container-test-run-certificates
checks.aarch64-linux.certificates
· build #726
· raw
1Machine state will be reset. To keep it, pass --keep-machine-state2start all VLans3(finished: start all VLans, in 0.00 seconds)45Test will time out and terminate in 3600.0 seconds6run the VM test script7additionally exposed symbols:8 ca, client, server,9 vlan1,10 start_all, test_script, machines, machines_qemu, machines_nspawn, vlans, driver, log, os, create_machine, subtest, run_tests, join_all, retry, serial_stdout_off, serial_stdout_on, polling_condition, BaseMachine, QemuMachine, NspawnMachine, t, debug, dump_machine_ssh11start all VMs12ca: systemd-nspawn running (pid 52)13ca: Waiting for journal at /build/vm-state-ca/var/log/journal...14client: systemd-nspawn running (pid 54)15server: systemd-nspawn running (pid 57)16client: Waiting for journal at /build/vm-state-client/var/log/journal...17server: Waiting for journal at /build/vm-state-server/var/log/journal...18(finished: start all VMs, in 0.00 seconds)19nixos-nspawn(ca): TAP vde-tap1 not found; container will be isolated from VDE20nixos-nspawn(ca): A common reason for this is that /dev/net is not available in the Nix sandbox. Try adding /dev/net to extra-sandbox-paths.21nixos-nspawn(client): TAP vde-tap1 not found; container will be isolated from VDE22nixos-nspawn(client): A common reason for this is that /dev/net is not available in the Nix sandbox. Try adding /dev/net to extra-sandbox-paths.23nixos-nspawn(server): TAP vde-tap1 not found; container will be isolated from VDE24nixos-nspawn(server): A common reason for this is that /dev/net is not available in the Nix sandbox. Try adding /dev/net to extra-sandbox-paths.25Note: in a future version of systemd-nspawn the default set of permitted socket address families will be restricted to AF_INET, AF_INET6 and AF_UNIX. Use --restrict-address-families= to configure the set of permitted socket address families, or set RestrictAddressFamilies= in a .nspawn file.26Note: in a future version of systemd-nspawn the default set of permitted socket address families will be restricted to AF_INET, AF_INET6 and AF_UNIX. Use --restrict-address-families= to configure the set of permitted socket address families, or set RestrictAddressFamilies= in a .nspawn file.27░ Spawning container server on /build/vm-state-server.28Note: in a future version of systemd-nspawn the default set of permitted socket address families will be restricted to AF_INET, AF_INET6 and AF_UNIX. Use --restrict-address-families= to configure the set of permitted socket address families, or set RestrictAddressFamilies= in a .nspawn file.29░ Spawning container ca on /build/vm-state-ca.30░ Spawning container client on /build/vm-state-client.31ca # No journal files were found.32ca # No journal boot entry found for the specified boot (+0).33client # No journal files were found.34client # No journal boot entry found for the specified boot (+0).35server # No journal files were found.36server # No journal boot entry found for the specified boot (+0).37ca # [1392682.394197] ca systemd-journald[82]: Journal started38ca # [1392682.394252] ca systemd-journald[82]: Runtime Journal (/run/log/journal/fe3ae61f6daf4dc4bc07792169a742bc) is 8M, max 2.5G, 2.4G free.39ca # [1392682.405121] ca systemd[1]: Finished Apply Kernel Variables.40ca # [1392682.418673] ca systemd[1]: Finished Create Static Device Nodes in /dev gracefully.41ca # [1392682.468377] ca systemd[1]: Starting Flush Journal to Persistent Storage...42ca # [1392682.469307] ca systemd[1]: Starting Network Name Resolution...43ca # [1392682.469950] ca systemd[1]: Starting Create Static Device Nodes in /dev...44ca # [1392682.478674] ca systemd-journald[82]: Time spent on flushing to /var/log/journal/fe3ae61f6daf4dc4bc07792169a742bc is 2.760ms for 7 entries.45ca # [1392682.478674] ca systemd-journald[82]: System Journal (/var/log/journal/fe3ae61f6daf4dc4bc07792169a742bc) is 8M, max 4G, 3.9G free.46ca # [1392682.506656] ca systemd[1]: Finished Flush Journal to Persistent Storage.47ca # [1392682.507154] ca systemd[1]: Finished Create Static Device Nodes in /dev.48ca # [1392682.508177] ca systemd[1]: Reached target Preparation for Local File Systems.49ca # [1392682.508319] ca systemd[1]: Reached target Local File Systems.50ca # [1392682.509226] ca systemd[1]: Listening on Boot Loader Control Service Socket.51ca # [1392682.509279] ca systemd[1]: Update Boot Loader Random Seed skipped, unmet condition check ConditionVirtualization=!container52ca # [1392682.510200] ca systemd[1]: Starting Save Transient machine-id to Disk...53ca # [1392682.511036] ca systemd[1]: Starting Create System Files and Directories...54ca # [1392682.511070] ca systemd[1]: Rule-based Manager for Device Events and Files skipped, unmet condition check ConditionPathIsReadWrite=/sys55ca # [1392682.528759] ca systemd-tmpfiles[162]: Cannot set file attributes for '/var/empty', value=0x00000010, mask=0x00000010, ignoring: Operation not permitted56ca # [1392682.529176] ca systemd-tmpfiles[162]: fchmod() of /var/log/journal failed: Operation not permitted57ca # [1392682.529324] ca systemd-tmpfiles[162]: fchmod() of /var/log/journal/fe3ae61f6daf4dc4bc07792169a742bc failed: Operation not permitted58ca # [1392682.529543] ca systemd-tmpfiles[162]: fchmod() of /run/log/journal failed: Operation not permitted59ca # [1392682.531143] ca systemd[1]: Finished Create System Files and Directories.60ca # [1392682.532308] ca systemd[1]: Starting Rebuild Journal Catalog...61ca # [1392682.533048] ca systemd[1]: Starting Record System Boot/Shutdown in UTMP...62ca # [1392682.544449] ca systemd[1]: Finished Record System Boot/Shutdown in UTMP.63ca # [1392682.550442] ca systemd[1]: Finished Rebuild Journal Catalog.64ca # [1392682.551434] ca systemd[1]: Starting Update is Completed...65ca # [1392682.563093] ca systemd[1]: Finished Update is Completed.66ca # [1392682.568302] ca systemd[1]: Finished Firewall.67ca # [1392682.568491] ca systemd[1]: Reached target Preparation for Network.68ca # [1392682.568755] ca systemd[1]: Listening on Network Management Resolve Hook Socket.69ca # [1392682.569966] ca systemd[1]: Starting Network Management...70ca # [1392683.179267] ca systemd[1]: Finished Save Transient machine-id to Disk.71ca # [1392683.308568] ca systemd-networkd[199]: Failed to increase receive buffer size for general netlink socket, ignoring: Operation not permitted72ca # [1392683.308658] ca systemd-networkd[199]: Failed to increase receive buffer size for nftables netlink socket, ignoring: Operation not permitted73ca # [1392683.318431] ca systemd-networkd[199]: /etc/systemd/network/99-ethernet-default-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section.74ca # [1392683.318602] ca systemd-networkd[199]: /etc/systemd/network/99-wireless-client-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section.75ca # [1392683.318744] ca systemd-networkd[199]: lo: Link UP76ca # [1392683.318747] ca systemd-networkd[199]: lo: Gained carrier77ca # [1392683.318969] ca systemd-networkd[199]: eth1: Configuring with /etc/systemd/network/40-eth1.network.78ca # [1392683.319400] ca systemd[1]: Started Network Management.79ca # [1392683.320389] ca systemd-networkd[199]: eth1: Link UP80ca # [1392683.320874] ca systemd[1]: Starting Enable Persistent Storage in systemd-networkd...81ca # [1392683.321023] ca systemd-networkd[199]: eth1: Gained carrier82ca # [1392683.350509] ca systemd[1]: Finished Enable Persistent Storage in systemd-networkd.83client # [1392682.383783] client systemd-journald[72]: Journal started84client # [1392682.383840] client systemd-journald[72]: Runtime Journal (/run/log/journal/09b0ac66f7d44534b089042845a8c5cd) is 8M, max 2.5G, 2.4G free.85client # [1392682.398890] client systemd[1]: Finished Apply Kernel Variables.86client # [1392682.412530] client systemd[1]: Finished Create Static Device Nodes in /dev gracefully.87client # [1392682.428328] client systemd[1]: Starting Flush Journal to Persistent Storage...88client # [1392682.429396] client systemd[1]: Starting Network Name Resolution...89client # [1392682.430031] client systemd[1]: Starting Create Static Device Nodes in /dev...90client # [1392682.475467] client systemd-journald[72]: Time spent on flushing to /var/log/journal/09b0ac66f7d44534b089042845a8c5cd is 2.306ms for 7 entries.91client # [1392682.475467] client systemd-journald[72]: System Journal (/var/log/journal/09b0ac66f7d44534b089042845a8c5cd) is 8M, max 4G, 3.9G free.92client # [1392682.497535] client systemd[1]: Finished Flush Journal to Persistent Storage.93client # [1392682.497865] client systemd[1]: Finished Create Static Device Nodes in /dev.94client # [1392682.498960] client systemd[1]: Reached target Preparation for Local File Systems.95client # [1392682.499084] client systemd[1]: Reached target Local File Systems.96client # [1392682.499962] client systemd[1]: Listening on Boot Loader Control Service Socket.97client # [1392682.500023] client systemd[1]: Update Boot Loader Random Seed skipped, unmet condition check ConditionVirtualization=!container98client # [1392682.500880] client systemd[1]: Starting Save Transient machine-id to Disk...99client # [1392682.501669] client systemd[1]: Starting Create System Files and Directories...100client # [1392682.501700] client systemd[1]: Rule-based Manager for Device Events and Files skipped, unmet condition check ConditionPathIsReadWrite=/sys101client # [1392682.519348] client systemd-tmpfiles[150]: Cannot set file attributes for '/var/empty', value=0x00000010, mask=0x00000010, ignoring: Operation not permitted102client # [1392682.519568] client systemd-tmpfiles[150]: fchmod() of /var/log/journal failed: Operation not permitted103client # [1392682.519723] client systemd-tmpfiles[150]: fchmod() of /var/log/journal/09b0ac66f7d44534b089042845a8c5cd failed: Operation not permitted104client # [1392682.519950] client systemd-tmpfiles[150]: fchmod() of /run/log/journal failed: Operation not permitted105client # [1392682.522122] client systemd[1]: Finished Create System Files and Directories.106client # [1392682.523387] client systemd[1]: Starting Rebuild Journal Catalog...107client # [1392682.524574] client systemd[1]: Starting Record System Boot/Shutdown in UTMP...108client # [1392682.538767] client systemd[1]: Finished Record System Boot/Shutdown in UTMP.109client # [1392682.547405] client systemd[1]: Finished Rebuild Journal Catalog.110client # [1392682.548608] client systemd[1]: Starting Update is Completed...111client # [1392682.557871] client systemd[1]: Finished Firewall.112client # [1392682.558107] client systemd[1]: Reached target Preparation for Network.113client # [1392682.558458] client systemd[1]: Listening on Network Management Resolve Hook Socket.114client # [1392682.559992] client systemd[1]: Starting Network Management...115client # [1392682.560342] client systemd[1]: Finished Update is Completed.116client # [1392683.179837] client systemd[1]: Finished Save Transient machine-id to Disk.117client # [1392683.278855] client systemd-networkd[184]: Failed to increase receive buffer size for general netlink socket, ignoring: Operation not permitted118client # [1392683.278945] client systemd-networkd[184]: Failed to increase receive buffer size for nftables netlink socket, ignoring: Operation not permitted119client # [1392683.289036] client systemd-networkd[184]: /etc/systemd/network/99-ethernet-default-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section.120client # [1392683.289203] client systemd-networkd[184]: /etc/systemd/network/99-wireless-client-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section.121client # [1392683.289434] client systemd-networkd[184]: lo: Link UP122client # [1392683.289437] client systemd-networkd[184]: lo: Gained carrier123client # [1392683.289700] client systemd-networkd[184]: eth1: Configuring with /etc/systemd/network/40-eth1.network.124client # [1392683.290523] client systemd[1]: Started Network Management.125client # [1392683.290542] client systemd-networkd[184]: eth1: Link UP126client # [1392683.290855] client systemd-networkd[184]: eth1: Gained carrier127client # [1392683.292495] client systemd[1]: Starting Enable Persistent Storage in systemd-networkd...128client # [1392683.329952] client systemd[1]: Finished Enable Persistent Storage in systemd-networkd.129server # [1392682.393652] server systemd-journald[72]: Journal started130server # [1392682.393709] server systemd-journald[72]: Runtime Journal (/run/log/journal/8f319a19029f41ebbff58e0f18f0295c) is 8M, max 2.5G, 2.4G free.131server # [1392682.399894] server systemd[1]: Finished Apply Kernel Variables.132server # [1392682.412179] server systemd[1]: Finished Create Static Device Nodes in /dev gracefully.133server # [1392682.426435] server systemd[1]: Starting Flush Journal to Persistent Storage...134server # [1392682.427323] server systemd[1]: Starting Network Name Resolution...135server # [1392682.428149] server systemd[1]: Starting Create Static Device Nodes in /dev...136server # [1392682.475202] server systemd-journald[72]: Time spent on flushing to /var/log/journal/8f319a19029f41ebbff58e0f18f0295c is 2.214ms for 7 entries.137server # [1392682.475202] server systemd-journald[72]: System Journal (/var/log/journal/8f319a19029f41ebbff58e0f18f0295c) is 8M, max 4G, 3.9G free.138server # [1392682.497690] server systemd[1]: Finished Flush Journal to Persistent Storage.139server # [1392682.497976] server systemd[1]: Finished Create Static Device Nodes in /dev.140server # [1392682.499123] server systemd[1]: Reached target Preparation for Local File Systems.141server # [1392682.499268] server systemd[1]: Reached target Local File Systems.142server # [1392682.500128] server systemd[1]: Listening on Boot Loader Control Service Socket.143server # [1392682.500186] server systemd[1]: Update Boot Loader Random Seed skipped, unmet condition check ConditionVirtualization=!container144server # [1392682.500966] server systemd[1]: Starting Save Transient machine-id to Disk...145server # [1392682.501892] server systemd[1]: Starting Create System Files and Directories...146server # [1392682.501922] server systemd[1]: Rule-based Manager for Device Events and Files skipped, unmet condition check ConditionPathIsReadWrite=/sys147server # [1392682.521041] server systemd-tmpfiles[146]: Cannot set file attributes for '/var/empty', value=0x00000010, mask=0x00000010, ignoring: Operation not permitted148server # [1392682.521262] server systemd-tmpfiles[146]: fchmod() of /var/log/journal failed: Operation not permitted149server # [1392682.521411] server systemd-tmpfiles[146]: fchmod() of /var/log/journal/8f319a19029f41ebbff58e0f18f0295c failed: Operation not permitted150server # [1392682.521637] server systemd-tmpfiles[146]: fchmod() of /run/log/journal failed: Operation not permitted151server # [1392682.523149] server systemd[1]: Finished Create System Files and Directories.152server # [1392682.524300] server systemd[1]: Starting Rebuild Journal Catalog...153server # [1392682.525039] server systemd[1]: Starting Record System Boot/Shutdown in UTMP...154server # [1392682.542329] server systemd[1]: Finished Record System Boot/Shutdown in UTMP.155server # [1392682.547927] server systemd[1]: Finished Rebuild Journal Catalog.156server # [1392682.549429] server systemd[1]: Starting Update is Completed...157server # [1392682.559358] server systemd[1]: Finished Update is Completed.158server # [1392682.569397] server systemd[1]: Finished Firewall.159server # [1392682.569580] server systemd[1]: Reached target Preparation for Network.160server # [1392682.569840] server systemd[1]: Listening on Network Management Resolve Hook Socket.161server # [1392682.571006] server systemd[1]: Starting Network Management...162server # [1392683.180217] server systemd[1]: Finished Save Transient machine-id to Disk.163server # [1392683.308593] server systemd-networkd[189]: Failed to increase receive buffer size for general netlink socket, ignoring: Operation not permitted164server # [1392683.308677] server systemd-networkd[189]: Failed to increase receive buffer size for nftables netlink socket, ignoring: Operation not permitted165server # [1392683.318565] server systemd-networkd[189]: /etc/systemd/network/99-ethernet-default-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section.166server # [1392683.318733] server systemd-networkd[189]: /etc/systemd/network/99-wireless-client-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section.167server # [1392683.318874] server systemd-networkd[189]: lo: Link UP168server # [1392683.318878] server systemd-networkd[189]: lo: Gained carrier169server # [1392683.319030] server systemd-networkd[189]: eth1: Configuring with /etc/systemd/network/40-eth1.network.170server # [1392683.319384] server systemd[1]: Started Network Management.171server # [1392683.320494] server systemd-networkd[189]: eth1: Link UP172server # [1392683.320602] server systemd[1]: Starting Enable Persistent Storage in systemd-networkd...173server # [1392683.321039] server systemd-networkd[189]: eth1: Gained carrier174server # [1392683.350471] server systemd[1]: Finished Enable Persistent Storage in systemd-networkd.175server # [1392683.406136] server systemd[1]: etc-machine\x2did.mount: Deactivated successfully.176client # [1392683.396594] client systemd[1]: etc-machine\x2did.mount: Deactivated successfully.177ca # [1392683.406140] ca systemd[1]: etc-machine\x2did.mount: Deactivated successfully.178ca # [1392683.686488] ca systemd-resolved[136]: Positive Trust Anchors:179ca # [1392683.686500] ca systemd-resolved[136]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d180ca # [1392683.686503] ca systemd-resolved[136]: . IN DS 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16181ca # [1392683.686538] ca systemd-resolved[136]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 170.0.0.192.in-addr.arpa 171.0.0.192.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa ipv4only.arpa resolver.arpa corp home internal intranet lan local private test182ca # [1392683.708749] ca systemd-resolved[136]: Using system hostname 'ca'.183ca # [1392683.710096] ca systemd[1]: Started Network Name Resolution.184ca # [1392683.710229] ca systemd[1]: Reached target Network.185ca # [1392683.710346] ca systemd[1]: Reached target Network is Online.186ca # [1392683.710436] ca systemd[1]: Reached target System Initialization.187ca # [1392683.710807] ca systemd[1]: Started Renew ACME Certificate for ca.foo.188ca # [1392683.710858] ca systemd[1]: Discard unused filesystem blocks once a week skipped, unmet condition check ConditionVirtualization=!container189ca # [1392683.710902] ca systemd[1]: Started Daily Cleanup of Temporary Directories.190ca # [1392683.710944] ca systemd[1]: Reached target Timer Units.191ca # [1392683.711165] ca systemd[1]: Listening on D-Bus System Message Bus Socket.192ca # [1392683.711359] ca systemd[1]: Listening on Nix Daemon Socket.193ca # [1392683.711579] ca systemd[1]: Listening on Virtual Machine and Container Registration Service Socket.194ca # [1392683.711625] ca systemd[1]: Reached target Socket Units.195ca # [1392683.711699] ca systemd[1]: Reached target Basic System.196ca # [1392683.714426] ca systemd[1]: Starting Set up the ACME certificate renewal infrastructure...197ca # [1392683.716713] ca systemd[1]: Starting Import lastlog data into lastlog2 database...198ca # [1392683.716783] ca systemd[1]: nginx-config-reload.service skipped, unmet condition check ConditionPathExists=/var/lib/acme/ca.foo/fullchain.pem199ca # [1392683.718500] ca systemd[1]: Starting Name Service Cache Daemon (nsncd)...200ca # [1392683.720433] ca systemd[1]: Starting step-ca service...201ca # [1392683.761337] ca systemd[1]: Starting D-Bus System Message Bus...202ca # [1392683.857808] ca systemd[1]: lastlog2-import.service: Failed to spawn executor: No such file or directory203ca # [1392683.857854] ca systemd[1]: lastlog2-import.service: Failed to spawn 'start-post' task: No such file or directory204ca # [1392683.857922] ca systemd[1]: lastlog2-import.service: Failed with result 'resources'.205ca # [1392683.858037] ca systemd[1]: Failed to start Import lastlog data into lastlog2 database.206ca # [1392683.948253] ca acme-setup-privileged[205]: + set -euo pipefail207ca # [1392683.948253] ca acme-setup-privileged[205]: + cd /var/lib/acme208ca # [1392683.948253] ca acme-setup-privileged[205]: + chmod -R u=rwX,g=,o= .lego/accounts209server # [1392683.730925] server systemd-resolved[105]: Positive Trust Anchors:210server # [1392683.730934] server systemd-resolved[105]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d211server # [1392683.730938] server systemd-resolved[105]: . IN DS 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16212server # [1392683.730972] server systemd-resolved[105]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 170.0.0.192.in-addr.arpa 171.0.0.192.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa ipv4only.arpa resolver.arpa corp home internal intranet lan local private test213server # [1392683.752905] server systemd-resolved[105]: Using system hostname 'server'.214server # [1392683.754253] server systemd[1]: Started Network Name Resolution.215server # [1392683.754371] server systemd[1]: Reached target Network.216server # [1392683.754476] server systemd[1]: Reached target Network is Online.217server # [1392683.754562] server systemd[1]: Reached target System Initialization.218server # [1392683.754931] server systemd[1]: Started Renew ACME Certificate for test.foo.219server # [1392683.754985] server systemd[1]: Discard unused filesystem blocks once a week skipped, unmet condition check ConditionVirtualization=!container220server # [1392683.755034] server systemd[1]: Started Daily Cleanup of Temporary Directories.221server # [1392683.755075] server systemd[1]: Reached target Timer Units.222server # [1392683.760399] server systemd[1]: Listening on D-Bus System Message Bus Socket.223server # [1392683.760634] server systemd[1]: Listening on Nix Daemon Socket.224server # [1392683.760858] server systemd[1]: Listening on Virtual Machine and Container Registration Service Socket.225server # [1392683.760920] server systemd[1]: Reached target Socket Units.226server # [1392683.761007] server systemd[1]: Reached target Basic System.227server # [1392683.763880] server systemd[1]: Starting Set up the ACME certificate renewal infrastructure...228server # [1392683.765169] server systemd[1]: Starting Import lastlog data into lastlog2 database...229server # [1392683.765240] server systemd[1]: nginx-config-reload.service skipped, unmet condition check ConditionPathExists=/var/lib/acme/test.foo/fullchain.pem230server # [1392683.766588] server systemd[1]: Starting Name Service Cache Daemon (nsncd)...231server # [1392683.768649] server systemd[1]: Starting D-Bus System Message Bus...232server # [1392683.787637] server systemd[1]: Finished Import lastlog data into lastlog2 database.233server # [1392683.962679] server acme-setup-privileged[195]: + set -euo pipefail234server # [1392683.962679] server acme-setup-privileged[195]: + cd /var/lib/acme235server # [1392683.962679] server acme-setup-privileged[195]: + chmod -R u=rwX,g=,o= .lego/accounts236server # [1392683.964768] server acme-setup-privileged[195]: + chown -R acme .lego/accounts237server # [1392683.966813] server acme-setup-privileged[195]: + for fixpath in test.foo .lego/test.foo238server # [1392683.966813] server acme-setup-privileged[195]: + '[' -d test.foo ']'239server # [1392683.966943] server acme-setup-privileged[195]: + for fixpath in test.foo .lego/test.foo240server # [1392683.966943] server acme-setup-privileged[195]: + '[' -d .lego/test.foo ']'241server # [1392684.002948] server nsncd[197]: Sep 20 10:18:23.988 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket"242client # [1392683.706208] client systemd-resolved[110]: Positive Trust Anchors:243client # [1392683.706219] client systemd-resolved[110]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d244client # [1392683.706222] client systemd-resolved[110]: . IN DS 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16245client # [1392683.706257] client systemd-resolved[110]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 170.0.0.192.in-addr.arpa 171.0.0.192.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa ipv4only.arpa resolver.arpa corp home internal intranet lan local private test246client # [1392683.728709] client systemd-resolved[110]: Using system hostname 'client'.247client # [1392683.730081] client systemd[1]: Started Network Name Resolution.248client # [1392683.730207] client systemd[1]: Reached target Network.249client # [1392683.730326] client systemd[1]: Reached target System Initialization.250client # [1392683.730425] client systemd[1]: Discard unused filesystem blocks once a week skipped, unmet condition check ConditionVirtualization=!container251client # [1392683.730479] client systemd[1]: Started Daily Cleanup of Temporary Directories.252client # [1392683.730516] client systemd[1]: Reached target Timer Units.253client # [1392683.760406] client systemd[1]: Listening on D-Bus System Message Bus Socket.254client # [1392683.760641] client systemd[1]: Listening on Nix Daemon Socket.255client # [1392683.760856] client systemd[1]: Listening on Virtual Machine and Container Registration Service Socket.256client # [1392683.760903] client systemd[1]: Reached target Socket Units.257client # [1392683.761005] client systemd[1]: Reached target Basic System.258client # [1392683.763362] client systemd[1]: Starting Import lastlog data into lastlog2 database...259client # [1392683.764973] client systemd[1]: Starting Name Service Cache Daemon (nsncd)...260client # [1392683.767097] client systemd[1]: Starting D-Bus System Message Bus...261client # [1392683.787253] client systemd[1]: Finished Import lastlog data into lastlog2 database.262client # [1392684.005358] client systemd[1]: Started Name Service Cache Daemon (nsncd).263client # [1392684.005476] client systemd[1]: Reached target Host and Network Name Lookups.264client # [1392684.005586] client systemd[1]: Reached target User and Group Name Lookups.265ca # [1392683.950532] ca acme-setup-privileged[205]: + chown -R acme .lego/accounts266ca # [1392683.952768] ca acme-setup-privileged[205]: + for fixpath in ca.foo .lego/ca.foo267ca # [1392683.952768] ca acme-setup-privileged[205]: + '[' -d ca.foo ']'268ca # [1392683.952894] ca acme-setup-privileged[205]: + for fixpath in ca.foo .lego/ca.foo269ca # [1392683.952894] ca acme-setup-privileged[205]: + '[' -d .lego/ca.foo ']'270ca # [1392684.074808] ca nsncd[207]: Sep 20 10:18:24.060 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket"271ca # [1392684.074741] ca systemd[1]: Started Name Service Cache Daemon (nsncd).272ca # [1392684.074864] ca systemd[1]: Reached target Host and Network Name Lookups.273ca # [1392684.074966] ca systemd[1]: Reached target User and Group Name Lookups.274ca # [1392684.076854] ca systemd[1]: Starting User Login Management...275ca # [1392684.078250] ca systemd[1]: Starting Permit User Sessions...276ca # [1392684.090090] ca systemd[1]: Finished Permit User Sessions.277ca # [1392684.091691] ca systemd[1]: Started Console Getty.278ca # [1392684.091762] ca systemd[1]: Getty on tty1 skipped, unmet condition check ConditionPathExists=/dev/tty0279ca # [1392684.091801] ca systemd[1]: Reached target Login Prompts.280ca # [1392684.245375] ca dbus-broker-launch[212]: Looking up NSS user entry for 'systemd-timesync'...281server # [1392684.012953] server systemd[1]: Started Name Service Cache Daemon (nsncd).282server # [1392684.013205] server systemd[1]: Reached target Host and Network Name Lookups.283server # [1392684.013318] server systemd[1]: Reached target User and Group Name Lookups.284server # [1392684.015145] server systemd[1]: Starting User Login Management...285server # [1392684.016381] server systemd[1]: Starting Permit User Sessions...286server # [1392684.027971] server systemd[1]: Finished Permit User Sessions.287server # [1392684.029572] server systemd[1]: Started Console Getty.288server # [1392684.029653] server systemd[1]: Getty on tty1 skipped, unmet condition check ConditionPathExists=/dev/tty0289server # [1392684.029691] server systemd[1]: Reached target Login Prompts.290server # [1392684.197484] server dbus-broker-launch[198]: Looking up NSS user entry for 'systemd-timesync'...291server # [1392684.198669] server dbus-broker-launch[198]: NSS returned no entry for 'systemd-timesync'292server # [1392684.198669] server dbus-broker-launch[198]: Invalid user-name in /nix/store/zzss1678mb50nlwag2hiw11lg128jpl3-system-path/share/dbus-1/system.d/org.freedesktop.timesync1.conf +16: user="systemd-timesync"293server # [1392684.200613] server systemd[1]: Started D-Bus System Message Bus.294server # [1392684.209444] server dbus-broker-launch[198]: Ready295client # [1392684.005991] client nsncd[192]: Sep 20 10:18:23.991 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket"296client # [1392684.013779] client systemd[1]: Starting User Login Management...297client # [1392684.015217] client systemd[1]: Starting Permit User Sessions...298client # [1392684.027586] client systemd[1]: Finished Permit User Sessions.299client # [1392684.029539] client systemd[1]: Started Console Getty.300client # [1392684.029612] client systemd[1]: Getty on tty1 skipped, unmet condition check ConditionPathExists=/dev/tty0301client # [1392684.029662] client systemd[1]: Reached target Login Prompts.302client # [1392684.202959] client dbus-broker-launch[193]: Looking up NSS user entry for 'systemd-timesync'...303client # [1392684.204385] client dbus-broker-launch[193]: NSS returned no entry for 'systemd-timesync'304client # [1392684.204385] client dbus-broker-launch[193]: Invalid user-name in /nix/store/g0a3fan1ykqwgcwicjzjgnwxr95dlfi7-system-path/share/dbus-1/system.d/org.freedesktop.timesync1.conf +16: user="systemd-timesync"305client # [1392684.206648] client systemd[1]: Started D-Bus System Message Bus.306client # [1392684.215215] client dbus-broker-launch[193]: Ready307ca: must succeed: systemctl restart acme-order-renew-ca.foo.service 308ca # [1392684.246638] ca dbus-broker-launch[212]: NSS returned no entry for 'systemd-timesync'309ca # [1392684.246638] ca dbus-broker-launch[212]: Invalid user-name in /nix/store/bh2gmvmbmbp0nqf3m5qaqnfjair6v85q-system-path/share/dbus-1/system.d/org.freedesktop.timesync1.conf +16: user="systemd-timesync"310ca # [1392684.248566] ca systemd[1]: Started D-Bus System Message Bus.311ca # [1392684.257438] ca dbus-broker-launch[212]: Ready312client # [1392684.894118] client systemd-logind[208]: New seat seat0.313client # [1392684.894316] client systemd[1]: Started User Login Management.314client # [1392684.916815] client systemd[1]: Starting linger-users.service...315client # [1392684.930299] client systemd[1]: linger-users.service: Deactivated successfully.316client # [1392684.930447] client systemd[1]: Finished linger-users.service.317client # [1392684.931253] client systemd[1]: Reached target Multi-User System.318client # [1392684.931545] client systemd[1]: Startup finished in 3.016s.319ca # [1392684.864354] ca systemd-networkd[199]: eth1: Gained IPv6LL320ca # [1392684.931204] ca systemd-logind[237]: New seat seat0.321ca # [1392684.931379] ca systemd[1]: Started User Login Management.322ca # [1392684.933438] ca systemd[1]: Starting linger-users.service...323ca # [1392684.946950] ca systemd[1]: linger-users.service: Deactivated successfully.324ca # [1392684.947157] ca systemd[1]: Finished linger-users.service.325ca # [1392685.006990] ca acme-setup-start[221]: + set -euo pipefail326ca # [1392685.006990] ca acme-setup-start[221]: + test -e ca/key.pem327ca # [1392685.007595] ca acme-setup-start[221]: + minica --ca-key ca/key.pem --ca-cert ca/cert.pem --domains selfsigned.local328ca # [1392685.030288] ca systemd[1]: Finished Set up the ACME certificate renewal infrastructure.329ca # [1392685.032038] ca systemd[1]: Starting Ensure certificate for ca.foo...330server # [1392684.888338] server systemd-logind[222]: New seat seat0.331server # [1392684.888516] server systemd[1]: Started User Login Management.332server # [1392684.890522] server systemd[1]: Starting linger-users.service...333server # [1392684.926218] server systemd[1]: linger-users.service: Deactivated successfully.334server # [1392684.926466] server systemd[1]: Finished linger-users.service.335server # [1392684.998883] server acme-setup-start[211]: + set -euo pipefail336server # [1392684.998883] server acme-setup-start[211]: + test -e ca/key.pem337server # [1392684.999314] server acme-setup-start[211]: + minica --ca-key ca/key.pem --ca-cert ca/cert.pem --domains selfsigned.local338server # [1392685.025508] server systemd[1]: Finished Set up the ACME certificate renewal infrastructure.339server # [1392685.028224] server systemd[1]: Starting Ensure certificate for test.foo...340server # [1392685.248224] server systemd-networkd[189]: eth1: Gained IPv6LL341client # [1392685.156200] client systemd-networkd[184]: eth1: Gained IPv6LL342ca # [1392685.177958] ca step-ca[208]: badger 2026/09/20 10:18:25 INFO: All 0 tables opened in 0s343ca # [1392685.185663] ca step-ca[208]: 2026/09/20 10:18:25 Building new tls configuration using step-ca x509 Signer Interface344ca # [1392685.190931] ca step-ca[208]: 2026/09/20 10:18:25 Starting Smallstep CA/0.30.2 (linux/arm64)345ca # [1392685.190931] ca step-ca[208]: 2026/09/20 10:18:25 Documentation: https://u.step.sm/docs/ca346ca # [1392685.190931] ca step-ca[208]: 2026/09/20 10:18:25 Community Discord: https://u.step.sm/discord347ca # [1392685.190931] ca step-ca[208]: 2026/09/20 10:18:25 Config file: /etc/smallstep/ca.json348ca # [1392685.190931] ca step-ca[208]: 2026/09/20 10:18:25 The primary server URL is https://ca.foo:1443349ca # [1392685.190931] ca step-ca[208]: 2026/09/20 10:18:25 Root certificates are available at https://ca.foo:1443/roots.pem350ca # [1392685.191238] ca step-ca[208]: 2026/09/20 10:18:25 X.509 Root Fingerprint: 73a51e13ceeb202e4a617c48c0cd308f9567bdcba2ae26dbaab91234245a452e351ca # [1392685.191184] ca systemd[1]: Started step-ca service.352ca # [1392685.191523] ca step-ca[208]: 2026/09/20 10:18:25 Serving HTTPS on 0.0.0.0:1443 ...353server # [1392685.988950] server acme-test.foo-start[248]: Waiting to acquire lock in /run/acme/354server # [1392685.992652] server acme-test.foo-start[248]: + '[' -e out/acme-success ']'355server # [1392685.992730] server acme-test.foo-start[248]: + minica --ca-cert=ca/cert.pem --ca-key=ca/key.pem --domains=test.foo --ip-addresses=356server # [1392686.007064] server acme-test.foo-start[258]: + cd test.foo357server # [1392686.007518] server acme-test.foo-start[258]: + cp -vp cert.pem ../out/cert.pem358server # [1392686.008800] server acme-test.foo-start[259]: 'cert.pem' -> '../out/cert.pem'359server # [1392686.009149] server acme-test.foo-start[258]: + cp -vp key.pem ../out/key.pem360server # [1392686.010390] server acme-test.foo-start[258]: 'key.pem' -> '../out/key.pem'361server # [1392686.010619] server acme-test.foo-start[248]: + cat out/cert.pem ca/cert.pem362server # [1392686.012469] server acme-test.foo-start[248]: + cp ca/cert.pem out/chain.pem363server # [1392686.014115] server acme-test.foo-start[248]: + cat out/key.pem out/fullchain.pem364server # [1392686.015931] server acme-test.foo-start[248]: + for fixpath in out certificates365server # [1392686.015931] server acme-test.foo-start[248]: + '[' -d out ']'366server # [1392686.016061] server acme-test.foo-start[248]: + chmod -R u=rwX,g=rX,o= out367server # [1392686.017561] server acme-test.foo-start[248]: + chown -R acme:nginx out368server # [1392686.021624] server acme-test.foo-start[248]: + for fixpath in out certificates369server # [1392686.021624] server acme-test.foo-start[248]: + '[' -d certificates ']'370server # [1392686.026521] server systemd[1]: Finished Ensure certificate for test.foo.371server # [1392686.028992] server systemd[1]: Starting Nginx Web Server...372ca # [1392686.000090] ca acme-ca.foo-start[258]: Waiting to acquire lock in /run/acme/373ca # [1392686.003824] ca acme-ca.foo-start[258]: + '[' -e out/acme-success ']'374ca # [1392686.003908] ca acme-ca.foo-start[258]: + minica --ca-cert=ca/cert.pem --ca-key=ca/key.pem --domains=ca.foo --ip-addresses=375ca # [1392686.018871] ca acme-ca.foo-start[296]: + cd ca.foo376ca # [1392686.019415] ca acme-ca.foo-start[296]: + cp -vp cert.pem ../out/cert.pem377ca # [1392686.020469] ca acme-ca.foo-start[297]: 'cert.pem' -> '../out/cert.pem'378ca # [1392686.020844] ca acme-ca.foo-start[296]: + cp -vp key.pem ../out/key.pem379ca # [1392686.022503] ca acme-ca.foo-start[296]: 'key.pem' -> '../out/key.pem'380ca # [1392686.022873] ca acme-ca.foo-start[258]: + cat out/cert.pem ca/cert.pem381ca # [1392686.025029] ca acme-ca.foo-start[258]: + cp ca/cert.pem out/chain.pem382ca # [1392686.026837] ca acme-ca.foo-start[258]: + cat out/key.pem out/fullchain.pem383ca # [1392686.028520] ca acme-ca.foo-start[258]: + for fixpath in out certificates384ca # [1392686.028520] ca acme-ca.foo-start[258]: + '[' -d out ']'385ca # [1392686.028626] ca acme-ca.foo-start[258]: + chmod -R u=rwX,g=rX,o= out386ca # [1392686.030110] ca acme-ca.foo-start[258]: + chown -R acme:nginx out387ca # [1392686.033797] ca acme-ca.foo-start[258]: + for fixpath in out certificates388ca # [1392686.033797] ca acme-ca.foo-start[258]: + '[' -d certificates ']'389ca # [1392686.076270] ca systemd[1]: Finished Ensure certificate for ca.foo.390ca # [1392686.078758] ca systemd[1]: Starting Nginx Web Server...391server # [1392687.005539] server nginx-pre-start[270]: nginx: the configuration file /nix/store/bw9jgq9jgvw8ia747pppjhkzskqcy6wl-nginx.conf syntax is ok392server # [1392687.005921] server nginx-pre-start[270]: nginx: configuration file /nix/store/bw9jgq9jgvw8ia747pppjhkzskqcy6wl-nginx.conf test is successful393server # [1392687.011398] server systemd[1]: Started Nginx Web Server.394server # [1392687.013173] server systemd[1]: Reached target Multi-User System.395server # [1392687.015923] server systemd[1]: Starting Order (and renew) ACME certificate for test.foo...396ca # [1392687.001832] ca nginx-pre-start[308]: nginx: the configuration file /nix/store/9xdq48zsmbzh971fy8df0q5bz7cca117-nginx.conf syntax is ok397ca # [1392687.002454] ca nginx-pre-start[308]: nginx: configuration file /nix/store/9xdq48zsmbzh971fy8df0q5bz7cca117-nginx.conf test is successful398ca # [1392687.008887] ca systemd[1]: Started Nginx Web Server.399ca # [1392687.009697] ca systemd[1]: Reached target Multi-User System.400ca # [1392687.012050] ca systemd[1]: Starting Order (and renew) ACME certificate for ca.foo...401ca # [1392688.017185] ca acme-order-renew-ca.foo-start[311]: Waiting to acquire lock in /run/acme/402ca # [1392688.021859] ca acme-order-renew-ca.foo-start[311]: + set -euo pipefail403ca # [1392688.021936] ca acme-order-renew-ca.foo-start[311]: + exec404ca # [1392688.021991] ca acme-order-renew-ca.foo-start[311]: + /nix/store/fxkh6pl0y4nfbhdqdnhfkvsq7pbxq655-flock-0.4.0/bin/flock 11405ca # [1392688.023585] ca acme-order-renew-ca.foo-start[322]: ++ find accounts -path '*/keys/*.key' -print -quit406ca # [1392688.026704] ca acme-order-renew-ca.foo-start[311]: + '[' -n '' ']'407ca # [1392688.026795] ca acme-order-renew-ca.foo-start[311]: + exec408ca # [1392688.026861] ca acme-order-renew-ca.foo-start[311]: + '[' -e certificates/ca.foo.key ']'409ca # [1392688.026919] ca acme-order-renew-ca.foo-start[311]: + lego run --accept-tos --path . --email none@none.tld --http --http.webroot /var/lib/acme/acme-challenge --server https://ca.foo:1443/acme/acme/directory --key-type ec256 -d ca.foo --no-random-sleep --renew-force --ari-disable --force-cert-domains410ca # [1392688.104348] ca acme-order-renew-ca.foo-start[323]: 2026-09-20T10:18:28.090131526Z INFO Private key saved. filepath=accounts/ca.foo_1443/none@none.tld/none@none.tld.key411ca # [1392688.134694] ca step-ca[208]: time="2026-09-20T10:18:28Z" level=info duration="144.242µs" duration-ns=144242 fields.time="2026-09-20T10:18:28Z" method=GET name=ca path=/acme/acme/directory protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=6e2b3a28-d955-408b-867f-3eb9b44ec1d6 response="{\"newNonce\":\"https://ca.foo:1443/acme/acme/new-nonce\",\"newAccount\":\"https://ca.foo:1443/acme/acme/new-account\",\"newOrder\":\"https://ca.foo:1443/acme/acme/new-order\",\"revokeCert\":\"https://ca.foo:1443/acme/acme/revoke-cert\",\"keyChange\":\"https://ca.foo:1443/acme/acme/key-change\"}" size=277 status=200 user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; arm64)" user-id=412ca # [1392688.135431] ca acme-order-renew-ca.foo-start[323]: 2026-09-20T10:18:28.121215272Z INFO Registering the account. email=none@none.tld413ca # [1392688.137660] ca step-ca[208]: time="2026-09-20T10:18:28Z" level=info duration=1.849465ms duration-ns=1849465 fields.time="2026-09-20T10:18:28Z" method=HEAD name=ca nonce=eUNJZURvaUQ2SVRmSkhnTDZRbE9XRGg3ajZvbTk4NEw path=/acme/acme/new-nonce protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=0d40aa72-f8a3-4f82-a8e7-d13c5a5326a1 size=0 status=200 user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; arm64)" user-id=414ca # [1392688.141263] ca step-ca[208]: time="2026-09-20T10:18:28Z" level=info duration=2.817238ms duration-ns=2817238 fields.time="2026-09-20T10:18:28Z" method=POST name=ca nonce=OUY5SVZlMk5pU0RWTE9wMGZlbnlLcjhOYUk2TlBVREo path=/acme/acme/new-account protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=d1134c6a-c850-425e-8f20-3a8146d7c31a response="{\"contact\":[\"mailto:none@none.tld\"],\"status\":\"valid\",\"orders\":\"https://ca.foo:1443/acme/acme/account/WzfJGnq3HJ8XCG3G7WZODqO1kaj2kO1o/orders\"}" size=143 status=201 user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; arm64)" user-id=415ca # [1392688.141860] ca acme-order-renew-ca.foo-start[323]: 2026-09-20T10:18:28.127661920Z WARN !!!! HEADS UP !!!!416ca # [1392688.141860] ca acme-order-renew-ca.foo-start[323]: Your account credentials have been saved in your417ca # [1392688.141860] ca acme-order-renew-ca.foo-start[323]: configuration directory at "accounts".418ca # [1392688.141860] ca acme-order-renew-ca.foo-start[323]: You should make a secure backup of this folder now. This419ca # [1392688.141860] ca acme-order-renew-ca.foo-start[323]: configuration directory will also contain private keys420ca # [1392688.141860] ca acme-order-renew-ca.foo-start[323]: generated by lego and certificates obtained from the ACME421ca # [1392688.141860] ca acme-order-renew-ca.foo-start[323]: server. Making regular backups of this folder is ideal.422ca # [1392688.142179] ca acme-order-renew-ca.foo-start[323]: 2026-09-20T10:18:28.127834843Z INFO Obtaining bundled SAN certificate. domains=ca.foo423ca # [1392688.147414] ca step-ca[208]: time="2026-09-20T10:18:28Z" level=info duration=4.703784ms duration-ns=4703784 fields.time="2026-09-20T10:18:28Z" method=POST name=ca nonce=cEhER21qUDJBVXh4Rk8wWXF3R3VoZlQ0NTNjenFEeGM path=/acme/acme/new-order protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=be04e98f-e1cd-4116-baa0-8d8fa2db80ee response="{\"id\":\"FiKLVgytyydA2bSty4GIExBRdlvf4hlo\",\"status\":\"pending\",\"expires\":\"2026-09-21T10:18:28Z\",\"identifiers\":[{\"type\":\"dns\",\"value\":\"ca.foo\"}],\"notBefore\":\"2026-09-20T10:17:28Z\",\"notAfter\":\"2026-12-19T10:18:28Z\",\"authorizations\":[\"https://ca.foo:1443/acme/acme/authz/KZziJCXg0VWw3SRU0MGTdQaWKokOpbLq\"],\"finalize\":\"https://ca.foo:1443/acme/acme/order/FiKLVgytyydA2bSty4GIExBRdlvf4hlo/finalize\"}" size=392 status=201 user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; arm64)" user-id=424ca # [1392688.206453] ca step-ca[208]: time="2026-09-20T10:18:28Z" level=info duration=2.036148ms duration-ns=2036148 fields.time="2026-09-20T10:18:28Z" method=POST name=ca nonce=M1BJZ2s4UW5MeEdXWFV3RG5idUtXTm5RdlBkRHdGUVI path=/acme/acme/authz/KZziJCXg0VWw3SRU0MGTdQaWKokOpbLq protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=2aa5a592-64fe-44e3-af92-ddb6d4876951 response="{\"identifier\":{\"type\":\"dns\",\"value\":\"ca.foo\"},\"status\":\"pending\",\"challenges\":[{\"type\":\"dns-01\",\"status\":\"pending\",\"token\":\"eoybtARVDxomj4BSFbqtQTty51XPGltM\",\"url\":\"https://ca.foo:1443/acme/acme/challenge/KZziJCXg0VWw3SRU0MGTdQaWKokOpbLq/sx8JOjNdxaC4Dl4kre6OUdOhZbLu1AjH\"},{\"type\":\"http-01\",\"status\":\"pending\",\"token\":\"eoybtARVDxomj4BSFbqtQTty51XPGltM\",\"url\":\"https://ca.foo:1443/acme/acme/challenge/KZziJCXg0VWw3SRU0MGTdQaWKokOpbLq/4J1ZPBAehvmlwNgVLFbuQa4P5j0A4EWm\"},{\"type\":\"tls-alpn-01\",\"status\":\"pending\",\"token\":\"eoybtARVDxomj4BSFbqtQTty51XPGltM\",\"url\":\"https://ca.foo:1443/acme/acme/challenge/KZziJCXg0VWw3SRU0MGTdQaWKokOpbLq/OhlDM4gvu4YcfNMU6g9yclJ7QSTCMD91\"}],\"wildcard\":false,\"expires\":\"2026-09-21T10:18:28Z\"}" size=719 status=200 user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; arm64)" user-id=425ca # [1392688.206941] ca acme-order-renew-ca.foo-start[323]: 2026-09-20T10:18:28.192728772Z INFO Use solver. domain=ca.foo type=http-01426ca # [1392688.207025] ca acme-order-renew-ca.foo-start[323]: 2026-09-20T10:18:28.192786133Z INFO http01: Trying to solve HTTP-01. domain=ca.foo427ca # [1392688.213090] ca step-ca[208]: time="2026-09-20T10:18:28Z" level=info duration=5.189991ms duration-ns=5189991 fields.time="2026-09-20T10:18:28Z" method=POST name=ca nonce=TVoyM0VGQmFERnhaNHkzMUMweEFLdDFyM2czeGZWRDA path=/acme/acme/challenge/KZziJCXg0VWw3SRU0MGTdQaWKokOpbLq/4J1ZPBAehvmlwNgVLFbuQa4P5j0A4EWm protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=21dc1bc3-8f94-471f-9af3-50ed363844a5 response="{\"type\":\"http-01\",\"status\":\"valid\",\"token\":\"eoybtARVDxomj4BSFbqtQTty51XPGltM\",\"validated\":\"2026-09-20T10:18:28Z\",\"url\":\"https://ca.foo:1443/acme/acme/challenge/KZziJCXg0VWw3SRU0MGTdQaWKokOpbLq/4J1ZPBAehvmlwNgVLFbuQa4P5j0A4EWm\"}" size=228 status=200 user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; arm64)" user-id=428ca # [1392688.213504] ca acme-order-renew-ca.foo-start[323]: 2026-09-20T10:18:28.199299142Z INFO The server validated our request. domain=ca.foo429ca # [1392688.213635] ca acme-order-renew-ca.foo-start[323]: 2026-09-20T10:18:28.199442864Z INFO Validations succeeded; requesting certificates. domains=ca.foo430ca # [1392688.223653] ca step-ca[208]: time="2026-09-20T10:18:28Z" level=info duration=8.279994ms duration-ns=8279994 fields.time="2026-09-20T10:18:28Z" method=POST name=ca nonce=emo0cGpBQ3g5SldGSnNRdXVhcTVsZmUxNXNvUzhmbVk path=/acme/acme/order/FiKLVgytyydA2bSty4GIExBRdlvf4hlo/finalize protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=b89bb542-c369-4ff6-89da-13d8f7cd4364 response="{\"id\":\"FiKLVgytyydA2bSty4GIExBRdlvf4hlo\",\"status\":\"valid\",\"expires\":\"2026-09-21T10:18:28Z\",\"identifiers\":[{\"type\":\"dns\",\"value\":\"ca.foo\"}],\"notBefore\":\"2026-09-20T10:17:28Z\",\"notAfter\":\"2026-12-19T10:18:28Z\",\"authorizations\":[\"https://ca.foo:1443/acme/acme/authz/KZziJCXg0VWw3SRU0MGTdQaWKokOpbLq\"],\"finalize\":\"https://ca.foo:1443/acme/acme/order/FiKLVgytyydA2bSty4GIExBRdlvf4hlo/finalize\",\"certificate\":\"https://ca.foo:1443/acme/acme/certificate/2UN7Qa8ALSUA4walU8327PCVySZVzFNU\"}" size=481 status=200 user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; arm64)" user-id=431ca # [1392688.226453] ca step-ca[208]: time="2026-09-20T10:18:28Z" level=info certificate=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 duration=1.755904ms duration-ns=1755904 fields.time="2026-09-20T10:18:28Z" issuer="Clan Intermediate CA" method=POST name=ca nonce=WXRpSVRUVHJSR0F3dzJtcHZ6R3FmWU9jTlRwZmxwTEs path=/acme/acme/certificate/2UN7Qa8ALSUA4walU8327PCVySZVzFNU protocol=HTTP/1.1 provisioner=acme public-key="ECDSA P-256" referer= remote-address="2001:db8:1::1" request-id=3b7f8fea-9d8c-4f4e-88c0-419f73286557 sans="map[dns:[ca.foo]]" serial=160683459547773075882436828158903892622 size=1340 status=200 subject=ca.foo user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; arm64)" user-id= valid-from="2026-09-20T10:17:28Z" valid-to="2026-12-19T10:18:28Z"432ca # [1392688.226739] ca acme-order-renew-ca.foo-start[323]: 2026-09-20T10:18:28.212538883Z INFO Server responded with a certificate. domains=ca.foo433ca # [1392688.226823] ca acme-order-renew-ca.foo-start[323]: 2026-09-20T10:18:28.212639885Z INFO Writing file. filepath=certificates/ca.foo.crt434ca # [1392688.226976] ca acme-order-renew-ca.foo-start[323]: 2026-09-20T10:18:28.212786247Z INFO Writing file. filepath=certificates/ca.foo.issuer.crt435ca # [1392688.227053] ca acme-order-renew-ca.foo-start[323]: 2026-09-20T10:18:28.212860528Z INFO Writing file. filepath=certificates/ca.foo.key436ca # [1392688.227209] ca acme-order-renew-ca.foo-start[323]: 2026-09-20T10:18:28.213019490Z INFO Writing file. filepath=certificates/ca.foo.json437ca # [1392688.233406] ca acme-order-renew-ca.foo-start[311]: + touch out/acme-success438ca # [1392688.235438] ca acme-order-renew-ca.foo-start[311]: + cmp -s certificates/ca.foo.crt out/fullchain.pem439ca # [1392688.237015] ca acme-order-renew-ca.foo-start[311]: + touch out/renewed440ca # [1392688.238822] ca acme-order-renew-ca.foo-start[311]: + echo Installing new certificate441ca # [1392688.238822] ca acme-order-renew-ca.foo-start[311]: Installing new certificate442ca # [1392688.238822] ca acme-order-renew-ca.foo-start[311]: + cp -vp certificates/ca.foo.crt out/fullchain.pem443ca # [1392688.240385] ca acme-order-renew-ca.foo-start[354]: 'certificates/ca.foo.crt' -> 'out/fullchain.pem'444ca # [1392688.240769] ca acme-order-renew-ca.foo-start[311]: + cp -vp certificates/ca.foo.key out/key.pem445ca # [1392688.242404] ca acme-order-renew-ca.foo-start[355]: 'certificates/ca.foo.key' -> 'out/key.pem'446ca # [1392688.242714] ca acme-order-renew-ca.foo-start[311]: + cp -vp certificates/ca.foo.issuer.crt out/chain.pem447ca # [1392688.244640] ca acme-order-renew-ca.foo-start[356]: 'certificates/ca.foo.issuer.crt' -> 'out/chain.pem'448ca # [1392688.244953] ca acme-order-renew-ca.foo-start[311]: + ln -sf fullchain.pem out/cert.pem449ca # [1392688.246832] ca acme-order-renew-ca.foo-start[311]: + cat out/key.pem out/fullchain.pem450ca # [1392688.248769] ca acme-order-renew-ca.foo-start[311]: + for fixpath in out certificates451ca # [1392688.248769] ca acme-order-renew-ca.foo-start[311]: + '[' -d out ']'452ca # [1392688.248868] ca acme-order-renew-ca.foo-start[311]: + chmod -R u=rwX,g=rX,o= out453ca # [1392688.250506] ca acme-order-renew-ca.foo-start[311]: + chown -R acme:nginx out454ca # [1392688.253676] ca acme-order-renew-ca.foo-start[311]: + for fixpath in out certificates455ca # [1392688.253676] ca acme-order-renew-ca.foo-start[311]: + '[' -d certificates ']'456ca # [1392688.253786] ca acme-order-renew-ca.foo-start[311]: + chmod -R u=rwX,g=rX,o= certificates457ca # [1392688.255478] ca acme-order-renew-ca.foo-start[311]: + chown -R acme:nginx certificates458ca # [1392688.258678] ca acme-order-renew-ca.foo-start[311]: + chmod -R u=rwX,g=,o= accounts/.459server # [1392688.034724] server acme-order-renew-test.foo-start[273]: Waiting to acquire lock in /run/acme/460server # [1392688.038222] server acme-order-renew-test.foo-start[273]: + set -euo pipefail461server # [1392688.038303] server acme-order-renew-test.foo-start[273]: + exec462server # [1392688.038375] server acme-order-renew-test.foo-start[273]: + /nix/store/fxkh6pl0y4nfbhdqdnhfkvsq7pbxq655-flock-0.4.0/bin/flock 11463server # [1392688.039860] server acme-order-renew-test.foo-start[285]: ++ find accounts -path '*/keys/*.key' -print -quit464server # [1392688.041881] server acme-order-renew-test.foo-start[273]: + '[' -n '' ']'465server # [1392688.041957] server acme-order-renew-test.foo-start[273]: + exec466server # [1392688.042008] server acme-order-renew-test.foo-start[273]: + '[' -e certificates/test.foo.key ']'467server # [1392688.042065] server acme-order-renew-test.foo-start[273]: + lego run --accept-tos --path . --email none@none.tld --http --http.webroot /var/lib/acme/acme-challenge --server https://ca.foo/acme/acme/directory --key-type ec256 -d test.foo --no-random-sleep --renew-force --ari-disable --force-cert-domains468server # [1392688.104353] server acme-order-renew-test.foo-start[286]: 2026-09-20T10:18:28.090119686Z INFO Private key saved. filepath=accounts/ca.foo/none@none.tld/none@none.tld.key469server # [1392688.155696] server acme-order-renew-test.foo-start[286]: 2026-09-20T10:18:28.141487350Z ERROR Error error="registration: set up client: new client: get directory at 'https://ca.foo/acme/acme/directory': unable to communicate with the API server: error: Get \"https://ca.foo/acme/acme/directory\": GET https://ca.foo/acme/acme/directory giving up after 1 attempt(s): Get \"https://ca.foo/acme/acme/directory\": tls: failed to verify certificate: x509: certificate signed by unknown authority"470server # [1392688.159937] server acme-order-renew-test.foo-start[273]: + echo Failed to fetch certificates. This may mean your DNS records are set up incorrectly. Self-signed certs are in place and dependant services will still start.471server # [1392688.159937] server acme-order-renew-test.foo-start[273]: Failed to fetch certificates. This may mean your DNS records are set up incorrectly. Self-signed certs are in place and dependant services will still start.472server # [1392688.160053] server acme-order-renew-test.foo-start[273]: + exit 10473server # [1392688.164255] server systemd[1]: acme-order-renew-test.foo.service: Main process exited, code=exited, status=10/n/a474server # [1392688.164460] server systemd[1]: acme-order-renew-test.foo.service: Failed with result 'exit-code'.475server # [1392688.164917] server systemd[1]: Failed to start Order (and renew) ACME certificate for test.foo.476server # [1392688.165598] server systemd[1]: Startup finished in 6.256s.477server # [1392688.165659] server systemd[1]: acme-order-renew-test.foo.service: Consumed 1.092s CPU time over 1.148s wall clock time.478ca # [1392688.483619] ca systemd[1]: Reloading Nginx Web Server...479ca # [1392688.488541] ca systemd[1]: acme-order-renew-ca.foo.service: Deactivated successfully.480ca # [1392688.488744] ca systemd[1]: Finished Order (and renew) ACME certificate for ca.foo.481ca # [1392688.488947] ca systemd[1]: acme-order-renew-ca.foo.service: Consumed 1.251s CPU time over 1.476s wall clock time.482ca # [1392689.450162] ca nginx[372]: nginx: the configuration file /nix/store/9xdq48zsmbzh971fy8df0q5bz7cca117-nginx.conf syntax is ok483ca # [1392689.450665] ca nginx[372]: nginx: configuration file /nix/store/9xdq48zsmbzh971fy8df0q5bz7cca117-nginx.conf test is successful484ca # [1392690.402412] ca systemd[1]: Reloaded Nginx Web Server.485ca # [1392690.402983] ca systemd[1]: Startup finished in 8.469s.486ca # [1392690.546516] ca systemd[1]: Starting Order (and renew) ACME certificate for ca.foo...487ca # [1392691.534375] ca acme-order-renew-ca.foo-start[387]: Waiting to acquire lock in /run/acme/488ca # [1392691.537890] ca acme-order-renew-ca.foo-start[387]: + set -euo pipefail489ca # [1392691.537970] ca acme-order-renew-ca.foo-start[387]: + exec490ca # [1392691.538022] ca acme-order-renew-ca.foo-start[387]: + /nix/store/fxkh6pl0y4nfbhdqdnhfkvsq7pbxq655-flock-0.4.0/bin/flock 11491ca # [1392691.539476] ca acme-order-renew-ca.foo-start[395]: ++ find accounts -path '*/keys/*.key' -print -quit492ca # [1392691.542423] ca acme-order-renew-ca.foo-start[387]: + '[' -n '' ']'493ca # [1392691.542489] ca acme-order-renew-ca.foo-start[387]: + exec494ca # [1392691.542537] ca acme-order-renew-ca.foo-start[387]: + '[' -e certificates/ca.foo.key ']'495ca # [1392691.542537] ca acme-order-renew-ca.foo-start[387]: + '[' -e certificates/ca.foo.crt ']'496ca # [1392691.542999] ca acme-order-renew-ca.foo-start[396]: ++ find accounts -name none@none.tld.key497ca # [1392691.546198] ca acme-order-renew-ca.foo-start[387]: + '[' -n accounts/ca.foo_1443/none@none.tld/none@none.tld.key ']'498ca # [1392691.546276] ca acme-order-renew-ca.foo-start[387]: + lego run --accept-tos --path . --email none@none.tld --http --http.webroot /var/lib/acme/acme-challenge --server https://ca.foo:1443/acme/acme/directory --key-type ec256 -d ca.foo --no-random-sleep --force-cert-domains499ca # [1392691.566390] ca acme-order-renew-ca.foo-start[397]: 2026-09-20T10:18:31.552176316Z INFO Renewing certificate cert-name=ca.foo500ca # [1392691.599025] ca step-ca[208]: time="2026-09-20T10:18:31Z" level=info duration="69.561µs" duration-ns=69561 fields.time="2026-09-20T10:18:31Z" method=GET name=ca path=/acme/acme/directory protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=0c552ef5-228c-4732-9900-0e3940c2bf54 response="{\"newNonce\":\"https://ca.foo:1443/acme/acme/new-nonce\",\"newAccount\":\"https://ca.foo:1443/acme/acme/new-account\",\"newOrder\":\"https://ca.foo:1443/acme/acme/new-order\",\"revokeCert\":\"https://ca.foo:1443/acme/acme/revoke-cert\",\"keyChange\":\"https://ca.foo:1443/acme/acme/key-change\"}" size=277 status=200 user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; arm64)" user-id=501ca # [1392691.599646] ca acme-order-renew-ca.foo-start[397]: 2026-09-20T10:18:31.585417532Z WARN The server does not advertise a renewal info endpoint. cert-name=ca.foo error="renewalInfo[get/post]: server does not advertise a renewal info endpoint"502ca # [1392691.599716] ca acme-order-renew-ca.foo-start[397]: 2026-09-20T10:18:31.585499693Z INFO Skip renewal: The certificate expires at 2026-12-19T10:18:28Z, the renewal can be performed in 59d23h59m36s414515387ns. cert-name=ca.foo503ca # [1392691.600208] ca acme-order-renew-ca.foo-start[387]: + touch out/acme-success504ca # [1392691.602310] ca acme-order-renew-ca.foo-start[387]: + cmp -s certificates/ca.foo.crt out/fullchain.pem505ca # [1392691.603879] ca acme-order-renew-ca.foo-start[387]: + for fixpath in out certificates506ca # [1392691.603879] ca acme-order-renew-ca.foo-start[387]: + '[' -d out ']'507ca # [1392691.603990] ca acme-order-renew-ca.foo-start[387]: + chmod -R u=rwX,g=rX,o= out508ca # [1392691.606005] ca acme-order-renew-ca.foo-start[387]: + chown -R acme:nginx out509ca # [1392691.608867] ca acme-order-renew-ca.foo-start[387]: + for fixpath in out certificates510ca # [1392691.608867] ca acme-order-renew-ca.foo-start[387]: + '[' -d certificates ']'511ca # [1392691.608960] ca acme-order-renew-ca.foo-start[387]: + chmod -R u=rwX,g=rX,o= certificates512ca # [1392691.610789] ca acme-order-renew-ca.foo-start[387]: + chown -R acme:nginx certificates513ca # [1392691.613972] ca acme-order-renew-ca.foo-start[387]: + chmod -R u=rwX,g=,o= accounts/.514ca: (finished: must succeed: systemctl restart acme-order-renew-ca.foo.service , in 7.48 seconds)515ca # [1392691.828031] ca systemd[1]: acme-order-renew-ca.foo.service: Deactivated successfully.516ca # [1392691.828417] ca systemd[1]: Finished Order (and renew) ACME certificate for ca.foo.517ca # [1392691.828977] ca systemd[1]: acme-order-renew-ca.foo.service: Consumed 1.192s CPU time over 1.281s wall clock time.518server: must succeed: systemctl restart acme-test.foo.service519server # [1392694.865355] server systemd[1]: acme-test.foo.service: Deactivated successfully.520server # [1392694.865743] server systemd[1]: Stopped Ensure certificate for test.foo.521server # [1392694.867224] server systemd[1]: Stopping Ensure certificate for test.foo...522server # [1392694.869758] server systemd[1]: Starting Ensure certificate for test.foo...523server: (finished: must succeed: systemctl restart acme-test.foo.service, in 1.02 seconds)524client: waiting for success: curl -v https://test.foo525* Trying [2001:db8:1::3]:443...526* Host test.foo:443 was resolved.527* IPv6: 2001:db8:1::3528* IPv4: 192.168.1.3529* ALPN: curl offers h2,http/1.1530} [5 bytes data]531* TLSv1.3 (OUT), TLS handshake, Client hello (1):532} [1552 bytes data]533* SSL Trust Anchors:534* OpenSSL default paths (fallback)535{ [5 bytes data]536* TLSv1.3 (IN), TLS handshake, Server hello (2):537{ [1210 bytes data]538* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):539{ [1 bytes data]540* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):541{ [19 bytes data]542* TLSv1.3 (IN), TLS handshake, Certificate (11):543{ [1009 bytes data]544* TLSv1.3 (IN), TLS handshake, CERT verify (15):545{ [110 bytes data]546* TLSv1.3 (IN), TLS handshake, Finished (20):547{ [52 bytes data]548* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):549} [1 bytes data]550* TLSv1.3 (OUT), TLS handshake, Finished (20):551} [52 bytes data]552* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey553* ALPN: server accepted h2554* Server certificate:555* subject: CN=test.foo556* start date: Sep 20 10:18:25 2026 GMT557* expire date: Oct 20 10:18:25 2028 GMT558* issuer: CN=minica root ca 0d3607559* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384560* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384561* subjectAltName: "test.foo" matches cert's "test.foo"562* OpenSSL verify result: 13563* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)564* closing connection #0565curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)566More details here: https://curl.se/docs/sslcerts.html567568curl failed to verify the legitimacy of the server and therefore could not569establish a secure connection to it. To learn more about this situation and570how to fix it, please visit the webpage mentioned above.571server # [1392695.827719] server acme-test.foo-start[319]: Waiting to acquire lock in /run/acme/572server # [1392695.831167] server acme-test.foo-start[319]: + '[' -e out/acme-success ']'573server # [1392695.831167] server acme-test.foo-start[319]: + minica --ca-cert=ca/cert.pem --ca-key=ca/key.pem --domains=test.foo --ip-addresses=574server # [1392695.846858] server acme-test.foo-start[328]: + cd test.foo575server # [1392695.847411] server acme-test.foo-start[328]: + cp -vp cert.pem ../out/cert.pem576server # [1392695.848570] server acme-test.foo-start[329]: 'cert.pem' -> '../out/cert.pem'577server # [1392695.848883] server acme-test.foo-start[328]: + cp -vp key.pem ../out/key.pem578server # [1392695.850243] server acme-test.foo-start[328]: 'key.pem' -> '../out/key.pem'579server # [1392695.850489] server acme-test.foo-start[319]: + cat out/cert.pem ca/cert.pem580server # [1392695.852500] server acme-test.foo-start[319]: + cp ca/cert.pem out/chain.pem581server # [1392695.854261] server acme-test.foo-start[319]: + cat out/key.pem out/fullchain.pem582server # [1392695.856019] server acme-test.foo-start[319]: + for fixpath in out certificates583server # [1392695.856019] server acme-test.foo-start[319]: + '[' -d out ']'584server # [1392695.856110] server acme-test.foo-start[319]: + chmod -R u=rwX,g=rX,o= out585server # [1392695.857562] server acme-test.foo-start[319]: + chown -R acme:nginx out586server # [1392695.860908] server acme-test.foo-start[319]: + for fixpath in out certificates587server # [1392695.860908] server acme-test.foo-start[319]: + '[' -d certificates ']'588server # [1392695.865818] server systemd[1]: Finished Ensure certificate for test.foo.589server # [1392695.870600] server systemd[1]: Starting Order (and renew) ACME certificate for test.foo...590* Host test.foo:443 was resolved.591* IPv6: 2001:db8:1::3592* IPv4: 192.168.1.3593* Trying [2001:db8:1::3]:443...594* ALPN: curl offers h2,http/1.1595} [5 bytes data]596* TLSv1.3 (OUT), TLS handshake, Client hello (1):597} [1552 bytes data]598* SSL Trust Anchors:599* OpenSSL default paths (fallback)600{ [5 bytes data]601* TLSv1.3 (IN), TLS handshake, Server hello (2):602{ [1210 bytes data]603* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):604{ [1 bytes data]605* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):606{ [19 bytes data]607* TLSv1.3 (IN), TLS handshake, Certificate (11):608{ [1009 bytes data]609* TLSv1.3 (IN), TLS handshake, CERT verify (15):610{ [111 bytes data]611* TLSv1.3 (IN), TLS handshake, Finished (20):612{ [52 bytes data]613* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):614} [1 bytes data]615* TLSv1.3 (OUT), TLS handshake, Finished (20):616} [52 bytes data]617* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey618* ALPN: server accepted h2619* Server certificate:620* subject: CN=test.foo621* start date: Sep 20 10:18:25 2026 GMT622* expire date: Oct 20 10:18:25 2028 GMT623* issuer: CN=minica root ca 0d3607624* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384625* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384626* subjectAltName: "test.foo" matches cert's "test.foo"627* OpenSSL verify result: 13628* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)629* closing connection #0630curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)631More details here: https://curl.se/docs/sslcerts.html632633curl failed to verify the legitimacy of the server and therefore could not634establish a secure connection to it. To learn more about this situation and635how to fix it, please visit the webpage mentioned above.636ca # [1392696.862049] ca step-ca[208]: time="2026-09-20T10:18:36Z" level=info duration="62.281µs" duration-ns=62281 fields.time="2026-09-20T10:18:36Z" method=GET name=ca path=/acme/acme/directory protocol=HTTP/1.1 referer= remote-address="::1" request-id=4469e449-f014-402e-8f09-4a13583ea26a response="{\"newNonce\":\"https://ca.foo/acme/acme/new-nonce\",\"newAccount\":\"https://ca.foo/acme/acme/new-account\",\"newOrder\":\"https://ca.foo/acme/acme/new-order\",\"revokeCert\":\"https://ca.foo/acme/acme/revoke-cert\",\"keyChange\":\"https://ca.foo/acme/acme/key-change\"}" size=252 status=200 user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; arm64)" user-id=637ca # [1392696.867541] ca step-ca[208]: time="2026-09-20T10:18:36Z" level=info duration=1.161696ms duration-ns=1161696 fields.time="2026-09-20T10:18:36Z" method=HEAD name=ca nonce=MFl6eVdYYXpMREJWMXRQcm1xeVgwOGJsMHJ0YnR0bXM path=/acme/acme/new-nonce protocol=HTTP/1.1 referer= remote-address=127.0.0.1 request-id=330c0d42-f205-4a57-98dd-d703cb131310 size=0 status=200 user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; arm64)" user-id=638ca # [1392696.874268] ca step-ca[208]: time="2026-09-20T10:18:36Z" level=warning duration=1.860066ms duration-ns=1860066 error="account does not exist" fields.time="2026-09-20T10:18:36Z" method=POST name=ca nonce=WldVOEZmbzE4WHVwYXZFTGZpN1NiVlFPWnJZY3dKR1A path=/acme/acme/new-account protocol=HTTP/1.1 referer= remote-address="::1" request-id=88674f3c-6500-45d3-8bf4-0d80f4799c54 response="{\"type\":\"urn:ietf:params:acme:error:accountDoesNotExist\",\"detail\":\"Account does not exist\"}" size=92 status=400 user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; arm64)" user-id=639server # [1392696.793574] server acme-order-renew-test.foo-start[336]: Waiting to acquire lock in /run/acme/640server # [1392696.796958] server acme-order-renew-test.foo-start[336]: + set -euo pipefail641server # [1392696.797031] server acme-order-renew-test.foo-start[336]: + exec642server # [1392696.797081] server acme-order-renew-test.foo-start[336]: + /nix/store/fxkh6pl0y4nfbhdqdnhfkvsq7pbxq655-flock-0.4.0/bin/flock 11643server # [1392696.798703] server acme-order-renew-test.foo-start[344]: ++ find accounts -path '*/keys/*.key' -print -quit644server # [1392696.801879] server acme-order-renew-test.foo-start[336]: + '[' -n '' ']'645server # [1392696.801946] server acme-order-renew-test.foo-start[336]: + exec646server # [1392696.801999] server acme-order-renew-test.foo-start[336]: + '[' -e certificates/test.foo.key ']'647server # [1392696.802049] server acme-order-renew-test.foo-start[336]: + lego run --accept-tos --path . --email none@none.tld --http --http.webroot /var/lib/acme/acme-challenge --server https://ca.foo/acme/acme/directory --key-type ec256 -d test.foo --no-random-sleep --renew-force --ari-disable --force-cert-domains648server # [1392696.862799] server acme-order-renew-test.foo-start[345]: 2026-09-20T10:18:36.848557877Z INFO Trying to resolve the account by key649server # [1392696.874923] server acme-order-renew-test.foo-start[345]: 2026-09-20T10:18:36.860723044Z WARN retry: acme: error: 0 :: urn:ietf:params:acme:error:accountDoesNotExist :: Account does not exist650server # [1392696.875197] server acme-order-renew-test.foo-start[345]: 2026-09-20T10:18:36.860994647Z ERROR Error error="registration: resolve account by key: unable to communicate with the API server: error: Post \"https://ca.foo/acme/acme/new-account\": POST https://ca.foo/acme/acme/new-account giving up after 1 attempt(s): acme: error: 0 :: urn:ietf:params:acme:error:accountDoesNotExist :: Account does not exist"651server # [1392696.875667] server acme-order-renew-test.foo-start[336]: + echo Failed to fetch certificates. This may mean your DNS records are set up incorrectly. Self-signed certs are in place and dependant services will still start.652server # [1392696.875667] server acme-order-renew-test.foo-start[336]: Failed to fetch certificates. This may mean your DNS records are set up incorrectly. Self-signed certs are in place and dependant services will still start.653server # [1392696.875667] server acme-order-renew-test.foo-start[336]: + exit 10654server # [1392696.879313] server systemd[1]: acme-order-renew-test.foo.service: Main process exited, code=exited, status=10/n/a655server # [1392696.879511] server systemd[1]: acme-order-renew-test.foo.service: Failed with result 'exit-code'.656server # [1392696.879860] server systemd[1]: Failed to start Order (and renew) ACME certificate for test.foo.657* Trying [2001:db8:1::3]:443...658* Host test.foo:443 was resolved.659* IPv6: 2001:db8:1::3660* IPv4: 192.168.1.3661* ALPN: curl offers h2,http/1.1662} [5 bytes data]663* TLSv1.3 (OUT), TLS handshake, Client hello (1):664} [1552 bytes data]665* SSL Trust Anchors:666* OpenSSL default paths (fallback)667{ [5 bytes data]668* TLSv1.3 (IN), TLS handshake, Server hello (2):669{ [1210 bytes data]670* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):671{ [1 bytes data]672* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):673{ [19 bytes data]674* TLSv1.3 (IN), TLS handshake, Certificate (11):675{ [1009 bytes data]676* TLSv1.3 (IN), TLS handshake, CERT verify (15):677{ [111 bytes data]678* TLSv1.3 (IN), TLS handshake, Finished (20):679{ [52 bytes data]680* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):681} [1 bytes data]682* TLSv1.3 (OUT), TLS handshake, Finished (20):683} [52 bytes data]684* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey685* ALPN: server accepted h2686* Server certificate:687* subject: CN=test.foo688* start date: Sep 20 10:18:25 2026 GMT689* expire date: Oct 20 10:18:25 2028 GMT690* issuer: CN=minica root ca 0d3607691* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384692* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384693* subjectAltName: "test.foo" matches cert's "test.foo"694* OpenSSL verify result: 13695* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)696* closing connection #0697curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)698More details here: https://curl.se/docs/sslcerts.html699700curl failed to verify the legitimacy of the server and therefore could not701establish a secure connection to it. To learn more about this situation and702how to fix it, please visit the webpage mentioned above.703* Host test.foo:443 was resolved.704* IPv6: 2001:db8:1::3705* IPv4: 192.168.1.3706* Trying [2001:db8:1::3]:443...707* ALPN: curl offers h2,http/1.1708} [5 bytes data]709* TLSv1.3 (OUT), TLS handshake, Client hello (1):710} [1552 bytes data]711* SSL Trust Anchors:712* OpenSSL default paths (fallback)713{ [5 bytes data]714* TLSv1.3 (IN), TLS handshake, Server hello (2):715{ [1210 bytes data]716* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):717{ [1 bytes data]718* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):719{ [19 bytes data]720* TLSv1.3 (IN), TLS handshake, Certificate (11):721{ [1009 bytes data]722* TLSv1.3 (IN), TLS handshake, CERT verify (15):723{ [111 bytes data]724* TLSv1.3 (IN), TLS handshake, Finished (20):725{ [52 bytes data]726* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):727} [1 bytes data]728* TLSv1.3 (OUT), TLS handshake, Finished (20):729} [52 bytes data]730* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey731* ALPN: server accepted h2732* Server certificate:733* subject: CN=test.foo734* start date: Sep 20 10:18:25 2026 GMT735* expire date: Oct 20 10:18:25 2028 GMT736* issuer: CN=minica root ca 0d3607737* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384738* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384739* subjectAltName: "test.foo" matches cert's "test.foo"740* OpenSSL verify result: 13741* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)742* closing connection #0743curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)744More details here: https://curl.se/docs/sslcerts.html745746curl failed to verify the legitimacy of the server and therefore could not747establish a secure connection to it. To learn more about this situation and748how to fix it, please visit the webpage mentioned above.749* Host test.foo:443 was resolved.750* IPv6: 2001:db8:1::3751* IPv4: 192.168.1.3752* Trying [2001:db8:1::3]:443...753* ALPN: curl offers h2,http/1.1754} [5 bytes data]755* TLSv1.3 (OUT), TLS handshake, Client hello (1):756} [1552 bytes data]757* SSL Trust Anchors:758* OpenSSL default paths (fallback)759{ [5 bytes data]760* TLSv1.3 (IN), TLS handshake, Server hello (2):761{ [1210 bytes data]762* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):763{ [1 bytes data]764* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):765{ [19 bytes data]766* TLSv1.3 (IN), TLS handshake, Certificate (11):767{ [1009 bytes data]768* TLSv1.3 (IN), TLS handshake, CERT verify (15):769{ [111 bytes data]770* TLSv1.3 (IN), TLS handshake, Finished (20):771{ [52 bytes data]772* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):773} [1 bytes data]774* TLSv1.3 (OUT), TLS handshake, Finished (20):775} [52 bytes data]776* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey777* ALPN: server accepted h2778* Server certificate:779* subject: CN=test.foo780* start date: Sep 20 10:18:25 2026 GMT781* expire date: Oct 20 10:18:25 2028 GMT782* issuer: CN=minica root ca 0d3607783* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384784* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384785* subjectAltName: "test.foo" matches cert's "test.foo"786* OpenSSL verify result: 13787* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)788* closing connection #0789curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)790More details here: https://curl.se/docs/sslcerts.html791792curl failed to verify the legitimacy of the server and therefore could not793establish a secure connection to it. To learn more about this situation and794how to fix it, please visit the webpage mentioned above.795* Host test.foo:443 was resolved.796* IPv6: 2001:db8:1::3797* IPv4: 192.168.1.3798* Trying [2001:db8:1::3]:443...799* ALPN: curl offers h2,http/1.1800} [5 bytes data]801* TLSv1.3 (OUT), TLS handshake, Client hello (1):802} [1552 bytes data]803* SSL Trust Anchors:804* OpenSSL default paths (fallback)805{ [5 bytes data]806* TLSv1.3 (IN), TLS handshake, Server hello (2):807{ [1210 bytes data]808* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):809{ [1 bytes data]810* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):811{ [19 bytes data]812* TLSv1.3 (IN), TLS handshake, Certificate (11):813{ [1009 bytes data]814* TLSv1.3 (IN), TLS handshake, CERT verify (15):815{ [111 bytes data]816* TLSv1.3 (IN), TLS handshake, Finished (20):817{ [52 bytes data]818* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):819} [1 bytes data]820* TLSv1.3 (OUT), TLS handshake, Finished (20):821} [52 bytes data]822* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey823* ALPN: server accepted h2824* Server certificate:825* subject: CN=test.foo826* start date: Sep 20 10:18:25 2026 GMT827* expire date: Oct 20 10:18:25 2028 GMT828* issuer: CN=minica root ca 0d3607829* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384830* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384831* subjectAltName: "test.foo" matches cert's "test.foo"832* OpenSSL verify result: 13833* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)834* closing connection #0835curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)836More details here: https://curl.se/docs/sslcerts.html837838curl failed to verify the legitimacy of the server and therefore could not839establish a secure connection to it. To learn more about this situation and840how to fix it, please visit the webpage mentioned above.841* Host test.foo:443 was resolved.842* IPv6: 2001:db8:1::3843* IPv4: 192.168.1.3844* Trying [2001:db8:1::3]:443...845* ALPN: curl offers h2,http/1.1846} [5 bytes data]847* TLSv1.3 (OUT), TLS handshake, Client hello (1):848} [1552 bytes data]849* SSL Trust Anchors:850* OpenSSL default paths (fallback)851{ [5 bytes data]852* TLSv1.3 (IN), TLS handshake, Server hello (2):853{ [1210 bytes data]854* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):855{ [1 bytes data]856* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):857{ [19 bytes data]858* TLSv1.3 (IN), TLS handshake, Certificate (11):859{ [1009 bytes data]860* TLSv1.3 (IN), TLS handshake, CERT verify (15):861{ [112 bytes data]862* TLSv1.3 (IN), TLS handshake, Finished (20):863{ [52 bytes data]864* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):865} [1 bytes data]866* TLSv1.3 (OUT), TLS handshake, Finished (20):867} [52 bytes data]868* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey869* ALPN: server accepted h2870* Server certificate:871* subject: CN=test.foo872* start date: Sep 20 10:18:25 2026 GMT873* expire date: Oct 20 10:18:25 2028 GMT874* issuer: CN=minica root ca 0d3607875* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384876* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384877* subjectAltName: "test.foo" matches cert's "test.foo"878* OpenSSL verify result: 13879* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)880* closing connection #0881curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)882More details here: https://curl.se/docs/sslcerts.html883884curl failed to verify the legitimacy of the server and therefore could not885establish a secure connection to it. To learn more about this situation and886how to fix it, please visit the webpage mentioned above.887* Host test.foo:443 was resolved.888* IPv6: 2001:db8:1::3889* IPv4: 192.168.1.3890* Trying [2001:db8:1::3]:443...891* ALPN: curl offers h2,http/1.1892} [5 bytes data]893* TLSv1.3 (OUT), TLS handshake, Client hello (1):894} [1552 bytes data]895* SSL Trust Anchors:896* OpenSSL default paths (fallback)897{ [5 bytes data]898* TLSv1.3 (IN), TLS handshake, Server hello (2):899{ [1210 bytes data]900* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):901{ [1 bytes data]902* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):903{ [19 bytes data]904* TLSv1.3 (IN), TLS handshake, Certificate (11):905{ [1009 bytes data]906* TLSv1.3 (IN), TLS handshake, CERT verify (15):907{ [111 bytes data]908* TLSv1.3 (IN), TLS handshake, Finished (20):909{ [52 bytes data]910* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):911} [1 bytes data]912* TLSv1.3 (OUT), TLS handshake, Finished (20):913} [52 bytes data]914* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey915* ALPN: server accepted h2916* Server certificate:917* subject: CN=test.foo918* start date: Sep 20 10:18:25 2026 GMT919* expire date: Oct 20 10:18:25 2028 GMT920* issuer: CN=minica root ca 0d3607921* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384922* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384923* subjectAltName: "test.foo" matches cert's "test.foo"924* OpenSSL verify result: 13925* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)926* closing connection #0927curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)928More details here: https://curl.se/docs/sslcerts.html929930curl failed to verify the legitimacy of the server and therefore could not931establish a secure connection to it. To learn more about this situation and932how to fix it, please visit the webpage mentioned above.933* Host test.foo:443 was resolved.934* IPv6: 2001:db8:1::3935* IPv4: 192.168.1.3936* Trying [2001:db8:1::3]:443...937* ALPN: curl offers h2,http/1.1938} [5 bytes data]939* TLSv1.3 (OUT), TLS handshake, Client hello (1):940} [1552 bytes data]941* SSL Trust Anchors:942* OpenSSL default paths (fallback)943{ [5 bytes data]944* TLSv1.3 (IN), TLS handshake, Server hello (2):945{ [1210 bytes data]946* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):947{ [1 bytes data]948* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):949{ [19 bytes data]950* TLSv1.3 (IN), TLS handshake, Certificate (11):951{ [1009 bytes data]952* TLSv1.3 (IN), TLS handshake, CERT verify (15):953{ [112 bytes data]954* TLSv1.3 (IN), TLS handshake, Finished (20):955{ [52 bytes data]956* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):957} [1 bytes data]958* TLSv1.3 (OUT), TLS handshake, Finished (20):959} [52 bytes data]960* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey961* ALPN: server accepted h2962* Server certificate:963* subject: CN=test.foo964* start date: Sep 20 10:18:25 2026 GMT965* expire date: Oct 20 10:18:25 2028 GMT966* issuer: CN=minica root ca 0d3607967* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384968* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384969* subjectAltName: "test.foo" matches cert's "test.foo"970* OpenSSL verify result: 13971* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)972* closing connection #0973curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)974More details here: https://curl.se/docs/sslcerts.html975976curl failed to verify the legitimacy of the server and therefore could not977establish a secure connection to it. To learn more about this situation and978how to fix it, please visit the webpage mentioned above.979* Host test.foo:443 was resolved.980* IPv6: 2001:db8:1::3981* IPv4: 192.168.1.3982* Trying [2001:db8:1::3]:443...983* ALPN: curl offers h2,http/1.1984} [5 bytes data]985* TLSv1.3 (OUT), TLS handshake, Client hello (1):986} [1552 bytes data]987* SSL Trust Anchors:988* OpenSSL default paths (fallback)989{ [5 bytes data]990* TLSv1.3 (IN), TLS handshake, Server hello (2):991{ [1210 bytes data]992* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):993{ [1 bytes data]994* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):995{ [19 bytes data]996* TLSv1.3 (IN), TLS handshake, Certificate (11):997{ [1009 bytes data]998* TLSv1.3 (IN), TLS handshake, CERT verify (15):999{ [112 bytes data]1000* TLSv1.3 (IN), TLS handshake, Finished (20):1001{ [52 bytes data]1002* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1003} [1 bytes data]1004* TLSv1.3 (OUT), TLS handshake, Finished (20):1005} [52 bytes data]1006* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1007* ALPN: server accepted h21008* Server certificate:1009* subject: CN=test.foo1010* start date: Sep 20 10:18:25 2026 GMT1011* expire date: Oct 20 10:18:25 2028 GMT1012* issuer: CN=minica root ca 0d36071013* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841014* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841015* subjectAltName: "test.foo" matches cert's "test.foo"1016* OpenSSL verify result: 131017* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1018* closing connection #01019curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1020More details here: https://curl.se/docs/sslcerts.html10211022curl failed to verify the legitimacy of the server and therefore could not1023establish a secure connection to it. To learn more about this situation and1024how to fix it, please visit the webpage mentioned above.1025* Host test.foo:443 was resolved.1026* IPv6: 2001:db8:1::31027* IPv4: 192.168.1.31028* Trying [2001:db8:1::3]:443...1029* ALPN: curl offers h2,http/1.11030} [5 bytes data]1031* TLSv1.3 (OUT), TLS handshake, Client hello (1):1032} [1552 bytes data]1033* SSL Trust Anchors:1034* OpenSSL default paths (fallback)1035{ [5 bytes data]1036* TLSv1.3 (IN), TLS handshake, Server hello (2):1037{ [1210 bytes data]1038* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1039{ [1 bytes data]1040* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1041{ [19 bytes data]1042* TLSv1.3 (IN), TLS handshake, Certificate (11):1043{ [1009 bytes data]1044* TLSv1.3 (IN), TLS handshake, CERT verify (15):1045{ [111 bytes data]1046* TLSv1.3 (IN), TLS handshake, Finished (20):1047{ [52 bytes data]1048* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1049} [1 bytes data]1050* TLSv1.3 (OUT), TLS handshake, Finished (20):1051} [52 bytes data]1052* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1053* ALPN: server accepted h21054* Server certificate:1055* subject: CN=test.foo1056* start date: Sep 20 10:18:25 2026 GMT1057* expire date: Oct 20 10:18:25 2028 GMT1058* issuer: CN=minica root ca 0d36071059* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841060* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841061* subjectAltName: "test.foo" matches cert's "test.foo"1062* OpenSSL verify result: 131063* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1064* closing connection #01065curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1066More details here: https://curl.se/docs/sslcerts.html10671068curl failed to verify the legitimacy of the server and therefore could not1069establish a secure connection to it. To learn more about this situation and1070how to fix it, please visit the webpage mentioned above.1071* Host test.foo:443 was resolved.1072* IPv6: 2001:db8:1::31073* IPv4: 192.168.1.31074* Trying [2001:db8:1::3]:443...1075* ALPN: curl offers h2,http/1.11076} [5 bytes data]1077* TLSv1.3 (OUT), TLS handshake, Client hello (1):1078} [1552 bytes data]1079* SSL Trust Anchors:1080* OpenSSL default paths (fallback)1081{ [5 bytes data]1082* TLSv1.3 (IN), TLS handshake, Server hello (2):1083{ [1210 bytes data]1084* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1085{ [1 bytes data]1086* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1087{ [19 bytes data]1088* TLSv1.3 (IN), TLS handshake, Certificate (11):1089{ [1009 bytes data]1090* TLSv1.3 (IN), TLS handshake, CERT verify (15):1091{ [110 bytes data]1092* TLSv1.3 (IN), TLS handshake, Finished (20):1093{ [52 bytes data]1094* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1095} [1 bytes data]1096* TLSv1.3 (OUT), TLS handshake, Finished (20):1097} [52 bytes data]1098* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1099* ALPN: server accepted h21100* Server certificate:1101* subject: CN=test.foo1102* start date: Sep 20 10:18:25 2026 GMT1103* expire date: Oct 20 10:18:25 2028 GMT1104* issuer: CN=minica root ca 0d36071105* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841106* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841107* subjectAltName: "test.foo" matches cert's "test.foo"1108* OpenSSL verify result: 131109* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1110* closing connection #01111curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1112More details here: https://curl.se/docs/sslcerts.html11131114curl failed to verify the legitimacy of the server and therefore could not1115establish a secure connection to it. To learn more about this situation and1116how to fix it, please visit the webpage mentioned above.1117* Trying [2001:db8:1::3]:443...1118* Host test.foo:443 was resolved.1119* IPv6: 2001:db8:1::31120* IPv4: 192.168.1.31121* ALPN: curl offers h2,http/1.11122} [5 bytes data]1123* TLSv1.3 (OUT), TLS handshake, Client hello (1):1124} [1552 bytes data]1125* SSL Trust Anchors:1126* OpenSSL default paths (fallback)1127{ [5 bytes data]1128* TLSv1.3 (IN), TLS handshake, Server hello (2):1129{ [1210 bytes data]1130* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1131{ [1 bytes data]1132* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1133{ [19 bytes data]1134* TLSv1.3 (IN), TLS handshake, Certificate (11):1135{ [1009 bytes data]1136* TLSv1.3 (IN), TLS handshake, CERT verify (15):1137{ [111 bytes data]1138* TLSv1.3 (IN), TLS handshake, Finished (20):1139{ [52 bytes data]1140* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1141} [1 bytes data]1142* TLSv1.3 (OUT), TLS handshake, Finished (20):1143} [52 bytes data]1144* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1145* ALPN: server accepted h21146* Server certificate:1147* subject: CN=test.foo1148* start date: Sep 20 10:18:25 2026 GMT1149* expire date: Oct 20 10:18:25 2028 GMT1150* issuer: CN=minica root ca 0d36071151* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841152* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841153* subjectAltName: "test.foo" matches cert's "test.foo"1154* OpenSSL verify result: 131155* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1156* closing connection #01157curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1158More details here: https://curl.se/docs/sslcerts.html11591160curl failed to verify the legitimacy of the server and therefore could not1161establish a secure connection to it. To learn more about this situation and1162how to fix it, please visit the webpage mentioned above.1163* Host test.foo:443 was resolved.1164* IPv6: 2001:db8:1::31165* IPv4: 192.168.1.31166* Trying [2001:db8:1::3]:443...1167* ALPN: curl offers h2,http/1.11168} [5 bytes data]1169* TLSv1.3 (OUT), TLS handshake, Client hello (1):1170} [1552 bytes data]1171* SSL Trust Anchors:1172* OpenSSL default paths (fallback)1173{ [5 bytes data]1174* TLSv1.3 (IN), TLS handshake, Server hello (2):1175{ [1210 bytes data]1176* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1177{ [1 bytes data]1178* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1179{ [19 bytes data]1180* TLSv1.3 (IN), TLS handshake, Certificate (11):1181{ [1009 bytes data]1182* TLSv1.3 (IN), TLS handshake, CERT verify (15):1183{ [110 bytes data]1184* TLSv1.3 (IN), TLS handshake, Finished (20):1185{ [52 bytes data]1186* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1187} [1 bytes data]1188* TLSv1.3 (OUT), TLS handshake, Finished (20):1189} [52 bytes data]1190* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1191* ALPN: server accepted h21192* Server certificate:1193* subject: CN=test.foo1194* start date: Sep 20 10:18:25 2026 GMT1195* expire date: Oct 20 10:18:25 2028 GMT1196* issuer: CN=minica root ca 0d36071197* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841198* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841199* subjectAltName: "test.foo" matches cert's "test.foo"1200* OpenSSL verify result: 131201* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1202* closing connection #01203curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1204More details here: https://curl.se/docs/sslcerts.html12051206curl failed to verify the legitimacy of the server and therefore could not1207establish a secure connection to it. To learn more about this situation and1208how to fix it, please visit the webpage mentioned above.1209* Trying [2001:db8:1::3]:443...1210* Host test.foo:443 was resolved.1211* IPv6: 2001:db8:1::31212* IPv4: 192.168.1.31213* ALPN: curl offers h2,http/1.11214} [5 bytes data]1215* TLSv1.3 (OUT), TLS handshake, Client hello (1):1216} [1552 bytes data]1217* SSL Trust Anchors:1218* OpenSSL default paths (fallback)1219{ [5 bytes data]1220* TLSv1.3 (IN), TLS handshake, Server hello (2):1221{ [1210 bytes data]1222* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1223{ [1 bytes data]1224* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1225{ [19 bytes data]1226* TLSv1.3 (IN), TLS handshake, Certificate (11):1227{ [1009 bytes data]1228* TLSv1.3 (IN), TLS handshake, CERT verify (15):1229{ [112 bytes data]1230* TLSv1.3 (IN), TLS handshake, Finished (20):1231{ [52 bytes data]1232* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1233} [1 bytes data]1234* TLSv1.3 (OUT), TLS handshake, Finished (20):1235} [52 bytes data]1236* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1237* ALPN: server accepted h21238* Server certificate:1239* subject: CN=test.foo1240* start date: Sep 20 10:18:25 2026 GMT1241* expire date: Oct 20 10:18:25 2028 GMT1242* issuer: CN=minica root ca 0d36071243* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841244* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841245* subjectAltName: "test.foo" matches cert's "test.foo"1246* OpenSSL verify result: 131247* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1248* closing connection #01249curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1250More details here: https://curl.se/docs/sslcerts.html12511252curl failed to verify the legitimacy of the server and therefore could not1253establish a secure connection to it. To learn more about this situation and1254how to fix it, please visit the webpage mentioned above.1255* Host test.foo:443 was resolved.1256* IPv6: 2001:db8:1::31257* IPv4: 192.168.1.31258* Trying [2001:db8:1::3]:443...1259* ALPN: curl offers h2,http/1.11260} [5 bytes data]1261* TLSv1.3 (OUT), TLS handshake, Client hello (1):1262} [1552 bytes data]1263* SSL Trust Anchors:1264* OpenSSL default paths (fallback)1265{ [5 bytes data]1266* TLSv1.3 (IN), TLS handshake, Server hello (2):1267{ [1210 bytes data]1268* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1269{ [1 bytes data]1270* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1271{ [19 bytes data]1272* TLSv1.3 (IN), TLS handshake, Certificate (11):1273{ [1009 bytes data]1274* TLSv1.3 (IN), TLS handshake, CERT verify (15):1275{ [112 bytes data]1276* TLSv1.3 (IN), TLS handshake, Finished (20):1277{ [52 bytes data]1278* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1279} [1 bytes data]1280* TLSv1.3 (OUT), TLS handshake, Finished (20):1281} [52 bytes data]1282* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1283* ALPN: server accepted h21284* Server certificate:1285* subject: CN=test.foo1286* start date: Sep 20 10:18:25 2026 GMT1287* expire date: Oct 20 10:18:25 2028 GMT1288* issuer: CN=minica root ca 0d36071289* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841290* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841291* subjectAltName: "test.foo" matches cert's "test.foo"1292* OpenSSL verify result: 131293* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1294* closing connection #01295curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1296More details here: https://curl.se/docs/sslcerts.html12971298curl failed to verify the legitimacy of the server and therefore could not1299establish a secure connection to it. To learn more about this situation and1300how to fix it, please visit the webpage mentioned above.1301* Host test.foo:443 was resolved.1302* IPv6: 2001:db8:1::31303* IPv4: 192.168.1.31304* Trying [2001:db8:1::3]:443...1305* ALPN: curl offers h2,http/1.11306} [5 bytes data]1307* TLSv1.3 (OUT), TLS handshake, Client hello (1):1308} [1552 bytes data]1309* SSL Trust Anchors:1310* OpenSSL default paths (fallback)1311{ [5 bytes data]1312* TLSv1.3 (IN), TLS handshake, Server hello (2):1313{ [1210 bytes data]1314* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1315{ [1 bytes data]1316* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1317{ [19 bytes data]1318* TLSv1.3 (IN), TLS handshake, Certificate (11):1319{ [1009 bytes data]1320* TLSv1.3 (IN), TLS handshake, CERT verify (15):1321{ [112 bytes data]1322* TLSv1.3 (IN), TLS handshake, Finished (20):1323{ [52 bytes data]1324* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1325} [1 bytes data]1326* TLSv1.3 (OUT), TLS handshake, Finished (20):1327} [52 bytes data]1328* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1329* ALPN: server accepted h21330* Server certificate:1331* subject: CN=test.foo1332* start date: Sep 20 10:18:25 2026 GMT1333* expire date: Oct 20 10:18:25 2028 GMT1334* issuer: CN=minica root ca 0d36071335* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841336* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841337* subjectAltName: "test.foo" matches cert's "test.foo"1338* OpenSSL verify result: 131339* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1340* closing connection #01341curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1342More details here: https://curl.se/docs/sslcerts.html13431344curl failed to verify the legitimacy of the server and therefore could not1345establish a secure connection to it. To learn more about this situation and1346how to fix it, please visit the webpage mentioned above.1347* Host test.foo:443 was resolved.1348* IPv6: 2001:db8:1::31349* IPv4: 192.168.1.31350* Trying [2001:db8:1::3]:443...1351* ALPN: curl offers h2,http/1.11352} [5 bytes data]1353* TLSv1.3 (OUT), TLS handshake, Client hello (1):1354} [1552 bytes data]1355* SSL Trust Anchors:1356* OpenSSL default paths (fallback)1357{ [5 bytes data]1358* TLSv1.3 (IN), TLS handshake, Server hello (2):1359{ [1210 bytes data]1360* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1361{ [1 bytes data]1362* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1363{ [19 bytes data]1364* TLSv1.3 (IN), TLS handshake, Certificate (11):1365{ [1009 bytes data]1366* TLSv1.3 (IN), TLS handshake, CERT verify (15):1367{ [111 bytes data]1368* TLSv1.3 (IN), TLS handshake, Finished (20):1369{ [52 bytes data]1370* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1371} [1 bytes data]1372* TLSv1.3 (OUT), TLS handshake, Finished (20):1373} [52 bytes data]1374* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1375* ALPN: server accepted h21376* Server certificate:1377* subject: CN=test.foo1378* start date: Sep 20 10:18:25 2026 GMT1379* expire date: Oct 20 10:18:25 2028 GMT1380* issuer: CN=minica root ca 0d36071381* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841382* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841383* subjectAltName: "test.foo" matches cert's "test.foo"1384* OpenSSL verify result: 131385* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1386* closing connection #01387curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1388More details here: https://curl.se/docs/sslcerts.html13891390curl failed to verify the legitimacy of the server and therefore could not1391establish a secure connection to it. To learn more about this situation and1392how to fix it, please visit the webpage mentioned above.1393* Trying [2001:db8:1::3]:443...1394* Host test.foo:443 was resolved.1395* IPv6: 2001:db8:1::31396* IPv4: 192.168.1.31397* ALPN: curl offers h2,http/1.11398} [5 bytes data]1399* TLSv1.3 (OUT), TLS handshake, Client hello (1):1400} [1552 bytes data]1401* SSL Trust Anchors:1402* OpenSSL default paths (fallback)1403{ [5 bytes data]1404* TLSv1.3 (IN), TLS handshake, Server hello (2):1405{ [1210 bytes data]1406* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1407{ [1 bytes data]1408* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1409{ [19 bytes data]1410* TLSv1.3 (IN), TLS handshake, Certificate (11):1411{ [1009 bytes data]1412* TLSv1.3 (IN), TLS handshake, CERT verify (15):1413{ [110 bytes data]1414* TLSv1.3 (IN), TLS handshake, Finished (20):1415{ [52 bytes data]1416* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1417} [1 bytes data]1418* TLSv1.3 (OUT), TLS handshake, Finished (20):1419} [52 bytes data]1420* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1421* ALPN: server accepted h21422* Server certificate:1423* subject: CN=test.foo1424* start date: Sep 20 10:18:25 2026 GMT1425* expire date: Oct 20 10:18:25 2028 GMT1426* issuer: CN=minica root ca 0d36071427* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841428* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841429* subjectAltName: "test.foo" matches cert's "test.foo"1430* OpenSSL verify result: 131431* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1432* closing connection #01433curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1434More details here: https://curl.se/docs/sslcerts.html14351436curl failed to verify the legitimacy of the server and therefore could not1437establish a secure connection to it. To learn more about this situation and1438how to fix it, please visit the webpage mentioned above.1439* Trying [2001:db8:1::3]:443...1440* Host test.foo:443 was resolved.1441* IPv6: 2001:db8:1::31442* IPv4: 192.168.1.31443* ALPN: curl offers h2,http/1.11444} [5 bytes data]1445* TLSv1.3 (OUT), TLS handshake, Client hello (1):1446} [1552 bytes data]1447* SSL Trust Anchors:1448* OpenSSL default paths (fallback)1449{ [5 bytes data]1450* TLSv1.3 (IN), TLS handshake, Server hello (2):1451{ [1210 bytes data]1452* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1453{ [1 bytes data]1454* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1455{ [19 bytes data]1456* TLSv1.3 (IN), TLS handshake, Certificate (11):1457{ [1009 bytes data]1458* TLSv1.3 (IN), TLS handshake, CERT verify (15):1459{ [112 bytes data]1460* TLSv1.3 (IN), TLS handshake, Finished (20):1461{ [52 bytes data]1462* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1463} [1 bytes data]1464* TLSv1.3 (OUT), TLS handshake, Finished (20):1465} [52 bytes data]1466* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1467* ALPN: server accepted h21468* Server certificate:1469* subject: CN=test.foo1470* start date: Sep 20 10:18:25 2026 GMT1471* expire date: Oct 20 10:18:25 2028 GMT1472* issuer: CN=minica root ca 0d36071473* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841474* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841475* subjectAltName: "test.foo" matches cert's "test.foo"1476* OpenSSL verify result: 131477* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1478* closing connection #01479curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1480More details here: https://curl.se/docs/sslcerts.html14811482curl failed to verify the legitimacy of the server and therefore could not1483establish a secure connection to it. To learn more about this situation and1484how to fix it, please visit the webpage mentioned above.1485* Host test.foo:443 was resolved.1486* IPv6: 2001:db8:1::31487* IPv4: 192.168.1.31488* Trying [2001:db8:1::3]:443...1489* ALPN: curl offers h2,http/1.11490} [5 bytes data]1491* TLSv1.3 (OUT), TLS handshake, Client hello (1):1492} [1552 bytes data]1493* SSL Trust Anchors:1494* OpenSSL default paths (fallback)1495{ [5 bytes data]1496* TLSv1.3 (IN), TLS handshake, Server hello (2):1497{ [1210 bytes data]1498* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1499{ [1 bytes data]1500* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1501{ [19 bytes data]1502* TLSv1.3 (IN), TLS handshake, Certificate (11):1503{ [1009 bytes data]1504* TLSv1.3 (IN), TLS handshake, CERT verify (15):1505{ [111 bytes data]1506* TLSv1.3 (IN), TLS handshake, Finished (20):1507{ [52 bytes data]1508* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1509} [1 bytes data]1510* TLSv1.3 (OUT), TLS handshake, Finished (20):1511} [52 bytes data]1512* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1513* ALPN: server accepted h21514* Server certificate:1515* subject: CN=test.foo1516* start date: Sep 20 10:18:25 2026 GMT1517* expire date: Oct 20 10:18:25 2028 GMT1518* issuer: CN=minica root ca 0d36071519* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841520* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841521* subjectAltName: "test.foo" matches cert's "test.foo"1522* OpenSSL verify result: 131523* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1524* closing connection #01525curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1526More details here: https://curl.se/docs/sslcerts.html15271528curl failed to verify the legitimacy of the server and therefore could not1529establish a secure connection to it. To learn more about this situation and1530how to fix it, please visit the webpage mentioned above.1531* Trying [2001:db8:1::3]:443...1532* Host test.foo:443 was resolved.1533* IPv6: 2001:db8:1::31534* IPv4: 192.168.1.31535* ALPN: curl offers h2,http/1.11536} [5 bytes data]1537* TLSv1.3 (OUT), TLS handshake, Client hello (1):1538} [1552 bytes data]1539* SSL Trust Anchors:1540* OpenSSL default paths (fallback)1541{ [5 bytes data]1542* TLSv1.3 (IN), TLS handshake, Server hello (2):1543{ [1210 bytes data]1544* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1545{ [1 bytes data]1546* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1547{ [19 bytes data]1548* TLSv1.3 (IN), TLS handshake, Certificate (11):1549{ [1009 bytes data]1550* TLSv1.3 (IN), TLS handshake, CERT verify (15):1551{ [111 bytes data]1552* TLSv1.3 (IN), TLS handshake, Finished (20):1553{ [52 bytes data]1554* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1555} [1 bytes data]1556* TLSv1.3 (OUT), TLS handshake, Finished (20):1557} [52 bytes data]1558* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1559* ALPN: server accepted h21560* Server certificate:1561* subject: CN=test.foo1562* start date: Sep 20 10:18:25 2026 GMT1563* expire date: Oct 20 10:18:25 2028 GMT1564* issuer: CN=minica root ca 0d36071565* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841566* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841567* subjectAltName: "test.foo" matches cert's "test.foo"1568* OpenSSL verify result: 131569* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1570* closing connection #01571curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1572More details here: https://curl.se/docs/sslcerts.html15731574curl failed to verify the legitimacy of the server and therefore could not1575establish a secure connection to it. To learn more about this situation and1576how to fix it, please visit the webpage mentioned above.1577* Host test.foo:443 was resolved.1578* IPv6: 2001:db8:1::31579* IPv4: 192.168.1.31580* Trying [2001:db8:1::3]:443...1581* ALPN: curl offers h2,http/1.11582} [5 bytes data]1583* TLSv1.3 (OUT), TLS handshake, Client hello (1):1584} [1552 bytes data]1585* SSL Trust Anchors:1586* OpenSSL default paths (fallback)1587{ [5 bytes data]1588* TLSv1.3 (IN), TLS handshake, Server hello (2):1589{ [1210 bytes data]1590* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1591{ [1 bytes data]1592* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1593{ [19 bytes data]1594* TLSv1.3 (IN), TLS handshake, Certificate (11):1595{ [1009 bytes data]1596* TLSv1.3 (IN), TLS handshake, CERT verify (15):1597{ [112 bytes data]1598* TLSv1.3 (IN), TLS handshake, Finished (20):1599{ [52 bytes data]1600* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1601} [1 bytes data]1602* TLSv1.3 (OUT), TLS handshake, Finished (20):1603} [52 bytes data]1604* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1605* ALPN: server accepted h21606* Server certificate:1607* subject: CN=test.foo1608* start date: Sep 20 10:18:25 2026 GMT1609* expire date: Oct 20 10:18:25 2028 GMT1610* issuer: CN=minica root ca 0d36071611* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841612* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841613* subjectAltName: "test.foo" matches cert's "test.foo"1614* OpenSSL verify result: 131615* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1616* closing connection #01617curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1618More details here: https://curl.se/docs/sslcerts.html16191620curl failed to verify the legitimacy of the server and therefore could not1621establish a secure connection to it. To learn more about this situation and1622how to fix it, please visit the webpage mentioned above.1623* Trying [2001:db8:1::3]:443...1624* Host test.foo:443 was resolved.1625* IPv6: 2001:db8:1::31626* IPv4: 192.168.1.31627* ALPN: curl offers h2,http/1.11628} [5 bytes data]1629* TLSv1.3 (OUT), TLS handshake, Client hello (1):1630} [1552 bytes data]1631* SSL Trust Anchors:1632* OpenSSL default paths (fallback)1633{ [5 bytes data]1634* TLSv1.3 (IN), TLS handshake, Server hello (2):1635{ [1210 bytes data]1636* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1637{ [1 bytes data]1638* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1639{ [19 bytes data]1640* TLSv1.3 (IN), TLS handshake, Certificate (11):1641{ [1009 bytes data]1642* TLSv1.3 (IN), TLS handshake, CERT verify (15):1643{ [112 bytes data]1644* TLSv1.3 (IN), TLS handshake, Finished (20):1645{ [52 bytes data]1646* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1647} [1 bytes data]1648* TLSv1.3 (OUT), TLS handshake, Finished (20):1649} [52 bytes data]1650* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1651* ALPN: server accepted h21652* Server certificate:1653* subject: CN=test.foo1654* start date: Sep 20 10:18:25 2026 GMT1655* expire date: Oct 20 10:18:25 2028 GMT1656* issuer: CN=minica root ca 0d36071657* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841658* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841659* subjectAltName: "test.foo" matches cert's "test.foo"1660* OpenSSL verify result: 131661* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1662* closing connection #01663curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1664More details here: https://curl.se/docs/sslcerts.html16651666curl failed to verify the legitimacy of the server and therefore could not1667establish a secure connection to it. To learn more about this situation and1668how to fix it, please visit the webpage mentioned above.1669* Host test.foo:443 was resolved.1670* IPv6: 2001:db8:1::31671* IPv4: 192.168.1.31672* Trying [2001:db8:1::3]:443...1673* ALPN: curl offers h2,http/1.11674} [5 bytes data]1675* TLSv1.3 (OUT), TLS handshake, Client hello (1):1676} [1552 bytes data]1677* SSL Trust Anchors:1678* OpenSSL default paths (fallback)1679{ [5 bytes data]1680* TLSv1.3 (IN), TLS handshake, Server hello (2):1681{ [1210 bytes data]1682* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1683{ [1 bytes data]1684* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1685{ [19 bytes data]1686* TLSv1.3 (IN), TLS handshake, Certificate (11):1687{ [1009 bytes data]1688* TLSv1.3 (IN), TLS handshake, CERT verify (15):1689{ [111 bytes data]1690* TLSv1.3 (IN), TLS handshake, Finished (20):1691{ [52 bytes data]1692* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1693} [1 bytes data]1694* TLSv1.3 (OUT), TLS handshake, Finished (20):1695} [52 bytes data]1696* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1697* ALPN: server accepted h21698* Server certificate:1699* subject: CN=test.foo1700* start date: Sep 20 10:18:25 2026 GMT1701* expire date: Oct 20 10:18:25 2028 GMT1702* issuer: CN=minica root ca 0d36071703* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841704* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841705* subjectAltName: "test.foo" matches cert's "test.foo"1706* OpenSSL verify result: 131707* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1708* closing connection #01709curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1710More details here: https://curl.se/docs/sslcerts.html17111712curl failed to verify the legitimacy of the server and therefore could not1713establish a secure connection to it. To learn more about this situation and1714how to fix it, please visit the webpage mentioned above.1715* Host test.foo:443 was resolved.1716* IPv6: 2001:db8:1::31717* IPv4: 192.168.1.31718* Trying [2001:db8:1::3]:443...1719* ALPN: curl offers h2,http/1.11720} [5 bytes data]1721* TLSv1.3 (OUT), TLS handshake, Client hello (1):1722} [1552 bytes data]1723* SSL Trust Anchors:1724* OpenSSL default paths (fallback)1725{ [5 bytes data]1726* TLSv1.3 (IN), TLS handshake, Server hello (2):1727{ [1210 bytes data]1728* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1729{ [1 bytes data]1730* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1731{ [19 bytes data]1732* TLSv1.3 (IN), TLS handshake, Certificate (11):1733{ [1009 bytes data]1734* TLSv1.3 (IN), TLS handshake, CERT verify (15):1735{ [110 bytes data]1736* TLSv1.3 (IN), TLS handshake, Finished (20):1737{ [52 bytes data]1738* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1739} [1 bytes data]1740* TLSv1.3 (OUT), TLS handshake, Finished (20):1741} [52 bytes data]1742* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1743* ALPN: server accepted h21744* Server certificate:1745* subject: CN=test.foo1746* start date: Sep 20 10:18:25 2026 GMT1747* expire date: Oct 20 10:18:25 2028 GMT1748* issuer: CN=minica root ca 0d36071749* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841750* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841751* subjectAltName: "test.foo" matches cert's "test.foo"1752* OpenSSL verify result: 131753* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1754* closing connection #01755curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1756More details here: https://curl.se/docs/sslcerts.html17571758curl failed to verify the legitimacy of the server and therefore could not1759establish a secure connection to it. To learn more about this situation and1760how to fix it, please visit the webpage mentioned above.1761* Host test.foo:443 was resolved.1762* IPv6: 2001:db8:1::31763* IPv4: 192.168.1.31764* Trying [2001:db8:1::3]:443...1765* ALPN: curl offers h2,http/1.11766} [5 bytes data]1767* TLSv1.3 (OUT), TLS handshake, Client hello (1):1768} [1552 bytes data]1769* SSL Trust Anchors:1770* OpenSSL default paths (fallback)1771{ [5 bytes data]1772* TLSv1.3 (IN), TLS handshake, Server hello (2):1773{ [1210 bytes data]1774* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1775{ [1 bytes data]1776* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1777{ [19 bytes data]1778* TLSv1.3 (IN), TLS handshake, Certificate (11):1779{ [1009 bytes data]1780* TLSv1.3 (IN), TLS handshake, CERT verify (15):1781{ [111 bytes data]1782* TLSv1.3 (IN), TLS handshake, Finished (20):1783{ [52 bytes data]1784* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1785} [1 bytes data]1786* TLSv1.3 (OUT), TLS handshake, Finished (20):1787} [52 bytes data]1788* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1789* ALPN: server accepted h21790* Server certificate:1791* subject: CN=test.foo1792* start date: Sep 20 10:18:25 2026 GMT1793* expire date: Oct 20 10:18:25 2028 GMT1794* issuer: CN=minica root ca 0d36071795* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841796* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841797* subjectAltName: "test.foo" matches cert's "test.foo"1798* OpenSSL verify result: 131799* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1800* closing connection #01801curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1802More details here: https://curl.se/docs/sslcerts.html18031804curl failed to verify the legitimacy of the server and therefore could not1805establish a secure connection to it. To learn more about this situation and1806how to fix it, please visit the webpage mentioned above.1807* Host test.foo:443 was resolved.1808* IPv6: 2001:db8:1::31809* IPv4: 192.168.1.31810* Trying [2001:db8:1::3]:443...1811* ALPN: curl offers h2,http/1.11812} [5 bytes data]1813* TLSv1.3 (OUT), TLS handshake, Client hello (1):1814} [1552 bytes data]1815* SSL Trust Anchors:1816* OpenSSL default paths (fallback)1817{ [5 bytes data]1818* TLSv1.3 (IN), TLS handshake, Server hello (2):1819{ [1210 bytes data]1820* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1821{ [1 bytes data]1822* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1823{ [19 bytes data]1824* TLSv1.3 (IN), TLS handshake, Certificate (11):1825{ [1009 bytes data]1826* TLSv1.3 (IN), TLS handshake, CERT verify (15):1827{ [112 bytes data]1828* TLSv1.3 (IN), TLS handshake, Finished (20):1829{ [52 bytes data]1830* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1831} [1 bytes data]1832* TLSv1.3 (OUT), TLS handshake, Finished (20):1833} [52 bytes data]1834* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1835* ALPN: server accepted h21836* Server certificate:1837* subject: CN=test.foo1838* start date: Sep 20 10:18:25 2026 GMT1839* expire date: Oct 20 10:18:25 2028 GMT1840* issuer: CN=minica root ca 0d36071841* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841842* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841843* subjectAltName: "test.foo" matches cert's "test.foo"1844* OpenSSL verify result: 131845* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1846* closing connection #01847curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1848More details here: https://curl.se/docs/sslcerts.html18491850curl failed to verify the legitimacy of the server and therefore could not1851establish a secure connection to it. To learn more about this situation and1852how to fix it, please visit the webpage mentioned above.1853* Host test.foo:443 was resolved.1854* IPv6: 2001:db8:1::31855* IPv4: 192.168.1.31856* Trying [2001:db8:1::3]:443...1857* ALPN: curl offers h2,http/1.11858} [5 bytes data]1859* TLSv1.3 (OUT), TLS handshake, Client hello (1):1860} [1552 bytes data]1861* SSL Trust Anchors:1862* OpenSSL default paths (fallback)1863{ [5 bytes data]1864* TLSv1.3 (IN), TLS handshake, Server hello (2):1865{ [1210 bytes data]1866* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1867{ [1 bytes data]1868* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1869{ [19 bytes data]1870* TLSv1.3 (IN), TLS handshake, Certificate (11):1871{ [1009 bytes data]1872* TLSv1.3 (IN), TLS handshake, CERT verify (15):1873{ [110 bytes data]1874* TLSv1.3 (IN), TLS handshake, Finished (20):1875{ [52 bytes data]1876* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1877} [1 bytes data]1878* TLSv1.3 (OUT), TLS handshake, Finished (20):1879} [52 bytes data]1880* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1881* ALPN: server accepted h21882* Server certificate:1883* subject: CN=test.foo1884* start date: Sep 20 10:18:25 2026 GMT1885* expire date: Oct 20 10:18:25 2028 GMT1886* issuer: CN=minica root ca 0d36071887* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841888* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841889* subjectAltName: "test.foo" matches cert's "test.foo"1890* OpenSSL verify result: 131891* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1892* closing connection #01893curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1894More details here: https://curl.se/docs/sslcerts.html18951896curl failed to verify the legitimacy of the server and therefore could not1897establish a secure connection to it. To learn more about this situation and1898how to fix it, please visit the webpage mentioned above.1899* Host test.foo:443 was resolved.1900* IPv6: 2001:db8:1::31901* IPv4: 192.168.1.31902* Trying [2001:db8:1::3]:443...1903* ALPN: curl offers h2,http/1.11904} [5 bytes data]1905* TLSv1.3 (OUT), TLS handshake, Client hello (1):1906} [1552 bytes data]1907* SSL Trust Anchors:1908* OpenSSL default paths (fallback)1909{ [5 bytes data]1910* TLSv1.3 (IN), TLS handshake, Server hello (2):1911{ [1210 bytes data]1912* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1913{ [1 bytes data]1914* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1915{ [19 bytes data]1916* TLSv1.3 (IN), TLS handshake, Certificate (11):1917{ [1009 bytes data]1918* TLSv1.3 (IN), TLS handshake, CERT verify (15):1919{ [111 bytes data]1920* TLSv1.3 (IN), TLS handshake, Finished (20):1921{ [52 bytes data]1922* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1923} [1 bytes data]1924* TLSv1.3 (OUT), TLS handshake, Finished (20):1925} [52 bytes data]1926* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1927* ALPN: server accepted h21928* Server certificate:1929* subject: CN=test.foo1930* start date: Sep 20 10:18:25 2026 GMT1931* expire date: Oct 20 10:18:25 2028 GMT1932* issuer: CN=minica root ca 0d36071933* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841934* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841935* subjectAltName: "test.foo" matches cert's "test.foo"1936* OpenSSL verify result: 131937* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1938* closing connection #01939curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1940More details here: https://curl.se/docs/sslcerts.html19411942curl failed to verify the legitimacy of the server and therefore could not1943establish a secure connection to it. To learn more about this situation and1944how to fix it, please visit the webpage mentioned above.1945* Trying [2001:db8:1::3]:443...1946* Host test.foo:443 was resolved.1947* IPv6: 2001:db8:1::31948* IPv4: 192.168.1.31949* ALPN: curl offers h2,http/1.11950} [5 bytes data]1951* TLSv1.3 (OUT), TLS handshake, Client hello (1):1952} [1552 bytes data]1953* SSL Trust Anchors:1954* OpenSSL default paths (fallback)1955{ [5 bytes data]1956* TLSv1.3 (IN), TLS handshake, Server hello (2):1957{ [1210 bytes data]1958* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1959{ [1 bytes data]1960* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1961{ [19 bytes data]1962* TLSv1.3 (IN), TLS handshake, Certificate (11):1963{ [1009 bytes data]1964* TLSv1.3 (IN), TLS handshake, CERT verify (15):1965{ [110 bytes data]1966* TLSv1.3 (IN), TLS handshake, Finished (20):1967{ [52 bytes data]1968* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1969} [1 bytes data]1970* TLSv1.3 (OUT), TLS handshake, Finished (20):1971} [52 bytes data]1972* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1973* ALPN: server accepted h21974* Server certificate:1975* subject: CN=test.foo1976* start date: Sep 20 10:18:25 2026 GMT1977* expire date: Oct 20 10:18:25 2028 GMT1978* issuer: CN=minica root ca 0d36071979* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841980* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841981* subjectAltName: "test.foo" matches cert's "test.foo"1982* OpenSSL verify result: 131983* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1984* closing connection #01985curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1986More details here: https://curl.se/docs/sslcerts.html19871988curl failed to verify the legitimacy of the server and therefore could not1989establish a secure connection to it. To learn more about this situation and1990how to fix it, please visit the webpage mentioned above.1991* Host test.foo:443 was resolved.1992* IPv6: 2001:db8:1::31993* IPv4: 192.168.1.31994* Trying [2001:db8:1::3]:443...1995* ALPN: curl offers h2,http/1.11996} [5 bytes data]1997* TLSv1.3 (OUT), TLS handshake, Client hello (1):1998} [1552 bytes data]1999* SSL Trust Anchors:2000* OpenSSL default paths (fallback)
loading 35,146 hidden lines…
37147{ [1210 bytes data]37148* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37149{ [1 bytes data]37150* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37151{ [19 bytes data]37152* TLSv1.3 (IN), TLS handshake, Certificate (11):37153{ [1009 bytes data]37154* TLSv1.3 (IN), TLS handshake, CERT verify (15):37155{ [112 bytes data]37156* TLSv1.3 (IN), TLS handshake, Finished (20):37157{ [52 bytes data]37158* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37159} [1 bytes data]37160* TLSv1.3 (OUT), TLS handshake, Finished (20):37161} [52 bytes data]37162* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37163* ALPN: server accepted h237164* Server certificate:37165* subject: CN=test.foo37166* start date: Sep 20 10:18:25 2026 GMT37167* expire date: Oct 20 10:18:25 2028 GMT37168* issuer: CN=minica root ca 0d360737169* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437170* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437171* subjectAltName: "test.foo" matches cert's "test.foo"37172* OpenSSL verify result: 1337173* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37174* closing connection #037175curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37176More details here: https://curl.se/docs/sslcerts.html3717737178curl failed to verify the legitimacy of the server and therefore could not37179establish a secure connection to it. To learn more about this situation and37180how to fix it, please visit the webpage mentioned above.37181* Host test.foo:443 was resolved.37182* IPv6: 2001:db8:1::337183* IPv4: 192.168.1.337184* Trying [2001:db8:1::3]:443...37185* ALPN: curl offers h2,http/1.137186} [5 bytes data]37187* TLSv1.3 (OUT), TLS handshake, Client hello (1):37188} [1552 bytes data]37189* SSL Trust Anchors:37190* OpenSSL default paths (fallback)37191{ [5 bytes data]37192* TLSv1.3 (IN), TLS handshake, Server hello (2):37193{ [1210 bytes data]37194* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37195{ [1 bytes data]37196* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37197{ [19 bytes data]37198* TLSv1.3 (IN), TLS handshake, Certificate (11):37199{ [1009 bytes data]37200* TLSv1.3 (IN), TLS handshake, CERT verify (15):37201{ [111 bytes data]37202* TLSv1.3 (IN), TLS handshake, Finished (20):37203{ [52 bytes data]37204* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37205} [1 bytes data]37206* TLSv1.3 (OUT), TLS handshake, Finished (20):37207} [52 bytes data]37208* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37209* ALPN: server accepted h237210* Server certificate:37211* subject: CN=test.foo37212* start date: Sep 20 10:18:25 2026 GMT37213* expire date: Oct 20 10:18:25 2028 GMT37214* issuer: CN=minica root ca 0d360737215* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437216* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437217* subjectAltName: "test.foo" matches cert's "test.foo"37218* OpenSSL verify result: 1337219* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37220* closing connection #037221curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37222More details here: https://curl.se/docs/sslcerts.html3722337224curl failed to verify the legitimacy of the server and therefore could not37225establish a secure connection to it. To learn more about this situation and37226how to fix it, please visit the webpage mentioned above.37227* Host test.foo:443 was resolved.37228* IPv6: 2001:db8:1::337229* IPv4: 192.168.1.337230* Trying [2001:db8:1::3]:443...37231* ALPN: curl offers h2,http/1.137232} [5 bytes data]37233* TLSv1.3 (OUT), TLS handshake, Client hello (1):37234} [1552 bytes data]37235* SSL Trust Anchors:37236* OpenSSL default paths (fallback)37237{ [5 bytes data]37238* TLSv1.3 (IN), TLS handshake, Server hello (2):37239{ [1210 bytes data]37240* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37241{ [1 bytes data]37242* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37243{ [19 bytes data]37244* TLSv1.3 (IN), TLS handshake, Certificate (11):37245{ [1009 bytes data]37246* TLSv1.3 (IN), TLS handshake, CERT verify (15):37247{ [110 bytes data]37248* TLSv1.3 (IN), TLS handshake, Finished (20):37249{ [52 bytes data]37250* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37251} [1 bytes data]37252* TLSv1.3 (OUT), TLS handshake, Finished (20):37253} [52 bytes data]37254* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37255* ALPN: server accepted h237256* Server certificate:37257* subject: CN=test.foo37258* start date: Sep 20 10:18:25 2026 GMT37259* expire date: Oct 20 10:18:25 2028 GMT37260* issuer: CN=minica root ca 0d360737261* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437262* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437263* subjectAltName: "test.foo" matches cert's "test.foo"37264* OpenSSL verify result: 1337265* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37266* closing connection #037267curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37268More details here: https://curl.se/docs/sslcerts.html3726937270curl failed to verify the legitimacy of the server and therefore could not37271establish a secure connection to it. To learn more about this situation and37272how to fix it, please visit the webpage mentioned above.37273* Host test.foo:443 was resolved.37274* IPv6: 2001:db8:1::337275* IPv4: 192.168.1.337276* Trying [2001:db8:1::3]:443...37277* ALPN: curl offers h2,http/1.137278} [5 bytes data]37279* TLSv1.3 (OUT), TLS handshake, Client hello (1):37280} [1552 bytes data]37281* SSL Trust Anchors:37282* OpenSSL default paths (fallback)37283{ [5 bytes data]37284* TLSv1.3 (IN), TLS handshake, Server hello (2):37285{ [1210 bytes data]37286* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37287{ [1 bytes data]37288* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37289{ [19 bytes data]37290* TLSv1.3 (IN), TLS handshake, Certificate (11):37291{ [1009 bytes data]37292* TLSv1.3 (IN), TLS handshake, CERT verify (15):37293{ [111 bytes data]37294* TLSv1.3 (IN), TLS handshake, Finished (20):37295{ [52 bytes data]37296* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37297} [1 bytes data]37298* TLSv1.3 (OUT), TLS handshake, Finished (20):37299} [52 bytes data]37300* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37301* ALPN: server accepted h237302* Server certificate:37303* subject: CN=test.foo37304* start date: Sep 20 10:18:25 2026 GMT37305* expire date: Oct 20 10:18:25 2028 GMT37306* issuer: CN=minica root ca 0d360737307* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437308* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437309* subjectAltName: "test.foo" matches cert's "test.foo"37310* OpenSSL verify result: 1337311* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37312* closing connection #037313curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37314More details here: https://curl.se/docs/sslcerts.html3731537316curl failed to verify the legitimacy of the server and therefore could not37317establish a secure connection to it. To learn more about this situation and37318how to fix it, please visit the webpage mentioned above.37319* Trying [2001:db8:1::3]:443...37320* Host test.foo:443 was resolved.37321* IPv6: 2001:db8:1::337322* IPv4: 192.168.1.337323* ALPN: curl offers h2,http/1.137324} [5 bytes data]37325* TLSv1.3 (OUT), TLS handshake, Client hello (1):37326} [1552 bytes data]37327* SSL Trust Anchors:37328* OpenSSL default paths (fallback)37329{ [5 bytes data]37330* TLSv1.3 (IN), TLS handshake, Server hello (2):37331{ [1210 bytes data]37332* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37333{ [1 bytes data]37334* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37335{ [19 bytes data]37336* TLSv1.3 (IN), TLS handshake, Certificate (11):37337{ [1009 bytes data]37338* TLSv1.3 (IN), TLS handshake, CERT verify (15):37339{ [111 bytes data]37340* TLSv1.3 (IN), TLS handshake, Finished (20):37341{ [52 bytes data]37342* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37343} [1 bytes data]37344* TLSv1.3 (OUT), TLS handshake, Finished (20):37345} [52 bytes data]37346* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37347* ALPN: server accepted h237348* Server certificate:37349* subject: CN=test.foo37350* start date: Sep 20 10:18:25 2026 GMT37351* expire date: Oct 20 10:18:25 2028 GMT37352* issuer: CN=minica root ca 0d360737353* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437354* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437355* subjectAltName: "test.foo" matches cert's "test.foo"37356* OpenSSL verify result: 1337357* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37358* closing connection #037359curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37360More details here: https://curl.se/docs/sslcerts.html3736137362curl failed to verify the legitimacy of the server and therefore could not37363establish a secure connection to it. To learn more about this situation and37364how to fix it, please visit the webpage mentioned above.37365* Host test.foo:443 was resolved.37366* IPv6: 2001:db8:1::337367* IPv4: 192.168.1.337368* Trying [2001:db8:1::3]:443...37369* ALPN: curl offers h2,http/1.137370} [5 bytes data]37371* TLSv1.3 (OUT), TLS handshake, Client hello (1):37372} [1552 bytes data]37373* SSL Trust Anchors:37374* OpenSSL default paths (fallback)37375{ [5 bytes data]37376* TLSv1.3 (IN), TLS handshake, Server hello (2):37377{ [1210 bytes data]37378* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37379{ [1 bytes data]37380* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37381{ [19 bytes data]37382* TLSv1.3 (IN), TLS handshake, Certificate (11):37383{ [1009 bytes data]37384* TLSv1.3 (IN), TLS handshake, CERT verify (15):37385{ [111 bytes data]37386* TLSv1.3 (IN), TLS handshake, Finished (20):37387{ [52 bytes data]37388* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37389} [1 bytes data]37390* TLSv1.3 (OUT), TLS handshake, Finished (20):37391} [52 bytes data]37392* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37393* ALPN: server accepted h237394* Server certificate:37395* subject: CN=test.foo37396* start date: Sep 20 10:18:25 2026 GMT37397* expire date: Oct 20 10:18:25 2028 GMT37398* issuer: CN=minica root ca 0d360737399* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437400* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437401* subjectAltName: "test.foo" matches cert's "test.foo"37402* OpenSSL verify result: 1337403* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37404* closing connection #037405curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37406More details here: https://curl.se/docs/sslcerts.html3740737408curl failed to verify the legitimacy of the server and therefore could not37409establish a secure connection to it. To learn more about this situation and37410how to fix it, please visit the webpage mentioned above.37411* Host test.foo:443 was resolved.37412* IPv6: 2001:db8:1::337413* IPv4: 192.168.1.337414* Trying [2001:db8:1::3]:443...37415* ALPN: curl offers h2,http/1.137416} [5 bytes data]37417* TLSv1.3 (OUT), TLS handshake, Client hello (1):37418} [1552 bytes data]37419* SSL Trust Anchors:37420* OpenSSL default paths (fallback)37421{ [5 bytes data]37422* TLSv1.3 (IN), TLS handshake, Server hello (2):37423{ [1210 bytes data]37424* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37425{ [1 bytes data]37426* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37427{ [19 bytes data]37428* TLSv1.3 (IN), TLS handshake, Certificate (11):37429{ [1009 bytes data]37430* TLSv1.3 (IN), TLS handshake, CERT verify (15):37431{ [112 bytes data]37432* TLSv1.3 (IN), TLS handshake, Finished (20):37433{ [52 bytes data]37434* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37435} [1 bytes data]37436* TLSv1.3 (OUT), TLS handshake, Finished (20):37437} [52 bytes data]37438* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37439* ALPN: server accepted h237440* Server certificate:37441* subject: CN=test.foo37442* start date: Sep 20 10:18:25 2026 GMT37443* expire date: Oct 20 10:18:25 2028 GMT37444* issuer: CN=minica root ca 0d360737445* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437446* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437447* subjectAltName: "test.foo" matches cert's "test.foo"37448* OpenSSL verify result: 1337449* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37450* closing connection #037451curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37452More details here: https://curl.se/docs/sslcerts.html3745337454curl failed to verify the legitimacy of the server and therefore could not37455establish a secure connection to it. To learn more about this situation and37456how to fix it, please visit the webpage mentioned above.37457* Host test.foo:443 was resolved.37458* IPv6: 2001:db8:1::337459* IPv4: 192.168.1.337460* Trying [2001:db8:1::3]:443...37461* ALPN: curl offers h2,http/1.137462} [5 bytes data]37463* TLSv1.3 (OUT), TLS handshake, Client hello (1):37464} [1552 bytes data]37465* SSL Trust Anchors:37466* OpenSSL default paths (fallback)37467{ [5 bytes data]37468* TLSv1.3 (IN), TLS handshake, Server hello (2):37469{ [1210 bytes data]37470* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37471{ [1 bytes data]37472* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37473{ [19 bytes data]37474* TLSv1.3 (IN), TLS handshake, Certificate (11):37475{ [1009 bytes data]37476* TLSv1.3 (IN), TLS handshake, CERT verify (15):37477{ [110 bytes data]37478* TLSv1.3 (IN), TLS handshake, Finished (20):37479{ [52 bytes data]37480* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37481} [1 bytes data]37482* TLSv1.3 (OUT), TLS handshake, Finished (20):37483} [52 bytes data]37484* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37485* ALPN: server accepted h237486* Server certificate:37487* subject: CN=test.foo37488* start date: Sep 20 10:18:25 2026 GMT37489* expire date: Oct 20 10:18:25 2028 GMT37490* issuer: CN=minica root ca 0d360737491* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437492* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437493* subjectAltName: "test.foo" matches cert's "test.foo"37494* OpenSSL verify result: 1337495* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37496* closing connection #037497curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37498More details here: https://curl.se/docs/sslcerts.html3749937500curl failed to verify the legitimacy of the server and therefore could not37501establish a secure connection to it. To learn more about this situation and37502how to fix it, please visit the webpage mentioned above.37503* Host test.foo:443 was resolved.37504* IPv6: 2001:db8:1::337505* IPv4: 192.168.1.337506* Trying [2001:db8:1::3]:443...37507* ALPN: curl offers h2,http/1.137508} [5 bytes data]37509* TLSv1.3 (OUT), TLS handshake, Client hello (1):37510} [1552 bytes data]37511* SSL Trust Anchors:37512* OpenSSL default paths (fallback)37513{ [5 bytes data]37514* TLSv1.3 (IN), TLS handshake, Server hello (2):37515{ [1210 bytes data]37516* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37517{ [1 bytes data]37518* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37519{ [19 bytes data]37520* TLSv1.3 (IN), TLS handshake, Certificate (11):37521{ [1009 bytes data]37522* TLSv1.3 (IN), TLS handshake, CERT verify (15):37523{ [111 bytes data]37524* TLSv1.3 (IN), TLS handshake, Finished (20):37525{ [52 bytes data]37526* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37527} [1 bytes data]37528* TLSv1.3 (OUT), TLS handshake, Finished (20):37529} [52 bytes data]37530* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37531* ALPN: server accepted h237532* Server certificate:37533* subject: CN=test.foo37534* start date: Sep 20 10:18:25 2026 GMT37535* expire date: Oct 20 10:18:25 2028 GMT37536* issuer: CN=minica root ca 0d360737537* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437538* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437539* subjectAltName: "test.foo" matches cert's "test.foo"37540* OpenSSL verify result: 1337541* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37542* closing connection #037543curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37544More details here: https://curl.se/docs/sslcerts.html3754537546curl failed to verify the legitimacy of the server and therefore could not37547establish a secure connection to it. To learn more about this situation and37548how to fix it, please visit the webpage mentioned above.37549* Host test.foo:443 was resolved.37550* IPv6: 2001:db8:1::337551* IPv4: 192.168.1.337552* Trying [2001:db8:1::3]:443...37553* ALPN: curl offers h2,http/1.137554} [5 bytes data]37555* TLSv1.3 (OUT), TLS handshake, Client hello (1):37556} [1552 bytes data]37557* SSL Trust Anchors:37558* OpenSSL default paths (fallback)37559{ [5 bytes data]37560* TLSv1.3 (IN), TLS handshake, Server hello (2):37561{ [1210 bytes data]37562* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37563{ [1 bytes data]37564* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37565{ [19 bytes data]37566* TLSv1.3 (IN), TLS handshake, Certificate (11):37567{ [1009 bytes data]37568* TLSv1.3 (IN), TLS handshake, CERT verify (15):37569{ [111 bytes data]37570* TLSv1.3 (IN), TLS handshake, Finished (20):37571{ [52 bytes data]37572* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37573} [1 bytes data]37574* TLSv1.3 (OUT), TLS handshake, Finished (20):37575} [52 bytes data]37576* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37577* ALPN: server accepted h237578* Server certificate:37579* subject: CN=test.foo37580* start date: Sep 20 10:18:25 2026 GMT37581* expire date: Oct 20 10:18:25 2028 GMT37582* issuer: CN=minica root ca 0d360737583* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437584* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437585* subjectAltName: "test.foo" matches cert's "test.foo"37586* OpenSSL verify result: 1337587* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37588* closing connection #037589curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37590More details here: https://curl.se/docs/sslcerts.html3759137592curl failed to verify the legitimacy of the server and therefore could not37593establish a secure connection to it. To learn more about this situation and37594how to fix it, please visit the webpage mentioned above.37595* Host test.foo:443 was resolved.37596* IPv6: 2001:db8:1::337597* IPv4: 192.168.1.337598* Trying [2001:db8:1::3]:443...37599* ALPN: curl offers h2,http/1.137600} [5 bytes data]37601* TLSv1.3 (OUT), TLS handshake, Client hello (1):37602} [1552 bytes data]37603* SSL Trust Anchors:37604* OpenSSL default paths (fallback)37605{ [5 bytes data]37606* TLSv1.3 (IN), TLS handshake, Server hello (2):37607{ [1210 bytes data]37608* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37609{ [1 bytes data]37610* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37611{ [19 bytes data]37612* TLSv1.3 (IN), TLS handshake, Certificate (11):37613{ [1009 bytes data]37614* TLSv1.3 (IN), TLS handshake, CERT verify (15):37615{ [111 bytes data]37616* TLSv1.3 (IN), TLS handshake, Finished (20):37617{ [52 bytes data]37618* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37619} [1 bytes data]37620* TLSv1.3 (OUT), TLS handshake, Finished (20):37621} [52 bytes data]37622* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37623* ALPN: server accepted h237624* Server certificate:37625* subject: CN=test.foo37626* start date: Sep 20 10:18:25 2026 GMT37627* expire date: Oct 20 10:18:25 2028 GMT37628* issuer: CN=minica root ca 0d360737629* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437630* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437631* subjectAltName: "test.foo" matches cert's "test.foo"37632* OpenSSL verify result: 1337633* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37634* closing connection #037635curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37636More details here: https://curl.se/docs/sslcerts.html3763737638curl failed to verify the legitimacy of the server and therefore could not37639establish a secure connection to it. To learn more about this situation and37640how to fix it, please visit the webpage mentioned above.37641* Host test.foo:443 was resolved.37642* IPv6: 2001:db8:1::337643* IPv4: 192.168.1.337644* Trying [2001:db8:1::3]:443...37645* ALPN: curl offers h2,http/1.137646} [5 bytes data]37647* TLSv1.3 (OUT), TLS handshake, Client hello (1):37648} [1552 bytes data]37649* SSL Trust Anchors:37650* OpenSSL default paths (fallback)37651{ [5 bytes data]37652* TLSv1.3 (IN), TLS handshake, Server hello (2):37653{ [1210 bytes data]37654* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37655{ [1 bytes data]37656* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37657{ [19 bytes data]37658* TLSv1.3 (IN), TLS handshake, Certificate (11):37659{ [1009 bytes data]37660* TLSv1.3 (IN), TLS handshake, CERT verify (15):37661{ [111 bytes data]37662* TLSv1.3 (IN), TLS handshake, Finished (20):37663{ [52 bytes data]37664* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37665} [1 bytes data]37666* TLSv1.3 (OUT), TLS handshake, Finished (20):37667} [52 bytes data]37668* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37669* ALPN: server accepted h237670* Server certificate:37671* subject: CN=test.foo37672* start date: Sep 20 10:18:25 2026 GMT37673* expire date: Oct 20 10:18:25 2028 GMT37674* issuer: CN=minica root ca 0d360737675* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437676* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437677* subjectAltName: "test.foo" matches cert's "test.foo"37678* OpenSSL verify result: 1337679* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37680* closing connection #037681curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37682More details here: https://curl.se/docs/sslcerts.html3768337684curl failed to verify the legitimacy of the server and therefore could not37685establish a secure connection to it. To learn more about this situation and37686how to fix it, please visit the webpage mentioned above.37687* Host test.foo:443 was resolved.37688* IPv6: 2001:db8:1::337689* IPv4: 192.168.1.337690* Trying [2001:db8:1::3]:443...37691* ALPN: curl offers h2,http/1.137692} [5 bytes data]37693* TLSv1.3 (OUT), TLS handshake, Client hello (1):37694} [1552 bytes data]37695* SSL Trust Anchors:37696* OpenSSL default paths (fallback)37697{ [5 bytes data]37698* TLSv1.3 (IN), TLS handshake, Server hello (2):37699{ [1210 bytes data]37700* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37701{ [1 bytes data]37702* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37703{ [19 bytes data]37704* TLSv1.3 (IN), TLS handshake, Certificate (11):37705{ [1009 bytes data]37706* TLSv1.3 (IN), TLS handshake, CERT verify (15):37707{ [111 bytes data]37708* TLSv1.3 (IN), TLS handshake, Finished (20):37709{ [52 bytes data]37710* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37711} [1 bytes data]37712* TLSv1.3 (OUT), TLS handshake, Finished (20):37713} [52 bytes data]37714* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37715* ALPN: server accepted h237716* Server certificate:37717* subject: CN=test.foo37718* start date: Sep 20 10:18:25 2026 GMT37719* expire date: Oct 20 10:18:25 2028 GMT37720* issuer: CN=minica root ca 0d360737721* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437722* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437723* subjectAltName: "test.foo" matches cert's "test.foo"37724* OpenSSL verify result: 1337725* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37726* closing connection #037727curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37728More details here: https://curl.se/docs/sslcerts.html3772937730curl failed to verify the legitimacy of the server and therefore could not37731establish a secure connection to it. To learn more about this situation and37732how to fix it, please visit the webpage mentioned above.37733* Host test.foo:443 was resolved.37734* IPv6: 2001:db8:1::337735* IPv4: 192.168.1.337736* Trying [2001:db8:1::3]:443...37737* ALPN: curl offers h2,http/1.137738} [5 bytes data]37739* TLSv1.3 (OUT), TLS handshake, Client hello (1):37740} [1552 bytes data]37741* SSL Trust Anchors:37742* OpenSSL default paths (fallback)37743{ [5 bytes data]37744* TLSv1.3 (IN), TLS handshake, Server hello (2):37745{ [1210 bytes data]37746* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37747{ [1 bytes data]37748* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37749{ [19 bytes data]37750* TLSv1.3 (IN), TLS handshake, Certificate (11):37751{ [1009 bytes data]37752* TLSv1.3 (IN), TLS handshake, CERT verify (15):37753{ [112 bytes data]37754* TLSv1.3 (IN), TLS handshake, Finished (20):37755{ [52 bytes data]37756* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37757} [1 bytes data]37758* TLSv1.3 (OUT), TLS handshake, Finished (20):37759} [52 bytes data]37760* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37761* ALPN: server accepted h237762* Server certificate:37763* subject: CN=test.foo37764* start date: Sep 20 10:18:25 2026 GMT37765* expire date: Oct 20 10:18:25 2028 GMT37766* issuer: CN=minica root ca 0d360737767* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437768* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437769* subjectAltName: "test.foo" matches cert's "test.foo"37770* OpenSSL verify result: 1337771* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37772* closing connection #037773curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37774More details here: https://curl.se/docs/sslcerts.html3777537776curl failed to verify the legitimacy of the server and therefore could not37777establish a secure connection to it. To learn more about this situation and37778how to fix it, please visit the webpage mentioned above.37779* Trying [2001:db8:1::3]:443...37780* ALPN: curl offers h2,http/1.137781} [5 bytes data]37782* TLSv1.3 (OUT), TLS handshake, Client hello (1):37783} [1552 bytes data]37784* SSL Trust Anchors:37785* OpenSSL default paths (fallback)37786* Host test.foo:443 was resolved.37787* IPv6: 2001:db8:1::337788* IPv4: 192.168.1.337789{ [5 bytes data]37790* TLSv1.3 (IN), TLS handshake, Server hello (2):37791{ [1210 bytes data]37792* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37793{ [1 bytes data]37794* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37795{ [19 bytes data]37796* TLSv1.3 (IN), TLS handshake, Certificate (11):37797{ [1009 bytes data]37798* TLSv1.3 (IN), TLS handshake, CERT verify (15):37799{ [111 bytes data]37800* TLSv1.3 (IN), TLS handshake, Finished (20):37801{ [52 bytes data]37802* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37803} [1 bytes data]37804* TLSv1.3 (OUT), TLS handshake, Finished (20):37805} [52 bytes data]37806* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37807* ALPN: server accepted h237808* Server certificate:37809* subject: CN=test.foo37810* start date: Sep 20 10:18:25 2026 GMT37811* expire date: Oct 20 10:18:25 2028 GMT37812* issuer: CN=minica root ca 0d360737813* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437814* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437815* subjectAltName: "test.foo" matches cert's "test.foo"37816* OpenSSL verify result: 1337817* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37818* closing connection #037819curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37820More details here: https://curl.se/docs/sslcerts.html3782137822curl failed to verify the legitimacy of the server and therefore could not37823establish a secure connection to it. To learn more about this situation and37824how to fix it, please visit the webpage mentioned above.37825* Host test.foo:443 was resolved.37826* IPv6: 2001:db8:1::337827* IPv4: 192.168.1.337828* Trying [2001:db8:1::3]:443...37829* ALPN: curl offers h2,http/1.137830} [5 bytes data]37831* TLSv1.3 (OUT), TLS handshake, Client hello (1):37832} [1552 bytes data]37833* SSL Trust Anchors:37834* OpenSSL default paths (fallback)37835{ [5 bytes data]37836* TLSv1.3 (IN), TLS handshake, Server hello (2):37837{ [1210 bytes data]37838* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37839{ [1 bytes data]37840* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37841{ [19 bytes data]37842* TLSv1.3 (IN), TLS handshake, Certificate (11):37843{ [1009 bytes data]37844* TLSv1.3 (IN), TLS handshake, CERT verify (15):37845{ [111 bytes data]37846* TLSv1.3 (IN), TLS handshake, Finished (20):37847{ [52 bytes data]37848* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37849} [1 bytes data]37850* TLSv1.3 (OUT), TLS handshake, Finished (20):37851} [52 bytes data]37852* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37853* ALPN: server accepted h237854* Server certificate:37855* subject: CN=test.foo37856* start date: Sep 20 10:18:25 2026 GMT37857* expire date: Oct 20 10:18:25 2028 GMT37858* issuer: CN=minica root ca 0d360737859* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437860* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437861* subjectAltName: "test.foo" matches cert's "test.foo"37862* OpenSSL verify result: 1337863* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37864* closing connection #037865curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37866More details here: https://curl.se/docs/sslcerts.html3786737868curl failed to verify the legitimacy of the server and therefore could not37869establish a secure connection to it. To learn more about this situation and37870how to fix it, please visit the webpage mentioned above.37871* Host test.foo:443 was resolved.37872* IPv6: 2001:db8:1::337873* IPv4: 192.168.1.337874* Trying [2001:db8:1::3]:443...37875* ALPN: curl offers h2,http/1.137876} [5 bytes data]37877* TLSv1.3 (OUT), TLS handshake, Client hello (1):37878} [1552 bytes data]37879* SSL Trust Anchors:37880* OpenSSL default paths (fallback)37881{ [5 bytes data]37882* TLSv1.3 (IN), TLS handshake, Server hello (2):37883{ [1210 bytes data]37884* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37885{ [1 bytes data]37886* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37887{ [19 bytes data]37888* TLSv1.3 (IN), TLS handshake, Certificate (11):37889{ [1009 bytes data]37890* TLSv1.3 (IN), TLS handshake, CERT verify (15):37891{ [112 bytes data]37892* TLSv1.3 (IN), TLS handshake, Finished (20):37893{ [52 bytes data]37894* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37895} [1 bytes data]37896* TLSv1.3 (OUT), TLS handshake, Finished (20):37897} [52 bytes data]37898* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37899* ALPN: server accepted h237900* Server certificate:37901* subject: CN=test.foo37902* start date: Sep 20 10:18:25 2026 GMT37903* expire date: Oct 20 10:18:25 2028 GMT37904* issuer: CN=minica root ca 0d360737905* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437906* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437907* subjectAltName: "test.foo" matches cert's "test.foo"37908* OpenSSL verify result: 1337909* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37910* closing connection #037911curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37912More details here: https://curl.se/docs/sslcerts.html3791337914curl failed to verify the legitimacy of the server and therefore could not37915establish a secure connection to it. To learn more about this situation and37916how to fix it, please visit the webpage mentioned above.37917* Host test.foo:443 was resolved.37918* IPv6: 2001:db8:1::337919* IPv4: 192.168.1.337920* Trying [2001:db8:1::3]:443...37921* ALPN: curl offers h2,http/1.137922} [5 bytes data]37923* TLSv1.3 (OUT), TLS handshake, Client hello (1):37924} [1552 bytes data]37925* SSL Trust Anchors:37926* OpenSSL default paths (fallback)37927{ [5 bytes data]37928* TLSv1.3 (IN), TLS handshake, Server hello (2):37929{ [1210 bytes data]37930* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37931{ [1 bytes data]37932* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37933{ [19 bytes data]37934* TLSv1.3 (IN), TLS handshake, Certificate (11):37935{ [1009 bytes data]37936* TLSv1.3 (IN), TLS handshake, CERT verify (15):37937{ [110 bytes data]37938* TLSv1.3 (IN), TLS handshake, Finished (20):37939{ [52 bytes data]37940* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37941} [1 bytes data]37942* TLSv1.3 (OUT), TLS handshake, Finished (20):37943} [52 bytes data]37944* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37945* ALPN: server accepted h237946* Server certificate:37947* subject: CN=test.foo37948* start date: Sep 20 10:18:25 2026 GMT37949* expire date: Oct 20 10:18:25 2028 GMT37950* issuer: CN=minica root ca 0d360737951* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437952* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437953* subjectAltName: "test.foo" matches cert's "test.foo"37954* OpenSSL verify result: 1337955* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37956* closing connection #037957curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37958More details here: https://curl.se/docs/sslcerts.html3795937960curl failed to verify the legitimacy of the server and therefore could not37961establish a secure connection to it. To learn more about this situation and37962how to fix it, please visit the webpage mentioned above.37963* Host test.foo:443 was resolved.37964* IPv6: 2001:db8:1::337965* IPv4: 192.168.1.337966* Trying [2001:db8:1::3]:443...37967* ALPN: curl offers h2,http/1.137968} [5 bytes data]37969* TLSv1.3 (OUT), TLS handshake, Client hello (1):37970} [1552 bytes data]37971* SSL Trust Anchors:37972* OpenSSL default paths (fallback)37973{ [5 bytes data]37974* TLSv1.3 (IN), TLS handshake, Server hello (2):37975{ [1210 bytes data]37976* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37977{ [1 bytes data]37978* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37979{ [19 bytes data]37980* TLSv1.3 (IN), TLS handshake, Certificate (11):37981{ [1009 bytes data]37982* TLSv1.3 (IN), TLS handshake, CERT verify (15):37983{ [112 bytes data]37984* TLSv1.3 (IN), TLS handshake, Finished (20):37985{ [52 bytes data]37986* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37987} [1 bytes data]37988* TLSv1.3 (OUT), TLS handshake, Finished (20):37989} [52 bytes data]37990* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37991* ALPN: server accepted h237992* Server certificate:37993* subject: CN=test.foo37994* start date: Sep 20 10:18:25 2026 GMT37995* expire date: Oct 20 10:18:25 2028 GMT37996* issuer: CN=minica root ca 0d360737997* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437998* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437999* subjectAltName: "test.foo" matches cert's "test.foo"38000* OpenSSL verify result: 1338001* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38002* closing connection #038003curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38004More details here: https://curl.se/docs/sslcerts.html3800538006curl failed to verify the legitimacy of the server and therefore could not38007establish a secure connection to it. To learn more about this situation and38008how to fix it, please visit the webpage mentioned above.38009* Host test.foo:443 was resolved.38010* IPv6: 2001:db8:1::338011* IPv4: 192.168.1.338012* Trying [2001:db8:1::3]:443...38013* ALPN: curl offers h2,http/1.138014} [5 bytes data]38015* TLSv1.3 (OUT), TLS handshake, Client hello (1):38016} [1552 bytes data]38017* SSL Trust Anchors:38018* OpenSSL default paths (fallback)38019{ [5 bytes data]38020* TLSv1.3 (IN), TLS handshake, Server hello (2):38021{ [1210 bytes data]38022* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38023{ [1 bytes data]38024* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38025{ [19 bytes data]38026* TLSv1.3 (IN), TLS handshake, Certificate (11):38027{ [1009 bytes data]38028* TLSv1.3 (IN), TLS handshake, CERT verify (15):38029{ [112 bytes data]38030* TLSv1.3 (IN), TLS handshake, Finished (20):38031{ [52 bytes data]38032* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38033} [1 bytes data]38034* TLSv1.3 (OUT), TLS handshake, Finished (20):38035} [52 bytes data]38036* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38037* ALPN: server accepted h238038* Server certificate:38039* subject: CN=test.foo38040* start date: Sep 20 10:18:25 2026 GMT38041* expire date: Oct 20 10:18:25 2028 GMT38042* issuer: CN=minica root ca 0d360738043* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438044* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438045* subjectAltName: "test.foo" matches cert's "test.foo"38046* OpenSSL verify result: 1338047* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38048* closing connection #038049curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38050More details here: https://curl.se/docs/sslcerts.html3805138052curl failed to verify the legitimacy of the server and therefore could not38053establish a secure connection to it. To learn more about this situation and38054how to fix it, please visit the webpage mentioned above.38055* Host test.foo:443 was resolved.38056* IPv6: 2001:db8:1::338057* IPv4: 192.168.1.338058* Trying [2001:db8:1::3]:443...38059* ALPN: curl offers h2,http/1.138060} [5 bytes data]38061* TLSv1.3 (OUT), TLS handshake, Client hello (1):38062} [1552 bytes data]38063* SSL Trust Anchors:38064* OpenSSL default paths (fallback)38065{ [5 bytes data]38066* TLSv1.3 (IN), TLS handshake, Server hello (2):38067{ [1210 bytes data]38068* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38069{ [1 bytes data]38070* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38071{ [19 bytes data]38072* TLSv1.3 (IN), TLS handshake, Certificate (11):38073{ [1009 bytes data]38074* TLSv1.3 (IN), TLS handshake, CERT verify (15):38075{ [112 bytes data]38076* TLSv1.3 (IN), TLS handshake, Finished (20):38077{ [52 bytes data]38078* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38079} [1 bytes data]38080* TLSv1.3 (OUT), TLS handshake, Finished (20):38081} [52 bytes data]38082* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38083* ALPN: server accepted h238084* Server certificate:38085* subject: CN=test.foo38086* start date: Sep 20 10:18:25 2026 GMT38087* expire date: Oct 20 10:18:25 2028 GMT38088* issuer: CN=minica root ca 0d360738089* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438090* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438091* subjectAltName: "test.foo" matches cert's "test.foo"38092* OpenSSL verify result: 1338093* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38094* closing connection #038095curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38096More details here: https://curl.se/docs/sslcerts.html3809738098curl failed to verify the legitimacy of the server and therefore could not38099establish a secure connection to it. To learn more about this situation and38100how to fix it, please visit the webpage mentioned above.38101* Host test.foo:443 was resolved.38102* IPv6: 2001:db8:1::338103* IPv4: 192.168.1.338104* Trying [2001:db8:1::3]:443...38105* ALPN: curl offers h2,http/1.138106} [5 bytes data]38107* TLSv1.3 (OUT), TLS handshake, Client hello (1):38108} [1552 bytes data]38109* SSL Trust Anchors:38110* OpenSSL default paths (fallback)38111{ [5 bytes data]38112* TLSv1.3 (IN), TLS handshake, Server hello (2):38113{ [1210 bytes data]38114* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38115{ [1 bytes data]38116* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38117{ [19 bytes data]38118* TLSv1.3 (IN), TLS handshake, Certificate (11):38119{ [1009 bytes data]38120* TLSv1.3 (IN), TLS handshake, CERT verify (15):38121{ [111 bytes data]38122* TLSv1.3 (IN), TLS handshake, Finished (20):38123{ [52 bytes data]38124* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38125} [1 bytes data]38126* TLSv1.3 (OUT), TLS handshake, Finished (20):38127} [52 bytes data]38128* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38129* ALPN: server accepted h238130* Server certificate:38131* subject: CN=test.foo38132* start date: Sep 20 10:18:25 2026 GMT38133* expire date: Oct 20 10:18:25 2028 GMT38134* issuer: CN=minica root ca 0d360738135* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438136* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438137* subjectAltName: "test.foo" matches cert's "test.foo"38138* OpenSSL verify result: 1338139* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38140* closing connection #038141curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38142More details here: https://curl.se/docs/sslcerts.html3814338144curl failed to verify the legitimacy of the server and therefore could not38145establish a secure connection to it. To learn more about this situation and38146how to fix it, please visit the webpage mentioned above.38147* Host test.foo:443 was resolved.38148* IPv6: 2001:db8:1::338149* IPv4: 192.168.1.338150* Trying [2001:db8:1::3]:443...38151* ALPN: curl offers h2,http/1.138152} [5 bytes data]38153* TLSv1.3 (OUT), TLS handshake, Client hello (1):38154} [1552 bytes data]38155* SSL Trust Anchors:38156* OpenSSL default paths (fallback)38157{ [5 bytes data]38158* TLSv1.3 (IN), TLS handshake, Server hello (2):38159{ [1210 bytes data]38160* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38161{ [1 bytes data]38162* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38163{ [19 bytes data]38164* TLSv1.3 (IN), TLS handshake, Certificate (11):38165{ [1009 bytes data]38166* TLSv1.3 (IN), TLS handshake, CERT verify (15):38167{ [112 bytes data]38168* TLSv1.3 (IN), TLS handshake, Finished (20):38169{ [52 bytes data]38170* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38171} [1 bytes data]38172* TLSv1.3 (OUT), TLS handshake, Finished (20):38173} [52 bytes data]38174* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38175* ALPN: server accepted h238176* Server certificate:38177* subject: CN=test.foo38178* start date: Sep 20 10:18:25 2026 GMT38179* expire date: Oct 20 10:18:25 2028 GMT38180* issuer: CN=minica root ca 0d360738181* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438182* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438183* subjectAltName: "test.foo" matches cert's "test.foo"38184* OpenSSL verify result: 1338185* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38186* closing connection #038187curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38188More details here: https://curl.se/docs/sslcerts.html3818938190curl failed to verify the legitimacy of the server and therefore could not38191establish a secure connection to it. To learn more about this situation and38192how to fix it, please visit the webpage mentioned above.38193* Host test.foo:443 was resolved.38194* IPv6: 2001:db8:1::338195* IPv4: 192.168.1.338196* Trying [2001:db8:1::3]:443...38197* ALPN: curl offers h2,http/1.138198} [5 bytes data]38199* TLSv1.3 (OUT), TLS handshake, Client hello (1):38200} [1552 bytes data]38201* SSL Trust Anchors:38202* OpenSSL default paths (fallback)38203{ [5 bytes data]38204* TLSv1.3 (IN), TLS handshake, Server hello (2):38205{ [1210 bytes data]38206* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38207{ [1 bytes data]38208* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38209{ [19 bytes data]38210* TLSv1.3 (IN), TLS handshake, Certificate (11):38211{ [1009 bytes data]38212* TLSv1.3 (IN), TLS handshake, CERT verify (15):38213{ [111 bytes data]38214* TLSv1.3 (IN), TLS handshake, Finished (20):38215{ [52 bytes data]38216* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38217} [1 bytes data]38218* TLSv1.3 (OUT), TLS handshake, Finished (20):38219} [52 bytes data]38220* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38221* ALPN: server accepted h238222* Server certificate:38223* subject: CN=test.foo38224* start date: Sep 20 10:18:25 2026 GMT38225* expire date: Oct 20 10:18:25 2028 GMT38226* issuer: CN=minica root ca 0d360738227* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438228* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438229* subjectAltName: "test.foo" matches cert's "test.foo"38230* OpenSSL verify result: 1338231* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38232* closing connection #038233curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38234More details here: https://curl.se/docs/sslcerts.html3823538236curl failed to verify the legitimacy of the server and therefore could not38237establish a secure connection to it. To learn more about this situation and38238how to fix it, please visit the webpage mentioned above.38239* Host test.foo:443 was resolved.38240* IPv6: 2001:db8:1::338241* IPv4: 192.168.1.338242* Trying [2001:db8:1::3]:443...38243* ALPN: curl offers h2,http/1.138244} [5 bytes data]38245* TLSv1.3 (OUT), TLS handshake, Client hello (1):38246} [1552 bytes data]38247* SSL Trust Anchors:38248* OpenSSL default paths (fallback)38249{ [5 bytes data]38250* TLSv1.3 (IN), TLS handshake, Server hello (2):38251{ [1210 bytes data]38252* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38253{ [1 bytes data]38254* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38255{ [19 bytes data]38256* TLSv1.3 (IN), TLS handshake, Certificate (11):38257{ [1009 bytes data]38258* TLSv1.3 (IN), TLS handshake, CERT verify (15):38259{ [112 bytes data]38260* TLSv1.3 (IN), TLS handshake, Finished (20):38261{ [52 bytes data]38262* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38263} [1 bytes data]38264* TLSv1.3 (OUT), TLS handshake, Finished (20):38265} [52 bytes data]38266* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38267* ALPN: server accepted h238268* Server certificate:38269* subject: CN=test.foo38270* start date: Sep 20 10:18:25 2026 GMT38271* expire date: Oct 20 10:18:25 2028 GMT38272* issuer: CN=minica root ca 0d360738273* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438274* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438275* subjectAltName: "test.foo" matches cert's "test.foo"38276* OpenSSL verify result: 1338277* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38278* closing connection #038279curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38280More details here: https://curl.se/docs/sslcerts.html3828138282curl failed to verify the legitimacy of the server and therefore could not38283establish a secure connection to it. To learn more about this situation and38284how to fix it, please visit the webpage mentioned above.38285* Trying [2001:db8:1::3]:443...38286* ALPN: curl offers h2,http/1.138287} [5 bytes data]38288* TLSv1.3 (OUT), TLS handshake, Client hello (1):38289} [1552 bytes data]38290* SSL Trust Anchors:38291* OpenSSL default paths (fallback)38292* Host test.foo:443 was resolved.38293* IPv6: 2001:db8:1::338294* IPv4: 192.168.1.338295{ [5 bytes data]38296* TLSv1.3 (IN), TLS handshake, Server hello (2):38297{ [1210 bytes data]38298* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38299{ [1 bytes data]38300* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38301{ [19 bytes data]38302* TLSv1.3 (IN), TLS handshake, Certificate (11):38303{ [1009 bytes data]38304* TLSv1.3 (IN), TLS handshake, CERT verify (15):38305{ [112 bytes data]38306* TLSv1.3 (IN), TLS handshake, Finished (20):38307{ [52 bytes data]38308* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38309} [1 bytes data]38310* TLSv1.3 (OUT), TLS handshake, Finished (20):38311} [52 bytes data]38312* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38313* ALPN: server accepted h238314* Server certificate:38315* subject: CN=test.foo38316* start date: Sep 20 10:18:25 2026 GMT38317* expire date: Oct 20 10:18:25 2028 GMT38318* issuer: CN=minica root ca 0d360738319* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438320* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438321* subjectAltName: "test.foo" matches cert's "test.foo"38322* OpenSSL verify result: 1338323* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38324* closing connection #038325curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38326More details here: https://curl.se/docs/sslcerts.html3832738328curl failed to verify the legitimacy of the server and therefore could not38329establish a secure connection to it. To learn more about this situation and38330how to fix it, please visit the webpage mentioned above.38331* Host test.foo:443 was resolved.38332* IPv6: 2001:db8:1::338333* IPv4: 192.168.1.338334* Trying [2001:db8:1::3]:443...38335* ALPN: curl offers h2,http/1.138336} [5 bytes data]38337* TLSv1.3 (OUT), TLS handshake, Client hello (1):38338} [1552 bytes data]38339* SSL Trust Anchors:38340* OpenSSL default paths (fallback)38341{ [5 bytes data]38342* TLSv1.3 (IN), TLS handshake, Server hello (2):38343{ [1210 bytes data]38344* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38345{ [1 bytes data]38346* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38347{ [19 bytes data]38348* TLSv1.3 (IN), TLS handshake, Certificate (11):38349{ [1009 bytes data]38350* TLSv1.3 (IN), TLS handshake, CERT verify (15):38351{ [111 bytes data]38352* TLSv1.3 (IN), TLS handshake, Finished (20):38353{ [52 bytes data]38354* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38355} [1 bytes data]38356* TLSv1.3 (OUT), TLS handshake, Finished (20):38357} [52 bytes data]38358* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38359* ALPN: server accepted h238360* Server certificate:38361* subject: CN=test.foo38362* start date: Sep 20 10:18:25 2026 GMT38363* expire date: Oct 20 10:18:25 2028 GMT38364* issuer: CN=minica root ca 0d360738365* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438366* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438367* subjectAltName: "test.foo" matches cert's "test.foo"38368* OpenSSL verify result: 1338369* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38370* closing connection #038371curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38372More details here: https://curl.se/docs/sslcerts.html3837338374curl failed to verify the legitimacy of the server and therefore could not38375establish a secure connection to it. To learn more about this situation and38376how to fix it, please visit the webpage mentioned above.38377* Host test.foo:443 was resolved.38378* IPv6: 2001:db8:1::338379* IPv4: 192.168.1.338380* Trying [2001:db8:1::3]:443...38381* ALPN: curl offers h2,http/1.138382} [5 bytes data]38383* TLSv1.3 (OUT), TLS handshake, Client hello (1):38384} [1552 bytes data]38385* SSL Trust Anchors:38386* OpenSSL default paths (fallback)38387{ [5 bytes data]38388* TLSv1.3 (IN), TLS handshake, Server hello (2):38389{ [1210 bytes data]38390* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38391{ [1 bytes data]38392* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38393{ [19 bytes data]38394* TLSv1.3 (IN), TLS handshake, Certificate (11):38395{ [1009 bytes data]38396* TLSv1.3 (IN), TLS handshake, CERT verify (15):38397{ [111 bytes data]38398* TLSv1.3 (IN), TLS handshake, Finished (20):38399{ [52 bytes data]38400* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38401} [1 bytes data]38402* TLSv1.3 (OUT), TLS handshake, Finished (20):38403} [52 bytes data]38404* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38405* ALPN: server accepted h238406* Server certificate:38407* subject: CN=test.foo38408* start date: Sep 20 10:18:25 2026 GMT38409* expire date: Oct 20 10:18:25 2028 GMT38410* issuer: CN=minica root ca 0d360738411* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438412* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438413* subjectAltName: "test.foo" matches cert's "test.foo"38414* OpenSSL verify result: 1338415* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38416* closing connection #038417curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38418More details here: https://curl.se/docs/sslcerts.html3841938420curl failed to verify the legitimacy of the server and therefore could not38421establish a secure connection to it. To learn more about this situation and38422how to fix it, please visit the webpage mentioned above.38423* Host test.foo:443 was resolved.38424* IPv6: 2001:db8:1::338425* IPv4: 192.168.1.338426* Trying [2001:db8:1::3]:443...38427* ALPN: curl offers h2,http/1.138428} [5 bytes data]38429* TLSv1.3 (OUT), TLS handshake, Client hello (1):38430} [1552 bytes data]38431* SSL Trust Anchors:38432* OpenSSL default paths (fallback)38433{ [5 bytes data]38434* TLSv1.3 (IN), TLS handshake, Server hello (2):38435{ [1210 bytes data]38436* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38437{ [1 bytes data]38438* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38439{ [19 bytes data]38440* TLSv1.3 (IN), TLS handshake, Certificate (11):38441{ [1009 bytes data]38442* TLSv1.3 (IN), TLS handshake, CERT verify (15):38443{ [110 bytes data]38444* TLSv1.3 (IN), TLS handshake, Finished (20):38445{ [52 bytes data]38446* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38447} [1 bytes data]38448* TLSv1.3 (OUT), TLS handshake, Finished (20):38449} [52 bytes data]38450* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38451* ALPN: server accepted h238452* Server certificate:38453* subject: CN=test.foo38454* start date: Sep 20 10:18:25 2026 GMT38455* expire date: Oct 20 10:18:25 2028 GMT38456* issuer: CN=minica root ca 0d360738457* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438458* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438459* subjectAltName: "test.foo" matches cert's "test.foo"38460* OpenSSL verify result: 1338461* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38462* closing connection #038463curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38464More details here: https://curl.se/docs/sslcerts.html3846538466curl failed to verify the legitimacy of the server and therefore could not38467establish a secure connection to it. To learn more about this situation and38468how to fix it, please visit the webpage mentioned above.38469* Host test.foo:443 was resolved.38470* IPv6: 2001:db8:1::338471* IPv4: 192.168.1.338472* Trying [2001:db8:1::3]:443...38473* ALPN: curl offers h2,http/1.138474} [5 bytes data]38475* TLSv1.3 (OUT), TLS handshake, Client hello (1):38476} [1552 bytes data]38477* SSL Trust Anchors:38478* OpenSSL default paths (fallback)38479{ [5 bytes data]38480* TLSv1.3 (IN), TLS handshake, Server hello (2):38481{ [1210 bytes data]38482* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38483{ [1 bytes data]38484* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38485{ [19 bytes data]38486* TLSv1.3 (IN), TLS handshake, Certificate (11):38487{ [1009 bytes data]38488* TLSv1.3 (IN), TLS handshake, CERT verify (15):38489{ [112 bytes data]38490* TLSv1.3 (IN), TLS handshake, Finished (20):38491{ [52 bytes data]38492* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38493} [1 bytes data]38494* TLSv1.3 (OUT), TLS handshake, Finished (20):38495} [52 bytes data]38496* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38497* ALPN: server accepted h238498* Server certificate:38499* subject: CN=test.foo38500* start date: Sep 20 10:18:25 2026 GMT38501* expire date: Oct 20 10:18:25 2028 GMT38502* issuer: CN=minica root ca 0d360738503* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438504* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438505* subjectAltName: "test.foo" matches cert's "test.foo"38506* OpenSSL verify result: 1338507* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38508* closing connection #038509curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38510More details here: https://curl.se/docs/sslcerts.html3851138512curl failed to verify the legitimacy of the server and therefore could not38513establish a secure connection to it. To learn more about this situation and38514how to fix it, please visit the webpage mentioned above.38515* Host test.foo:443 was resolved.38516* IPv6: 2001:db8:1::338517* IPv4: 192.168.1.338518* Trying [2001:db8:1::3]:443...38519* ALPN: curl offers h2,http/1.138520} [5 bytes data]38521* TLSv1.3 (OUT), TLS handshake, Client hello (1):38522} [1552 bytes data]38523* SSL Trust Anchors:38524* OpenSSL default paths (fallback)38525{ [5 bytes data]38526* TLSv1.3 (IN), TLS handshake, Server hello (2):38527{ [1210 bytes data]38528* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38529{ [1 bytes data]38530* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38531{ [19 bytes data]38532* TLSv1.3 (IN), TLS handshake, Certificate (11):38533{ [1009 bytes data]38534* TLSv1.3 (IN), TLS handshake, CERT verify (15):38535{ [112 bytes data]38536* TLSv1.3 (IN), TLS handshake, Finished (20):38537{ [52 bytes data]38538* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38539} [1 bytes data]38540* TLSv1.3 (OUT), TLS handshake, Finished (20):38541} [52 bytes data]38542* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38543* ALPN: server accepted h238544* Server certificate:38545* subject: CN=test.foo38546* start date: Sep 20 10:18:25 2026 GMT38547* expire date: Oct 20 10:18:25 2028 GMT38548* issuer: CN=minica root ca 0d360738549* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438550* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438551* subjectAltName: "test.foo" matches cert's "test.foo"38552* OpenSSL verify result: 1338553* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38554* closing connection #038555curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38556More details here: https://curl.se/docs/sslcerts.html3855738558curl failed to verify the legitimacy of the server and therefore could not38559establish a secure connection to it. To learn more about this situation and38560how to fix it, please visit the webpage mentioned above.38561* Host test.foo:443 was resolved.38562* IPv6: 2001:db8:1::338563* IPv4: 192.168.1.338564* Trying [2001:db8:1::3]:443...38565* ALPN: curl offers h2,http/1.138566} [5 bytes data]38567* TLSv1.3 (OUT), TLS handshake, Client hello (1):38568} [1552 bytes data]38569* SSL Trust Anchors:38570* OpenSSL default paths (fallback)38571{ [5 bytes data]38572* TLSv1.3 (IN), TLS handshake, Server hello (2):38573{ [1210 bytes data]38574* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38575{ [1 bytes data]38576* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38577{ [19 bytes data]38578* TLSv1.3 (IN), TLS handshake, Certificate (11):38579{ [1009 bytes data]38580* TLSv1.3 (IN), TLS handshake, CERT verify (15):38581{ [112 bytes data]38582* TLSv1.3 (IN), TLS handshake, Finished (20):38583{ [52 bytes data]38584* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38585} [1 bytes data]38586* TLSv1.3 (OUT), TLS handshake, Finished (20):38587} [52 bytes data]38588* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38589* ALPN: server accepted h238590* Server certificate:38591* subject: CN=test.foo38592* start date: Sep 20 10:18:25 2026 GMT38593* expire date: Oct 20 10:18:25 2028 GMT38594* issuer: CN=minica root ca 0d360738595* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438596* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438597* subjectAltName: "test.foo" matches cert's "test.foo"38598* OpenSSL verify result: 1338599* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38600* closing connection #038601curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38602More details here: https://curl.se/docs/sslcerts.html3860338604curl failed to verify the legitimacy of the server and therefore could not38605establish a secure connection to it. To learn more about this situation and38606how to fix it, please visit the webpage mentioned above.38607* Host test.foo:443 was resolved.38608* IPv6: 2001:db8:1::338609* IPv4: 192.168.1.338610* Trying [2001:db8:1::3]:443...38611* ALPN: curl offers h2,http/1.138612} [5 bytes data]38613* TLSv1.3 (OUT), TLS handshake, Client hello (1):38614} [1552 bytes data]38615* SSL Trust Anchors:38616* OpenSSL default paths (fallback)38617{ [5 bytes data]38618* TLSv1.3 (IN), TLS handshake, Server hello (2):38619{ [1210 bytes data]38620* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38621{ [1 bytes data]38622* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38623{ [19 bytes data]38624* TLSv1.3 (IN), TLS handshake, Certificate (11):38625{ [1009 bytes data]38626* TLSv1.3 (IN), TLS handshake, CERT verify (15):38627{ [111 bytes data]38628* TLSv1.3 (IN), TLS handshake, Finished (20):38629{ [52 bytes data]38630* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38631} [1 bytes data]38632* TLSv1.3 (OUT), TLS handshake, Finished (20):38633} [52 bytes data]38634* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38635* ALPN: server accepted h238636* Server certificate:38637* subject: CN=test.foo38638* start date: Sep 20 10:18:25 2026 GMT38639* expire date: Oct 20 10:18:25 2028 GMT38640* issuer: CN=minica root ca 0d360738641* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438642* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438643* subjectAltName: "test.foo" matches cert's "test.foo"38644* OpenSSL verify result: 1338645* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38646* closing connection #038647curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38648More details here: https://curl.se/docs/sslcerts.html3864938650curl failed to verify the legitimacy of the server and therefore could not38651establish a secure connection to it. To learn more about this situation and38652how to fix it, please visit the webpage mentioned above.38653* Host test.foo:443 was resolved.38654* IPv6: 2001:db8:1::338655* IPv4: 192.168.1.338656* Trying [2001:db8:1::3]:443...38657* ALPN: curl offers h2,http/1.138658} [5 bytes data]38659* TLSv1.3 (OUT), TLS handshake, Client hello (1):38660} [1552 bytes data]38661* SSL Trust Anchors:38662* OpenSSL default paths (fallback)38663{ [5 bytes data]38664* TLSv1.3 (IN), TLS handshake, Server hello (2):38665{ [1210 bytes data]38666* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38667{ [1 bytes data]38668* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38669{ [19 bytes data]38670* TLSv1.3 (IN), TLS handshake, Certificate (11):38671{ [1009 bytes data]38672* TLSv1.3 (IN), TLS handshake, CERT verify (15):38673{ [110 bytes data]38674* TLSv1.3 (IN), TLS handshake, Finished (20):38675{ [52 bytes data]38676* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38677} [1 bytes data]38678* TLSv1.3 (OUT), TLS handshake, Finished (20):38679} [52 bytes data]38680* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38681* ALPN: server accepted h238682* Server certificate:38683* subject: CN=test.foo38684* start date: Sep 20 10:18:25 2026 GMT38685* expire date: Oct 20 10:18:25 2028 GMT38686* issuer: CN=minica root ca 0d360738687* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438688* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438689* subjectAltName: "test.foo" matches cert's "test.foo"38690* OpenSSL verify result: 1338691* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38692* closing connection #038693curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38694More details here: https://curl.se/docs/sslcerts.html3869538696curl failed to verify the legitimacy of the server and therefore could not38697establish a secure connection to it. To learn more about this situation and38698how to fix it, please visit the webpage mentioned above.38699* Host test.foo:443 was resolved.38700* IPv6: 2001:db8:1::338701* IPv4: 192.168.1.338702* Trying [2001:db8:1::3]:443...38703* ALPN: curl offers h2,http/1.138704} [5 bytes data]38705* TLSv1.3 (OUT), TLS handshake, Client hello (1):38706} [1552 bytes data]38707* SSL Trust Anchors:38708* OpenSSL default paths (fallback)38709{ [5 bytes data]38710* TLSv1.3 (IN), TLS handshake, Server hello (2):38711{ [1210 bytes data]38712* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38713{ [1 bytes data]38714* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38715{ [19 bytes data]38716* TLSv1.3 (IN), TLS handshake, Certificate (11):38717{ [1009 bytes data]38718* TLSv1.3 (IN), TLS handshake, CERT verify (15):38719{ [109 bytes data]38720* TLSv1.3 (IN), TLS handshake, Finished (20):38721{ [52 bytes data]38722* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38723} [1 bytes data]38724* TLSv1.3 (OUT), TLS handshake, Finished (20):38725} [52 bytes data]38726* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38727* ALPN: server accepted h238728* Server certificate:38729* subject: CN=test.foo38730* start date: Sep 20 10:18:25 2026 GMT38731* expire date: Oct 20 10:18:25 2028 GMT38732* issuer: CN=minica root ca 0d360738733* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438734* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438735* subjectAltName: "test.foo" matches cert's "test.foo"38736* OpenSSL verify result: 1338737* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38738* closing connection #038739curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38740More details here: https://curl.se/docs/sslcerts.html3874138742curl failed to verify the legitimacy of the server and therefore could not38743establish a secure connection to it. To learn more about this situation and38744how to fix it, please visit the webpage mentioned above.38745* Host test.foo:443 was resolved.38746* IPv6: 2001:db8:1::338747* IPv4: 192.168.1.338748* Trying [2001:db8:1::3]:443...38749* ALPN: curl offers h2,http/1.138750} [5 bytes data]38751* TLSv1.3 (OUT), TLS handshake, Client hello (1):38752} [1552 bytes data]38753* SSL Trust Anchors:38754* OpenSSL default paths (fallback)38755{ [5 bytes data]38756* TLSv1.3 (IN), TLS handshake, Server hello (2):38757{ [1210 bytes data]38758* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38759{ [1 bytes data]38760* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38761{ [19 bytes data]38762* TLSv1.3 (IN), TLS handshake, Certificate (11):38763{ [1009 bytes data]38764* TLSv1.3 (IN), TLS handshake, CERT verify (15):38765{ [111 bytes data]38766* TLSv1.3 (IN), TLS handshake, Finished (20):38767{ [52 bytes data]38768* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38769} [1 bytes data]38770* TLSv1.3 (OUT), TLS handshake, Finished (20):38771} [52 bytes data]38772* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38773* ALPN: server accepted h238774* Server certificate:38775* subject: CN=test.foo38776* start date: Sep 20 10:18:25 2026 GMT38777* expire date: Oct 20 10:18:25 2028 GMT38778* issuer: CN=minica root ca 0d360738779* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438780* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438781* subjectAltName: "test.foo" matches cert's "test.foo"38782* OpenSSL verify result: 1338783* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38784* closing connection #038785curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38786More details here: https://curl.se/docs/sslcerts.html3878738788curl failed to verify the legitimacy of the server and therefore could not38789establish a secure connection to it. To learn more about this situation and38790how to fix it, please visit the webpage mentioned above.38791* Host test.foo:443 was resolved.38792* IPv6: 2001:db8:1::338793* IPv4: 192.168.1.338794* Trying [2001:db8:1::3]:443...38795* ALPN: curl offers h2,http/1.138796} [5 bytes data]38797* TLSv1.3 (OUT), TLS handshake, Client hello (1):38798} [1552 bytes data]38799* SSL Trust Anchors:38800* OpenSSL default paths (fallback)38801{ [5 bytes data]38802* TLSv1.3 (IN), TLS handshake, Server hello (2):38803{ [1210 bytes data]38804* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38805{ [1 bytes data]38806* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38807{ [19 bytes data]38808* TLSv1.3 (IN), TLS handshake, Certificate (11):38809{ [1009 bytes data]38810* TLSv1.3 (IN), TLS handshake, CERT verify (15):38811{ [111 bytes data]38812* TLSv1.3 (IN), TLS handshake, Finished (20):38813{ [52 bytes data]38814* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38815} [1 bytes data]38816* TLSv1.3 (OUT), TLS handshake, Finished (20):38817} [52 bytes data]38818* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38819* ALPN: server accepted h238820* Server certificate:38821* subject: CN=test.foo38822* start date: Sep 20 10:18:25 2026 GMT38823* expire date: Oct 20 10:18:25 2028 GMT38824* issuer: CN=minica root ca 0d360738825* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438826* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438827* subjectAltName: "test.foo" matches cert's "test.foo"38828* OpenSSL verify result: 1338829* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38830* closing connection #038831curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38832More details here: https://curl.se/docs/sslcerts.html3883338834curl failed to verify the legitimacy of the server and therefore could not38835establish a secure connection to it. To learn more about this situation and38836how to fix it, please visit the webpage mentioned above.38837* Host test.foo:443 was resolved.38838* IPv6: 2001:db8:1::338839* IPv4: 192.168.1.338840* Trying [2001:db8:1::3]:443...38841* ALPN: curl offers h2,http/1.138842} [5 bytes data]38843* TLSv1.3 (OUT), TLS handshake, Client hello (1):38844} [1552 bytes data]38845* SSL Trust Anchors:38846* OpenSSL default paths (fallback)38847{ [5 bytes data]38848* TLSv1.3 (IN), TLS handshake, Server hello (2):38849{ [1210 bytes data]38850* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38851{ [1 bytes data]38852* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38853{ [19 bytes data]38854* TLSv1.3 (IN), TLS handshake, Certificate (11):38855{ [1009 bytes data]38856* TLSv1.3 (IN), TLS handshake, CERT verify (15):38857{ [112 bytes data]38858* TLSv1.3 (IN), TLS handshake, Finished (20):38859{ [52 bytes data]38860* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38861} [1 bytes data]38862* TLSv1.3 (OUT), TLS handshake, Finished (20):38863} [52 bytes data]38864* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38865* ALPN: server accepted h238866* Server certificate:38867* subject: CN=test.foo38868* start date: Sep 20 10:18:25 2026 GMT38869* expire date: Oct 20 10:18:25 2028 GMT38870* issuer: CN=minica root ca 0d360738871* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438872* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438873* subjectAltName: "test.foo" matches cert's "test.foo"38874* OpenSSL verify result: 1338875* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38876* closing connection #038877curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38878More details here: https://curl.se/docs/sslcerts.html3887938880curl failed to verify the legitimacy of the server and therefore could not38881establish a secure connection to it. To learn more about this situation and38882how to fix it, please visit the webpage mentioned above.38883* Trying [2001:db8:1::3]:443...38884* Host test.foo:443 was resolved.38885* IPv6: 2001:db8:1::338886* IPv4: 192.168.1.338887* ALPN: curl offers h2,http/1.138888} [5 bytes data]38889* TLSv1.3 (OUT), TLS handshake, Client hello (1):38890} [1552 bytes data]38891* SSL Trust Anchors:38892* OpenSSL default paths (fallback)38893{ [5 bytes data]38894* TLSv1.3 (IN), TLS handshake, Server hello (2):38895{ [1210 bytes data]38896* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38897{ [1 bytes data]38898* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38899{ [19 bytes data]38900* TLSv1.3 (IN), TLS handshake, Certificate (11):38901{ [1009 bytes data]38902* TLSv1.3 (IN), TLS handshake, CERT verify (15):38903{ [112 bytes data]38904* TLSv1.3 (IN), TLS handshake, Finished (20):38905{ [52 bytes data]38906* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38907} [1 bytes data]38908* TLSv1.3 (OUT), TLS handshake, Finished (20):38909} [52 bytes data]38910* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38911* ALPN: server accepted h238912* Server certificate:38913* subject: CN=test.foo38914* start date: Sep 20 10:18:25 2026 GMT38915* expire date: Oct 20 10:18:25 2028 GMT38916* issuer: CN=minica root ca 0d360738917* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438918* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438919* subjectAltName: "test.foo" matches cert's "test.foo"38920* OpenSSL verify result: 1338921* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38922* closing connection #038923curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38924More details here: https://curl.se/docs/sslcerts.html3892538926curl failed to verify the legitimacy of the server and therefore could not38927establish a secure connection to it. To learn more about this situation and38928how to fix it, please visit the webpage mentioned above.38929* Host test.foo:443 was resolved.38930* IPv6: 2001:db8:1::338931* IPv4: 192.168.1.338932* Trying [2001:db8:1::3]:443...38933* ALPN: curl offers h2,http/1.138934} [5 bytes data]38935* TLSv1.3 (OUT), TLS handshake, Client hello (1):38936} [1552 bytes data]38937* SSL Trust Anchors:38938* OpenSSL default paths (fallback)38939{ [5 bytes data]38940* TLSv1.3 (IN), TLS handshake, Server hello (2):38941{ [1210 bytes data]38942* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38943{ [1 bytes data]38944* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38945{ [19 bytes data]38946* TLSv1.3 (IN), TLS handshake, Certificate (11):38947{ [1009 bytes data]38948* TLSv1.3 (IN), TLS handshake, CERT verify (15):38949{ [111 bytes data]38950* TLSv1.3 (IN), TLS handshake, Finished (20):38951{ [52 bytes data]38952* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38953} [1 bytes data]38954* TLSv1.3 (OUT), TLS handshake, Finished (20):38955} [52 bytes data]38956* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38957* ALPN: server accepted h238958* Server certificate:38959* subject: CN=test.foo38960* start date: Sep 20 10:18:25 2026 GMT38961* expire date: Oct 20 10:18:25 2028 GMT38962* issuer: CN=minica root ca 0d360738963* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438964* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438965* subjectAltName: "test.foo" matches cert's "test.foo"38966* OpenSSL verify result: 1338967* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38968* closing connection #038969curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38970More details here: https://curl.se/docs/sslcerts.html3897138972curl failed to verify the legitimacy of the server and therefore could not38973establish a secure connection to it. To learn more about this situation and38974how to fix it, please visit the webpage mentioned above.38975* Host test.foo:443 was resolved.38976* IPv6: 2001:db8:1::338977* IPv4: 192.168.1.338978* Trying [2001:db8:1::3]:443...38979* ALPN: curl offers h2,http/1.138980} [5 bytes data]38981* TLSv1.3 (OUT), TLS handshake, Client hello (1):38982} [1552 bytes data]38983* SSL Trust Anchors:38984* OpenSSL default paths (fallback)38985{ [5 bytes data]38986* TLSv1.3 (IN), TLS handshake, Server hello (2):38987{ [1210 bytes data]38988* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38989{ [1 bytes data]38990* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38991{ [19 bytes data]38992* TLSv1.3 (IN), TLS handshake, Certificate (11):38993{ [1009 bytes data]38994* TLSv1.3 (IN), TLS handshake, CERT verify (15):38995{ [111 bytes data]38996* TLSv1.3 (IN), TLS handshake, Finished (20):38997{ [52 bytes data]38998* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38999} [1 bytes data]39000* TLSv1.3 (OUT), TLS handshake, Finished (20):39001} [52 bytes data]39002* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39003* ALPN: server accepted h239004* Server certificate:39005* subject: CN=test.foo39006* start date: Sep 20 10:18:25 2026 GMT39007* expire date: Oct 20 10:18:25 2028 GMT39008* issuer: CN=minica root ca 0d360739009* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439010* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439011* subjectAltName: "test.foo" matches cert's "test.foo"39012* OpenSSL verify result: 1339013* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39014* closing connection #039015curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39016More details here: https://curl.se/docs/sslcerts.html3901739018curl failed to verify the legitimacy of the server and therefore could not39019establish a secure connection to it. To learn more about this situation and39020how to fix it, please visit the webpage mentioned above.39021* Host test.foo:443 was resolved.39022* IPv6: 2001:db8:1::339023* IPv4: 192.168.1.339024* Trying [2001:db8:1::3]:443...39025* ALPN: curl offers h2,http/1.139026} [5 bytes data]39027* TLSv1.3 (OUT), TLS handshake, Client hello (1):39028} [1552 bytes data]39029* SSL Trust Anchors:39030* OpenSSL default paths (fallback)39031{ [5 bytes data]39032* TLSv1.3 (IN), TLS handshake, Server hello (2):39033{ [1210 bytes data]39034* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39035{ [1 bytes data]39036* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39037{ [19 bytes data]39038* TLSv1.3 (IN), TLS handshake, Certificate (11):39039{ [1009 bytes data]39040* TLSv1.3 (IN), TLS handshake, CERT verify (15):39041{ [111 bytes data]39042* TLSv1.3 (IN), TLS handshake, Finished (20):39043{ [52 bytes data]39044* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39045} [1 bytes data]39046* TLSv1.3 (OUT), TLS handshake, Finished (20):39047} [52 bytes data]39048* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39049* ALPN: server accepted h239050* Server certificate:39051* subject: CN=test.foo39052* start date: Sep 20 10:18:25 2026 GMT39053* expire date: Oct 20 10:18:25 2028 GMT39054* issuer: CN=minica root ca 0d360739055* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439056* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439057* subjectAltName: "test.foo" matches cert's "test.foo"39058* OpenSSL verify result: 1339059* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39060* closing connection #039061curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39062More details here: https://curl.se/docs/sslcerts.html3906339064curl failed to verify the legitimacy of the server and therefore could not39065establish a secure connection to it. To learn more about this situation and39066how to fix it, please visit the webpage mentioned above.39067* Host test.foo:443 was resolved.39068* IPv6: 2001:db8:1::339069* IPv4: 192.168.1.339070* Trying [2001:db8:1::3]:443...39071* ALPN: curl offers h2,http/1.139072} [5 bytes data]39073* TLSv1.3 (OUT), TLS handshake, Client hello (1):39074} [1552 bytes data]39075* SSL Trust Anchors:39076* OpenSSL default paths (fallback)39077{ [5 bytes data]39078* TLSv1.3 (IN), TLS handshake, Server hello (2):39079{ [1210 bytes data]39080* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39081{ [1 bytes data]39082* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39083{ [19 bytes data]39084* TLSv1.3 (IN), TLS handshake, Certificate (11):39085{ [1009 bytes data]39086* TLSv1.3 (IN), TLS handshake, CERT verify (15):39087{ [111 bytes data]39088* TLSv1.3 (IN), TLS handshake, Finished (20):39089{ [52 bytes data]39090* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39091} [1 bytes data]39092* TLSv1.3 (OUT), TLS handshake, Finished (20):39093} [52 bytes data]39094* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39095* ALPN: server accepted h239096* Server certificate:39097* subject: CN=test.foo39098* start date: Sep 20 10:18:25 2026 GMT39099* expire date: Oct 20 10:18:25 2028 GMT39100* issuer: CN=minica root ca 0d360739101* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439102* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439103* subjectAltName: "test.foo" matches cert's "test.foo"39104* OpenSSL verify result: 1339105* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39106* closing connection #039107curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39108More details here: https://curl.se/docs/sslcerts.html3910939110curl failed to verify the legitimacy of the server and therefore could not39111establish a secure connection to it. To learn more about this situation and39112how to fix it, please visit the webpage mentioned above.39113* Host test.foo:443 was resolved.39114* IPv6: 2001:db8:1::339115* IPv4: 192.168.1.339116* Trying [2001:db8:1::3]:443...39117* ALPN: curl offers h2,http/1.139118} [5 bytes data]39119* TLSv1.3 (OUT), TLS handshake, Client hello (1):39120} [1552 bytes data]39121* SSL Trust Anchors:39122* OpenSSL default paths (fallback)39123{ [5 bytes data]39124* TLSv1.3 (IN), TLS handshake, Server hello (2):39125{ [1210 bytes data]39126* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39127{ [1 bytes data]39128* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39129{ [19 bytes data]39130* TLSv1.3 (IN), TLS handshake, Certificate (11):39131{ [1009 bytes data]39132* TLSv1.3 (IN), TLS handshake, CERT verify (15):39133{ [111 bytes data]39134* TLSv1.3 (IN), TLS handshake, Finished (20):39135{ [52 bytes data]39136* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39137} [1 bytes data]39138* TLSv1.3 (OUT), TLS handshake, Finished (20):39139} [52 bytes data]39140* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39141* ALPN: server accepted h239142* Server certificate:39143* subject: CN=test.foo39144* start date: Sep 20 10:18:25 2026 GMT39145* expire date: Oct 20 10:18:25 2028 GMT39146* issuer: CN=minica root ca 0d360739147* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439148* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439149* subjectAltName: "test.foo" matches cert's "test.foo"39150* OpenSSL verify result: 1339151* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39152* closing connection #039153curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39154More details here: https://curl.se/docs/sslcerts.html3915539156curl failed to verify the legitimacy of the server and therefore could not39157establish a secure connection to it. To learn more about this situation and39158how to fix it, please visit the webpage mentioned above.39159* Host test.foo:443 was resolved.39160* IPv6: 2001:db8:1::339161* IPv4: 192.168.1.339162* Trying [2001:db8:1::3]:443...39163* ALPN: curl offers h2,http/1.139164} [5 bytes data]39165* TLSv1.3 (OUT), TLS handshake, Client hello (1):39166} [1552 bytes data]39167* SSL Trust Anchors:39168* OpenSSL default paths (fallback)39169{ [5 bytes data]39170* TLSv1.3 (IN), TLS handshake, Server hello (2):39171{ [1210 bytes data]39172* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39173{ [1 bytes data]39174* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39175{ [19 bytes data]39176* TLSv1.3 (IN), TLS handshake, Certificate (11):39177{ [1009 bytes data]39178* TLSv1.3 (IN), TLS handshake, CERT verify (15):39179{ [111 bytes data]39180* TLSv1.3 (IN), TLS handshake, Finished (20):39181{ [52 bytes data]39182* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39183} [1 bytes data]39184* TLSv1.3 (OUT), TLS handshake, Finished (20):39185} [52 bytes data]39186* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39187* ALPN: server accepted h239188* Server certificate:39189* subject: CN=test.foo39190* start date: Sep 20 10:18:25 2026 GMT39191* expire date: Oct 20 10:18:25 2028 GMT39192* issuer: CN=minica root ca 0d360739193* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439194* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439195* subjectAltName: "test.foo" matches cert's "test.foo"39196* OpenSSL verify result: 1339197* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39198* closing connection #039199curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39200More details here: https://curl.se/docs/sslcerts.html3920139202curl failed to verify the legitimacy of the server and therefore could not39203establish a secure connection to it. To learn more about this situation and39204how to fix it, please visit the webpage mentioned above.39205* Host test.foo:443 was resolved.39206* IPv6: 2001:db8:1::339207* IPv4: 192.168.1.339208* Trying [2001:db8:1::3]:443...39209* ALPN: curl offers h2,http/1.139210} [5 bytes data]39211* TLSv1.3 (OUT), TLS handshake, Client hello (1):39212} [1552 bytes data]39213* SSL Trust Anchors:39214* OpenSSL default paths (fallback)39215{ [5 bytes data]39216* TLSv1.3 (IN), TLS handshake, Server hello (2):39217{ [1210 bytes data]39218* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39219{ [1 bytes data]39220* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39221{ [19 bytes data]39222* TLSv1.3 (IN), TLS handshake, Certificate (11):39223{ [1009 bytes data]39224* TLSv1.3 (IN), TLS handshake, CERT verify (15):39225{ [111 bytes data]39226* TLSv1.3 (IN), TLS handshake, Finished (20):39227{ [52 bytes data]39228* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39229} [1 bytes data]39230* TLSv1.3 (OUT), TLS handshake, Finished (20):39231} [52 bytes data]39232* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39233* ALPN: server accepted h239234* Server certificate:39235* subject: CN=test.foo39236* start date: Sep 20 10:18:25 2026 GMT39237* expire date: Oct 20 10:18:25 2028 GMT39238* issuer: CN=minica root ca 0d360739239* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439240* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439241* subjectAltName: "test.foo" matches cert's "test.foo"39242* OpenSSL verify result: 1339243* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39244* closing connection #039245curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39246More details here: https://curl.se/docs/sslcerts.html3924739248curl failed to verify the legitimacy of the server and therefore could not39249establish a secure connection to it. To learn more about this situation and39250how to fix it, please visit the webpage mentioned above.39251* Host test.foo:443 was resolved.39252* IPv6: 2001:db8:1::339253* IPv4: 192.168.1.339254* Trying [2001:db8:1::3]:443...39255* ALPN: curl offers h2,http/1.139256} [5 bytes data]39257* TLSv1.3 (OUT), TLS handshake, Client hello (1):39258} [1552 bytes data]39259* SSL Trust Anchors:39260* OpenSSL default paths (fallback)39261{ [5 bytes data]39262* TLSv1.3 (IN), TLS handshake, Server hello (2):39263{ [1210 bytes data]39264* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39265{ [1 bytes data]39266* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39267{ [19 bytes data]39268* TLSv1.3 (IN), TLS handshake, Certificate (11):39269{ [1009 bytes data]39270* TLSv1.3 (IN), TLS handshake, CERT verify (15):39271{ [111 bytes data]39272* TLSv1.3 (IN), TLS handshake, Finished (20):39273{ [52 bytes data]39274* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39275} [1 bytes data]39276* TLSv1.3 (OUT), TLS handshake, Finished (20):39277} [52 bytes data]39278* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39279* ALPN: server accepted h239280* Server certificate:39281* subject: CN=test.foo39282* start date: Sep 20 10:18:25 2026 GMT39283* expire date: Oct 20 10:18:25 2028 GMT39284* issuer: CN=minica root ca 0d360739285* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439286* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439287* subjectAltName: "test.foo" matches cert's "test.foo"39288* OpenSSL verify result: 1339289* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39290* closing connection #039291curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39292More details here: https://curl.se/docs/sslcerts.html3929339294curl failed to verify the legitimacy of the server and therefore could not39295establish a secure connection to it. To learn more about this situation and39296how to fix it, please visit the webpage mentioned above.39297* Host test.foo:443 was resolved.39298* IPv6: 2001:db8:1::339299* IPv4: 192.168.1.339300* Trying [2001:db8:1::3]:443...39301* ALPN: curl offers h2,http/1.139302} [5 bytes data]39303* TLSv1.3 (OUT), TLS handshake, Client hello (1):39304} [1552 bytes data]39305* SSL Trust Anchors:39306* OpenSSL default paths (fallback)39307{ [5 bytes data]39308* TLSv1.3 (IN), TLS handshake, Server hello (2):39309{ [1210 bytes data]39310* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39311{ [1 bytes data]39312* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39313{ [19 bytes data]39314* TLSv1.3 (IN), TLS handshake, Certificate (11):39315{ [1009 bytes data]39316* TLSv1.3 (IN), TLS handshake, CERT verify (15):39317{ [112 bytes data]39318* TLSv1.3 (IN), TLS handshake, Finished (20):39319{ [52 bytes data]39320* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39321} [1 bytes data]39322* TLSv1.3 (OUT), TLS handshake, Finished (20):39323} [52 bytes data]39324* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39325* ALPN: server accepted h239326* Server certificate:39327* subject: CN=test.foo39328* start date: Sep 20 10:18:25 2026 GMT39329* expire date: Oct 20 10:18:25 2028 GMT39330* issuer: CN=minica root ca 0d360739331* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439332* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439333* subjectAltName: "test.foo" matches cert's "test.foo"39334* OpenSSL verify result: 1339335* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39336* closing connection #039337curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39338More details here: https://curl.se/docs/sslcerts.html3933939340curl failed to verify the legitimacy of the server and therefore could not39341establish a secure connection to it. To learn more about this situation and39342how to fix it, please visit the webpage mentioned above.39343* Host test.foo:443 was resolved.39344* IPv6: 2001:db8:1::339345* IPv4: 192.168.1.339346* Trying [2001:db8:1::3]:443...39347* ALPN: curl offers h2,http/1.139348} [5 bytes data]39349* TLSv1.3 (OUT), TLS handshake, Client hello (1):39350} [1552 bytes data]39351* SSL Trust Anchors:39352* OpenSSL default paths (fallback)39353{ [5 bytes data]39354* TLSv1.3 (IN), TLS handshake, Server hello (2):39355{ [1210 bytes data]39356* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39357{ [1 bytes data]39358* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39359{ [19 bytes data]39360* TLSv1.3 (IN), TLS handshake, Certificate (11):39361{ [1009 bytes data]39362* TLSv1.3 (IN), TLS handshake, CERT verify (15):39363{ [111 bytes data]39364* TLSv1.3 (IN), TLS handshake, Finished (20):39365{ [52 bytes data]39366* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39367} [1 bytes data]39368* TLSv1.3 (OUT), TLS handshake, Finished (20):39369} [52 bytes data]39370* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39371* ALPN: server accepted h239372* Server certificate:39373* subject: CN=test.foo39374* start date: Sep 20 10:18:25 2026 GMT39375* expire date: Oct 20 10:18:25 2028 GMT39376* issuer: CN=minica root ca 0d360739377* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439378* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439379* subjectAltName: "test.foo" matches cert's "test.foo"39380* OpenSSL verify result: 1339381* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39382* closing connection #039383curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39384More details here: https://curl.se/docs/sslcerts.html3938539386curl failed to verify the legitimacy of the server and therefore could not39387establish a secure connection to it. To learn more about this situation and39388how to fix it, please visit the webpage mentioned above.39389* Host test.foo:443 was resolved.39390* IPv6: 2001:db8:1::339391* IPv4: 192.168.1.339392* Trying [2001:db8:1::3]:443...39393* ALPN: curl offers h2,http/1.139394} [5 bytes data]39395* TLSv1.3 (OUT), TLS handshake, Client hello (1):39396} [1552 bytes data]39397* SSL Trust Anchors:39398* OpenSSL default paths (fallback)39399{ [5 bytes data]39400* TLSv1.3 (IN), TLS handshake, Server hello (2):39401{ [1210 bytes data]39402* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39403{ [1 bytes data]39404* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39405{ [19 bytes data]39406* TLSv1.3 (IN), TLS handshake, Certificate (11):39407{ [1009 bytes data]39408* TLSv1.3 (IN), TLS handshake, CERT verify (15):39409{ [110 bytes data]39410* TLSv1.3 (IN), TLS handshake, Finished (20):39411{ [52 bytes data]39412* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39413} [1 bytes data]39414* TLSv1.3 (OUT), TLS handshake, Finished (20):39415} [52 bytes data]39416* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39417* ALPN: server accepted h239418* Server certificate:39419* subject: CN=test.foo39420* start date: Sep 20 10:18:25 2026 GMT39421* expire date: Oct 20 10:18:25 2028 GMT39422* issuer: CN=minica root ca 0d360739423* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439424* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439425* subjectAltName: "test.foo" matches cert's "test.foo"39426* OpenSSL verify result: 1339427* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39428* closing connection #039429curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39430More details here: https://curl.se/docs/sslcerts.html3943139432curl failed to verify the legitimacy of the server and therefore could not39433establish a secure connection to it. To learn more about this situation and39434how to fix it, please visit the webpage mentioned above.39435* Host test.foo:443 was resolved.39436* IPv6: 2001:db8:1::339437* IPv4: 192.168.1.339438* Trying [2001:db8:1::3]:443...39439* ALPN: curl offers h2,http/1.139440} [5 bytes data]39441* TLSv1.3 (OUT), TLS handshake, Client hello (1):39442} [1552 bytes data]39443* SSL Trust Anchors:39444* OpenSSL default paths (fallback)39445{ [5 bytes data]39446* TLSv1.3 (IN), TLS handshake, Server hello (2):39447{ [1210 bytes data]39448* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39449{ [1 bytes data]39450* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39451{ [19 bytes data]39452* TLSv1.3 (IN), TLS handshake, Certificate (11):39453{ [1009 bytes data]39454* TLSv1.3 (IN), TLS handshake, CERT verify (15):39455{ [111 bytes data]39456* TLSv1.3 (IN), TLS handshake, Finished (20):39457{ [52 bytes data]39458* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39459} [1 bytes data]39460* TLSv1.3 (OUT), TLS handshake, Finished (20):39461} [52 bytes data]39462* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39463* ALPN: server accepted h239464* Server certificate:39465* subject: CN=test.foo39466* start date: Sep 20 10:18:25 2026 GMT39467* expire date: Oct 20 10:18:25 2028 GMT39468* issuer: CN=minica root ca 0d360739469* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439470* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439471* subjectAltName: "test.foo" matches cert's "test.foo"39472* OpenSSL verify result: 1339473* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39474* closing connection #039475curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39476More details here: https://curl.se/docs/sslcerts.html3947739478curl failed to verify the legitimacy of the server and therefore could not39479establish a secure connection to it. To learn more about this situation and39480how to fix it, please visit the webpage mentioned above.39481* Host test.foo:443 was resolved.39482* IPv6: 2001:db8:1::339483* IPv4: 192.168.1.339484* Trying [2001:db8:1::3]:443...39485* ALPN: curl offers h2,http/1.139486} [5 bytes data]39487* TLSv1.3 (OUT), TLS handshake, Client hello (1):39488} [1552 bytes data]39489* SSL Trust Anchors:39490* OpenSSL default paths (fallback)39491{ [5 bytes data]39492* TLSv1.3 (IN), TLS handshake, Server hello (2):39493{ [1210 bytes data]39494* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39495{ [1 bytes data]39496* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39497{ [19 bytes data]39498* TLSv1.3 (IN), TLS handshake, Certificate (11):39499{ [1009 bytes data]39500* TLSv1.3 (IN), TLS handshake, CERT verify (15):39501{ [111 bytes data]39502* TLSv1.3 (IN), TLS handshake, Finished (20):39503{ [52 bytes data]39504* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39505} [1 bytes data]39506* TLSv1.3 (OUT), TLS handshake, Finished (20):39507} [52 bytes data]39508* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39509* ALPN: server accepted h239510* Server certificate:39511* subject: CN=test.foo39512* start date: Sep 20 10:18:25 2026 GMT39513* expire date: Oct 20 10:18:25 2028 GMT39514* issuer: CN=minica root ca 0d360739515* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439516* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439517* subjectAltName: "test.foo" matches cert's "test.foo"39518* OpenSSL verify result: 1339519* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39520* closing connection #039521curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39522More details here: https://curl.se/docs/sslcerts.html3952339524curl failed to verify the legitimacy of the server and therefore could not39525establish a secure connection to it. To learn more about this situation and39526how to fix it, please visit the webpage mentioned above.39527* Host test.foo:443 was resolved.39528* IPv6: 2001:db8:1::339529* IPv4: 192.168.1.339530* Trying [2001:db8:1::3]:443...39531* ALPN: curl offers h2,http/1.139532} [5 bytes data]39533* TLSv1.3 (OUT), TLS handshake, Client hello (1):39534} [1552 bytes data]39535* SSL Trust Anchors:39536* OpenSSL default paths (fallback)39537{ [5 bytes data]39538* TLSv1.3 (IN), TLS handshake, Server hello (2):39539{ [1210 bytes data]39540* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39541{ [1 bytes data]39542* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39543{ [19 bytes data]39544* TLSv1.3 (IN), TLS handshake, Certificate (11):39545{ [1009 bytes data]39546* TLSv1.3 (IN), TLS handshake, CERT verify (15):39547{ [112 bytes data]39548* TLSv1.3 (IN), TLS handshake, Finished (20):39549{ [52 bytes data]39550* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39551} [1 bytes data]39552* TLSv1.3 (OUT), TLS handshake, Finished (20):39553} [52 bytes data]39554* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39555* ALPN: server accepted h239556* Server certificate:39557* subject: CN=test.foo39558* start date: Sep 20 10:18:25 2026 GMT39559* expire date: Oct 20 10:18:25 2028 GMT39560* issuer: CN=minica root ca 0d360739561* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439562* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439563* subjectAltName: "test.foo" matches cert's "test.foo"39564* OpenSSL verify result: 1339565* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39566* closing connection #039567curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39568More details here: https://curl.se/docs/sslcerts.html3956939570curl failed to verify the legitimacy of the server and therefore could not39571establish a secure connection to it. To learn more about this situation and39572how to fix it, please visit the webpage mentioned above.39573client # [1393584.584570] client systemd[1]: Starting Cleanup of Temporary Directories...39574client # [1393584.687282] client systemd[1]: systemd-tmpfiles-clean.service: Deactivated successfully.39575client # [1393584.687767] client systemd[1]: Finished Cleanup of Temporary Directories.39576* Host test.foo:443 was resolved.39577* IPv6: 2001:db8:1::339578* IPv4: 192.168.1.339579* Trying [2001:db8:1::3]:443...39580* ALPN: curl offers h2,http/1.139581} [5 bytes data]39582* TLSv1.3 (OUT), TLS handshake, Client hello (1):39583} [1552 bytes data]39584* SSL Trust Anchors:39585* OpenSSL default paths (fallback)39586{ [5 bytes data]39587* TLSv1.3 (IN), TLS handshake, Server hello (2):39588{ [1210 bytes data]39589* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39590{ [1 bytes data]39591* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39592{ [19 bytes data]39593* TLSv1.3 (IN), TLS handshake, Certificate (11):39594{ [1009 bytes data]39595* TLSv1.3 (IN), TLS handshake, CERT verify (15):39596{ [112 bytes data]39597* TLSv1.3 (IN), TLS handshake, Finished (20):39598{ [52 bytes data]39599* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39600} [1 bytes data]39601* TLSv1.3 (OUT), TLS handshake, Finished (20):39602} [52 bytes data]39603* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39604* ALPN: server accepted h239605* Server certificate:39606* subject: CN=test.foo39607* start date: Sep 20 10:18:25 2026 GMT39608* expire date: Oct 20 10:18:25 2028 GMT39609* issuer: CN=minica root ca 0d360739610* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439611* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439612* subjectAltName: "test.foo" matches cert's "test.foo"39613* OpenSSL verify result: 1339614* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39615* closing connection #039616curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39617More details here: https://curl.se/docs/sslcerts.html3961839619curl failed to verify the legitimacy of the server and therefore could not39620establish a secure connection to it. To learn more about this situation and39621how to fix it, please visit the webpage mentioned above.39622* Trying [2001:db8:1::3]:443...39623* Host test.foo:443 was resolved.39624* IPv6: 2001:db8:1::339625* IPv4: 192.168.1.339626* ALPN: curl offers h2,http/1.139627} [5 bytes data]39628* TLSv1.3 (OUT), TLS handshake, Client hello (1):39629} [1552 bytes data]39630* SSL Trust Anchors:39631* OpenSSL default paths (fallback)39632{ [5 bytes data]39633* TLSv1.3 (IN), TLS handshake, Server hello (2):39634{ [1210 bytes data]39635* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39636{ [1 bytes data]39637* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39638{ [19 bytes data]39639* TLSv1.3 (IN), TLS handshake, Certificate (11):39640{ [1009 bytes data]39641* TLSv1.3 (IN), TLS handshake, CERT verify (15):39642{ [111 bytes data]39643* TLSv1.3 (IN), TLS handshake, Finished (20):39644{ [52 bytes data]39645* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39646} [1 bytes data]39647* TLSv1.3 (OUT), TLS handshake, Finished (20):39648} [52 bytes data]39649* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39650* ALPN: server accepted h239651* Server certificate:39652* subject: CN=test.foo39653* start date: Sep 20 10:18:25 2026 GMT39654* expire date: Oct 20 10:18:25 2028 GMT39655* issuer: CN=minica root ca 0d360739656* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439657* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439658* subjectAltName: "test.foo" matches cert's "test.foo"39659* OpenSSL verify result: 1339660* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39661* closing connection #039662curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39663More details here: https://curl.se/docs/sslcerts.html3966439665curl failed to verify the legitimacy of the server and therefore could not39666establish a secure connection to it. To learn more about this situation and39667how to fix it, please visit the webpage mentioned above.39668* Host test.foo:443 was resolved.39669* IPv6: 2001:db8:1::339670* IPv4: 192.168.1.339671* Trying [2001:db8:1::3]:443...39672* ALPN: curl offers h2,http/1.139673} [5 bytes data]39674* TLSv1.3 (OUT), TLS handshake, Client hello (1):39675} [1552 bytes data]39676* SSL Trust Anchors:39677* OpenSSL default paths (fallback)39678{ [5 bytes data]39679* TLSv1.3 (IN), TLS handshake, Server hello (2):39680{ [1210 bytes data]39681* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39682{ [1 bytes data]39683* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39684{ [19 bytes data]39685* TLSv1.3 (IN), TLS handshake, Certificate (11):39686{ [1009 bytes data]39687* TLSv1.3 (IN), TLS handshake, CERT verify (15):39688{ [111 bytes data]39689* TLSv1.3 (IN), TLS handshake, Finished (20):39690{ [52 bytes data]39691* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39692} [1 bytes data]39693* TLSv1.3 (OUT), TLS handshake, Finished (20):39694} [52 bytes data]39695* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39696* ALPN: server accepted h239697* Server certificate:39698* subject: CN=test.foo39699* start date: Sep 20 10:18:25 2026 GMT39700* expire date: Oct 20 10:18:25 2028 GMT39701* issuer: CN=minica root ca 0d360739702* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439703* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439704* subjectAltName: "test.foo" matches cert's "test.foo"39705* OpenSSL verify result: 1339706* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39707* closing connection #039708curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39709More details here: https://curl.se/docs/sslcerts.html3971039711curl failed to verify the legitimacy of the server and therefore could not39712establish a secure connection to it. To learn more about this situation and39713how to fix it, please visit the webpage mentioned above.39714* Host test.foo:443 was resolved.39715* IPv6: 2001:db8:1::339716* IPv4: 192.168.1.339717* Trying [2001:db8:1::3]:443...39718* ALPN: curl offers h2,http/1.139719} [5 bytes data]39720* TLSv1.3 (OUT), TLS handshake, Client hello (1):39721} [1552 bytes data]39722* SSL Trust Anchors:39723* OpenSSL default paths (fallback)39724{ [5 bytes data]39725* TLSv1.3 (IN), TLS handshake, Server hello (2):39726{ [1210 bytes data]39727* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39728{ [1 bytes data]39729* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39730{ [19 bytes data]39731* TLSv1.3 (IN), TLS handshake, Certificate (11):39732{ [1009 bytes data]39733* TLSv1.3 (IN), TLS handshake, CERT verify (15):39734{ [110 bytes data]39735* TLSv1.3 (IN), TLS handshake, Finished (20):39736{ [52 bytes data]39737* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39738} [1 bytes data]39739* TLSv1.3 (OUT), TLS handshake, Finished (20):39740} [52 bytes data]39741* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39742* ALPN: server accepted h239743* Server certificate:39744* subject: CN=test.foo39745* start date: Sep 20 10:18:25 2026 GMT39746* expire date: Oct 20 10:18:25 2028 GMT39747* issuer: CN=minica root ca 0d360739748* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439749* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439750* subjectAltName: "test.foo" matches cert's "test.foo"39751* OpenSSL verify result: 1339752* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39753* closing connection #039754curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39755More details here: https://curl.se/docs/sslcerts.html3975639757curl failed to verify the legitimacy of the server and therefore could not39758establish a secure connection to it. To learn more about this situation and39759how to fix it, please visit the webpage mentioned above.39760* Host test.foo:443 was resolved.39761* IPv6: 2001:db8:1::339762* IPv4: 192.168.1.339763* Trying [2001:db8:1::3]:443...39764* ALPN: curl offers h2,http/1.139765} [5 bytes data]39766* TLSv1.3 (OUT), TLS handshake, Client hello (1):39767} [1552 bytes data]39768* SSL Trust Anchors:39769* OpenSSL default paths (fallback)39770{ [5 bytes data]39771* TLSv1.3 (IN), TLS handshake, Server hello (2):39772{ [1210 bytes data]39773* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39774{ [1 bytes data]39775* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39776{ [19 bytes data]39777* TLSv1.3 (IN), TLS handshake, Certificate (11):39778{ [1009 bytes data]39779* TLSv1.3 (IN), TLS handshake, CERT verify (15):39780{ [111 bytes data]39781* TLSv1.3 (IN), TLS handshake, Finished (20):39782{ [52 bytes data]39783* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39784} [1 bytes data]39785* TLSv1.3 (OUT), TLS handshake, Finished (20):39786} [52 bytes data]39787* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39788* ALPN: server accepted h239789* Server certificate:39790* subject: CN=test.foo39791* start date: Sep 20 10:18:25 2026 GMT39792* expire date: Oct 20 10:18:25 2028 GMT39793* issuer: CN=minica root ca 0d360739794* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439795* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439796* subjectAltName: "test.foo" matches cert's "test.foo"39797* OpenSSL verify result: 1339798* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39799* closing connection #039800curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39801More details here: https://curl.se/docs/sslcerts.html3980239803curl failed to verify the legitimacy of the server and therefore could not39804establish a secure connection to it. To learn more about this situation and39805how to fix it, please visit the webpage mentioned above.39806* Trying [2001:db8:1::3]:443...39807* Host test.foo:443 was resolved.39808* IPv6: 2001:db8:1::339809* IPv4: 192.168.1.339810* ALPN: curl offers h2,http/1.139811} [5 bytes data]39812* TLSv1.3 (OUT), TLS handshake, Client hello (1):39813} [1552 bytes data]39814* SSL Trust Anchors:39815* OpenSSL default paths (fallback)39816{ [5 bytes data]39817* TLSv1.3 (IN), TLS handshake, Server hello (2):39818{ [1210 bytes data]39819* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39820{ [1 bytes data]39821* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39822{ [19 bytes data]39823* TLSv1.3 (IN), TLS handshake, Certificate (11):39824{ [1009 bytes data]39825* TLSv1.3 (IN), TLS handshake, CERT verify (15):39826{ [111 bytes data]39827* TLSv1.3 (IN), TLS handshake, Finished (20):39828{ [52 bytes data]39829* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39830} [1 bytes data]39831* TLSv1.3 (OUT), TLS handshake, Finished (20):39832} [52 bytes data]39833* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39834* ALPN: server accepted h239835* Server certificate:39836* subject: CN=test.foo39837* start date: Sep 20 10:18:25 2026 GMT39838* expire date: Oct 20 10:18:25 2028 GMT39839* issuer: CN=minica root ca 0d360739840* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439841* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439842* subjectAltName: "test.foo" matches cert's "test.foo"39843* OpenSSL verify result: 1339844* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39845* closing connection #039846curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39847More details here: https://curl.se/docs/sslcerts.html3984839849curl failed to verify the legitimacy of the server and therefore could not39850establish a secure connection to it. To learn more about this situation and39851how to fix it, please visit the webpage mentioned above.39852* Host test.foo:443 was resolved.39853* IPv6: 2001:db8:1::339854* IPv4: 192.168.1.339855* Trying [2001:db8:1::3]:443...39856* ALPN: curl offers h2,http/1.139857} [5 bytes data]39858* TLSv1.3 (OUT), TLS handshake, Client hello (1):39859} [1552 bytes data]39860* SSL Trust Anchors:39861* OpenSSL default paths (fallback)39862{ [5 bytes data]39863* TLSv1.3 (IN), TLS handshake, Server hello (2):39864{ [1210 bytes data]39865* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39866{ [1 bytes data]39867* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39868{ [19 bytes data]39869* TLSv1.3 (IN), TLS handshake, Certificate (11):39870{ [1009 bytes data]39871* TLSv1.3 (IN), TLS handshake, CERT verify (15):39872{ [112 bytes data]39873* TLSv1.3 (IN), TLS handshake, Finished (20):39874{ [52 bytes data]39875* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39876} [1 bytes data]39877* TLSv1.3 (OUT), TLS handshake, Finished (20):39878} [52 bytes data]39879* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39880* ALPN: server accepted h239881* Server certificate:39882* subject: CN=test.foo39883* start date: Sep 20 10:18:25 2026 GMT39884* expire date: Oct 20 10:18:25 2028 GMT39885* issuer: CN=minica root ca 0d360739886* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439887* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439888* subjectAltName: "test.foo" matches cert's "test.foo"39889* OpenSSL verify result: 1339890* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39891* closing connection #039892curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39893More details here: https://curl.se/docs/sslcerts.html3989439895curl failed to verify the legitimacy of the server and therefore could not39896establish a secure connection to it. To learn more about this situation and39897how to fix it, please visit the webpage mentioned above.39898ca # [1393591.414392] ca systemd[1]: Starting Cleanup of Temporary Directories...39899ca # [1393591.524239] ca systemd[1]: systemd-tmpfiles-clean.service: Deactivated successfully.39900ca # [1393591.524608] ca systemd[1]: Finished Cleanup of Temporary Directories.39901server # [1393591.528334] server systemd[1]: Starting Cleanup of Temporary Directories...39902server # [1393591.635245] server systemd[1]: systemd-tmpfiles-clean.service: Deactivated successfully.39903server # [1393591.635588] server systemd[1]: Finished Cleanup of Temporary Directories.39904* Host test.foo:443 was resolved.39905* IPv6: 2001:db8:1::339906* IPv4: 192.168.1.339907* Trying [2001:db8:1::3]:443...39908* ALPN: curl offers h2,http/1.139909} [5 bytes data]39910* TLSv1.3 (OUT), TLS handshake, Client hello (1):39911} [1552 bytes data]39912* SSL Trust Anchors:39913* OpenSSL default paths (fallback)39914{ [5 bytes data]39915* TLSv1.3 (IN), TLS handshake, Server hello (2):39916{ [1210 bytes data]39917* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39918{ [1 bytes data]39919* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39920{ [19 bytes data]39921* TLSv1.3 (IN), TLS handshake, Certificate (11):39922{ [1009 bytes data]39923* TLSv1.3 (IN), TLS handshake, CERT verify (15):39924{ [111 bytes data]39925* TLSv1.3 (IN), TLS handshake, Finished (20):39926{ [52 bytes data]39927* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39928} [1 bytes data]39929* TLSv1.3 (OUT), TLS handshake, Finished (20):39930} [52 bytes data]39931* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39932* ALPN: server accepted h239933* Server certificate:39934* subject: CN=test.foo39935* start date: Sep 20 10:18:25 2026 GMT39936* expire date: Oct 20 10:18:25 2028 GMT39937* issuer: CN=minica root ca 0d360739938* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439939* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439940* subjectAltName: "test.foo" matches cert's "test.foo"39941* OpenSSL verify result: 1339942* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39943* closing connection #039944curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39945More details here: https://curl.se/docs/sslcerts.html3994639947curl failed to verify the legitimacy of the server and therefore could not39948establish a secure connection to it. To learn more about this situation and39949how to fix it, please visit the webpage mentioned above.39950* Host test.foo:443 was resolved.39951* IPv6: 2001:db8:1::339952* IPv4: 192.168.1.339953* Trying [2001:db8:1::3]:443...39954* ALPN: curl offers h2,http/1.139955} [5 bytes data]39956* TLSv1.3 (OUT), TLS handshake, Client hello (1):39957} [1552 bytes data]39958* SSL Trust Anchors:39959* OpenSSL default paths (fallback)39960{ [5 bytes data]39961* TLSv1.3 (IN), TLS handshake, Server hello (2):39962{ [1210 bytes data]39963* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39964{ [1 bytes data]39965* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39966{ [19 bytes data]39967* TLSv1.3 (IN), TLS handshake, Certificate (11):39968{ [1009 bytes data]39969* TLSv1.3 (IN), TLS handshake, CERT verify (15):39970{ [111 bytes data]39971* TLSv1.3 (IN), TLS handshake, Finished (20):39972{ [52 bytes data]39973* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39974} [1 bytes data]39975* TLSv1.3 (OUT), TLS handshake, Finished (20):39976} [52 bytes data]39977* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39978* ALPN: server accepted h239979* Server certificate:39980* subject: CN=test.foo39981* start date: Sep 20 10:18:25 2026 GMT39982* expire date: Oct 20 10:18:25 2028 GMT39983* issuer: CN=minica root ca 0d360739984* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439985* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439986* subjectAltName: "test.foo" matches cert's "test.foo"39987* OpenSSL verify result: 1339988* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39989* closing connection #039990curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39991More details here: https://curl.se/docs/sslcerts.html3999239993curl failed to verify the legitimacy of the server and therefore could not39994establish a secure connection to it. To learn more about this situation and39995how to fix it, please visit the webpage mentioned above.39996* Trying [2001:db8:1::3]:443...39997* Host test.foo:443 was resolved.39998* IPv6: 2001:db8:1::339999* IPv4: 192.168.1.340000* ALPN: curl offers h2,http/1.140001} [5 bytes data]40002* TLSv1.3 (OUT), TLS handshake, Client hello (1):40003} [1552 bytes data]40004* SSL Trust Anchors:40005* OpenSSL default paths (fallback)40006{ [5 bytes data]40007* TLSv1.3 (IN), TLS handshake, Server hello (2):40008{ [1210 bytes data]40009* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):40010{ [1 bytes data]40011* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):40012{ [19 bytes data]40013* TLSv1.3 (IN), TLS handshake, Certificate (11):40014{ [1009 bytes data]40015* TLSv1.3 (IN), TLS handshake, CERT verify (15):40016{ [110 bytes data]40017* TLSv1.3 (IN), TLS handshake, Finished (20):40018{ [52 bytes data]40019* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):40020} [1 bytes data]40021* TLSv1.3 (OUT), TLS handshake, Finished (20):40022} [52 bytes data]40023* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey40024* ALPN: server accepted h240025* Server certificate:40026* subject: CN=test.foo40027* start date: Sep 20 10:18:25 2026 GMT40028* expire date: Oct 20 10:18:25 2028 GMT40029* issuer: CN=minica root ca 0d360740030* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38440031* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38440032* subjectAltName: "test.foo" matches cert's "test.foo"40033* OpenSSL verify result: 1340034* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)40035* closing connection #040036curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)40037More details here: https://curl.se/docs/sslcerts.html4003840039curl failed to verify the legitimacy of the server and therefore could not40040establish a secure connection to it. To learn more about this situation and40041how to fix it, please visit the webpage mentioned above.40042* Host test.foo:443 was resolved.40043* IPv6: 2001:db8:1::340044* IPv4: 192.168.1.340045* Trying [2001:db8:1::3]:443...40046* ALPN: curl offers h2,http/1.140047} [5 bytes data]40048* TLSv1.3 (OUT), TLS handshake, Client hello (1):40049} [1552 bytes data]40050* SSL Trust Anchors:40051* OpenSSL default paths (fallback)40052{ [5 bytes data]40053* TLSv1.3 (IN), TLS handshake, Server hello (2):40054{ [1210 bytes data]40055* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):40056{ [1 bytes data]40057* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):40058{ [19 bytes data]40059* TLSv1.3 (IN), TLS handshake, Certificate (11):40060{ [1009 bytes data]40061* TLSv1.3 (IN), TLS handshake, CERT verify (15):40062{ [112 bytes data]40063* TLSv1.3 (IN), TLS handshake, Finished (20):40064{ [52 bytes data]40065* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):40066} [1 bytes data]40067* TLSv1.3 (OUT), TLS handshake, Finished (20):40068} [52 bytes data]40069* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey40070* ALPN: server accepted h240071* Server certificate:40072* subject: CN=test.foo40073* start date: Sep 20 10:18:25 2026 GMT40074* expire date: Oct 20 10:18:25 2028 GMT40075* issuer: CN=minica root ca 0d360740076* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38440077* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38440078* subjectAltName: "test.foo" matches cert's "test.foo"40079* OpenSSL verify result: 1340080* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)40081* closing connection #040082curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)40083More details here: https://curl.se/docs/sslcerts.html4008440085curl failed to verify the legitimacy of the server and therefore could not40086establish a secure connection to it. To learn more about this situation and40087how to fix it, please visit the webpage mentioned above.40088* Host test.foo:443 was resolved.40089* IPv6: 2001:db8:1::340090* IPv4: 192.168.1.340091* Trying [2001:db8:1::3]:443...40092* ALPN: curl offers h2,http/1.140093} [5 bytes data]40094* TLSv1.3 (OUT), TLS handshake, Client hello (1):40095} [1552 bytes data]40096* SSL Trust Anchors:40097* OpenSSL default paths (fallback)40098{ [5 bytes data]40099* TLSv1.3 (IN), TLS handshake, Server hello (2):40100{ [1210 bytes data]40101* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):40102{ [1 bytes data]40103* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):40104{ [19 bytes data]40105* TLSv1.3 (IN), TLS handshake, Certificate (11):40106{ [1009 bytes data]40107* TLSv1.3 (IN), TLS handshake, CERT verify (15):40108{ [112 bytes data]40109* TLSv1.3 (IN), TLS handshake, Finished (20):40110{ [52 bytes data]40111* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):40112} [1 bytes data]40113* TLSv1.3 (OUT), TLS handshake, Finished (20):40114} [52 bytes data]40115* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey40116* ALPN: server accepted h240117* Server certificate:40118* subject: CN=test.foo40119* start date: Sep 20 10:18:25 2026 GMT40120* expire date: Oct 20 10:18:25 2028 GMT40121* issuer: CN=minica root ca 0d360740122* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38440123* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38440124* subjectAltName: "test.foo" matches cert's "test.foo"40125* OpenSSL verify result: 1340126* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)40127* closing connection #040128curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)40129More details here: https://curl.se/docs/sslcerts.html4013040131curl failed to verify the legitimacy of the server and therefore could not40132establish a secure connection to it. To learn more about this situation and40133how to fix it, please visit the webpage mentioned above.40134!!! Traceback (most recent call last):40135!!! File "<string>", line 13, in <module>40136!!! client.wait_until_succeeds("curl -v https://test.foo")40137!!! 40138!!! RequestedAssertionFailed: action timed out after 900.96 seconds (timeout=900.0)40139cleanup40140kill NspawnMachine (pid 52)40141kill NspawnMachine (pid 54)40142Container ca terminated by signal KILL.40143kill NspawnMachine (pid 57)40144Container client terminated by signal KILL.40145Container server terminated by signal KILL.40146(finished: cleanup, in 0.49 seconds)