eeab339888* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439889* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439890* subjectAltName: "test.foo" matches cert's "test.foo"39891* OpenSSL verify result: 1339892* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39893* closing connection #039894curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39895More details here: https://curl.se/docs/sslcerts.html3989639897curl failed to verify the legitimacy of the server and therefore could not39898establish a secure connection to it. To learn more about this situation and39899how to fix it, please visit the webpage mentioned above.39900ca # [1307090.069794] ca systemd[1]: Starting Cleanup of Temporary Directories...39901ca # [1307090.180676] ca systemd[1]: systemd-tmpfiles-clean.service: Deactivated successfully.39902ca # [1307090.181001] ca systemd[1]: Finished Cleanup of Temporary Directories.39903server # [1307090.239447] server systemd[1]: Starting Cleanup of Temporary Directories...39904server # [1307090.345940] server systemd[1]: systemd-tmpfiles-clean.service: Deactivated successfully.39905server # [1307090.346265] server systemd[1]: Finished Cleanup of Temporary Directories.39906* Host test.foo:443 was resolved.39907* IPv6: 2001:db8:1::339908* IPv4: 192.168.1.339909* Trying [2001:db8:1::3]:443...39910* ALPN: curl offers h2,http/1.139911} [5 bytes data]39912* TLSv1.3 (OUT), TLS handshake, Client hello (1):39913} [1552 bytes data]39914* SSL Trust Anchors:39915* OpenSSL default paths (fallback)39916{ [5 bytes data]39917* TLSv1.3 (IN), TLS handshake, Server hello (2):39918{ [1210 bytes data]39919* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39920{ [1 bytes data]39921* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39922{ [19 bytes data]39923* TLSv1.3 (IN), TLS handshake, Certificate (11):39924{ [1010 bytes data]39925* TLSv1.3 (IN), TLS handshake, CERT verify (15):39926{ [111 bytes data]39927* TLSv1.3 (IN), TLS handshake, Finished (20):39928{ [52 bytes data]39929* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39930} [1 bytes data]39931* TLSv1.3 (OUT), TLS handshake, Finished (20):39932} [52 bytes data]39933* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39934* ALPN: server accepted h239935* Server certificate:39936* subject: CN=test.foo39937* start date: Sep 19 10:16:44 2026 GMT39938* expire date: Oct 19 10:16:44 2028 GMT39939* issuer: CN=minica root ca 2eeab339940* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439941* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439942* subjectAltName: "test.foo" matches cert's "test.foo"39943* OpenSSL verify result: 1339944* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39945* closing connection #039946curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39947More details here: https://curl.se/docs/sslcerts.html3994839949curl failed to verify the legitimacy of the server and therefore could not39950establish a secure connection to it. To learn more about this situation and39951how to fix it, please visit the webpage mentioned above.39952* Host test.foo:443 was resolved.39953* IPv6: 2001:db8:1::339954* IPv4: 192.168.1.339955* Trying [2001:db8:1::3]:443...39956* ALPN: curl offers h2,http/1.139957} [5 bytes data]39958* TLSv1.3 (OUT), TLS handshake, Client hello (1):39959} [1552 bytes data]39960* SSL Trust Anchors:39961* OpenSSL default paths (fallback)39962{ [5 bytes data]39963* TLSv1.3 (IN), TLS handshake, Server hello (2):39964{ [1210 bytes data]39965* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39966{ [1 bytes data]39967* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39968{ [19 bytes data]39969* TLSv1.3 (IN), TLS handshake, Certificate (11):39970{ [1010 bytes data]39971* TLSv1.3 (IN), TLS handshake, CERT verify (15):39972{ [112 bytes data]39973* TLSv1.3 (IN), TLS handshake, Finished (20):39974{ [52 bytes data]39975* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39976} [1 bytes data]39977* TLSv1.3 (OUT), TLS handshake, Finished (20):39978} [52 bytes data]39979* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39980* ALPN: server accepted h239981* Server certificate:39982* subject: CN=test.foo39983* start date: Sep 19 10:16:44 2026 GMT39984* expire date: Oct 19 10:16:44 2028 GMT39985* issuer: CN=minica root ca 2eeab339986* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439987* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439988* subjectAltName: "test.foo" matches cert's "test.foo"39989* OpenSSL verify result: 1339990* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39991* closing connection #039992curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39993More details here: https://curl.se/docs/sslcerts.html3999439995curl failed to verify the legitimacy of the server and therefore could not39996establish a secure connection to it. To learn more about this situation and39997how to fix it, please visit the webpage mentioned above.39998* Host test.foo:443 was resolved.39999* IPv6: 2001:db8:1::340000* IPv4: 192.168.1.340001* Trying [2001:db8:1::3]:443...40002* ALPN: curl offers h2,http/1.140003} [5 bytes data]40004* TLSv1.3 (OUT), TLS handshake, Client hello (1):40005} [1552 bytes data]40006* SSL Trust Anchors:40007* OpenSSL default paths (fallback)40008{ [5 bytes data]40009* TLSv1.3 (IN), TLS handshake, Server hello (2):40010{ [1210 bytes data]40011* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):40012{ [1 bytes data]40013* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):40014{ [19 bytes data]40015* TLSv1.3 (IN), TLS handshake, Certificate (11):40016{ [1010 bytes data]40017* TLSv1.3 (IN), TLS handshake, CERT verify (15):40018{ [111 bytes data]40019* TLSv1.3 (IN), TLS handshake, Finished (20):40020{ [52 bytes data]40021* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):40022} [1 bytes data]40023* TLSv1.3 (OUT), TLS handshake, Finished (20):40024} [52 bytes data]40025* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey40026* ALPN: server accepted h240027* Server certificate:40028* subject: CN=test.foo40029* start date: Sep 19 10:16:44 2026 GMT40030* expire date: Oct 19 10:16:44 2028 GMT40031* issuer: CN=minica root ca 2eeab340032* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38440033* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38440034* subjectAltName: "test.foo" matches cert's "test.foo"40035* OpenSSL verify result: 1340036* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)40037* closing connection #040038curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)40039More details here: https://curl.se/docs/sslcerts.html4004040041curl failed to verify the legitimacy of the server and therefore could not40042establish a secure connection to it. To learn more about this situation and40043how to fix it, please visit the webpage mentioned above.40044* Host test.foo:443 was resolved.40045* IPv6: 2001:db8:1::340046* IPv4: 192.168.1.340047* Trying [2001:db8:1::3]:443...40048* ALPN: curl offers h2,http/1.140049} [5 bytes data]40050* TLSv1.3 (OUT), TLS handshake, Client hello (1):40051} [1552 bytes data]40052* SSL Trust Anchors:40053* OpenSSL default paths (fallback)40054{ [5 bytes data]40055* TLSv1.3 (IN), TLS handshake, Server hello (2):40056{ [1210 bytes data]40057* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):40058{ [1 bytes data]40059* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):40060{ [19 bytes data]40061* TLSv1.3 (IN), TLS handshake, Certificate (11):40062{ [1010 bytes data]40063* TLSv1.3 (IN), TLS handshake, CERT verify (15):40064{ [110 bytes data]40065* TLSv1.3 (IN), TLS handshake, Finished (20):40066{ [52 bytes data]40067* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):40068} [1 bytes data]40069* TLSv1.3 (OUT), TLS handshake, Finished (20):40070} [52 bytes data]40071* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey40072* ALPN: server accepted h240073* Server certificate:40074* subject: CN=test.foo40075* start date: Sep 19 10:16:44 2026 GMT40076* expire date: Oct 19 10:16:44 2028 GMT40077* issuer: CN=minica root ca 2eeab340078* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38440079* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38440080* subjectAltName: "test.foo" matches cert's "test.foo"40081* OpenSSL verify result: 1340082* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)40083* closing connection #040084curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)40085More details here: https://curl.se/docs/sslcerts.html4008640087curl failed to verify the legitimacy of the server and therefore could not40088establish a secure connection to it. To learn more about this situation and40089how to fix it, please visit the webpage mentioned above.40090* Trying [2001:db8:1::3]:443...40091* Host test.foo:443 was resolved.40092* IPv6: 2001:db8:1::340093* IPv4: 192.168.1.340094* ALPN: curl offers h2,http/1.140095} [5 bytes data]40096* TLSv1.3 (OUT), TLS handshake, Client hello (1):40097} [1552 bytes data]40098* SSL Trust Anchors:40099* OpenSSL default paths (fallback)40100{ [5 bytes data]40101* TLSv1.3 (IN), TLS handshake, Server hello (2):40102{ [1210 bytes data]40103* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):40104{ [1 bytes data]40105* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):40106{ [19 bytes data]40107* TLSv1.3 (IN), TLS handshake, Certificate (11):40108{ [1010 bytes data]40109* TLSv1.3 (IN), TLS handshake, CERT verify (15):40110{ [111 bytes data]40111* TLSv1.3 (IN), TLS handshake, Finished (20):40112{ [52 bytes data]40113* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):40114} [1 bytes data]40115* TLSv1.3 (OUT), TLS handshake, Finished (20):40116} [52 bytes data]40117* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey40118* ALPN: server accepted h240119* Server certificate:40120* subject: CN=test.foo40121* start date: Sep 19 10:16:44 2026 GMT40122* expire date: Oct 19 10:16:44 2028 GMT40123* issuer: CN=minica root ca 2eeab340124* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38440125* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38440126* subjectAltName: "test.foo" matches cert's "test.foo"40127* OpenSSL verify result: 1340128* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)40129* closing connection #040130curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)40131More details here: https://curl.se/docs/sslcerts.html4013240133curl failed to verify the legitimacy of the server and therefore could not40134establish a secure connection to it. To learn more about this situation and40135how to fix it, please visit the webpage mentioned above.40136!!! Traceback (most recent call last):40137!!! File "<string>", line 13, in <module>40138!!! client.wait_until_succeeds("curl -v https://test.foo")40139!!! 40140!!! RequestedAssertionFailed: action timed out after 900.99 seconds (timeout=900.0)40141cleanup40142kill NspawnMachine (pid 52)40143kill NspawnMachine (pid 54)40144kill NspawnMachine (pid 56)40145Container ca terminated by signal KILL.40146Container client terminated by signal KILL.40147Container server terminated by signal KILL.40148(finished: cleanup, in 0.45 seconds)