container-test-run-certificates
checks.aarch64-linux.certificates
· build #735
· raw
1Machine state will be reset. To keep it, pass --keep-machine-state2start all VLans3(finished: start all VLans, in 0.00 seconds)45Test will time out and terminate in 3600.0 seconds6run the VM test script7additionally exposed symbols:8 ca, client, server,9 vlan1,10 start_all, test_script, machines, machines_qemu, machines_nspawn, vlans, driver, log, os, create_machine, subtest, run_tests, join_all, retry, serial_stdout_off, serial_stdout_on, polling_condition, BaseMachine, QemuMachine, NspawnMachine, t, debug, dump_machine_ssh11start all VMs12ca: systemd-nspawn running (pid 52)13client: systemd-nspawn running (pid 54)14ca: Waiting for journal at /build/vm-state-ca/var/log/journal...15client: Waiting for journal at /build/vm-state-client/var/log/journal...16server: systemd-nspawn running (pid 57)17server: Waiting for journal at /build/vm-state-server/var/log/journal...18(finished: start all VMs, in 0.00 seconds)19nixos-nspawn(ca): TAP vde-tap1 not found; container will be isolated from VDE20nixos-nspawn(ca): A common reason for this is that /dev/net is not available in the Nix sandbox. Try adding /dev/net to extra-sandbox-paths.21nixos-nspawn(client): TAP vde-tap1 not found; container will be isolated from VDE22nixos-nspawn(client): A common reason for this is that /dev/net is not available in the Nix sandbox. Try adding /dev/net to extra-sandbox-paths.23nixos-nspawn(server): TAP vde-tap1 not found; container will be isolated from VDE24nixos-nspawn(server): A common reason for this is that /dev/net is not available in the Nix sandbox. Try adding /dev/net to extra-sandbox-paths.25Note: in a future version of systemd-nspawn the default set of permitted socket address families will be restricted to AF_INET, AF_INET6 and AF_UNIX. Use --restrict-address-families= to configure the set of permitted socket address families, or set RestrictAddressFamilies= in a .nspawn file.26Note: in a future version of systemd-nspawn the default set of permitted socket address families will be restricted to AF_INET, AF_INET6 and AF_UNIX. Use --restrict-address-families= to configure the set of permitted socket address families, or set RestrictAddressFamilies= in a .nspawn file.27Note: in a future version of systemd-nspawn the default set of permitted socket address families will be restricted to AF_INET, AF_INET6 and AF_UNIX. Use --restrict-address-families= to configure the set of permitted socket address families, or set RestrictAddressFamilies= in a .nspawn file.28░ Spawning container ca on /build/vm-state-ca.29░ Spawning container client on /build/vm-state-client.30░ Spawning container server on /build/vm-state-server.31ca # No journal files were found.32ca # No journal boot entry found for the specified boot (+0).33client # No journal files were found.34client # No journal boot entry found for the specified boot (+0).35server # No journal files were found.36server # No journal boot entry found for the specified boot (+0).37ca # [1416298.695077] ca systemd-journald[80]: Journal started38client # [1416298.699169] client systemd-journald[72]: Journal started39ca # [1416298.695133] ca systemd-journald[80]: Runtime Journal (/run/log/journal/77db9a14988340d2bcab6584aeebc03a) is 8M, max 2.5G, 2.4G free.40client # [1416298.699223] client systemd-journald[72]: Runtime Journal (/run/log/journal/7796b874f9194d839a21113bb2ed880d) is 8M, max 2.5G, 2.4G free.41ca # [1416298.704265] ca systemd[1]: Finished Apply Kernel Variables.42client # [1416298.708024] client systemd[1]: Finished Apply Kernel Variables.43client # [1416298.720416] client systemd[1]: Finished Create Static Device Nodes in /dev gracefully.44client # [1416298.734626] client systemd[1]: Starting Flush Journal to Persistent Storage...45client # [1416298.735453] client systemd[1]: Starting Network Name Resolution...46client # [1416298.736317] client systemd[1]: Starting Create Static Device Nodes in /dev...47ca # [1416298.717040] ca systemd[1]: Finished Create Static Device Nodes in /dev gracefully.48client # [1416298.779619] client systemd-journald[72]: Time spent on flushing to /var/log/journal/7796b874f9194d839a21113bb2ed880d is 2.079ms for 7 entries.49ca # [1416298.732548] ca systemd[1]: Starting Flush Journal to Persistent Storage...50client # [1416298.779619] client systemd-journald[72]: System Journal (/var/log/journal/7796b874f9194d839a21113bb2ed880d) is 8M, max 4G, 3.9G free.51ca # [1416298.733379] ca systemd[1]: Starting Network Name Resolution...52client # [1416298.808311] client systemd[1]: Finished Flush Journal to Persistent Storage.53ca # [1416298.734077] ca systemd[1]: Starting Create Static Device Nodes in /dev...54client # [1416298.808731] client systemd[1]: Finished Create Static Device Nodes in /dev.55ca # [1416298.778684] ca systemd-journald[80]: Time spent on flushing to /var/log/journal/77db9a14988340d2bcab6584aeebc03a is 1.522ms for 7 entries.56client # [1416298.809832] client systemd[1]: Reached target Preparation for Local File Systems.57ca # [1416298.778684] ca systemd-journald[80]: System Journal (/var/log/journal/77db9a14988340d2bcab6584aeebc03a) is 8M, max 4G, 3.9G free.58client # [1416298.809977] client systemd[1]: Reached target Local File Systems.59client # [1416298.810790] client systemd[1]: Listening on Boot Loader Control Service Socket.60client # [1416298.810838] client systemd[1]: Update Boot Loader Random Seed skipped, unmet condition check ConditionVirtualization=!container61client # [1416298.811677] client systemd[1]: Starting Save Transient machine-id to Disk...62client # [1416298.812379] client systemd[1]: Starting Create System Files and Directories...63client # [1416298.812414] client systemd[1]: Rule-based Manager for Device Events and Files skipped, unmet condition check ConditionPathIsReadWrite=/sys64client # [1416298.827070] client systemd-tmpfiles[148]: Cannot set file attributes for '/var/empty', value=0x00000010, mask=0x00000010, ignoring: Operation not permitted65client # [1416298.827249] client systemd-tmpfiles[148]: fchmod() of /var/log/journal failed: Operation not permitted66client # [1416298.827372] client systemd-tmpfiles[148]: fchmod() of /var/log/journal/7796b874f9194d839a21113bb2ed880d failed: Operation not permitted67client # [1416298.827554] client systemd-tmpfiles[148]: fchmod() of /run/log/journal failed: Operation not permitted68client # [1416298.828962] client systemd[1]: Finished Create System Files and Directories.69client # [1416298.830108] client systemd[1]: Starting Rebuild Journal Catalog...70client # [1416298.830940] client systemd[1]: Starting Record System Boot/Shutdown in UTMP...71client # [1416298.845506] client systemd[1]: Finished Record System Boot/Shutdown in UTMP.72ca # [1416298.808312] ca systemd[1]: Finished Flush Journal to Persistent Storage.73client # [1416298.855228] client systemd[1]: Finished Save Transient machine-id to Disk.74client # [1416298.855397] client systemd[1]: Finished Rebuild Journal Catalog.75client # [1416298.857308] client systemd[1]: Starting Update is Completed...76client # [1416298.868305] client systemd[1]: Finished Update is Completed.77ca # [1416298.808763] ca systemd[1]: Finished Create Static Device Nodes in /dev.78server # [1416298.693691] server systemd-journald[72]: Journal started79ca # [1416298.809866] ca systemd[1]: Reached target Preparation for Local File Systems.80server # [1416298.693749] server systemd-journald[72]: Runtime Journal (/run/log/journal/b7449d9ccb284cf287a026b69ec1b29f) is 8M, max 2.5G, 2.4G free.81client # [1416298.868598] client systemd[1]: Finished Firewall.82ca # [1416298.810006] ca systemd[1]: Reached target Local File Systems.83client # [1416298.869207] client systemd[1]: Reached target Preparation for Network.84ca # [1416298.810843] ca systemd[1]: Listening on Boot Loader Control Service Socket.85ca # [1416298.810897] ca systemd[1]: Update Boot Loader Random Seed skipped, unmet condition check ConditionVirtualization=!container86server # [1416298.705354] server systemd[1]: Finished Apply Kernel Variables.87ca # [1416298.811791] ca systemd[1]: Starting Save Transient machine-id to Disk...88client # [1416298.869554] client systemd[1]: Listening on Network Management Resolve Hook Socket.89ca # [1416298.812444] ca systemd[1]: Starting Create System Files and Directories...90server # [1416298.718232] server systemd[1]: Finished Create Static Device Nodes in /dev gracefully.91ca # [1416298.812476] ca systemd[1]: Rule-based Manager for Device Events and Files skipped, unmet condition check ConditionPathIsReadWrite=/sys92server # [1416298.733147] server systemd[1]: Starting Flush Journal to Persistent Storage...93server # [1416298.733984] server systemd[1]: Starting Network Name Resolution...94server # [1416298.734834] server systemd[1]: Starting Create Static Device Nodes in /dev...95server # [1416298.779952] server systemd-journald[72]: Time spent on flushing to /var/log/journal/b7449d9ccb284cf287a026b69ec1b29f is 1.652ms for 7 entries.96server # [1416298.779952] server systemd-journald[72]: System Journal (/var/log/journal/b7449d9ccb284cf287a026b69ec1b29f) is 8M, max 4G, 3.9G free.97server # [1416298.808319] server systemd[1]: Finished Flush Journal to Persistent Storage.98server # [1416298.808764] server systemd[1]: Finished Create Static Device Nodes in /dev.99server # [1416298.809822] server systemd[1]: Reached target Preparation for Local File Systems.100server # [1416298.809951] server systemd[1]: Reached target Local File Systems.101client # [1416298.870799] client systemd[1]: Starting Network Management...102server # [1416298.810806] server systemd[1]: Listening on Boot Loader Control Service Socket.103ca # [1416298.828865] ca systemd-tmpfiles[160]: Cannot set file attributes for '/var/empty', value=0x00000010, mask=0x00000010, ignoring: Operation not permitted104server # [1416298.810858] server systemd[1]: Update Boot Loader Random Seed skipped, unmet condition check ConditionVirtualization=!container105ca # [1416298.829069] ca systemd-tmpfiles[160]: fchmod() of /var/log/journal failed: Operation not permitted106server # [1416298.811753] server systemd[1]: Starting Save Transient machine-id to Disk...107ca # [1416298.829210] ca systemd-tmpfiles[160]: fchmod() of /var/log/journal/77db9a14988340d2bcab6584aeebc03a failed: Operation not permitted108server # [1416298.812400] server systemd[1]: Starting Create System Files and Directories...109ca # [1416298.829423] ca systemd-tmpfiles[160]: fchmod() of /run/log/journal failed: Operation not permitted110server # [1416298.812432] server systemd[1]: Rule-based Manager for Device Events and Files skipped, unmet condition check ConditionPathIsReadWrite=/sys111ca # [1416298.831002] ca systemd[1]: Finished Create System Files and Directories.112server # [1416298.829066] server systemd-tmpfiles[152]: Cannot set file attributes for '/var/empty', value=0x00000010, mask=0x00000010, ignoring: Operation not permitted113ca # [1416298.832222] ca systemd[1]: Starting Rebuild Journal Catalog...114client # [1416299.570238] client systemd-networkd[186]: Failed to increase receive buffer size for general netlink socket, ignoring: Operation not permitted115ca # [1416298.833021] ca systemd[1]: Starting Record System Boot/Shutdown in UTMP...116server # [1416298.829276] server systemd-tmpfiles[152]: fchmod() of /var/log/journal failed: Operation not permitted117ca # [1416298.850210] ca systemd[1]: Finished Record System Boot/Shutdown in UTMP.118server # [1416298.829420] server systemd-tmpfiles[152]: fchmod() of /var/log/journal/b7449d9ccb284cf287a026b69ec1b29f failed: Operation not permitted119server # [1416298.829634] server systemd-tmpfiles[152]: fchmod() of /run/log/journal failed: Operation not permitted120server # [1416298.831249] server systemd[1]: Finished Create System Files and Directories.121server # [1416298.832568] server systemd[1]: Starting Rebuild Journal Catalog...122server # [1416298.833472] server systemd[1]: Starting Record System Boot/Shutdown in UTMP...123server # [1416298.848754] server systemd[1]: Finished Record System Boot/Shutdown in UTMP.124client # [1416299.570328] client systemd-networkd[186]: Failed to increase receive buffer size for nftables netlink socket, ignoring: Operation not permitted125ca # [1416298.855762] ca systemd[1]: Finished Save Transient machine-id to Disk.126client # [1416299.580338] client systemd-networkd[186]: /etc/systemd/network/99-ethernet-default-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section.127server # [1416298.854838] server systemd[1]: Finished Rebuild Journal Catalog.128ca # [1416298.856040] ca systemd[1]: Finished Rebuild Journal Catalog.129client # [1416299.580505] client systemd-networkd[186]: /etc/systemd/network/99-wireless-client-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section.130ca # [1416298.858385] ca systemd[1]: Starting Update is Completed...131server # [1416298.855189] server systemd[1]: Finished Save Transient machine-id to Disk.132ca # [1416298.869367] ca systemd[1]: Finished Update is Completed.133server # [1416298.857335] server systemd[1]: Starting Update is Completed...134server # [1416298.867687] server systemd[1]: Finished Update is Completed.135server # [1416298.869004] server systemd[1]: Finished Firewall.136server # [1416298.869225] server systemd[1]: Reached target Preparation for Network.137server # [1416298.869556] server systemd[1]: Listening on Network Management Resolve Hook Socket.138server # [1416298.870954] server systemd[1]: Starting Network Management...139server # [1416299.581897] server systemd-networkd[190]: Failed to increase receive buffer size for general netlink socket, ignoring: Operation not permitted140server # [1416299.581981] server systemd-networkd[190]: Failed to increase receive buffer size for nftables netlink socket, ignoring: Operation not permitted141server # [1416299.591812] server systemd-networkd[190]: /etc/systemd/network/99-ethernet-default-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section.142server # [1416299.591978] server systemd-networkd[190]: /etc/systemd/network/99-wireless-client-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section.143server # [1416299.592123] server systemd-networkd[190]: lo: Link UP144server # [1416299.592128] server systemd-networkd[190]: lo: Gained carrier145client # [1416299.580649] client systemd-networkd[186]: lo: Link UP146ca # [1416298.870654] ca systemd[1]: Finished Firewall.147client # [1416299.580653] client systemd-networkd[186]: lo: Gained carrier148server # [1416299.592308] server systemd-networkd[190]: eth1: Configuring with /etc/systemd/network/40-eth1.network.149ca # [1416298.870838] ca systemd[1]: Reached target Preparation for Network.150server # [1416299.592665] server systemd[1]: Started Network Management.151server # [1416299.608602] server systemd-networkd[190]: eth1: Link UP152server # [1416299.608922] server systemd-networkd[190]: eth1: Gained carrier153server # [1416299.609239] server systemd[1]: Starting Enable Persistent Storage in systemd-networkd...154server # [1416299.666566] server systemd[1]: Finished Enable Persistent Storage in systemd-networkd.155server # [1416299.705477] server systemd[1]: etc-machine\x2did.mount: Deactivated successfully.156client # [1416299.580821] client systemd-networkd[186]: eth1: Configuring with /etc/systemd/network/40-eth1.network.157ca # [1416298.871094] ca systemd[1]: Listening on Network Management Resolve Hook Socket.158client # [1416299.581204] client systemd[1]: Started Network Management.159ca # [1416298.872285] ca systemd[1]: Starting Network Management...160client # [1416299.608303] client systemd-networkd[186]: eth1: Link UP161ca # [1416299.560848] ca systemd-networkd[198]: Failed to increase receive buffer size for general netlink socket, ignoring: Operation not permitted162client # [1416299.608452] client systemd[1]: Starting Enable Persistent Storage in systemd-networkd...163ca # [1416299.560939] ca systemd-networkd[198]: Failed to increase receive buffer size for nftables netlink socket, ignoring: Operation not permitted164client # [1416299.608652] client systemd-networkd[186]: eth1: Gained carrier165ca # [1416299.572299] ca systemd-networkd[198]: /etc/systemd/network/99-ethernet-default-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section.166client # [1416299.666605] client systemd[1]: Finished Enable Persistent Storage in systemd-networkd.167ca # [1416299.572467] ca systemd-networkd[198]: /etc/systemd/network/99-wireless-client-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section.168client # [1416299.714620] client systemd[1]: etc-machine\x2did.mount: Deactivated successfully.169ca # [1416299.572607] ca systemd-networkd[198]: lo: Link UP170ca # [1416299.572612] ca systemd-networkd[198]: lo: Gained carrier171ca # [1416299.572804] ca systemd-networkd[198]: eth1: Configuring with /etc/systemd/network/40-eth1.network.172ca # [1416299.573192] ca systemd[1]: Started Network Management.173ca # [1416299.573239] ca systemd-networkd[198]: eth1: Link UP174ca # [1416299.573545] ca systemd-networkd[198]: eth1: Gained carrier175ca # [1416299.574953] ca systemd[1]: Starting Enable Persistent Storage in systemd-networkd...176ca # [1416299.626444] ca systemd[1]: Finished Enable Persistent Storage in systemd-networkd.177ca # [1416299.705507] ca systemd[1]: etc-machine\x2did.mount: Deactivated successfully.178ca # [1416300.023025] ca systemd-resolved[115]: Positive Trust Anchors:179ca # [1416300.023036] ca systemd-resolved[115]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d180ca # [1416300.023040] ca systemd-resolved[115]: . IN DS 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16181ca # [1416300.023074] ca systemd-resolved[115]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 170.0.0.192.in-addr.arpa 171.0.0.192.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa ipv4only.arpa resolver.arpa corp home internal intranet lan local private test182ca # [1416300.044748] ca systemd-resolved[115]: Using system hostname 'ca'.183ca # [1416300.046120] ca systemd[1]: Started Network Name Resolution.184ca # [1416300.046252] ca systemd[1]: Reached target Network.185ca # [1416300.046361] ca systemd[1]: Reached target Network is Online.186ca # [1416300.046455] ca systemd[1]: Reached target System Initialization.187ca # [1416300.046823] ca systemd[1]: Started Renew ACME Certificate for ca.foo.188ca # [1416300.046879] ca systemd[1]: Discard unused filesystem blocks once a week skipped, unmet condition check ConditionVirtualization=!container189ca # [1416300.046933] ca systemd[1]: Started Daily Cleanup of Temporary Directories.190ca # [1416300.046971] ca systemd[1]: Reached target Timer Units.191ca # [1416300.047198] ca systemd[1]: Listening on D-Bus System Message Bus Socket.192ca # [1416300.047389] ca systemd[1]: Listening on Nix Daemon Socket.193ca # [1416300.047614] ca systemd[1]: Listening on Virtual Machine and Container Registration Service Socket.194ca # [1416300.047661] ca systemd[1]: Reached target Socket Units.195ca # [1416300.047737] ca systemd[1]: Reached target Basic System.196ca # [1416300.069610] ca systemd[1]: Starting Set up the ACME certificate renewal infrastructure...197ca # [1416300.071076] ca systemd[1]: Starting Import lastlog data into lastlog2 database...198ca # [1416300.071143] ca systemd[1]: nginx-config-reload.service skipped, unmet condition check ConditionPathExists=/var/lib/acme/ca.foo/fullchain.pem199ca # [1416300.072567] ca systemd[1]: Starting Name Service Cache Daemon (nsncd)...200ca # [1416300.074488] ca systemd[1]: Starting step-ca service...201ca # [1416300.076837] ca systemd[1]: Starting D-Bus System Message Bus...202ca # [1416300.094851] ca systemd[1]: Finished Import lastlog data into lastlog2 database.203ca # [1416300.280091] ca acme-setup-privileged[203]: + set -euo pipefail204ca # [1416300.280091] ca acme-setup-privileged[203]: + cd /var/lib/acme205ca # [1416300.280091] ca acme-setup-privileged[203]: + chmod -R u=rwX,g=,o= .lego/accounts206server # [1416300.023194] server systemd-resolved[109]: Positive Trust Anchors:207server # [1416300.023206] server systemd-resolved[109]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d208server # [1416300.023210] server systemd-resolved[109]: . IN DS 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16209server # [1416300.023243] server systemd-resolved[109]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 170.0.0.192.in-addr.arpa 171.0.0.192.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa ipv4only.arpa resolver.arpa corp home internal intranet lan local private test210server # [1416300.044899] server systemd-resolved[109]: Using system hostname 'server'.211server # [1416300.046269] server systemd[1]: Started Network Name Resolution.212server # [1416300.046394] server systemd[1]: Reached target Network.213server # [1416300.046504] server systemd[1]: Reached target Network is Online.214server # [1416300.046590] server systemd[1]: Reached target System Initialization.215server # [1416300.046957] server systemd[1]: Started Renew ACME Certificate for test.foo.216server # [1416300.047010] server systemd[1]: Discard unused filesystem blocks once a week skipped, unmet condition check ConditionVirtualization=!container217server # [1416300.047055] server systemd[1]: Started Daily Cleanup of Temporary Directories.218server # [1416300.047103] server systemd[1]: Reached target Timer Units.219server # [1416300.047322] server systemd[1]: Listening on D-Bus System Message Bus Socket.220server # [1416300.047510] server systemd[1]: Listening on Nix Daemon Socket.221server # [1416300.047726] server systemd[1]: Listening on Virtual Machine and Container Registration Service Socket.222server # [1416300.047774] server systemd[1]: Reached target Socket Units.223server # [1416300.047854] server systemd[1]: Reached target Basic System.224server # [1416300.069528] server systemd[1]: Starting Set up the ACME certificate renewal infrastructure...225server # [1416300.070850] server systemd[1]: Starting Import lastlog data into lastlog2 database...226server # [1416300.070922] server systemd[1]: nginx-config-reload.service skipped, unmet condition check ConditionPathExists=/var/lib/acme/test.foo/fullchain.pem227server # [1416300.072445] server systemd[1]: Starting Name Service Cache Daemon (nsncd)...228server # [1416300.074750] server systemd[1]: Starting D-Bus System Message Bus...229server # [1416300.094979] server systemd[1]: Finished Import lastlog data into lastlog2 database.230server # [1416300.244668] server acme-setup-privileged[195]: + set -euo pipefail231server # [1416300.244668] server acme-setup-privileged[195]: + cd /var/lib/acme232server # [1416300.244668] server acme-setup-privileged[195]: + chmod -R u=rwX,g=,o= .lego/accounts233server # [1416300.246727] server acme-setup-privileged[195]: + chown -R acme .lego/accounts234server # [1416300.248822] server acme-setup-privileged[195]: + for fixpath in test.foo .lego/test.foo235server # [1416300.248822] server acme-setup-privileged[195]: + '[' -d test.foo ']'236server # [1416300.248955] server acme-setup-privileged[195]: + for fixpath in test.foo .lego/test.foo237server # [1416300.248955] server acme-setup-privileged[195]: + '[' -d .lego/test.foo ']'238client # [1416300.006262] client systemd-resolved[105]: Positive Trust Anchors:239client # [1416300.006274] client systemd-resolved[105]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d240client # [1416300.006278] client systemd-resolved[105]: . IN DS 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16241client # [1416300.006311] client systemd-resolved[105]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 170.0.0.192.in-addr.arpa 171.0.0.192.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa ipv4only.arpa resolver.arpa corp home internal intranet lan local private test242client # [1416300.028719] client systemd-resolved[105]: Using system hostname 'client'.243client # [1416300.030077] client systemd[1]: Started Network Name Resolution.244client # [1416300.030194] client systemd[1]: Reached target Network.245client # [1416300.030310] client systemd[1]: Reached target System Initialization.246client # [1416300.030407] client systemd[1]: Discard unused filesystem blocks once a week skipped, unmet condition check ConditionVirtualization=!container247client # [1416300.030459] client systemd[1]: Started Daily Cleanup of Temporary Directories.248client # [1416300.030494] client systemd[1]: Reached target Timer Units.249client # [1416300.030715] client systemd[1]: Listening on D-Bus System Message Bus Socket.250client # [1416300.030922] client systemd[1]: Listening on Nix Daemon Socket.251client # [1416300.031135] client systemd[1]: Listening on Virtual Machine and Container Registration Service Socket.252client # [1416300.031188] client systemd[1]: Reached target Socket Units.253client # [1416300.031263] client systemd[1]: Reached target Basic System.254client # [1416300.033735] client systemd[1]: Starting Import lastlog data into lastlog2 database...255client # [1416300.035236] client systemd[1]: Starting Name Service Cache Daemon (nsncd)...256client # [1416300.037642] client systemd[1]: Starting D-Bus System Message Bus...257client # [1416300.087926] client systemd[1]: Finished Import lastlog data into lastlog2 database.258client # [1416300.339521] client nsncd[192]: Sep 20 16:52:00.325 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket"259client # [1416300.339504] client systemd[1]: Started Name Service Cache Daemon (nsncd).260client # [1416300.339583] client systemd[1]: Reached target Host and Network Name Lookups.261client # [1416300.339655] client systemd[1]: Reached target User and Group Name Lookups.262ca # [1416300.282123] ca acme-setup-privileged[203]: + chown -R acme .lego/accounts263ca # [1416300.284103] ca acme-setup-privileged[203]: + for fixpath in ca.foo .lego/ca.foo264ca # [1416300.284103] ca acme-setup-privileged[203]: + '[' -d ca.foo ']'265ca # [1416300.284223] ca acme-setup-privileged[203]: + for fixpath in ca.foo .lego/ca.foo266ca # [1416300.284223] ca acme-setup-privileged[203]: + '[' -d .lego/ca.foo ']'267ca # [1416300.356200] ca nsncd[205]: Sep 20 16:52:00.341 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket"268ca # [1416300.356226] ca systemd[1]: Started Name Service Cache Daemon (nsncd).269ca # [1416300.356333] ca systemd[1]: Reached target Host and Network Name Lookups.270ca # [1416300.356446] ca systemd[1]: Reached target User and Group Name Lookups.271ca # [1416300.358312] ca systemd[1]: Starting User Login Management...272ca # [1416300.359703] ca systemd[1]: Starting Permit User Sessions...273ca # [1416300.372529] ca systemd[1]: Finished Permit User Sessions.274ca # [1416300.373761] ca systemd[1]: Started Console Getty.275ca # [1416300.373819] ca systemd[1]: Getty on tty1 skipped, unmet condition check ConditionPathExists=/dev/tty0276ca # [1416300.373842] ca systemd[1]: Reached target Login Prompts.277ca # [1416300.529534] ca dbus-broker-launch[208]: Looking up NSS user entry for 'systemd-timesync'...278ca # [1416300.530957] ca dbus-broker-launch[208]: NSS returned no entry for 'systemd-timesync'279ca # [1416300.530957] ca dbus-broker-launch[208]: Invalid user-name in /nix/store/bh2gmvmbmbp0nqf3m5qaqnfjair6v85q-system-path/share/dbus-1/system.d/org.freedesktop.timesync1.conf +16: user="systemd-timesync"280ca # [1416300.531308] ca systemd[1]: Started D-Bus System Message Bus.281server # [1416300.310817] server nsncd[197]: Sep 20 16:52:00.296 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket"282server # [1416300.310600] server systemd[1]: Started Name Service Cache Daemon (nsncd).283server # [1416300.310706] server systemd[1]: Reached target Host and Network Name Lookups.284server # [1416300.310813] server systemd[1]: Reached target User and Group Name Lookups.285server # [1416300.312765] server systemd[1]: Starting User Login Management...286server # [1416300.314138] server systemd[1]: Starting Permit User Sessions...287server # [1416300.326943] server systemd[1]: Finished Permit User Sessions.288server # [1416300.328638] server systemd[1]: Started Console Getty.289server # [1416300.328714] server systemd[1]: Getty on tty1 skipped, unmet condition check ConditionPathExists=/dev/tty0290server # [1416300.328756] server systemd[1]: Reached target Login Prompts.291server # [1416300.505166] server dbus-broker-launch[198]: Looking up NSS user entry for 'systemd-timesync'...292server # [1416300.506691] server dbus-broker-launch[198]: NSS returned no entry for 'systemd-timesync'293server # [1416300.506691] server dbus-broker-launch[198]: Invalid user-name in /nix/store/zzss1678mb50nlwag2hiw11lg128jpl3-system-path/share/dbus-1/system.d/org.freedesktop.timesync1.conf +16: user="systemd-timesync"294server # [1416300.507089] server systemd[1]: Started D-Bus System Message Bus.295server # [1416300.515714] server dbus-broker-launch[198]: Ready296client # [1416300.341304] client systemd[1]: Starting User Login Management...297client # [1416300.342219] client systemd[1]: Starting Permit User Sessions...298client # [1416300.352636] client systemd[1]: Finished Permit User Sessions.299client # [1416300.354370] client systemd[1]: Started Console Getty.300client # [1416300.354445] client systemd[1]: Getty on tty1 skipped, unmet condition check ConditionPathExists=/dev/tty0301client # [1416300.354486] client systemd[1]: Reached target Login Prompts.302client # [1416300.576833] client dbus-broker-launch[193]: Looking up NSS user entry for 'systemd-timesync'...303client # [1416300.578365] client dbus-broker-launch[193]: NSS returned no entry for 'systemd-timesync'304client # [1416300.578365] client dbus-broker-launch[193]: Invalid user-name in /nix/store/g0a3fan1ykqwgcwicjzjgnwxr95dlfi7-system-path/share/dbus-1/system.d/org.freedesktop.timesync1.conf +16: user="systemd-timesync"305client # [1416300.578762] client systemd[1]: Started D-Bus System Message Bus.306client # [1416300.586414] client dbus-broker-launch[193]: Ready307ca: must succeed: systemctl restart acme-order-renew-ca.foo.service 308ca # [1416300.538500] ca dbus-broker-launch[208]: Ready309ca # [1416300.704141] ca systemd-networkd[198]: eth1: Gained IPv6LL310server # [1416301.200411] server systemd-logind[227]: New seat seat0.311server # [1416301.200589] server systemd[1]: Started User Login Management.312server # [1416301.202734] server systemd[1]: Starting linger-users.service...313server # [1416301.246359] server systemd[1]: linger-users.service: Deactivated successfully.314server # [1416301.246626] server systemd[1]: Finished linger-users.service.315server # [1416301.285376] server acme-setup-start[211]: + set -euo pipefail316server # [1416301.285376] server acme-setup-start[211]: + test -e ca/key.pem317server # [1416301.285900] server acme-setup-start[211]: + minica --ca-key ca/key.pem --ca-cert ca/cert.pem --domains selfsigned.local318server # [1416301.309464] server systemd[1]: Finished Set up the ACME certificate renewal infrastructure.319server # [1416301.312141] server systemd[1]: Starting Ensure certificate for test.foo...320server # [1416301.376249] server systemd-networkd[190]: eth1: Gained IPv6LL321client # [1416301.204724] client systemd-logind[208]: New seat seat0.322client # [1416301.204923] client systemd[1]: Started User Login Management.323client # [1416301.207172] client systemd[1]: Starting linger-users.service...324client # [1416301.247908] client systemd[1]: linger-users.service: Deactivated successfully.325client # [1416301.248089] client systemd[1]: Finished linger-users.service.326client # [1416301.248725] client systemd[1]: Reached target Multi-User System.327client # [1416301.248974] client systemd[1]: Startup finished in 3.013s.328client # [1416301.444264] client systemd-networkd[186]: eth1: Gained IPv6LL329ca # [1416301.242393] ca systemd-logind[237]: New seat seat0.330ca # [1416301.242540] ca systemd[1]: Started User Login Management.331ca # [1416301.243612] ca systemd[1]: Starting linger-users.service...332ca # [1416301.257324] ca systemd[1]: linger-users.service: Deactivated successfully.333ca # [1416301.257444] ca systemd[1]: Finished linger-users.service.334ca # [1416301.298418] ca acme-setup-start[221]: + set -euo pipefail335ca # [1416301.298418] ca acme-setup-start[221]: + test -e ca/key.pem336ca # [1416301.298917] ca acme-setup-start[221]: + minica --ca-key ca/key.pem --ca-cert ca/cert.pem --domains selfsigned.local337ca # [1416301.348374] ca systemd[1]: Finished Set up the ACME certificate renewal infrastructure.338ca # [1416301.350993] ca systemd[1]: Starting Ensure certificate for ca.foo...339ca # [1416301.453192] ca step-ca[206]: badger 2026/09/20 16:52:01 INFO: All 0 tables opened in 0s340ca # [1416301.457404] ca step-ca[206]: 2026/09/20 16:52:01 Building new tls configuration using step-ca x509 Signer Interface341ca # [1416301.462550] ca step-ca[206]: 2026/09/20 16:52:01 Starting Smallstep CA/0.30.2 (linux/arm64)342ca # [1416301.462550] ca step-ca[206]: 2026/09/20 16:52:01 Documentation: https://u.step.sm/docs/ca343ca # [1416301.462550] ca step-ca[206]: 2026/09/20 16:52:01 Community Discord: https://u.step.sm/discord344ca # [1416301.462550] ca step-ca[206]: 2026/09/20 16:52:01 Config file: /etc/smallstep/ca.json345ca # [1416301.462550] ca step-ca[206]: 2026/09/20 16:52:01 The primary server URL is https://ca.foo:1443346ca # [1416301.462550] ca step-ca[206]: 2026/09/20 16:52:01 Root certificates are available at https://ca.foo:1443/roots.pem347ca # [1416301.462857] ca step-ca[206]: 2026/09/20 16:52:01 X.509 Root Fingerprint: 73a51e13ceeb202e4a617c48c0cd308f9567bdcba2ae26dbaab91234245a452e348ca # [1416301.462783] ca systemd[1]: Started step-ca service.349ca # [1416301.462991] ca step-ca[206]: 2026/09/20 16:52:01 Serving HTTPS on 0.0.0.0:1443 ...350server # [1416302.262370] server acme-test.foo-start[247]: Waiting to acquire lock in /run/acme/351server # [1416302.265799] server acme-test.foo-start[247]: + '[' -e out/acme-success ']'352server # [1416302.265799] server acme-test.foo-start[247]: + minica --ca-cert=ca/cert.pem --ca-key=ca/key.pem --domains=test.foo --ip-addresses=353server # [1416302.281707] server acme-test.foo-start[256]: + cd test.foo354server # [1416302.282322] server acme-test.foo-start[256]: + cp -vp cert.pem ../out/cert.pem355server # [1416302.283585] server acme-test.foo-start[257]: 'cert.pem' -> '../out/cert.pem'356server # [1416302.284083] server acme-test.foo-start[256]: + cp -vp key.pem ../out/key.pem357server # [1416302.285445] server acme-test.foo-start[256]: 'key.pem' -> '../out/key.pem'358server # [1416302.285679] server acme-test.foo-start[247]: + cat out/cert.pem ca/cert.pem359server # [1416302.287443] server acme-test.foo-start[247]: + cp ca/cert.pem out/chain.pem360server # [1416302.289486] server acme-test.foo-start[247]: + cat out/key.pem out/fullchain.pem361server # [1416302.291393] server acme-test.foo-start[247]: + for fixpath in out certificates362server # [1416302.291393] server acme-test.foo-start[247]: + '[' -d out ']'363server # [1416302.291460] server acme-test.foo-start[247]: + chmod -R u=rwX,g=rX,o= out364server # [1416302.293492] server acme-test.foo-start[247]: + chown -R acme:nginx out365server # [1416302.297597] server acme-test.foo-start[247]: + for fixpath in out certificates366server # [1416302.297597] server acme-test.foo-start[247]: + '[' -d certificates ']'367server # [1416302.302748] server systemd[1]: Finished Ensure certificate for test.foo.368server # [1416302.305594] server systemd[1]: Starting Nginx Web Server...369ca # [1416302.269445] ca acme-ca.foo-start[258]: Waiting to acquire lock in /run/acme/370ca # [1416302.273132] ca acme-ca.foo-start[258]: + '[' -e out/acme-success ']'371ca # [1416302.273229] ca acme-ca.foo-start[258]: + minica --ca-cert=ca/cert.pem --ca-key=ca/key.pem --domains=ca.foo --ip-addresses=372ca # [1416302.288130] ca acme-ca.foo-start[295]: + cd ca.foo373ca # [1416302.288671] ca acme-ca.foo-start[295]: + cp -vp cert.pem ../out/cert.pem374ca # [1416302.289740] ca acme-ca.foo-start[296]: 'cert.pem' -> '../out/cert.pem'375ca # [1416302.290063] ca acme-ca.foo-start[295]: + cp -vp key.pem ../out/key.pem376ca # [1416302.291419] ca acme-ca.foo-start[295]: 'key.pem' -> '../out/key.pem'377ca # [1416302.291711] ca acme-ca.foo-start[258]: + cat out/cert.pem ca/cert.pem378ca # [1416302.293717] ca acme-ca.foo-start[258]: + cp ca/cert.pem out/chain.pem379ca # [1416302.295478] ca acme-ca.foo-start[258]: + cat out/key.pem out/fullchain.pem380ca # [1416302.297391] ca acme-ca.foo-start[258]: + for fixpath in out certificates381ca # [1416302.297391] ca acme-ca.foo-start[258]: + '[' -d out ']'382ca # [1416302.297502] ca acme-ca.foo-start[258]: + chmod -R u=rwX,g=rX,o= out383ca # [1416302.299448] ca acme-ca.foo-start[258]: + chown -R acme:nginx out384ca # [1416302.303774] ca acme-ca.foo-start[258]: + for fixpath in out certificates385ca # [1416302.303774] ca acme-ca.foo-start[258]: + '[' -d certificates ']'386ca # [1416302.308557] ca systemd[1]: Finished Ensure certificate for ca.foo.387ca # [1416302.310963] ca systemd[1]: Starting Nginx Web Server...388server # [1416303.272909] server nginx-pre-start[268]: nginx: the configuration file /nix/store/bw9jgq9jgvw8ia747pppjhkzskqcy6wl-nginx.conf syntax is ok389server # [1416303.273503] server nginx-pre-start[268]: nginx: configuration file /nix/store/bw9jgq9jgvw8ia747pppjhkzskqcy6wl-nginx.conf test is successful390server # [1416303.278320] server systemd[1]: Started Nginx Web Server.391server # [1416303.279762] server systemd[1]: Reached target Multi-User System.392server # [1416303.282128] server systemd[1]: Starting Order (and renew) ACME certificate for test.foo...393ca # [1416303.284039] ca nginx-pre-start[307]: nginx: the configuration file /nix/store/9xdq48zsmbzh971fy8df0q5bz7cca117-nginx.conf syntax is ok394ca # [1416303.284670] ca nginx-pre-start[307]: nginx: configuration file /nix/store/9xdq48zsmbzh971fy8df0q5bz7cca117-nginx.conf test is successful395ca # [1416303.328754] ca systemd[1]: Started Nginx Web Server.396ca # [1416303.329564] ca systemd[1]: Reached target Multi-User System.397ca # [1416303.332205] ca systemd[1]: Starting Order (and renew) ACME certificate for ca.foo...398server # [1416304.231673] server acme-order-renew-test.foo-start[271]: Waiting to acquire lock in /run/acme/399server # [1416304.235643] server acme-order-renew-test.foo-start[271]: + set -euo pipefail400server # [1416304.235893] server acme-order-renew-test.foo-start[271]: + exec401server # [1416304.235893] server acme-order-renew-test.foo-start[271]: + /nix/store/fxkh6pl0y4nfbhdqdnhfkvsq7pbxq655-flock-0.4.0/bin/flock 11402server # [1416304.237961] server acme-order-renew-test.foo-start[282]: ++ find accounts -path '*/keys/*.key' -print -quit403server # [1416304.241281] server acme-order-renew-test.foo-start[271]: + '[' -n '' ']'404server # [1416304.241281] server acme-order-renew-test.foo-start[271]: + exec405server # [1416304.241413] server acme-order-renew-test.foo-start[271]: + '[' -e certificates/test.foo.key ']'406server # [1416304.241413] server acme-order-renew-test.foo-start[271]: + lego run --accept-tos --path . --email none@none.tld --http --http.webroot /var/lib/acme/acme-challenge --server https://ca.foo/acme/acme/directory --key-type ec256 -d test.foo --no-random-sleep --renew-force --ari-disable --force-cert-domains407server # [1416304.263119] server acme-order-renew-test.foo-start[283]: 2026-09-20T16:52:04.248908202Z INFO Private key saved. filepath=accounts/ca.foo/none@none.tld/none@none.tld.key408server # [1416304.311776] server acme-order-renew-test.foo-start[283]: 2026-09-20T16:52:04.297567509Z ERROR Error error="registration: set up client: new client: get directory at 'https://ca.foo/acme/acme/directory': unable to communicate with the API server: error: Get \"https://ca.foo/acme/acme/directory\": GET https://ca.foo/acme/acme/directory giving up after 1 attempt(s): Get \"https://ca.foo/acme/acme/directory\": tls: failed to verify certificate: x509: certificate signed by unknown authority"409server # [1416304.312386] server acme-order-renew-test.foo-start[271]: + echo Failed to fetch certificates. This may mean your DNS records are set up incorrectly. Self-signed certs are in place and dependant services will still start.410server # [1416304.312386] server acme-order-renew-test.foo-start[271]: Failed to fetch certificates. This may mean your DNS records are set up incorrectly. Self-signed certs are in place and dependant services will still start.411server # [1416304.312386] server acme-order-renew-test.foo-start[271]: + exit 10412server # [1416304.316658] server systemd[1]: acme-order-renew-test.foo.service: Main process exited, code=exited, status=10/n/a413server # [1416304.316795] server systemd[1]: acme-order-renew-test.foo.service: Failed with result 'exit-code'.414server # [1416304.317121] server systemd[1]: Failed to start Order (and renew) ACME certificate for test.foo.415server # [1416304.317466] server systemd[1]: Startup finished in 6.067s.416ca # [1416304.257119] ca acme-order-renew-ca.foo-start[310]: Waiting to acquire lock in /run/acme/417ca # [1416304.260851] ca acme-order-renew-ca.foo-start[310]: + set -euo pipefail418ca # [1416304.260851] ca acme-order-renew-ca.foo-start[310]: + exec419ca # [1416304.260851] ca acme-order-renew-ca.foo-start[310]: + /nix/store/fxkh6pl0y4nfbhdqdnhfkvsq7pbxq655-flock-0.4.0/bin/flock 11420ca # [1416304.262481] ca acme-order-renew-ca.foo-start[321]: ++ find accounts -path '*/keys/*.key' -print -quit421ca # [1416304.265504] ca acme-order-renew-ca.foo-start[310]: + '[' -n '' ']'422ca # [1416304.265559] ca acme-order-renew-ca.foo-start[310]: + exec423ca # [1416304.265616] ca acme-order-renew-ca.foo-start[310]: + '[' -e certificates/ca.foo.key ']'424ca # [1416304.265658] ca acme-order-renew-ca.foo-start[310]: + lego run --accept-tos --path . --email none@none.tld --http --http.webroot /var/lib/acme/acme-challenge --server https://ca.foo:1443/acme/acme/directory --key-type ec256 -d ca.foo --no-random-sleep --renew-force --ari-disable --force-cert-domains425ca # [1416304.283079] ca acme-order-renew-ca.foo-start[323]: 2026-09-20T16:52:04.268873236Z INFO Private key saved. filepath=accounts/ca.foo_1443/none@none.tld/none@none.tld.key426ca # [1416304.316539] ca step-ca[206]: time="2026-09-20T16:52:04Z" level=info duration="92.441µs" duration-ns=92441 fields.time="2026-09-20T16:52:04Z" method=GET name=ca path=/acme/acme/directory protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=a27311ad-6075-4577-9380-c2a51cd8a002 response="{\"newNonce\":\"https://ca.foo:1443/acme/acme/new-nonce\",\"newAccount\":\"https://ca.foo:1443/acme/acme/new-account\",\"newOrder\":\"https://ca.foo:1443/acme/acme/new-order\",\"revokeCert\":\"https://ca.foo:1443/acme/acme/revoke-cert\",\"keyChange\":\"https://ca.foo:1443/acme/acme/key-change\"}" size=277 status=200 user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; arm64)" user-id=427ca # [1416304.317132] ca acme-order-renew-ca.foo-start[323]: 2026-09-20T16:52:04.302933263Z INFO Registering the account. email=none@none.tld428ca # [1416304.318524] ca step-ca[206]: time="2026-09-20T16:52:04Z" level=info duration=1.083455ms duration-ns=1083455 fields.time="2026-09-20T16:52:04Z" method=HEAD name=ca nonce=NVZDdW1IRFBtcmVxQno4dGw2TENPdWFIUk00Y3pueDA path=/acme/acme/new-nonce protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=ac015956-527f-4006-8a0c-3426bf49499a size=0 status=200 user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; arm64)" user-id=429ca # [1416304.320925] ca step-ca[206]: time="2026-09-20T16:52:04Z" level=info duration=1.45854ms duration-ns=1458540 fields.time="2026-09-20T16:52:04Z" method=POST name=ca nonce=bXNzWFgxOHEyYU1mY01jSHZTMGxZWWRieVRzek9IZzc path=/acme/acme/new-account protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=4071c97e-79d8-451f-909c-2063be1cccc7 response="{\"contact\":[\"mailto:none@none.tld\"],\"status\":\"valid\",\"orders\":\"https://ca.foo:1443/acme/acme/account/QLW01MxDQYP28aeF3StR16K991kPq403/orders\"}" size=143 status=201 user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; arm64)" user-id=430ca # [1416304.321405] ca acme-order-renew-ca.foo-start[323]: 2026-09-20T16:52:04.307222561Z WARN !!!! HEADS UP !!!!431ca # [1416304.321405] ca acme-order-renew-ca.foo-start[323]: Your account credentials have been saved in your432ca # [1416304.321405] ca acme-order-renew-ca.foo-start[323]: configuration directory at "accounts".433ca # [1416304.321405] ca acme-order-renew-ca.foo-start[323]: You should make a secure backup of this folder now. This434ca # [1416304.321405] ca acme-order-renew-ca.foo-start[323]: configuration directory will also contain private keys435ca # [1416304.321405] ca acme-order-renew-ca.foo-start[323]: generated by lego and certificates obtained from the ACME436ca # [1416304.321405] ca acme-order-renew-ca.foo-start[323]: server. Making regular backups of this folder is ideal.437ca # [1416304.321578] ca acme-order-renew-ca.foo-start[323]: 2026-09-20T16:52:04.307339923Z INFO Obtaining bundled SAN certificate. domains=ca.foo438ca # [1416304.325179] ca step-ca[206]: time="2026-09-20T16:52:04Z" level=info duration=3.263444ms duration-ns=3263444 fields.time="2026-09-20T16:52:04Z" method=POST name=ca nonce=Qm5sS0VwN3BvWFh4bkpid2VubUNJM3lNdEhGTEpieWk path=/acme/acme/new-order protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=c135e782-3530-4a91-8f67-87039359d2de response="{\"id\":\"QIXu4nqVJjIrZu6Vr0lAYSshQl0RbnoA\",\"status\":\"pending\",\"expires\":\"2026-09-21T16:52:04Z\",\"identifiers\":[{\"type\":\"dns\",\"value\":\"ca.foo\"}],\"notBefore\":\"2026-09-20T16:51:04Z\",\"notAfter\":\"2026-12-19T16:52:04Z\",\"authorizations\":[\"https://ca.foo:1443/acme/acme/authz/hzfcTYY8PWi2TCCjogFD6hSlrNyBr0Lv\"],\"finalize\":\"https://ca.foo:1443/acme/acme/order/QIXu4nqVJjIrZu6Vr0lAYSshQl0RbnoA/finalize\"}" size=392 status=201 user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; arm64)" user-id=439ca # [1416304.383044] ca step-ca[206]: time="2026-09-20T16:52:04Z" level=info duration=1.000054ms duration-ns=1000054 fields.time="2026-09-20T16:52:04Z" method=POST name=ca nonce=VEVjeUlMZUhwNWRNbEwwTXV2eFpJZTRKZXgxU2FHZ0k path=/acme/acme/authz/hzfcTYY8PWi2TCCjogFD6hSlrNyBr0Lv protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=d35e2567-7148-4c28-9eca-32adf79986f7 response="{\"identifier\":{\"type\":\"dns\",\"value\":\"ca.foo\"},\"status\":\"pending\",\"challenges\":[{\"type\":\"dns-01\",\"status\":\"pending\",\"token\":\"OgBCAx5Lsj7ankejSpxjeC25I7eoYiwI\",\"url\":\"https://ca.foo:1443/acme/acme/challenge/hzfcTYY8PWi2TCCjogFD6hSlrNyBr0Lv/IxwUf4Zba98ey9GQi1BdgmFmVXZ2IESp\"},{\"type\":\"http-01\",\"status\":\"pending\",\"token\":\"OgBCAx5Lsj7ankejSpxjeC25I7eoYiwI\",\"url\":\"https://ca.foo:1443/acme/acme/challenge/hzfcTYY8PWi2TCCjogFD6hSlrNyBr0Lv/7IIw5qxqMvwVcQAsgo9Op3mQykGbxPuf\"},{\"type\":\"tls-alpn-01\",\"status\":\"pending\",\"token\":\"OgBCAx5Lsj7ankejSpxjeC25I7eoYiwI\",\"url\":\"https://ca.foo:1443/acme/acme/challenge/hzfcTYY8PWi2TCCjogFD6hSlrNyBr0Lv/3YGwwoDbqb8asjvsFPZopNELllEDHTmn\"}],\"wildcard\":false,\"expires\":\"2026-09-21T16:52:04Z\"}" size=719 status=200 user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; arm64)" user-id=440ca # [1416304.383351] ca acme-order-renew-ca.foo-start[323]: 2026-09-20T16:52:04.369160290Z INFO Use solver. domain=ca.foo type=http-01441ca # [1416304.383393] ca acme-order-renew-ca.foo-start[323]: 2026-09-20T16:52:04.369197411Z INFO http01: Trying to solve HTTP-01. domain=ca.foo442ca # [1416304.387862] ca step-ca[206]: time="2026-09-20T16:52:04Z" level=info duration=3.955014ms duration-ns=3955014 fields.time="2026-09-20T16:52:04Z" method=POST name=ca nonce=UDhRdUw3Q0ttSnFvSE5XUmRBbDlpR3l0Zzl6TTIxMHA path=/acme/acme/challenge/hzfcTYY8PWi2TCCjogFD6hSlrNyBr0Lv/7IIw5qxqMvwVcQAsgo9Op3mQykGbxPuf protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=499ebdf4-1d98-421f-9fcf-cd585d591cac response="{\"type\":\"http-01\",\"status\":\"valid\",\"token\":\"OgBCAx5Lsj7ankejSpxjeC25I7eoYiwI\",\"validated\":\"2026-09-20T16:52:04Z\",\"url\":\"https://ca.foo:1443/acme/acme/challenge/hzfcTYY8PWi2TCCjogFD6hSlrNyBr0Lv/7IIw5qxqMvwVcQAsgo9Op3mQykGbxPuf\"}" size=228 status=200 user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; arm64)" user-id=443ca # [1416304.388143] ca acme-order-renew-ca.foo-start[323]: 2026-09-20T16:52:04.373937516Z INFO The server validated our request. domain=ca.foo444ca # [1416304.388214] ca acme-order-renew-ca.foo-start[323]: 2026-09-20T16:52:04.374036637Z INFO Validations succeeded; requesting certificates. domains=ca.foo445ca # [1416304.397785] ca step-ca[206]: time="2026-09-20T16:52:04Z" level=info duration=8.463676ms duration-ns=8463676 fields.time="2026-09-20T16:52:04Z" method=POST name=ca nonce=a24yYXFZOWRLRW5yQkV4NEoxdmpZbmhTc2pWTUxjZWE path=/acme/acme/order/QIXu4nqVJjIrZu6Vr0lAYSshQl0RbnoA/finalize protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=44930450-cd54-4575-a3d7-72fef2283b7e response="{\"id\":\"QIXu4nqVJjIrZu6Vr0lAYSshQl0RbnoA\",\"status\":\"valid\",\"expires\":\"2026-09-21T16:52:04Z\",\"identifiers\":[{\"type\":\"dns\",\"value\":\"ca.foo\"}],\"notBefore\":\"2026-09-20T16:51:04Z\",\"notAfter\":\"2026-12-19T16:52:04Z\",\"authorizations\":[\"https://ca.foo:1443/acme/acme/authz/hzfcTYY8PWi2TCCjogFD6hSlrNyBr0Lv\"],\"finalize\":\"https://ca.foo:1443/acme/acme/order/QIXu4nqVJjIrZu6Vr0lAYSshQl0RbnoA/finalize\",\"certificate\":\"https://ca.foo:1443/acme/acme/certificate/BeccGgkH1ncEQ9etIJfmTC9OV2UcUe7X\"}" size=481 status=200 user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; arm64)" user-id=446ca # [1416304.400447] ca step-ca[206]: time="2026-09-20T16:52:04Z" level=info certificate="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" duration=1.787304ms duration-ns=1787304 fields.time="2026-09-20T16:52:04Z" issuer="Clan Intermediate CA" method=POST name=ca nonce=SHh6VUlUZk5XY2FrcnRnaWdEc1IyU05vUk9VZ3ZXODg path=/acme/acme/certificate/BeccGgkH1ncEQ9etIJfmTC9OV2UcUe7X protocol=HTTP/1.1 provisioner=acme public-key="ECDSA P-256" referer= remote-address="2001:db8:1::1" request-id=dfb12ba3-f781-4c31-b864-db8e189281af sans="map[dns:[ca.foo]]" serial=77556636888713230665506559003226461236 size=1344 status=200 subject=ca.foo user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; arm64)" user-id= valid-from="2026-09-20T16:51:04Z" valid-to="2026-12-19T16:52:04Z"447ca # [1416304.400758] ca acme-order-renew-ca.foo-start[323]: 2026-09-20T16:52:04.386565969Z INFO Server responded with a certificate. domains=ca.foo448ca # [1416304.400837] ca acme-order-renew-ca.foo-start[323]: 2026-09-20T16:52:04.386656610Z INFO Writing file. filepath=certificates/ca.foo.crt449ca # [1416304.400984] ca acme-order-renew-ca.foo-start[323]: 2026-09-20T16:52:04.386802852Z INFO Writing file. filepath=certificates/ca.foo.issuer.crt450ca # [1416304.401059] ca acme-order-renew-ca.foo-start[323]: 2026-09-20T16:52:04.386877573Z INFO Writing file. filepath=certificates/ca.foo.key451ca # [1416304.401204] ca acme-order-renew-ca.foo-start[323]: 2026-09-20T16:52:04.387022215Z INFO Writing file. filepath=certificates/ca.foo.json452ca # [1416304.406557] ca acme-order-renew-ca.foo-start[310]: + touch out/acme-success453ca # [1416304.408357] ca acme-order-renew-ca.foo-start[310]: + cmp -s certificates/ca.foo.crt out/fullchain.pem454ca # [1416304.409603] ca acme-order-renew-ca.foo-start[310]: + touch out/renewed455ca # [1416304.411441] ca acme-order-renew-ca.foo-start[310]: + echo Installing new certificate456ca # [1416304.411441] ca acme-order-renew-ca.foo-start[310]: Installing new certificate457ca # [1416304.411441] ca acme-order-renew-ca.foo-start[310]: + cp -vp certificates/ca.foo.crt out/fullchain.pem458ca # [1416304.413373] ca acme-order-renew-ca.foo-start[353]: 'certificates/ca.foo.crt' -> 'out/fullchain.pem'459ca # [1416304.413652] ca acme-order-renew-ca.foo-start[310]: + cp -vp certificates/ca.foo.key out/key.pem460ca # [1416304.415209] ca acme-order-renew-ca.foo-start[354]: 'certificates/ca.foo.key' -> 'out/key.pem'461ca # [1416304.415459] ca acme-order-renew-ca.foo-start[310]: + cp -vp certificates/ca.foo.issuer.crt out/chain.pem462ca # [1416304.417165] ca acme-order-renew-ca.foo-start[355]: 'certificates/ca.foo.issuer.crt' -> 'out/chain.pem'463ca # [1416304.417440] ca acme-order-renew-ca.foo-start[310]: + ln -sf fullchain.pem out/cert.pem464ca # [1416304.419555] ca acme-order-renew-ca.foo-start[310]: + cat out/key.pem out/fullchain.pem465ca # [1416304.421381] ca acme-order-renew-ca.foo-start[310]: + for fixpath in out certificates466ca # [1416304.421407] ca acme-order-renew-ca.foo-start[310]: + '[' -d out ']'467ca # [1416304.421407] ca acme-order-renew-ca.foo-start[310]: + chmod -R u=rwX,g=rX,o= out468ca # [1416304.423100] ca acme-order-renew-ca.foo-start[310]: + chown -R acme:nginx out469ca # [1416304.426490] ca acme-order-renew-ca.foo-start[310]: + for fixpath in out certificates470ca # [1416304.426521] ca acme-order-renew-ca.foo-start[310]: + '[' -d certificates ']'471ca # [1416304.426521] ca acme-order-renew-ca.foo-start[310]: + chmod -R u=rwX,g=rX,o= certificates472ca # [1416304.428476] ca acme-order-renew-ca.foo-start[310]: + chown -R acme:nginx certificates473ca # [1416304.431319] ca acme-order-renew-ca.foo-start[310]: + chmod -R u=rwX,g=,o= accounts/.474ca # [1416304.647118] ca systemd[1]: Reloading Nginx Web Server...475ca # [1416304.651964] ca systemd[1]: acme-order-renew-ca.foo.service: Deactivated successfully.476ca # [1416304.652191] ca systemd[1]: Finished Order (and renew) ACME certificate for ca.foo.477ca # [1416304.652407] ca systemd[1]: acme-order-renew-ca.foo.service: Consumed 1.192s CPU time over 1.319s wall clock time.478ca # [1416305.579188] ca nginx[371]: nginx: the configuration file /nix/store/9xdq48zsmbzh971fy8df0q5bz7cca117-nginx.conf syntax is ok479ca # [1416305.579683] ca nginx[371]: nginx: configuration file /nix/store/9xdq48zsmbzh971fy8df0q5bz7cca117-nginx.conf test is successful480ca # [1416306.532667] ca systemd[1]: Reloaded Nginx Web Server.481ca # [1416306.533279] ca systemd[1]: Startup finished in 8.254s.482ca # [1416306.875994] ca systemd[1]: Starting Order (and renew) ACME certificate for ca.foo...483ca # [1416307.817544] ca acme-order-renew-ca.foo-start[386]: Waiting to acquire lock in /run/acme/484ca # [1416307.820870] ca acme-order-renew-ca.foo-start[386]: + set -euo pipefail485ca # [1416307.820944] ca acme-order-renew-ca.foo-start[386]: + exec486ca # [1416307.820995] ca acme-order-renew-ca.foo-start[386]: + /nix/store/fxkh6pl0y4nfbhdqdnhfkvsq7pbxq655-flock-0.4.0/bin/flock 11487ca # [1416307.822558] ca acme-order-renew-ca.foo-start[394]: ++ find accounts -path '*/keys/*.key' -print -quit488ca # [1416307.825776] ca acme-order-renew-ca.foo-start[386]: + '[' -n '' ']'489ca # [1416307.825844] ca acme-order-renew-ca.foo-start[386]: + exec490ca # [1416307.825927] ca acme-order-renew-ca.foo-start[386]: + '[' -e certificates/ca.foo.key ']'491ca # [1416307.825927] ca acme-order-renew-ca.foo-start[386]: + '[' -e certificates/ca.foo.crt ']'492ca # [1416307.826371] ca acme-order-renew-ca.foo-start[395]: ++ find accounts -name none@none.tld.key493ca # [1416307.829634] ca acme-order-renew-ca.foo-start[386]: + '[' -n accounts/ca.foo_1443/none@none.tld/none@none.tld.key ']'494ca # [1416307.829723] ca acme-order-renew-ca.foo-start[386]: + lego run --accept-tos --path . --email none@none.tld --http --http.webroot /var/lib/acme/acme-challenge --server https://ca.foo:1443/acme/acme/directory --key-type ec256 -d ca.foo --no-random-sleep --force-cert-domains495ca # [1416307.849863] ca acme-order-renew-ca.foo-start[396]: 2026-09-20T16:52:07.835646765Z INFO Renewing certificate cert-name=ca.foo496ca # [1416307.883200] ca step-ca[206]: time="2026-09-20T16:52:07Z" level=info duration="66.161µs" duration-ns=66161 fields.time="2026-09-20T16:52:07Z" method=GET name=ca path=/acme/acme/directory protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=d1308dbe-646d-4d59-94b0-0ff14b51d7ee response="{\"newNonce\":\"https://ca.foo:1443/acme/acme/new-nonce\",\"newAccount\":\"https://ca.foo:1443/acme/acme/new-account\",\"newOrder\":\"https://ca.foo:1443/acme/acme/new-order\",\"revokeCert\":\"https://ca.foo:1443/acme/acme/revoke-cert\",\"keyChange\":\"https://ca.foo:1443/acme/acme/key-change\"}" size=277 status=200 user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; arm64)" user-id=497ca # [1416307.883847] ca acme-order-renew-ca.foo-start[396]: 2026-09-20T16:52:07.869639351Z WARN The server does not advertise a renewal info endpoint. cert-name=ca.foo error="renewalInfo[get/post]: server does not advertise a renewal info endpoint"498ca # [1416307.883942] ca acme-order-renew-ca.foo-start[396]: 2026-09-20T16:52:07.869711832Z INFO Skip renewal: The certificate expires at 2026-12-19T16:52:04Z, the renewal can be performed in 59d23h59m36s130301688ns. cert-name=ca.foo499ca # [1416307.884406] ca acme-order-renew-ca.foo-start[386]: + touch out/acme-success500ca # [1416307.886357] ca acme-order-renew-ca.foo-start[386]: + cmp -s certificates/ca.foo.crt out/fullchain.pem501ca # [1416307.887821] ca acme-order-renew-ca.foo-start[386]: + for fixpath in out certificates502ca # [1416307.887821] ca acme-order-renew-ca.foo-start[386]: + '[' -d out ']'503ca # [1416307.887910] ca acme-order-renew-ca.foo-start[386]: + chmod -R u=rwX,g=rX,o= out504ca # [1416307.889788] ca acme-order-renew-ca.foo-start[386]: + chown -R acme:nginx out505ca # [1416307.892763] ca acme-order-renew-ca.foo-start[386]: + for fixpath in out certificates506ca # [1416307.892763] ca acme-order-renew-ca.foo-start[386]: + '[' -d certificates ']'507ca # [1416307.892853] ca acme-order-renew-ca.foo-start[386]: + chmod -R u=rwX,g=rX,o= certificates508ca # [1416307.894666] ca acme-order-renew-ca.foo-start[386]: + chown -R acme:nginx certificates509ca # [1416307.897927] ca acme-order-renew-ca.foo-start[386]: + chmod -R u=rwX,g=,o= accounts/.510ca: (finished: must succeed: systemctl restart acme-order-renew-ca.foo.service , in 7.43 seconds)511ca # [1416308.123703] ca systemd[1]: acme-order-renew-ca.foo.service: Deactivated successfully.512ca # [1416308.124074] ca systemd[1]: Finished Order (and renew) ACME certificate for ca.foo.513ca # [1416308.124644] ca systemd[1]: acme-order-renew-ca.foo.service: Consumed 1.177s CPU time over 1.247s wall clock time.514server: must succeed: systemctl restart acme-test.foo.service515server # [1416311.162325] server systemd[1]: acme-test.foo.service: Deactivated successfully.516server # [1416311.162695] server systemd[1]: Stopped Ensure certificate for test.foo.517server # [1416311.164170] server systemd[1]: Stopping Ensure certificate for test.foo...518server # [1416311.166782] server systemd[1]: Starting Ensure certificate for test.foo...519server: (finished: must succeed: systemctl restart acme-test.foo.service, in 1.02 seconds)520client: waiting for success: curl -v https://test.foo521* Host test.foo:443 was resolved.522* IPv6: 2001:db8:1::3523* IPv4: 192.168.1.3524* Trying [2001:db8:1::3]:443...525* ALPN: curl offers h2,http/1.1526} [5 bytes data]527* TLSv1.3 (OUT), TLS handshake, Client hello (1):528} [1552 bytes data]529* SSL Trust Anchors:530* OpenSSL default paths (fallback)531{ [5 bytes data]532* TLSv1.3 (IN), TLS handshake, Server hello (2):533{ [1210 bytes data]534* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):535{ [1 bytes data]536* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):537{ [19 bytes data]538* TLSv1.3 (IN), TLS handshake, Certificate (11):539{ [1010 bytes data]540* TLSv1.3 (IN), TLS handshake, CERT verify (15):541{ [112 bytes data]542* TLSv1.3 (IN), TLS handshake, Finished (20):543{ [52 bytes data]544* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):545} [1 bytes data]546* TLSv1.3 (OUT), TLS handshake, Finished (20):547} [52 bytes data]548* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey549* ALPN: server accepted h2550* Server certificate:551* subject: CN=test.foo552* start date: Sep 20 16:52:02 2026 GMT553* expire date: Oct 20 16:52:02 2028 GMT554* issuer: CN=minica root ca 010aed555* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384556* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384557* subjectAltName: "test.foo" matches cert's "test.foo"558* OpenSSL verify result: 13559* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)560* closing connection #0561curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)562More details here: https://curl.se/docs/sslcerts.html563564curl failed to verify the legitimacy of the server and therefore could not565establish a secure connection to it. To learn more about this situation and566how to fix it, please visit the webpage mentioned above.567server # [1416312.127870] server acme-test.foo-start[318]: Waiting to acquire lock in /run/acme/568server # [1416312.131039] server acme-test.foo-start[318]: + '[' -e out/acme-success ']'569server # [1416312.131039] server acme-test.foo-start[318]: + minica --ca-cert=ca/cert.pem --ca-key=ca/key.pem --domains=test.foo --ip-addresses=570server # [1416312.146947] server acme-test.foo-start[327]: + cd test.foo571server # [1416312.147604] server acme-test.foo-start[327]: + cp -vp cert.pem ../out/cert.pem572server # [1416312.149011] server acme-test.foo-start[328]: 'cert.pem' -> '../out/cert.pem'573server # [1416312.149352] server acme-test.foo-start[327]: + cp -vp key.pem ../out/key.pem574server # [1416312.150602] server acme-test.foo-start[327]: 'key.pem' -> '../out/key.pem'575server # [1416312.150855] server acme-test.foo-start[318]: + cat out/cert.pem ca/cert.pem576server # [1416312.152876] server acme-test.foo-start[318]: + cp ca/cert.pem out/chain.pem577server # [1416312.154532] server acme-test.foo-start[318]: + cat out/key.pem out/fullchain.pem578server # [1416312.156584] server acme-test.foo-start[318]: + for fixpath in out certificates579server # [1416312.156584] server acme-test.foo-start[318]: + '[' -d out ']'580server # [1416312.156676] server acme-test.foo-start[318]: + chmod -R u=rwX,g=rX,o= out581server # [1416312.158288] server acme-test.foo-start[318]: + chown -R acme:nginx out582server # [1416312.161674] server acme-test.foo-start[318]: + for fixpath in out certificates583server # [1416312.161674] server acme-test.foo-start[318]: + '[' -d certificates ']'584server # [1416312.165980] server systemd[1]: Finished Ensure certificate for test.foo.585server # [1416312.170644] server systemd[1]: Starting Order (and renew) ACME certificate for test.foo...586* Host test.foo:443 was resolved.587* IPv6: 2001:db8:1::3588* IPv4: 192.168.1.3589* Trying [2001:db8:1::3]:443...590* ALPN: curl offers h2,http/1.1591} [5 bytes data]592* TLSv1.3 (OUT), TLS handshake, Client hello (1):593} [1552 bytes data]594* SSL Trust Anchors:595* OpenSSL default paths (fallback)596{ [5 bytes data]597* TLSv1.3 (IN), TLS handshake, Server hello (2):598{ [1210 bytes data]599* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):600{ [1 bytes data]601* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):602{ [19 bytes data]603* TLSv1.3 (IN), TLS handshake, Certificate (11):604{ [1010 bytes data]605* TLSv1.3 (IN), TLS handshake, CERT verify (15):606{ [111 bytes data]607* TLSv1.3 (IN), TLS handshake, Finished (20):608{ [52 bytes data]609* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):610} [1 bytes data]611* TLSv1.3 (OUT), TLS handshake, Finished (20):612} [52 bytes data]613* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey614* ALPN: server accepted h2615* Server certificate:616* subject: CN=test.foo617* start date: Sep 20 16:52:02 2026 GMT618* expire date: Oct 20 16:52:02 2028 GMT619* issuer: CN=minica root ca 010aed620* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384621* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384622* subjectAltName: "test.foo" matches cert's "test.foo"623* OpenSSL verify result: 13624* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)625* closing connection #0626curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)627More details here: https://curl.se/docs/sslcerts.html628629curl failed to verify the legitimacy of the server and therefore could not630establish a secure connection to it. To learn more about this situation and631how to fix it, please visit the webpage mentioned above.632server # [1416313.121589] server acme-order-renew-test.foo-start[335]: Waiting to acquire lock in /run/acme/633server # [1416313.125045] server acme-order-renew-test.foo-start[335]: + set -euo pipefail634server # [1416313.125121] server acme-order-renew-test.foo-start[335]: + exec635server # [1416313.125173] server acme-order-renew-test.foo-start[335]: + /nix/store/fxkh6pl0y4nfbhdqdnhfkvsq7pbxq655-flock-0.4.0/bin/flock 11636server # [1416313.126708] server acme-order-renew-test.foo-start[343]: ++ find accounts -path '*/keys/*.key' -print -quit637server # [1416313.129913] server acme-order-renew-test.foo-start[335]: + '[' -n '' ']'638server # [1416313.129983] server acme-order-renew-test.foo-start[335]: + exec639server # [1416313.130064] server acme-order-renew-test.foo-start[335]: + '[' -e certificates/test.foo.key ']'640server # [1416313.130120] server acme-order-renew-test.foo-start[335]: + lego run --accept-tos --path . --email none@none.tld --http --http.webroot /var/lib/acme/acme-challenge --server https://ca.foo/acme/acme/directory --key-type ec256 -d test.foo --no-random-sleep --renew-force --ari-disable --force-cert-domains641server # [1416313.189739] server acme-order-renew-test.foo-start[344]: 2026-09-20T16:52:13.175514198Z INFO Trying to resolve the account by key642server # [1416313.201336] server acme-order-renew-test.foo-start[344]: 2026-09-20T16:52:13.187140437Z WARN retry: acme: error: 0 :: urn:ietf:params:acme:error:accountDoesNotExist :: Account does not exist643server # [1416313.201538] server acme-order-renew-test.foo-start[344]: 2026-09-20T16:52:13.187342360Z ERROR Error error="registration: resolve account by key: unable to communicate with the API server: error: Post \"https://ca.foo/acme/acme/new-account\": POST https://ca.foo/acme/acme/new-account giving up after 1 attempt(s): acme: error: 0 :: urn:ietf:params:acme:error:accountDoesNotExist :: Account does not exist"644server # [1416313.202081] server acme-order-renew-test.foo-start[335]: + echo Failed to fetch certificates. This may mean your DNS records are set up incorrectly. Self-signed certs are in place and dependant services will still start.645server # [1416313.202081] server acme-order-renew-test.foo-start[335]: Failed to fetch certificates. This may mean your DNS records are set up incorrectly. Self-signed certs are in place and dependant services will still start.646server # [1416313.202081] server acme-order-renew-test.foo-start[335]: + exit 10647server # [1416313.206467] server systemd[1]: acme-order-renew-test.foo.service: Main process exited, code=exited, status=10/n/a648server # [1416313.206680] server systemd[1]: acme-order-renew-test.foo.service: Failed with result 'exit-code'.649server # [1416313.207111] server systemd[1]: Failed to start Order (and renew) ACME certificate for test.foo.650ca # [1416313.189150] ca step-ca[206]: time="2026-09-20T16:52:13Z" level=info duration="65.241µs" duration-ns=65241 fields.time="2026-09-20T16:52:13Z" method=GET name=ca path=/acme/acme/directory protocol=HTTP/1.1 referer= remote-address="::1" request-id=4d1570f8-290c-443e-a911-7190b5e4f098 response="{\"newNonce\":\"https://ca.foo/acme/acme/new-nonce\",\"newAccount\":\"https://ca.foo/acme/acme/new-account\",\"newOrder\":\"https://ca.foo/acme/acme/new-order\",\"revokeCert\":\"https://ca.foo/acme/acme/revoke-cert\",\"keyChange\":\"https://ca.foo/acme/acme/key-change\"}" size=252 status=200 user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; arm64)" user-id=651ca # [1416313.195496] ca step-ca[206]: time="2026-09-20T16:52:13Z" level=info duration=1.131615ms duration-ns=1131615 fields.time="2026-09-20T16:52:13Z" method=HEAD name=ca nonce=a0txYmhnN1BRV2RLVUZId3llV3FTdGh3aXU0Z0xHRHE path=/acme/acme/new-nonce protocol=HTTP/1.1 referer= remote-address=127.0.0.1 request-id=2bcd6903-3a58-4707-bcd1-8ee0f6b48811 size=0 status=200 user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; arm64)" user-id=652ca # [1416313.200791] ca step-ca[206]: time="2026-09-20T16:52:13Z" level=warning duration=1.827546ms duration-ns=1827546 error="account does not exist" fields.time="2026-09-20T16:52:13Z" method=POST name=ca nonce=Q2Y0cHQ5UkI4QnBXbnRNb21RTVcxWUpTVEJMYnk3Zng path=/acme/acme/new-account protocol=HTTP/1.1 referer= remote-address="::1" request-id=42b5b7f1-dd5a-4ce2-b8e4-8eb5c9ae4fbe response="{\"type\":\"urn:ietf:params:acme:error:accountDoesNotExist\",\"detail\":\"Account does not exist\"}" size=92 status=400 user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; arm64)" user-id=653* Host test.foo:443 was resolved.654* IPv6: 2001:db8:1::3655* IPv4: 192.168.1.3656* Trying [2001:db8:1::3]:443...657* ALPN: curl offers h2,http/1.1658} [5 bytes data]659* TLSv1.3 (OUT), TLS handshake, Client hello (1):660} [1552 bytes data]661* SSL Trust Anchors:662* OpenSSL default paths (fallback)663{ [5 bytes data]664* TLSv1.3 (IN), TLS handshake, Server hello (2):665{ [1210 bytes data]666* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):667{ [1 bytes data]668* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):669{ [19 bytes data]670* TLSv1.3 (IN), TLS handshake, Certificate (11):671{ [1010 bytes data]672* TLSv1.3 (IN), TLS handshake, CERT verify (15):673{ [111 bytes data]674* TLSv1.3 (IN), TLS handshake, Finished (20):675{ [52 bytes data]676* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):677} [1 bytes data]678* TLSv1.3 (OUT), TLS handshake, Finished (20):679} [52 bytes data]680* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey681* ALPN: server accepted h2682* Server certificate:683* subject: CN=test.foo684* start date: Sep 20 16:52:02 2026 GMT685* expire date: Oct 20 16:52:02 2028 GMT686* issuer: CN=minica root ca 010aed687* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384688* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384689* subjectAltName: "test.foo" matches cert's "test.foo"690* OpenSSL verify result: 13691* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)692* closing connection #0693curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)694More details here: https://curl.se/docs/sslcerts.html695696curl failed to verify the legitimacy of the server and therefore could not697establish a secure connection to it. To learn more about this situation and698how to fix it, please visit the webpage mentioned above.699* Host test.foo:443 was resolved.700* IPv6: 2001:db8:1::3701* IPv4: 192.168.1.3702* Trying [2001:db8:1::3]:443...703* ALPN: curl offers h2,http/1.1704} [5 bytes data]705* TLSv1.3 (OUT), TLS handshake, Client hello (1):706} [1552 bytes data]707* SSL Trust Anchors:708* OpenSSL default paths (fallback)709{ [5 bytes data]710* TLSv1.3 (IN), TLS handshake, Server hello (2):711{ [1210 bytes data]712* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):713{ [1 bytes data]714* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):715{ [19 bytes data]716* TLSv1.3 (IN), TLS handshake, Certificate (11):717{ [1010 bytes data]718* TLSv1.3 (IN), TLS handshake, CERT verify (15):719{ [111 bytes data]720* TLSv1.3 (IN), TLS handshake, Finished (20):721{ [52 bytes data]722* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):723} [1 bytes data]724* TLSv1.3 (OUT), TLS handshake, Finished (20):725} [52 bytes data]726* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey727* ALPN: server accepted h2728* Server certificate:729* subject: CN=test.foo730* start date: Sep 20 16:52:02 2026 GMT731* expire date: Oct 20 16:52:02 2028 GMT732* issuer: CN=minica root ca 010aed733* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384734* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384735* subjectAltName: "test.foo" matches cert's "test.foo"736* OpenSSL verify result: 13737* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)738* closing connection #0739curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)740More details here: https://curl.se/docs/sslcerts.html741742curl failed to verify the legitimacy of the server and therefore could not743establish a secure connection to it. To learn more about this situation and744how to fix it, please visit the webpage mentioned above.745* Host test.foo:443 was resolved.746* IPv6: 2001:db8:1::3747* IPv4: 192.168.1.3748* Trying [2001:db8:1::3]:443...749* ALPN: curl offers h2,http/1.1750} [5 bytes data]751* TLSv1.3 (OUT), TLS handshake, Client hello (1):752} [1552 bytes data]753* SSL Trust Anchors:754* OpenSSL default paths (fallback)755{ [5 bytes data]756* TLSv1.3 (IN), TLS handshake, Server hello (2):757{ [1210 bytes data]758* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):759{ [1 bytes data]760* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):761{ [19 bytes data]762* TLSv1.3 (IN), TLS handshake, Certificate (11):763{ [1010 bytes data]764* TLSv1.3 (IN), TLS handshake, CERT verify (15):765{ [110 bytes data]766* TLSv1.3 (IN), TLS handshake, Finished (20):767{ [52 bytes data]768* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):769} [1 bytes data]770* TLSv1.3 (OUT), TLS handshake, Finished (20):771} [52 bytes data]772* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey773* ALPN: server accepted h2774* Server certificate:775* subject: CN=test.foo776* start date: Sep 20 16:52:02 2026 GMT777* expire date: Oct 20 16:52:02 2028 GMT778* issuer: CN=minica root ca 010aed779* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384780* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384781* subjectAltName: "test.foo" matches cert's "test.foo"782* OpenSSL verify result: 13783* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)784* closing connection #0785curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)786More details here: https://curl.se/docs/sslcerts.html787788curl failed to verify the legitimacy of the server and therefore could not789establish a secure connection to it. To learn more about this situation and790how to fix it, please visit the webpage mentioned above.791* Host test.foo:443 was resolved.792* IPv6: 2001:db8:1::3793* IPv4: 192.168.1.3794* Trying [2001:db8:1::3]:443...795* ALPN: curl offers h2,http/1.1796} [5 bytes data]797* TLSv1.3 (OUT), TLS handshake, Client hello (1):798} [1552 bytes data]799* SSL Trust Anchors:800* OpenSSL default paths (fallback)801{ [5 bytes data]802* TLSv1.3 (IN), TLS handshake, Server hello (2):803{ [1210 bytes data]804* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):805{ [1 bytes data]806* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):807{ [19 bytes data]808* TLSv1.3 (IN), TLS handshake, Certificate (11):809{ [1010 bytes data]810* TLSv1.3 (IN), TLS handshake, CERT verify (15):811{ [111 bytes data]812* TLSv1.3 (IN), TLS handshake, Finished (20):813{ [52 bytes data]814* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):815} [1 bytes data]816* TLSv1.3 (OUT), TLS handshake, Finished (20):817} [52 bytes data]818* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey819* ALPN: server accepted h2820* Server certificate:821* subject: CN=test.foo822* start date: Sep 20 16:52:02 2026 GMT823* expire date: Oct 20 16:52:02 2028 GMT824* issuer: CN=minica root ca 010aed825* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384826* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384827* subjectAltName: "test.foo" matches cert's "test.foo"828* OpenSSL verify result: 13829* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)830* closing connection #0831curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)832More details here: https://curl.se/docs/sslcerts.html833834curl failed to verify the legitimacy of the server and therefore could not835establish a secure connection to it. To learn more about this situation and836how to fix it, please visit the webpage mentioned above.837* Host test.foo:443 was resolved.838* IPv6: 2001:db8:1::3839* IPv4: 192.168.1.3840* Trying [2001:db8:1::3]:443...841* ALPN: curl offers h2,http/1.1842} [5 bytes data]843* TLSv1.3 (OUT), TLS handshake, Client hello (1):844} [1552 bytes data]845* SSL Trust Anchors:846* OpenSSL default paths (fallback)847{ [5 bytes data]848* TLSv1.3 (IN), TLS handshake, Server hello (2):849{ [1210 bytes data]850* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):851{ [1 bytes data]852* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):853{ [19 bytes data]854* TLSv1.3 (IN), TLS handshake, Certificate (11):855{ [1010 bytes data]856* TLSv1.3 (IN), TLS handshake, CERT verify (15):857{ [110 bytes data]858* TLSv1.3 (IN), TLS handshake, Finished (20):859{ [52 bytes data]860* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):861} [1 bytes data]862* TLSv1.3 (OUT), TLS handshake, Finished (20):863} [52 bytes data]864* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey865* ALPN: server accepted h2866* Server certificate:867* subject: CN=test.foo868* start date: Sep 20 16:52:02 2026 GMT869* expire date: Oct 20 16:52:02 2028 GMT870* issuer: CN=minica root ca 010aed871* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384872* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384873* subjectAltName: "test.foo" matches cert's "test.foo"874* OpenSSL verify result: 13875* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)876* closing connection #0877curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)878More details here: https://curl.se/docs/sslcerts.html879880curl failed to verify the legitimacy of the server and therefore could not881establish a secure connection to it. To learn more about this situation and882how to fix it, please visit the webpage mentioned above.883* Host test.foo:443 was resolved.884* IPv6: 2001:db8:1::3885* IPv4: 192.168.1.3886* Trying [2001:db8:1::3]:443...887* ALPN: curl offers h2,http/1.1888} [5 bytes data]889* TLSv1.3 (OUT), TLS handshake, Client hello (1):890} [1552 bytes data]891* SSL Trust Anchors:892* OpenSSL default paths (fallback)893{ [5 bytes data]894* TLSv1.3 (IN), TLS handshake, Server hello (2):895{ [1210 bytes data]896* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):897{ [1 bytes data]898* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):899{ [19 bytes data]900* TLSv1.3 (IN), TLS handshake, Certificate (11):901{ [1010 bytes data]902* TLSv1.3 (IN), TLS handshake, CERT verify (15):903{ [112 bytes data]904* TLSv1.3 (IN), TLS handshake, Finished (20):905{ [52 bytes data]906* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):907} [1 bytes data]908* TLSv1.3 (OUT), TLS handshake, Finished (20):909} [52 bytes data]910* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey911* ALPN: server accepted h2912* Server certificate:913* subject: CN=test.foo914* start date: Sep 20 16:52:02 2026 GMT915* expire date: Oct 20 16:52:02 2028 GMT916* issuer: CN=minica root ca 010aed917* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384918* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384919* subjectAltName: "test.foo" matches cert's "test.foo"920* OpenSSL verify result: 13921* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)922* closing connection #0923curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)924More details here: https://curl.se/docs/sslcerts.html925926curl failed to verify the legitimacy of the server and therefore could not927establish a secure connection to it. To learn more about this situation and928how to fix it, please visit the webpage mentioned above.929* Host test.foo:443 was resolved.930* IPv6: 2001:db8:1::3931* IPv4: 192.168.1.3932* Trying [2001:db8:1::3]:443...933* ALPN: curl offers h2,http/1.1934} [5 bytes data]935* TLSv1.3 (OUT), TLS handshake, Client hello (1):936} [1552 bytes data]937* SSL Trust Anchors:938* OpenSSL default paths (fallback)939{ [5 bytes data]940* TLSv1.3 (IN), TLS handshake, Server hello (2):941{ [1210 bytes data]942* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):943{ [1 bytes data]944* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):945{ [19 bytes data]946* TLSv1.3 (IN), TLS handshake, Certificate (11):947{ [1010 bytes data]948* TLSv1.3 (IN), TLS handshake, CERT verify (15):949{ [112 bytes data]950* TLSv1.3 (IN), TLS handshake, Finished (20):951{ [52 bytes data]952* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):953} [1 bytes data]954* TLSv1.3 (OUT), TLS handshake, Finished (20):955} [52 bytes data]956* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey957* ALPN: server accepted h2958* Server certificate:959* subject: CN=test.foo960* start date: Sep 20 16:52:02 2026 GMT961* expire date: Oct 20 16:52:02 2028 GMT962* issuer: CN=minica root ca 010aed963* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384964* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384965* subjectAltName: "test.foo" matches cert's "test.foo"966* OpenSSL verify result: 13967* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)968* closing connection #0969curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)970More details here: https://curl.se/docs/sslcerts.html971972curl failed to verify the legitimacy of the server and therefore could not973establish a secure connection to it. To learn more about this situation and974how to fix it, please visit the webpage mentioned above.975* Trying [2001:db8:1::3]:443...976* Host test.foo:443 was resolved.977* IPv6: 2001:db8:1::3978* IPv4: 192.168.1.3979* ALPN: curl offers h2,http/1.1980} [5 bytes data]981* TLSv1.3 (OUT), TLS handshake, Client hello (1):982} [1552 bytes data]983* SSL Trust Anchors:984* OpenSSL default paths (fallback)985{ [5 bytes data]986* TLSv1.3 (IN), TLS handshake, Server hello (2):987{ [1210 bytes data]988* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):989{ [1 bytes data]990* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):991{ [19 bytes data]992* TLSv1.3 (IN), TLS handshake, Certificate (11):993{ [1010 bytes data]994* TLSv1.3 (IN), TLS handshake, CERT verify (15):995{ [111 bytes data]996* TLSv1.3 (IN), TLS handshake, Finished (20):997{ [52 bytes data]998* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):999} [1 bytes data]1000* TLSv1.3 (OUT), TLS handshake, Finished (20):1001} [52 bytes data]1002* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1003* ALPN: server accepted h21004* Server certificate:1005* subject: CN=test.foo1006* start date: Sep 20 16:52:02 2026 GMT1007* expire date: Oct 20 16:52:02 2028 GMT1008* issuer: CN=minica root ca 010aed1009* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841010* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841011* subjectAltName: "test.foo" matches cert's "test.foo"1012* OpenSSL verify result: 131013* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1014* closing connection #01015curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1016More details here: https://curl.se/docs/sslcerts.html10171018curl failed to verify the legitimacy of the server and therefore could not1019establish a secure connection to it. To learn more about this situation and1020how to fix it, please visit the webpage mentioned above.1021* Host test.foo:443 was resolved.1022* IPv6: 2001:db8:1::31023* IPv4: 192.168.1.31024* Trying [2001:db8:1::3]:443...1025* ALPN: curl offers h2,http/1.11026} [5 bytes data]1027* TLSv1.3 (OUT), TLS handshake, Client hello (1):1028} [1552 bytes data]1029* SSL Trust Anchors:1030* OpenSSL default paths (fallback)1031{ [5 bytes data]1032* TLSv1.3 (IN), TLS handshake, Server hello (2):1033{ [1210 bytes data]1034* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1035{ [1 bytes data]1036* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1037{ [19 bytes data]1038* TLSv1.3 (IN), TLS handshake, Certificate (11):1039{ [1010 bytes data]1040* TLSv1.3 (IN), TLS handshake, CERT verify (15):1041{ [112 bytes data]1042* TLSv1.3 (IN), TLS handshake, Finished (20):1043{ [52 bytes data]1044* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1045} [1 bytes data]1046* TLSv1.3 (OUT), TLS handshake, Finished (20):1047} [52 bytes data]1048* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1049* ALPN: server accepted h21050* Server certificate:1051* subject: CN=test.foo1052* start date: Sep 20 16:52:02 2026 GMT1053* expire date: Oct 20 16:52:02 2028 GMT1054* issuer: CN=minica root ca 010aed1055* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841056* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841057* subjectAltName: "test.foo" matches cert's "test.foo"1058* OpenSSL verify result: 131059* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1060* closing connection #01061curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1062More details here: https://curl.se/docs/sslcerts.html10631064curl failed to verify the legitimacy of the server and therefore could not1065establish a secure connection to it. To learn more about this situation and1066how to fix it, please visit the webpage mentioned above.1067* Host test.foo:443 was resolved.1068* IPv6: 2001:db8:1::31069* IPv4: 192.168.1.31070* Trying [2001:db8:1::3]:443...1071* ALPN: curl offers h2,http/1.11072} [5 bytes data]1073* TLSv1.3 (OUT), TLS handshake, Client hello (1):1074} [1552 bytes data]1075* SSL Trust Anchors:1076* OpenSSL default paths (fallback)1077{ [5 bytes data]1078* TLSv1.3 (IN), TLS handshake, Server hello (2):1079{ [1210 bytes data]1080* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1081{ [1 bytes data]1082* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1083{ [19 bytes data]1084* TLSv1.3 (IN), TLS handshake, Certificate (11):1085{ [1010 bytes data]1086* TLSv1.3 (IN), TLS handshake, CERT verify (15):1087{ [111 bytes data]1088* TLSv1.3 (IN), TLS handshake, Finished (20):1089{ [52 bytes data]1090* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1091} [1 bytes data]1092* TLSv1.3 (OUT), TLS handshake, Finished (20):1093} [52 bytes data]1094* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1095* ALPN: server accepted h21096* Server certificate:1097* subject: CN=test.foo1098* start date: Sep 20 16:52:02 2026 GMT1099* expire date: Oct 20 16:52:02 2028 GMT1100* issuer: CN=minica root ca 010aed1101* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841102* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841103* subjectAltName: "test.foo" matches cert's "test.foo"1104* OpenSSL verify result: 131105* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1106* closing connection #01107curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1108More details here: https://curl.se/docs/sslcerts.html11091110curl failed to verify the legitimacy of the server and therefore could not1111establish a secure connection to it. To learn more about this situation and1112how to fix it, please visit the webpage mentioned above.1113* Host test.foo:443 was resolved.1114* IPv6: 2001:db8:1::31115* IPv4: 192.168.1.31116* Trying [2001:db8:1::3]:443...1117* ALPN: curl offers h2,http/1.11118} [5 bytes data]1119* TLSv1.3 (OUT), TLS handshake, Client hello (1):1120} [1552 bytes data]1121* SSL Trust Anchors:1122* OpenSSL default paths (fallback)1123{ [5 bytes data]1124* TLSv1.3 (IN), TLS handshake, Server hello (2):1125{ [1210 bytes data]1126* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1127{ [1 bytes data]1128* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1129{ [19 bytes data]1130* TLSv1.3 (IN), TLS handshake, Certificate (11):1131{ [1010 bytes data]1132* TLSv1.3 (IN), TLS handshake, CERT verify (15):1133{ [111 bytes data]1134* TLSv1.3 (IN), TLS handshake, Finished (20):1135{ [52 bytes data]1136* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1137} [1 bytes data]1138* TLSv1.3 (OUT), TLS handshake, Finished (20):1139} [52 bytes data]1140* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1141* ALPN: server accepted h21142* Server certificate:1143* subject: CN=test.foo1144* start date: Sep 20 16:52:02 2026 GMT1145* expire date: Oct 20 16:52:02 2028 GMT1146* issuer: CN=minica root ca 010aed1147* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841148* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841149* subjectAltName: "test.foo" matches cert's "test.foo"1150* OpenSSL verify result: 131151* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1152* closing connection #01153curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1154More details here: https://curl.se/docs/sslcerts.html11551156curl failed to verify the legitimacy of the server and therefore could not1157establish a secure connection to it. To learn more about this situation and1158how to fix it, please visit the webpage mentioned above.1159* Host test.foo:443 was resolved.1160* IPv6: 2001:db8:1::31161* IPv4: 192.168.1.31162* Trying [2001:db8:1::3]:443...1163* ALPN: curl offers h2,http/1.11164} [5 bytes data]1165* TLSv1.3 (OUT), TLS handshake, Client hello (1):1166} [1552 bytes data]1167* SSL Trust Anchors:1168* OpenSSL default paths (fallback)1169{ [5 bytes data]1170* TLSv1.3 (IN), TLS handshake, Server hello (2):1171{ [1210 bytes data]1172* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1173{ [1 bytes data]1174* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1175{ [19 bytes data]1176* TLSv1.3 (IN), TLS handshake, Certificate (11):1177{ [1010 bytes data]1178* TLSv1.3 (IN), TLS handshake, CERT verify (15):1179{ [111 bytes data]1180* TLSv1.3 (IN), TLS handshake, Finished (20):1181{ [52 bytes data]1182* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1183} [1 bytes data]1184* TLSv1.3 (OUT), TLS handshake, Finished (20):1185} [52 bytes data]1186* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1187* ALPN: server accepted h21188* Server certificate:1189* subject: CN=test.foo1190* start date: Sep 20 16:52:02 2026 GMT1191* expire date: Oct 20 16:52:02 2028 GMT1192* issuer: CN=minica root ca 010aed1193* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841194* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841195* subjectAltName: "test.foo" matches cert's "test.foo"1196* OpenSSL verify result: 131197* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1198* closing connection #01199curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1200More details here: https://curl.se/docs/sslcerts.html12011202curl failed to verify the legitimacy of the server and therefore could not1203establish a secure connection to it. To learn more about this situation and1204how to fix it, please visit the webpage mentioned above.1205* Host test.foo:443 was resolved.1206* IPv6: 2001:db8:1::31207* IPv4: 192.168.1.31208* Trying [2001:db8:1::3]:443...1209* ALPN: curl offers h2,http/1.11210} [5 bytes data]1211* TLSv1.3 (OUT), TLS handshake, Client hello (1):1212} [1552 bytes data]1213* SSL Trust Anchors:1214* OpenSSL default paths (fallback)1215{ [5 bytes data]1216* TLSv1.3 (IN), TLS handshake, Server hello (2):1217{ [1210 bytes data]1218* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1219{ [1 bytes data]1220* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1221{ [19 bytes data]1222* TLSv1.3 (IN), TLS handshake, Certificate (11):1223{ [1010 bytes data]1224* TLSv1.3 (IN), TLS handshake, CERT verify (15):1225{ [112 bytes data]1226* TLSv1.3 (IN), TLS handshake, Finished (20):1227{ [52 bytes data]1228* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1229} [1 bytes data]1230* TLSv1.3 (OUT), TLS handshake, Finished (20):1231} [52 bytes data]1232* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1233* ALPN: server accepted h21234* Server certificate:1235* subject: CN=test.foo1236* start date: Sep 20 16:52:02 2026 GMT1237* expire date: Oct 20 16:52:02 2028 GMT1238* issuer: CN=minica root ca 010aed1239* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841240* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841241* subjectAltName: "test.foo" matches cert's "test.foo"1242* OpenSSL verify result: 131243* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1244* closing connection #01245curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1246More details here: https://curl.se/docs/sslcerts.html12471248curl failed to verify the legitimacy of the server and therefore could not1249establish a secure connection to it. To learn more about this situation and1250how to fix it, please visit the webpage mentioned above.1251* Host test.foo:443 was resolved.1252* IPv6: 2001:db8:1::31253* IPv4: 192.168.1.31254* Trying [2001:db8:1::3]:443...1255* ALPN: curl offers h2,http/1.11256} [5 bytes data]1257* TLSv1.3 (OUT), TLS handshake, Client hello (1):1258} [1552 bytes data]1259* SSL Trust Anchors:1260* OpenSSL default paths (fallback)1261{ [5 bytes data]1262* TLSv1.3 (IN), TLS handshake, Server hello (2):1263{ [1210 bytes data]1264* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1265{ [1 bytes data]1266* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1267{ [19 bytes data]1268* TLSv1.3 (IN), TLS handshake, Certificate (11):1269{ [1010 bytes data]1270* TLSv1.3 (IN), TLS handshake, CERT verify (15):1271{ [112 bytes data]1272* TLSv1.3 (IN), TLS handshake, Finished (20):1273{ [52 bytes data]1274* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1275} [1 bytes data]1276* TLSv1.3 (OUT), TLS handshake, Finished (20):1277} [52 bytes data]1278* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1279* ALPN: server accepted h21280* Server certificate:1281* subject: CN=test.foo1282* start date: Sep 20 16:52:02 2026 GMT1283* expire date: Oct 20 16:52:02 2028 GMT1284* issuer: CN=minica root ca 010aed1285* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841286* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841287* subjectAltName: "test.foo" matches cert's "test.foo"1288* OpenSSL verify result: 131289* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1290* closing connection #01291curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1292More details here: https://curl.se/docs/sslcerts.html12931294curl failed to verify the legitimacy of the server and therefore could not1295establish a secure connection to it. To learn more about this situation and1296how to fix it, please visit the webpage mentioned above.1297* Trying [2001:db8:1::3]:443...1298* Host test.foo:443 was resolved.1299* IPv6: 2001:db8:1::31300* IPv4: 192.168.1.31301* ALPN: curl offers h2,http/1.11302} [5 bytes data]1303* TLSv1.3 (OUT), TLS handshake, Client hello (1):1304} [1552 bytes data]1305* SSL Trust Anchors:1306* OpenSSL default paths (fallback)1307{ [5 bytes data]1308* TLSv1.3 (IN), TLS handshake, Server hello (2):1309{ [1210 bytes data]1310* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1311{ [1 bytes data]1312* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1313{ [19 bytes data]1314* TLSv1.3 (IN), TLS handshake, Certificate (11):1315{ [1010 bytes data]1316* TLSv1.3 (IN), TLS handshake, CERT verify (15):1317{ [112 bytes data]1318* TLSv1.3 (IN), TLS handshake, Finished (20):1319{ [52 bytes data]1320* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1321} [1 bytes data]1322* TLSv1.3 (OUT), TLS handshake, Finished (20):1323} [52 bytes data]1324* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1325* ALPN: server accepted h21326* Server certificate:1327* subject: CN=test.foo1328* start date: Sep 20 16:52:02 2026 GMT1329* expire date: Oct 20 16:52:02 2028 GMT1330* issuer: CN=minica root ca 010aed1331* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841332* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841333* subjectAltName: "test.foo" matches cert's "test.foo"1334* OpenSSL verify result: 131335* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1336* closing connection #01337curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1338More details here: https://curl.se/docs/sslcerts.html13391340curl failed to verify the legitimacy of the server and therefore could not1341establish a secure connection to it. To learn more about this situation and1342how to fix it, please visit the webpage mentioned above.1343* Host test.foo:443 was resolved.1344* IPv6: 2001:db8:1::31345* IPv4: 192.168.1.31346* Trying [2001:db8:1::3]:443...1347* ALPN: curl offers h2,http/1.11348} [5 bytes data]1349* TLSv1.3 (OUT), TLS handshake, Client hello (1):1350} [1552 bytes data]1351* SSL Trust Anchors:1352* OpenSSL default paths (fallback)1353{ [5 bytes data]1354* TLSv1.3 (IN), TLS handshake, Server hello (2):1355{ [1210 bytes data]1356* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1357{ [1 bytes data]1358* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1359{ [19 bytes data]1360* TLSv1.3 (IN), TLS handshake, Certificate (11):1361{ [1010 bytes data]1362* TLSv1.3 (IN), TLS handshake, CERT verify (15):1363{ [110 bytes data]1364* TLSv1.3 (IN), TLS handshake, Finished (20):1365{ [52 bytes data]1366* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1367} [1 bytes data]1368* TLSv1.3 (OUT), TLS handshake, Finished (20):1369} [52 bytes data]1370* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1371* ALPN: server accepted h21372* Server certificate:1373* subject: CN=test.foo1374* start date: Sep 20 16:52:02 2026 GMT1375* expire date: Oct 20 16:52:02 2028 GMT1376* issuer: CN=minica root ca 010aed1377* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841378* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841379* subjectAltName: "test.foo" matches cert's "test.foo"1380* OpenSSL verify result: 131381* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1382* closing connection #01383curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1384More details here: https://curl.se/docs/sslcerts.html13851386curl failed to verify the legitimacy of the server and therefore could not1387establish a secure connection to it. To learn more about this situation and1388how to fix it, please visit the webpage mentioned above.1389* Host test.foo:443 was resolved.1390* IPv6: 2001:db8:1::31391* IPv4: 192.168.1.31392* Trying [2001:db8:1::3]:443...1393* ALPN: curl offers h2,http/1.11394} [5 bytes data]1395* TLSv1.3 (OUT), TLS handshake, Client hello (1):1396} [1552 bytes data]1397* SSL Trust Anchors:1398* OpenSSL default paths (fallback)1399{ [5 bytes data]1400* TLSv1.3 (IN), TLS handshake, Server hello (2):1401{ [1210 bytes data]1402* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1403{ [1 bytes data]1404* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1405{ [19 bytes data]1406* TLSv1.3 (IN), TLS handshake, Certificate (11):1407{ [1010 bytes data]1408* TLSv1.3 (IN), TLS handshake, CERT verify (15):1409{ [111 bytes data]1410* TLSv1.3 (IN), TLS handshake, Finished (20):1411{ [52 bytes data]1412* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1413} [1 bytes data]1414* TLSv1.3 (OUT), TLS handshake, Finished (20):1415} [52 bytes data]1416* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1417* ALPN: server accepted h21418* Server certificate:1419* subject: CN=test.foo1420* start date: Sep 20 16:52:02 2026 GMT1421* expire date: Oct 20 16:52:02 2028 GMT1422* issuer: CN=minica root ca 010aed1423* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841424* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841425* subjectAltName: "test.foo" matches cert's "test.foo"1426* OpenSSL verify result: 131427* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1428* closing connection #01429curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1430More details here: https://curl.se/docs/sslcerts.html14311432curl failed to verify the legitimacy of the server and therefore could not1433establish a secure connection to it. To learn more about this situation and1434how to fix it, please visit the webpage mentioned above.1435* Host test.foo:443 was resolved.1436* IPv6: 2001:db8:1::31437* IPv4: 192.168.1.31438* Trying [2001:db8:1::3]:443...1439* ALPN: curl offers h2,http/1.11440} [5 bytes data]1441* TLSv1.3 (OUT), TLS handshake, Client hello (1):1442} [1552 bytes data]1443* SSL Trust Anchors:1444* OpenSSL default paths (fallback)1445{ [5 bytes data]1446* TLSv1.3 (IN), TLS handshake, Server hello (2):1447{ [1210 bytes data]1448* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1449{ [1 bytes data]1450* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1451{ [19 bytes data]1452* TLSv1.3 (IN), TLS handshake, Certificate (11):1453{ [1010 bytes data]1454* TLSv1.3 (IN), TLS handshake, CERT verify (15):1455{ [112 bytes data]1456* TLSv1.3 (IN), TLS handshake, Finished (20):1457{ [52 bytes data]1458* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1459} [1 bytes data]1460* TLSv1.3 (OUT), TLS handshake, Finished (20):1461} [52 bytes data]1462* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1463* ALPN: server accepted h21464* Server certificate:1465* subject: CN=test.foo1466* start date: Sep 20 16:52:02 2026 GMT1467* expire date: Oct 20 16:52:02 2028 GMT1468* issuer: CN=minica root ca 010aed1469* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841470* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841471* subjectAltName: "test.foo" matches cert's "test.foo"1472* OpenSSL verify result: 131473* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1474* closing connection #01475curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1476More details here: https://curl.se/docs/sslcerts.html14771478curl failed to verify the legitimacy of the server and therefore could not1479establish a secure connection to it. To learn more about this situation and1480how to fix it, please visit the webpage mentioned above.1481* Host test.foo:443 was resolved.1482* IPv6: 2001:db8:1::31483* IPv4: 192.168.1.31484* Trying [2001:db8:1::3]:443...1485* ALPN: curl offers h2,http/1.11486} [5 bytes data]1487* TLSv1.3 (OUT), TLS handshake, Client hello (1):1488} [1552 bytes data]1489* SSL Trust Anchors:1490* OpenSSL default paths (fallback)1491{ [5 bytes data]1492* TLSv1.3 (IN), TLS handshake, Server hello (2):1493{ [1210 bytes data]1494* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1495{ [1 bytes data]1496* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1497{ [19 bytes data]1498* TLSv1.3 (IN), TLS handshake, Certificate (11):1499{ [1010 bytes data]1500* TLSv1.3 (IN), TLS handshake, CERT verify (15):1501{ [111 bytes data]1502* TLSv1.3 (IN), TLS handshake, Finished (20):1503{ [52 bytes data]1504* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1505} [1 bytes data]1506* TLSv1.3 (OUT), TLS handshake, Finished (20):1507} [52 bytes data]1508* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1509* ALPN: server accepted h21510* Server certificate:1511* subject: CN=test.foo1512* start date: Sep 20 16:52:02 2026 GMT1513* expire date: Oct 20 16:52:02 2028 GMT1514* issuer: CN=minica root ca 010aed1515* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841516* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841517* subjectAltName: "test.foo" matches cert's "test.foo"1518* OpenSSL verify result: 131519* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1520* closing connection #01521curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1522More details here: https://curl.se/docs/sslcerts.html15231524curl failed to verify the legitimacy of the server and therefore could not1525establish a secure connection to it. To learn more about this situation and1526how to fix it, please visit the webpage mentioned above.1527* Host test.foo:443 was resolved.1528* IPv6: 2001:db8:1::31529* IPv4: 192.168.1.31530* Trying [2001:db8:1::3]:443...1531* ALPN: curl offers h2,http/1.11532} [5 bytes data]1533* TLSv1.3 (OUT), TLS handshake, Client hello (1):1534} [1552 bytes data]1535* SSL Trust Anchors:1536* OpenSSL default paths (fallback)1537{ [5 bytes data]1538* TLSv1.3 (IN), TLS handshake, Server hello (2):1539{ [1210 bytes data]1540* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1541{ [1 bytes data]1542* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1543{ [19 bytes data]1544* TLSv1.3 (IN), TLS handshake, Certificate (11):1545{ [1010 bytes data]1546* TLSv1.3 (IN), TLS handshake, CERT verify (15):1547{ [111 bytes data]1548* TLSv1.3 (IN), TLS handshake, Finished (20):1549{ [52 bytes data]1550* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1551} [1 bytes data]1552* TLSv1.3 (OUT), TLS handshake, Finished (20):1553} [52 bytes data]1554* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1555* ALPN: server accepted h21556* Server certificate:1557* subject: CN=test.foo1558* start date: Sep 20 16:52:02 2026 GMT1559* expire date: Oct 20 16:52:02 2028 GMT1560* issuer: CN=minica root ca 010aed1561* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841562* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841563* subjectAltName: "test.foo" matches cert's "test.foo"1564* OpenSSL verify result: 131565* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1566* closing connection #01567curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1568More details here: https://curl.se/docs/sslcerts.html15691570curl failed to verify the legitimacy of the server and therefore could not1571establish a secure connection to it. To learn more about this situation and1572how to fix it, please visit the webpage mentioned above.1573* Host test.foo:443 was resolved.1574* IPv6: 2001:db8:1::31575* IPv4: 192.168.1.31576* Trying [2001:db8:1::3]:443...1577* ALPN: curl offers h2,http/1.11578} [5 bytes data]1579* TLSv1.3 (OUT), TLS handshake, Client hello (1):1580} [1552 bytes data]1581* SSL Trust Anchors:1582* OpenSSL default paths (fallback)1583{ [5 bytes data]1584* TLSv1.3 (IN), TLS handshake, Server hello (2):1585{ [1210 bytes data]1586* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1587{ [1 bytes data]1588* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1589{ [19 bytes data]1590* TLSv1.3 (IN), TLS handshake, Certificate (11):1591{ [1010 bytes data]1592* TLSv1.3 (IN), TLS handshake, CERT verify (15):1593{ [110 bytes data]1594* TLSv1.3 (IN), TLS handshake, Finished (20):1595{ [52 bytes data]1596* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1597} [1 bytes data]1598* TLSv1.3 (OUT), TLS handshake, Finished (20):1599} [52 bytes data]1600* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1601* ALPN: server accepted h21602* Server certificate:1603* subject: CN=test.foo1604* start date: Sep 20 16:52:02 2026 GMT1605* expire date: Oct 20 16:52:02 2028 GMT1606* issuer: CN=minica root ca 010aed1607* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841608* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841609* subjectAltName: "test.foo" matches cert's "test.foo"1610* OpenSSL verify result: 131611* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1612* closing connection #01613curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1614More details here: https://curl.se/docs/sslcerts.html16151616curl failed to verify the legitimacy of the server and therefore could not1617establish a secure connection to it. To learn more about this situation and1618how to fix it, please visit the webpage mentioned above.1619* Host test.foo:443 was resolved.1620* IPv6: 2001:db8:1::31621* IPv4: 192.168.1.31622* Trying [2001:db8:1::3]:443...1623* ALPN: curl offers h2,http/1.11624} [5 bytes data]1625* TLSv1.3 (OUT), TLS handshake, Client hello (1):1626} [1552 bytes data]1627* SSL Trust Anchors:1628* OpenSSL default paths (fallback)1629{ [5 bytes data]1630* TLSv1.3 (IN), TLS handshake, Server hello (2):1631{ [1210 bytes data]1632* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1633{ [1 bytes data]1634* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1635{ [19 bytes data]1636* TLSv1.3 (IN), TLS handshake, Certificate (11):1637{ [1010 bytes data]1638* TLSv1.3 (IN), TLS handshake, CERT verify (15):1639{ [110 bytes data]1640* TLSv1.3 (IN), TLS handshake, Finished (20):1641{ [52 bytes data]1642* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1643} [1 bytes data]1644* TLSv1.3 (OUT), TLS handshake, Finished (20):1645} [52 bytes data]1646* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1647* ALPN: server accepted h21648* Server certificate:1649* subject: CN=test.foo1650* start date: Sep 20 16:52:02 2026 GMT1651* expire date: Oct 20 16:52:02 2028 GMT1652* issuer: CN=minica root ca 010aed1653* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841654* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841655* subjectAltName: "test.foo" matches cert's "test.foo"1656* OpenSSL verify result: 131657* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1658* closing connection #01659curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1660More details here: https://curl.se/docs/sslcerts.html16611662curl failed to verify the legitimacy of the server and therefore could not1663establish a secure connection to it. To learn more about this situation and1664how to fix it, please visit the webpage mentioned above.1665* Trying [2001:db8:1::3]:443...1666* Host test.foo:443 was resolved.1667* IPv6: 2001:db8:1::31668* IPv4: 192.168.1.31669* ALPN: curl offers h2,http/1.11670} [5 bytes data]1671* TLSv1.3 (OUT), TLS handshake, Client hello (1):1672} [1552 bytes data]1673* SSL Trust Anchors:1674* OpenSSL default paths (fallback)1675{ [5 bytes data]1676* TLSv1.3 (IN), TLS handshake, Server hello (2):1677{ [1210 bytes data]1678* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1679{ [1 bytes data]1680* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1681{ [19 bytes data]1682* TLSv1.3 (IN), TLS handshake, Certificate (11):1683{ [1010 bytes data]1684* TLSv1.3 (IN), TLS handshake, CERT verify (15):1685{ [111 bytes data]1686* TLSv1.3 (IN), TLS handshake, Finished (20):1687{ [52 bytes data]1688* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1689} [1 bytes data]1690* TLSv1.3 (OUT), TLS handshake, Finished (20):1691} [52 bytes data]1692* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1693* ALPN: server accepted h21694* Server certificate:1695* subject: CN=test.foo1696* start date: Sep 20 16:52:02 2026 GMT1697* expire date: Oct 20 16:52:02 2028 GMT1698* issuer: CN=minica root ca 010aed1699* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841700* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841701* subjectAltName: "test.foo" matches cert's "test.foo"1702* OpenSSL verify result: 131703* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1704* closing connection #01705curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1706More details here: https://curl.se/docs/sslcerts.html17071708curl failed to verify the legitimacy of the server and therefore could not1709establish a secure connection to it. To learn more about this situation and1710how to fix it, please visit the webpage mentioned above.1711* Trying [2001:db8:1::3]:443...1712* Host test.foo:443 was resolved.1713* IPv6: 2001:db8:1::31714* IPv4: 192.168.1.31715* ALPN: curl offers h2,http/1.11716} [5 bytes data]1717* TLSv1.3 (OUT), TLS handshake, Client hello (1):1718} [1552 bytes data]1719* SSL Trust Anchors:1720* OpenSSL default paths (fallback)1721{ [5 bytes data]1722* TLSv1.3 (IN), TLS handshake, Server hello (2):1723{ [1210 bytes data]1724* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1725{ [1 bytes data]1726* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1727{ [19 bytes data]1728* TLSv1.3 (IN), TLS handshake, Certificate (11):1729{ [1010 bytes data]1730* TLSv1.3 (IN), TLS handshake, CERT verify (15):1731{ [111 bytes data]1732* TLSv1.3 (IN), TLS handshake, Finished (20):1733{ [52 bytes data]1734* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1735} [1 bytes data]1736* TLSv1.3 (OUT), TLS handshake, Finished (20):1737} [52 bytes data]1738* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1739* ALPN: server accepted h21740* Server certificate:1741* subject: CN=test.foo1742* start date: Sep 20 16:52:02 2026 GMT1743* expire date: Oct 20 16:52:02 2028 GMT1744* issuer: CN=minica root ca 010aed1745* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841746* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841747* subjectAltName: "test.foo" matches cert's "test.foo"1748* OpenSSL verify result: 131749* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1750* closing connection #01751curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1752More details here: https://curl.se/docs/sslcerts.html17531754curl failed to verify the legitimacy of the server and therefore could not1755establish a secure connection to it. To learn more about this situation and1756how to fix it, please visit the webpage mentioned above.1757* Host test.foo:443 was resolved.1758* IPv6: 2001:db8:1::31759* IPv4: 192.168.1.31760* Trying [2001:db8:1::3]:443...1761* ALPN: curl offers h2,http/1.11762} [5 bytes data]1763* TLSv1.3 (OUT), TLS handshake, Client hello (1):1764} [1552 bytes data]1765* SSL Trust Anchors:1766* OpenSSL default paths (fallback)1767{ [5 bytes data]1768* TLSv1.3 (IN), TLS handshake, Server hello (2):1769{ [1210 bytes data]1770* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1771{ [1 bytes data]1772* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1773{ [19 bytes data]1774* TLSv1.3 (IN), TLS handshake, Certificate (11):1775{ [1010 bytes data]1776* TLSv1.3 (IN), TLS handshake, CERT verify (15):1777{ [111 bytes data]1778* TLSv1.3 (IN), TLS handshake, Finished (20):1779{ [52 bytes data]1780* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1781} [1 bytes data]1782* TLSv1.3 (OUT), TLS handshake, Finished (20):1783} [52 bytes data]1784* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1785* ALPN: server accepted h21786* Server certificate:1787* subject: CN=test.foo1788* start date: Sep 20 16:52:02 2026 GMT1789* expire date: Oct 20 16:52:02 2028 GMT1790* issuer: CN=minica root ca 010aed1791* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841792* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841793* subjectAltName: "test.foo" matches cert's "test.foo"1794* OpenSSL verify result: 131795* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1796* closing connection #01797curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1798More details here: https://curl.se/docs/sslcerts.html17991800curl failed to verify the legitimacy of the server and therefore could not1801establish a secure connection to it. To learn more about this situation and1802how to fix it, please visit the webpage mentioned above.1803* Host test.foo:443 was resolved.1804* IPv6: 2001:db8:1::31805* IPv4: 192.168.1.31806* Trying [2001:db8:1::3]:443...1807* ALPN: curl offers h2,http/1.11808} [5 bytes data]1809* TLSv1.3 (OUT), TLS handshake, Client hello (1):1810} [1552 bytes data]1811* SSL Trust Anchors:1812* OpenSSL default paths (fallback)1813{ [5 bytes data]1814* TLSv1.3 (IN), TLS handshake, Server hello (2):1815{ [1210 bytes data]1816* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1817{ [1 bytes data]1818* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1819{ [19 bytes data]1820* TLSv1.3 (IN), TLS handshake, Certificate (11):1821{ [1010 bytes data]1822* TLSv1.3 (IN), TLS handshake, CERT verify (15):1823{ [111 bytes data]1824* TLSv1.3 (IN), TLS handshake, Finished (20):1825{ [52 bytes data]1826* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1827} [1 bytes data]1828* TLSv1.3 (OUT), TLS handshake, Finished (20):1829} [52 bytes data]1830* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1831* ALPN: server accepted h21832* Server certificate:1833* subject: CN=test.foo1834* start date: Sep 20 16:52:02 2026 GMT1835* expire date: Oct 20 16:52:02 2028 GMT1836* issuer: CN=minica root ca 010aed1837* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841838* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841839* subjectAltName: "test.foo" matches cert's "test.foo"1840* OpenSSL verify result: 131841* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1842* closing connection #01843curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1844More details here: https://curl.se/docs/sslcerts.html18451846curl failed to verify the legitimacy of the server and therefore could not1847establish a secure connection to it. To learn more about this situation and1848how to fix it, please visit the webpage mentioned above.1849* Host test.foo:443 was resolved.1850* IPv6: 2001:db8:1::31851* IPv4: 192.168.1.31852* Trying [2001:db8:1::3]:443...1853* ALPN: curl offers h2,http/1.11854} [5 bytes data]1855* TLSv1.3 (OUT), TLS handshake, Client hello (1):1856} [1552 bytes data]1857* SSL Trust Anchors:1858* OpenSSL default paths (fallback)1859{ [5 bytes data]1860* TLSv1.3 (IN), TLS handshake, Server hello (2):1861{ [1210 bytes data]1862* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1863{ [1 bytes data]1864* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1865{ [19 bytes data]1866* TLSv1.3 (IN), TLS handshake, Certificate (11):1867{ [1010 bytes data]1868* TLSv1.3 (IN), TLS handshake, CERT verify (15):1869{ [111 bytes data]1870* TLSv1.3 (IN), TLS handshake, Finished (20):1871{ [52 bytes data]1872* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1873} [1 bytes data]1874* TLSv1.3 (OUT), TLS handshake, Finished (20):1875} [52 bytes data]1876* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1877* ALPN: server accepted h21878* Server certificate:1879* subject: CN=test.foo1880* start date: Sep 20 16:52:02 2026 GMT1881* expire date: Oct 20 16:52:02 2028 GMT1882* issuer: CN=minica root ca 010aed1883* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841884* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841885* subjectAltName: "test.foo" matches cert's "test.foo"1886* OpenSSL verify result: 131887* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1888* closing connection #01889curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1890More details here: https://curl.se/docs/sslcerts.html18911892curl failed to verify the legitimacy of the server and therefore could not1893establish a secure connection to it. To learn more about this situation and1894how to fix it, please visit the webpage mentioned above.1895* Trying [2001:db8:1::3]:443...1896* ALPN: curl offers h2,http/1.11897} [5 bytes data]1898* TLSv1.3 (OUT), TLS handshake, Client hello (1):1899} [1552 bytes data]1900* SSL Trust Anchors:1901* OpenSSL default paths (fallback)1902* Host test.foo:443 was resolved.1903* IPv6: 2001:db8:1::31904* IPv4: 192.168.1.31905{ [5 bytes data]1906* TLSv1.3 (IN), TLS handshake, Server hello (2):1907{ [1210 bytes data]1908* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1909{ [1 bytes data]1910* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1911{ [19 bytes data]1912* TLSv1.3 (IN), TLS handshake, Certificate (11):1913{ [1010 bytes data]1914* TLSv1.3 (IN), TLS handshake, CERT verify (15):1915{ [111 bytes data]1916* TLSv1.3 (IN), TLS handshake, Finished (20):1917{ [52 bytes data]1918* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1919} [1 bytes data]1920* TLSv1.3 (OUT), TLS handshake, Finished (20):1921} [52 bytes data]1922* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1923* ALPN: server accepted h21924* Server certificate:1925* subject: CN=test.foo1926* start date: Sep 20 16:52:02 2026 GMT1927* expire date: Oct 20 16:52:02 2028 GMT1928* issuer: CN=minica root ca 010aed1929* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841930* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841931* subjectAltName: "test.foo" matches cert's "test.foo"1932* OpenSSL verify result: 131933* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1934* closing connection #01935curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1936More details here: https://curl.se/docs/sslcerts.html19371938curl failed to verify the legitimacy of the server and therefore could not1939establish a secure connection to it. To learn more about this situation and1940how to fix it, please visit the webpage mentioned above.1941* Host test.foo:443 was resolved.1942* IPv6: 2001:db8:1::31943* IPv4: 192.168.1.31944* Trying [2001:db8:1::3]:443...1945* ALPN: curl offers h2,http/1.11946} [5 bytes data]1947* TLSv1.3 (OUT), TLS handshake, Client hello (1):1948} [1552 bytes data]1949* SSL Trust Anchors:1950* OpenSSL default paths (fallback)1951{ [5 bytes data]1952* TLSv1.3 (IN), TLS handshake, Server hello (2):1953{ [1210 bytes data]1954* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):1955{ [1 bytes data]1956* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):1957{ [19 bytes data]1958* TLSv1.3 (IN), TLS handshake, Certificate (11):1959{ [1010 bytes data]1960* TLSv1.3 (IN), TLS handshake, CERT verify (15):1961{ [110 bytes data]1962* TLSv1.3 (IN), TLS handshake, Finished (20):1963{ [52 bytes data]1964* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):1965} [1 bytes data]1966* TLSv1.3 (OUT), TLS handshake, Finished (20):1967} [52 bytes data]1968* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey1969* ALPN: server accepted h21970* Server certificate:1971* subject: CN=test.foo1972* start date: Sep 20 16:52:02 2026 GMT1973* expire date: Oct 20 16:52:02 2028 GMT1974* issuer: CN=minica root ca 010aed1975* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841976* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA3841977* subjectAltName: "test.foo" matches cert's "test.foo"1978* OpenSSL verify result: 131979* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1980* closing connection #01981curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)1982More details here: https://curl.se/docs/sslcerts.html19831984curl failed to verify the legitimacy of the server and therefore could not1985establish a secure connection to it. To learn more about this situation and1986how to fix it, please visit the webpage mentioned above.1987* Host test.foo:443 was resolved.1988* IPv6: 2001:db8:1::31989* IPv4: 192.168.1.31990* Trying [2001:db8:1::3]:443...1991* ALPN: curl offers h2,http/1.11992} [5 bytes data]1993* TLSv1.3 (OUT), TLS handshake, Client hello (1):1994} [1552 bytes data]1995* SSL Trust Anchors:1996* OpenSSL default paths (fallback)1997{ [5 bytes data]1998* TLSv1.3 (IN), TLS handshake, Server hello (2):1999{ [1210 bytes data]2000* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):
loading 35,096 hidden lines…
37097{ [1210 bytes data]37098* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37099{ [1 bytes data]37100* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37101{ [19 bytes data]37102* TLSv1.3 (IN), TLS handshake, Certificate (11):37103{ [1010 bytes data]37104* TLSv1.3 (IN), TLS handshake, CERT verify (15):37105{ [109 bytes data]37106* TLSv1.3 (IN), TLS handshake, Finished (20):37107{ [52 bytes data]37108* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37109} [1 bytes data]37110* TLSv1.3 (OUT), TLS handshake, Finished (20):37111} [52 bytes data]37112* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37113* ALPN: server accepted h237114* Server certificate:37115* subject: CN=test.foo37116* start date: Sep 20 16:52:02 2026 GMT37117* expire date: Oct 20 16:52:02 2028 GMT37118* issuer: CN=minica root ca 010aed37119* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437120* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437121* subjectAltName: "test.foo" matches cert's "test.foo"37122* OpenSSL verify result: 1337123* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37124* closing connection #037125curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37126More details here: https://curl.se/docs/sslcerts.html3712737128curl failed to verify the legitimacy of the server and therefore could not37129establish a secure connection to it. To learn more about this situation and37130how to fix it, please visit the webpage mentioned above.37131* Host test.foo:443 was resolved.37132* IPv6: 2001:db8:1::337133* IPv4: 192.168.1.337134* Trying [2001:db8:1::3]:443...37135* ALPN: curl offers h2,http/1.137136} [5 bytes data]37137* TLSv1.3 (OUT), TLS handshake, Client hello (1):37138} [1552 bytes data]37139* SSL Trust Anchors:37140* OpenSSL default paths (fallback)37141{ [5 bytes data]37142* TLSv1.3 (IN), TLS handshake, Server hello (2):37143{ [1210 bytes data]37144* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37145{ [1 bytes data]37146* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37147{ [19 bytes data]37148* TLSv1.3 (IN), TLS handshake, Certificate (11):37149{ [1010 bytes data]37150* TLSv1.3 (IN), TLS handshake, CERT verify (15):37151{ [112 bytes data]37152* TLSv1.3 (IN), TLS handshake, Finished (20):37153{ [52 bytes data]37154* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37155} [1 bytes data]37156* TLSv1.3 (OUT), TLS handshake, Finished (20):37157} [52 bytes data]37158* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37159* ALPN: server accepted h237160* Server certificate:37161* subject: CN=test.foo37162* start date: Sep 20 16:52:02 2026 GMT37163* expire date: Oct 20 16:52:02 2028 GMT37164* issuer: CN=minica root ca 010aed37165* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437166* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437167* subjectAltName: "test.foo" matches cert's "test.foo"37168* OpenSSL verify result: 1337169* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37170* closing connection #037171curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37172More details here: https://curl.se/docs/sslcerts.html3717337174curl failed to verify the legitimacy of the server and therefore could not37175establish a secure connection to it. To learn more about this situation and37176how to fix it, please visit the webpage mentioned above.37177* Host test.foo:443 was resolved.37178* IPv6: 2001:db8:1::337179* IPv4: 192.168.1.337180* Trying [2001:db8:1::3]:443...37181* ALPN: curl offers h2,http/1.137182} [5 bytes data]37183* TLSv1.3 (OUT), TLS handshake, Client hello (1):37184} [1552 bytes data]37185* SSL Trust Anchors:37186* OpenSSL default paths (fallback)37187{ [5 bytes data]37188* TLSv1.3 (IN), TLS handshake, Server hello (2):37189{ [1210 bytes data]37190* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37191{ [1 bytes data]37192* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37193{ [19 bytes data]37194* TLSv1.3 (IN), TLS handshake, Certificate (11):37195{ [1010 bytes data]37196* TLSv1.3 (IN), TLS handshake, CERT verify (15):37197{ [110 bytes data]37198* TLSv1.3 (IN), TLS handshake, Finished (20):37199{ [52 bytes data]37200* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37201} [1 bytes data]37202* TLSv1.3 (OUT), TLS handshake, Finished (20):37203} [52 bytes data]37204* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37205* ALPN: server accepted h237206* Server certificate:37207* subject: CN=test.foo37208* start date: Sep 20 16:52:02 2026 GMT37209* expire date: Oct 20 16:52:02 2028 GMT37210* issuer: CN=minica root ca 010aed37211* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437212* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437213* subjectAltName: "test.foo" matches cert's "test.foo"37214* OpenSSL verify result: 1337215* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37216* closing connection #037217curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37218More details here: https://curl.se/docs/sslcerts.html3721937220curl failed to verify the legitimacy of the server and therefore could not37221establish a secure connection to it. To learn more about this situation and37222how to fix it, please visit the webpage mentioned above.37223* Host test.foo:443 was resolved.37224* IPv6: 2001:db8:1::337225* IPv4: 192.168.1.337226* Trying [2001:db8:1::3]:443...37227* ALPN: curl offers h2,http/1.137228} [5 bytes data]37229* TLSv1.3 (OUT), TLS handshake, Client hello (1):37230} [1552 bytes data]37231* SSL Trust Anchors:37232* OpenSSL default paths (fallback)37233{ [5 bytes data]37234* TLSv1.3 (IN), TLS handshake, Server hello (2):37235{ [1210 bytes data]37236* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37237{ [1 bytes data]37238* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37239{ [19 bytes data]37240* TLSv1.3 (IN), TLS handshake, Certificate (11):37241{ [1010 bytes data]37242* TLSv1.3 (IN), TLS handshake, CERT verify (15):37243{ [110 bytes data]37244* TLSv1.3 (IN), TLS handshake, Finished (20):37245{ [52 bytes data]37246* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37247} [1 bytes data]37248* TLSv1.3 (OUT), TLS handshake, Finished (20):37249} [52 bytes data]37250* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37251* ALPN: server accepted h237252* Server certificate:37253* subject: CN=test.foo37254* start date: Sep 20 16:52:02 2026 GMT37255* expire date: Oct 20 16:52:02 2028 GMT37256* issuer: CN=minica root ca 010aed37257* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437258* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437259* subjectAltName: "test.foo" matches cert's "test.foo"37260* OpenSSL verify result: 1337261* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37262* closing connection #037263curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37264More details here: https://curl.se/docs/sslcerts.html3726537266curl failed to verify the legitimacy of the server and therefore could not37267establish a secure connection to it. To learn more about this situation and37268how to fix it, please visit the webpage mentioned above.37269* Host test.foo:443 was resolved.37270* IPv6: 2001:db8:1::337271* IPv4: 192.168.1.337272* Trying [2001:db8:1::3]:443...37273* ALPN: curl offers h2,http/1.137274} [5 bytes data]37275* TLSv1.3 (OUT), TLS handshake, Client hello (1):37276} [1552 bytes data]37277* SSL Trust Anchors:37278* OpenSSL default paths (fallback)37279{ [5 bytes data]37280* TLSv1.3 (IN), TLS handshake, Server hello (2):37281{ [1210 bytes data]37282* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37283{ [1 bytes data]37284* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37285{ [19 bytes data]37286* TLSv1.3 (IN), TLS handshake, Certificate (11):37287{ [1010 bytes data]37288* TLSv1.3 (IN), TLS handshake, CERT verify (15):37289{ [111 bytes data]37290* TLSv1.3 (IN), TLS handshake, Finished (20):37291{ [52 bytes data]37292* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37293} [1 bytes data]37294* TLSv1.3 (OUT), TLS handshake, Finished (20):37295} [52 bytes data]37296* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37297* ALPN: server accepted h237298* Server certificate:37299* subject: CN=test.foo37300* start date: Sep 20 16:52:02 2026 GMT37301* expire date: Oct 20 16:52:02 2028 GMT37302* issuer: CN=minica root ca 010aed37303* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437304* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437305* subjectAltName: "test.foo" matches cert's "test.foo"37306* OpenSSL verify result: 1337307* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37308* closing connection #037309curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37310More details here: https://curl.se/docs/sslcerts.html3731137312curl failed to verify the legitimacy of the server and therefore could not37313establish a secure connection to it. To learn more about this situation and37314how to fix it, please visit the webpage mentioned above.37315* Host test.foo:443 was resolved.37316* IPv6: 2001:db8:1::337317* IPv4: 192.168.1.337318* Trying [2001:db8:1::3]:443...37319* ALPN: curl offers h2,http/1.137320} [5 bytes data]37321* TLSv1.3 (OUT), TLS handshake, Client hello (1):37322} [1552 bytes data]37323* SSL Trust Anchors:37324* OpenSSL default paths (fallback)37325{ [5 bytes data]37326* TLSv1.3 (IN), TLS handshake, Server hello (2):37327{ [1210 bytes data]37328* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37329{ [1 bytes data]37330* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37331{ [19 bytes data]37332* TLSv1.3 (IN), TLS handshake, Certificate (11):37333{ [1010 bytes data]37334* TLSv1.3 (IN), TLS handshake, CERT verify (15):37335{ [112 bytes data]37336* TLSv1.3 (IN), TLS handshake, Finished (20):37337{ [52 bytes data]37338* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37339} [1 bytes data]37340* TLSv1.3 (OUT), TLS handshake, Finished (20):37341} [52 bytes data]37342* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37343* ALPN: server accepted h237344* Server certificate:37345* subject: CN=test.foo37346* start date: Sep 20 16:52:02 2026 GMT37347* expire date: Oct 20 16:52:02 2028 GMT37348* issuer: CN=minica root ca 010aed37349* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437350* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437351* subjectAltName: "test.foo" matches cert's "test.foo"37352* OpenSSL verify result: 1337353* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37354* closing connection #037355curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37356More details here: https://curl.se/docs/sslcerts.html3735737358curl failed to verify the legitimacy of the server and therefore could not37359establish a secure connection to it. To learn more about this situation and37360how to fix it, please visit the webpage mentioned above.37361* Trying [2001:db8:1::3]:443...37362* Host test.foo:443 was resolved.37363* IPv6: 2001:db8:1::337364* IPv4: 192.168.1.337365* ALPN: curl offers h2,http/1.137366} [5 bytes data]37367* TLSv1.3 (OUT), TLS handshake, Client hello (1):37368} [1552 bytes data]37369* SSL Trust Anchors:37370* OpenSSL default paths (fallback)37371{ [5 bytes data]37372* TLSv1.3 (IN), TLS handshake, Server hello (2):37373{ [1210 bytes data]37374* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37375{ [1 bytes data]37376* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37377{ [19 bytes data]37378* TLSv1.3 (IN), TLS handshake, Certificate (11):37379{ [1010 bytes data]37380* TLSv1.3 (IN), TLS handshake, CERT verify (15):37381{ [111 bytes data]37382* TLSv1.3 (IN), TLS handshake, Finished (20):37383{ [52 bytes data]37384* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37385} [1 bytes data]37386* TLSv1.3 (OUT), TLS handshake, Finished (20):37387} [52 bytes data]37388* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37389* ALPN: server accepted h237390* Server certificate:37391* subject: CN=test.foo37392* start date: Sep 20 16:52:02 2026 GMT37393* expire date: Oct 20 16:52:02 2028 GMT37394* issuer: CN=minica root ca 010aed37395* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437396* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437397* subjectAltName: "test.foo" matches cert's "test.foo"37398* OpenSSL verify result: 1337399* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37400* closing connection #037401curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37402More details here: https://curl.se/docs/sslcerts.html3740337404curl failed to verify the legitimacy of the server and therefore could not37405establish a secure connection to it. To learn more about this situation and37406how to fix it, please visit the webpage mentioned above.37407* Host test.foo:443 was resolved.37408* IPv6: 2001:db8:1::337409* IPv4: 192.168.1.337410* Trying [2001:db8:1::3]:443...37411* ALPN: curl offers h2,http/1.137412} [5 bytes data]37413* TLSv1.3 (OUT), TLS handshake, Client hello (1):37414} [1552 bytes data]37415* SSL Trust Anchors:37416* OpenSSL default paths (fallback)37417{ [5 bytes data]37418* TLSv1.3 (IN), TLS handshake, Server hello (2):37419{ [1210 bytes data]37420* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37421{ [1 bytes data]37422* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37423{ [19 bytes data]37424* TLSv1.3 (IN), TLS handshake, Certificate (11):37425{ [1010 bytes data]37426* TLSv1.3 (IN), TLS handshake, CERT verify (15):37427{ [112 bytes data]37428* TLSv1.3 (IN), TLS handshake, Finished (20):37429{ [52 bytes data]37430* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37431} [1 bytes data]37432* TLSv1.3 (OUT), TLS handshake, Finished (20):37433} [52 bytes data]37434* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37435* ALPN: server accepted h237436* Server certificate:37437* subject: CN=test.foo37438* start date: Sep 20 16:52:02 2026 GMT37439* expire date: Oct 20 16:52:02 2028 GMT37440* issuer: CN=minica root ca 010aed37441* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437442* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437443* subjectAltName: "test.foo" matches cert's "test.foo"37444* OpenSSL verify result: 1337445* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37446* closing connection #037447curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37448More details here: https://curl.se/docs/sslcerts.html3744937450curl failed to verify the legitimacy of the server and therefore could not37451establish a secure connection to it. To learn more about this situation and37452how to fix it, please visit the webpage mentioned above.37453* Host test.foo:443 was resolved.37454* IPv6: 2001:db8:1::337455* IPv4: 192.168.1.337456* Trying [2001:db8:1::3]:443...37457* ALPN: curl offers h2,http/1.137458} [5 bytes data]37459* TLSv1.3 (OUT), TLS handshake, Client hello (1):37460} [1552 bytes data]37461* SSL Trust Anchors:37462* OpenSSL default paths (fallback)37463{ [5 bytes data]37464* TLSv1.3 (IN), TLS handshake, Server hello (2):37465{ [1210 bytes data]37466* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37467{ [1 bytes data]37468* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37469{ [19 bytes data]37470* TLSv1.3 (IN), TLS handshake, Certificate (11):37471{ [1010 bytes data]37472* TLSv1.3 (IN), TLS handshake, CERT verify (15):37473{ [111 bytes data]37474* TLSv1.3 (IN), TLS handshake, Finished (20):37475{ [52 bytes data]37476* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37477} [1 bytes data]37478* TLSv1.3 (OUT), TLS handshake, Finished (20):37479} [52 bytes data]37480* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37481* ALPN: server accepted h237482* Server certificate:37483* subject: CN=test.foo37484* start date: Sep 20 16:52:02 2026 GMT37485* expire date: Oct 20 16:52:02 2028 GMT37486* issuer: CN=minica root ca 010aed37487* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437488* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437489* subjectAltName: "test.foo" matches cert's "test.foo"37490* OpenSSL verify result: 1337491* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37492* closing connection #037493curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37494More details here: https://curl.se/docs/sslcerts.html3749537496curl failed to verify the legitimacy of the server and therefore could not37497establish a secure connection to it. To learn more about this situation and37498how to fix it, please visit the webpage mentioned above.37499* Host test.foo:443 was resolved.37500* IPv6: 2001:db8:1::337501* IPv4: 192.168.1.337502* Trying [2001:db8:1::3]:443...37503* ALPN: curl offers h2,http/1.137504} [5 bytes data]37505* TLSv1.3 (OUT), TLS handshake, Client hello (1):37506} [1552 bytes data]37507* SSL Trust Anchors:37508* OpenSSL default paths (fallback)37509{ [5 bytes data]37510* TLSv1.3 (IN), TLS handshake, Server hello (2):37511{ [1210 bytes data]37512* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37513{ [1 bytes data]37514* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37515{ [19 bytes data]37516* TLSv1.3 (IN), TLS handshake, Certificate (11):37517{ [1010 bytes data]37518* TLSv1.3 (IN), TLS handshake, CERT verify (15):37519{ [111 bytes data]37520* TLSv1.3 (IN), TLS handshake, Finished (20):37521{ [52 bytes data]37522* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37523} [1 bytes data]37524* TLSv1.3 (OUT), TLS handshake, Finished (20):37525} [52 bytes data]37526* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37527* ALPN: server accepted h237528* Server certificate:37529* subject: CN=test.foo37530* start date: Sep 20 16:52:02 2026 GMT37531* expire date: Oct 20 16:52:02 2028 GMT37532* issuer: CN=minica root ca 010aed37533* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437534* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437535* subjectAltName: "test.foo" matches cert's "test.foo"37536* OpenSSL verify result: 1337537* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37538* closing connection #037539curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37540More details here: https://curl.se/docs/sslcerts.html3754137542curl failed to verify the legitimacy of the server and therefore could not37543establish a secure connection to it. To learn more about this situation and37544how to fix it, please visit the webpage mentioned above.37545* Trying [2001:db8:1::3]:443...37546* Host test.foo:443 was resolved.37547* IPv6: 2001:db8:1::337548* IPv4: 192.168.1.337549* ALPN: curl offers h2,http/1.137550} [5 bytes data]37551* TLSv1.3 (OUT), TLS handshake, Client hello (1):37552} [1552 bytes data]37553* SSL Trust Anchors:37554* OpenSSL default paths (fallback)37555{ [5 bytes data]37556* TLSv1.3 (IN), TLS handshake, Server hello (2):37557{ [1210 bytes data]37558* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37559{ [1 bytes data]37560* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37561{ [19 bytes data]37562* TLSv1.3 (IN), TLS handshake, Certificate (11):37563{ [1010 bytes data]37564* TLSv1.3 (IN), TLS handshake, CERT verify (15):37565{ [111 bytes data]37566* TLSv1.3 (IN), TLS handshake, Finished (20):37567{ [52 bytes data]37568* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37569} [1 bytes data]37570* TLSv1.3 (OUT), TLS handshake, Finished (20):37571} [52 bytes data]37572* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37573* ALPN: server accepted h237574* Server certificate:37575* subject: CN=test.foo37576* start date: Sep 20 16:52:02 2026 GMT37577* expire date: Oct 20 16:52:02 2028 GMT37578* issuer: CN=minica root ca 010aed37579* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437580* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437581* subjectAltName: "test.foo" matches cert's "test.foo"37582* OpenSSL verify result: 1337583* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37584* closing connection #037585curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37586More details here: https://curl.se/docs/sslcerts.html3758737588curl failed to verify the legitimacy of the server and therefore could not37589establish a secure connection to it. To learn more about this situation and37590how to fix it, please visit the webpage mentioned above.37591* Trying [2001:db8:1::3]:443...37592* Host test.foo:443 was resolved.37593* IPv6: 2001:db8:1::337594* IPv4: 192.168.1.337595* ALPN: curl offers h2,http/1.137596} [5 bytes data]37597* TLSv1.3 (OUT), TLS handshake, Client hello (1):37598} [1552 bytes data]37599* SSL Trust Anchors:37600* OpenSSL default paths (fallback)37601{ [5 bytes data]37602* TLSv1.3 (IN), TLS handshake, Server hello (2):37603{ [1210 bytes data]37604* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37605{ [1 bytes data]37606* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37607{ [19 bytes data]37608* TLSv1.3 (IN), TLS handshake, Certificate (11):37609{ [1010 bytes data]37610* TLSv1.3 (IN), TLS handshake, CERT verify (15):37611{ [111 bytes data]37612* TLSv1.3 (IN), TLS handshake, Finished (20):37613{ [52 bytes data]37614* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37615} [1 bytes data]37616* TLSv1.3 (OUT), TLS handshake, Finished (20):37617} [52 bytes data]37618* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37619* ALPN: server accepted h237620* Server certificate:37621* subject: CN=test.foo37622* start date: Sep 20 16:52:02 2026 GMT37623* expire date: Oct 20 16:52:02 2028 GMT37624* issuer: CN=minica root ca 010aed37625* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437626* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437627* subjectAltName: "test.foo" matches cert's "test.foo"37628* OpenSSL verify result: 1337629* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37630* closing connection #037631curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37632More details here: https://curl.se/docs/sslcerts.html3763337634curl failed to verify the legitimacy of the server and therefore could not37635establish a secure connection to it. To learn more about this situation and37636how to fix it, please visit the webpage mentioned above.37637* Trying [2001:db8:1::3]:443...37638* Host test.foo:443 was resolved.37639* IPv6: 2001:db8:1::337640* IPv4: 192.168.1.337641* ALPN: curl offers h2,http/1.137642} [5 bytes data]37643* TLSv1.3 (OUT), TLS handshake, Client hello (1):37644} [1552 bytes data]37645* SSL Trust Anchors:37646* OpenSSL default paths (fallback)37647{ [5 bytes data]37648* TLSv1.3 (IN), TLS handshake, Server hello (2):37649{ [1210 bytes data]37650* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37651{ [1 bytes data]37652* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37653{ [19 bytes data]37654* TLSv1.3 (IN), TLS handshake, Certificate (11):37655{ [1010 bytes data]37656* TLSv1.3 (IN), TLS handshake, CERT verify (15):37657{ [110 bytes data]37658* TLSv1.3 (IN), TLS handshake, Finished (20):37659{ [52 bytes data]37660* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37661} [1 bytes data]37662* TLSv1.3 (OUT), TLS handshake, Finished (20):37663} [52 bytes data]37664* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37665* ALPN: server accepted h237666* Server certificate:37667* subject: CN=test.foo37668* start date: Sep 20 16:52:02 2026 GMT37669* expire date: Oct 20 16:52:02 2028 GMT37670* issuer: CN=minica root ca 010aed37671* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437672* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437673* subjectAltName: "test.foo" matches cert's "test.foo"37674* OpenSSL verify result: 1337675* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37676* closing connection #037677curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37678More details here: https://curl.se/docs/sslcerts.html3767937680curl failed to verify the legitimacy of the server and therefore could not37681establish a secure connection to it. To learn more about this situation and37682how to fix it, please visit the webpage mentioned above.37683* Trying [2001:db8:1::3]:443...37684* ALPN: curl offers h2,http/1.137685} [5 bytes data]37686* TLSv1.3 (OUT), TLS handshake, Client hello (1):37687} [1552 bytes data]37688* SSL Trust Anchors:37689* OpenSSL default paths (fallback)37690* Host test.foo:443 was resolved.37691* IPv6: 2001:db8:1::337692* IPv4: 192.168.1.337693{ [5 bytes data]37694* TLSv1.3 (IN), TLS handshake, Server hello (2):37695{ [1210 bytes data]37696* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37697{ [1 bytes data]37698* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37699{ [19 bytes data]37700* TLSv1.3 (IN), TLS handshake, Certificate (11):37701{ [1010 bytes data]37702* TLSv1.3 (IN), TLS handshake, CERT verify (15):37703{ [110 bytes data]37704* TLSv1.3 (IN), TLS handshake, Finished (20):37705{ [52 bytes data]37706* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37707} [1 bytes data]37708* TLSv1.3 (OUT), TLS handshake, Finished (20):37709} [52 bytes data]37710* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37711* ALPN: server accepted h237712* Server certificate:37713* subject: CN=test.foo37714* start date: Sep 20 16:52:02 2026 GMT37715* expire date: Oct 20 16:52:02 2028 GMT37716* issuer: CN=minica root ca 010aed37717* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437718* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437719* subjectAltName: "test.foo" matches cert's "test.foo"37720* OpenSSL verify result: 1337721* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37722* closing connection #037723curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37724More details here: https://curl.se/docs/sslcerts.html3772537726curl failed to verify the legitimacy of the server and therefore could not37727establish a secure connection to it. To learn more about this situation and37728how to fix it, please visit the webpage mentioned above.37729* Host test.foo:443 was resolved.37730* IPv6: 2001:db8:1::337731* IPv4: 192.168.1.337732* Trying [2001:db8:1::3]:443...37733* ALPN: curl offers h2,http/1.137734} [5 bytes data]37735* TLSv1.3 (OUT), TLS handshake, Client hello (1):37736} [1552 bytes data]37737* SSL Trust Anchors:37738* OpenSSL default paths (fallback)37739{ [5 bytes data]37740* TLSv1.3 (IN), TLS handshake, Server hello (2):37741{ [1210 bytes data]37742* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37743{ [1 bytes data]37744* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37745{ [19 bytes data]37746* TLSv1.3 (IN), TLS handshake, Certificate (11):37747{ [1010 bytes data]37748* TLSv1.3 (IN), TLS handshake, CERT verify (15):37749{ [110 bytes data]37750* TLSv1.3 (IN), TLS handshake, Finished (20):37751{ [52 bytes data]37752* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37753} [1 bytes data]37754* TLSv1.3 (OUT), TLS handshake, Finished (20):37755} [52 bytes data]37756* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37757* ALPN: server accepted h237758* Server certificate:37759* subject: CN=test.foo37760* start date: Sep 20 16:52:02 2026 GMT37761* expire date: Oct 20 16:52:02 2028 GMT37762* issuer: CN=minica root ca 010aed37763* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437764* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437765* subjectAltName: "test.foo" matches cert's "test.foo"37766* OpenSSL verify result: 1337767* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37768* closing connection #037769curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37770More details here: https://curl.se/docs/sslcerts.html3777137772curl failed to verify the legitimacy of the server and therefore could not37773establish a secure connection to it. To learn more about this situation and37774how to fix it, please visit the webpage mentioned above.37775* Host test.foo:443 was resolved.37776* IPv6: 2001:db8:1::337777* IPv4: 192.168.1.337778* Trying [2001:db8:1::3]:443...37779* ALPN: curl offers h2,http/1.137780} [5 bytes data]37781* TLSv1.3 (OUT), TLS handshake, Client hello (1):37782} [1552 bytes data]37783* SSL Trust Anchors:37784* OpenSSL default paths (fallback)37785{ [5 bytes data]37786* TLSv1.3 (IN), TLS handshake, Server hello (2):37787{ [1210 bytes data]37788* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37789{ [1 bytes data]37790* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37791{ [19 bytes data]37792* TLSv1.3 (IN), TLS handshake, Certificate (11):37793{ [1010 bytes data]37794* TLSv1.3 (IN), TLS handshake, CERT verify (15):37795{ [111 bytes data]37796* TLSv1.3 (IN), TLS handshake, Finished (20):37797{ [52 bytes data]37798* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37799} [1 bytes data]37800* TLSv1.3 (OUT), TLS handshake, Finished (20):37801} [52 bytes data]37802* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37803* ALPN: server accepted h237804* Server certificate:37805* subject: CN=test.foo37806* start date: Sep 20 16:52:02 2026 GMT37807* expire date: Oct 20 16:52:02 2028 GMT37808* issuer: CN=minica root ca 010aed37809* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437810* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437811* subjectAltName: "test.foo" matches cert's "test.foo"37812* OpenSSL verify result: 1337813* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37814* closing connection #037815curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37816More details here: https://curl.se/docs/sslcerts.html3781737818curl failed to verify the legitimacy of the server and therefore could not37819establish a secure connection to it. To learn more about this situation and37820how to fix it, please visit the webpage mentioned above.37821* Trying [2001:db8:1::3]:443...37822* ALPN: curl offers h2,http/1.137823} [5 bytes data]37824* TLSv1.3 (OUT), TLS handshake, Client hello (1):37825} [1552 bytes data]37826* SSL Trust Anchors:37827* OpenSSL default paths (fallback)37828* Host test.foo:443 was resolved.37829* IPv6: 2001:db8:1::337830* IPv4: 192.168.1.337831{ [5 bytes data]37832* TLSv1.3 (IN), TLS handshake, Server hello (2):37833{ [1210 bytes data]37834* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37835{ [1 bytes data]37836* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37837{ [19 bytes data]37838* TLSv1.3 (IN), TLS handshake, Certificate (11):37839{ [1010 bytes data]37840* TLSv1.3 (IN), TLS handshake, CERT verify (15):37841{ [111 bytes data]37842* TLSv1.3 (IN), TLS handshake, Finished (20):37843{ [52 bytes data]37844* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37845} [1 bytes data]37846* TLSv1.3 (OUT), TLS handshake, Finished (20):37847} [52 bytes data]37848* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37849* ALPN: server accepted h237850* Server certificate:37851* subject: CN=test.foo37852* start date: Sep 20 16:52:02 2026 GMT37853* expire date: Oct 20 16:52:02 2028 GMT37854* issuer: CN=minica root ca 010aed37855* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437856* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437857* subjectAltName: "test.foo" matches cert's "test.foo"37858* OpenSSL verify result: 1337859* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37860* closing connection #037861curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37862More details here: https://curl.se/docs/sslcerts.html3786337864curl failed to verify the legitimacy of the server and therefore could not37865establish a secure connection to it. To learn more about this situation and37866how to fix it, please visit the webpage mentioned above.37867* Host test.foo:443 was resolved.37868* IPv6: 2001:db8:1::337869* IPv4: 192.168.1.337870* Trying [2001:db8:1::3]:443...37871* ALPN: curl offers h2,http/1.137872} [5 bytes data]37873* TLSv1.3 (OUT), TLS handshake, Client hello (1):37874} [1552 bytes data]37875* SSL Trust Anchors:37876* OpenSSL default paths (fallback)37877{ [5 bytes data]37878* TLSv1.3 (IN), TLS handshake, Server hello (2):37879{ [1210 bytes data]37880* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37881{ [1 bytes data]37882* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37883{ [19 bytes data]37884* TLSv1.3 (IN), TLS handshake, Certificate (11):37885{ [1010 bytes data]37886* TLSv1.3 (IN), TLS handshake, CERT verify (15):37887{ [111 bytes data]37888* TLSv1.3 (IN), TLS handshake, Finished (20):37889{ [52 bytes data]37890* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37891} [1 bytes data]37892* TLSv1.3 (OUT), TLS handshake, Finished (20):37893} [52 bytes data]37894* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37895* ALPN: server accepted h237896* Server certificate:37897* subject: CN=test.foo37898* start date: Sep 20 16:52:02 2026 GMT37899* expire date: Oct 20 16:52:02 2028 GMT37900* issuer: CN=minica root ca 010aed37901* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437902* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437903* subjectAltName: "test.foo" matches cert's "test.foo"37904* OpenSSL verify result: 1337905* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37906* closing connection #037907curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37908More details here: https://curl.se/docs/sslcerts.html3790937910curl failed to verify the legitimacy of the server and therefore could not37911establish a secure connection to it. To learn more about this situation and37912how to fix it, please visit the webpage mentioned above.37913* Host test.foo:443 was resolved.37914* IPv6: 2001:db8:1::337915* IPv4: 192.168.1.337916* Trying [2001:db8:1::3]:443...37917* ALPN: curl offers h2,http/1.137918} [5 bytes data]37919* TLSv1.3 (OUT), TLS handshake, Client hello (1):37920} [1552 bytes data]37921* SSL Trust Anchors:37922* OpenSSL default paths (fallback)37923{ [5 bytes data]37924* TLSv1.3 (IN), TLS handshake, Server hello (2):37925{ [1210 bytes data]37926* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37927{ [1 bytes data]37928* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37929{ [19 bytes data]37930* TLSv1.3 (IN), TLS handshake, Certificate (11):37931{ [1010 bytes data]37932* TLSv1.3 (IN), TLS handshake, CERT verify (15):37933{ [110 bytes data]37934* TLSv1.3 (IN), TLS handshake, Finished (20):37935{ [52 bytes data]37936* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37937} [1 bytes data]37938* TLSv1.3 (OUT), TLS handshake, Finished (20):37939} [52 bytes data]37940* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37941* ALPN: server accepted h237942* Server certificate:37943* subject: CN=test.foo37944* start date: Sep 20 16:52:02 2026 GMT37945* expire date: Oct 20 16:52:02 2028 GMT37946* issuer: CN=minica root ca 010aed37947* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437948* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437949* subjectAltName: "test.foo" matches cert's "test.foo"37950* OpenSSL verify result: 1337951* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37952* closing connection #037953curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37954More details here: https://curl.se/docs/sslcerts.html3795537956curl failed to verify the legitimacy of the server and therefore could not37957establish a secure connection to it. To learn more about this situation and37958how to fix it, please visit the webpage mentioned above.37959* Host test.foo:443 was resolved.37960* IPv6: 2001:db8:1::337961* IPv4: 192.168.1.337962* Trying [2001:db8:1::3]:443...37963* ALPN: curl offers h2,http/1.137964} [5 bytes data]37965* TLSv1.3 (OUT), TLS handshake, Client hello (1):37966} [1552 bytes data]37967* SSL Trust Anchors:37968* OpenSSL default paths (fallback)37969{ [5 bytes data]37970* TLSv1.3 (IN), TLS handshake, Server hello (2):37971{ [1210 bytes data]37972* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):37973{ [1 bytes data]37974* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):37975{ [19 bytes data]37976* TLSv1.3 (IN), TLS handshake, Certificate (11):37977{ [1010 bytes data]37978* TLSv1.3 (IN), TLS handshake, CERT verify (15):37979{ [111 bytes data]37980* TLSv1.3 (IN), TLS handshake, Finished (20):37981{ [52 bytes data]37982* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):37983} [1 bytes data]37984* TLSv1.3 (OUT), TLS handshake, Finished (20):37985} [52 bytes data]37986* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey37987* ALPN: server accepted h237988* Server certificate:37989* subject: CN=test.foo37990* start date: Sep 20 16:52:02 2026 GMT37991* expire date: Oct 20 16:52:02 2028 GMT37992* issuer: CN=minica root ca 010aed37993* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437994* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38437995* subjectAltName: "test.foo" matches cert's "test.foo"37996* OpenSSL verify result: 1337997* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)37998* closing connection #037999curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38000More details here: https://curl.se/docs/sslcerts.html3800138002curl failed to verify the legitimacy of the server and therefore could not38003establish a secure connection to it. To learn more about this situation and38004how to fix it, please visit the webpage mentioned above.38005* Host test.foo:443 was resolved.38006* IPv6: 2001:db8:1::338007* IPv4: 192.168.1.338008* Trying [2001:db8:1::3]:443...38009* ALPN: curl offers h2,http/1.138010} [5 bytes data]38011* TLSv1.3 (OUT), TLS handshake, Client hello (1):38012} [1552 bytes data]38013* SSL Trust Anchors:38014* OpenSSL default paths (fallback)38015{ [5 bytes data]38016* TLSv1.3 (IN), TLS handshake, Server hello (2):38017{ [1210 bytes data]38018* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38019{ [1 bytes data]38020* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38021{ [19 bytes data]38022* TLSv1.3 (IN), TLS handshake, Certificate (11):38023{ [1010 bytes data]38024* TLSv1.3 (IN), TLS handshake, CERT verify (15):38025{ [111 bytes data]38026* TLSv1.3 (IN), TLS handshake, Finished (20):38027{ [52 bytes data]38028* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38029} [1 bytes data]38030* TLSv1.3 (OUT), TLS handshake, Finished (20):38031} [52 bytes data]38032* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38033* ALPN: server accepted h238034* Server certificate:38035* subject: CN=test.foo38036* start date: Sep 20 16:52:02 2026 GMT38037* expire date: Oct 20 16:52:02 2028 GMT38038* issuer: CN=minica root ca 010aed38039* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438040* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438041* subjectAltName: "test.foo" matches cert's "test.foo"38042* OpenSSL verify result: 1338043* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38044* closing connection #038045curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38046More details here: https://curl.se/docs/sslcerts.html3804738048curl failed to verify the legitimacy of the server and therefore could not38049establish a secure connection to it. To learn more about this situation and38050how to fix it, please visit the webpage mentioned above.38051* Trying [2001:db8:1::3]:443...38052* Host test.foo:443 was resolved.38053* IPv6: 2001:db8:1::338054* IPv4: 192.168.1.338055* ALPN: curl offers h2,http/1.138056} [5 bytes data]38057* TLSv1.3 (OUT), TLS handshake, Client hello (1):38058} [1552 bytes data]38059* SSL Trust Anchors:38060* OpenSSL default paths (fallback)38061{ [5 bytes data]38062* TLSv1.3 (IN), TLS handshake, Server hello (2):38063{ [1210 bytes data]38064* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38065{ [1 bytes data]38066* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38067{ [19 bytes data]38068* TLSv1.3 (IN), TLS handshake, Certificate (11):38069{ [1010 bytes data]38070* TLSv1.3 (IN), TLS handshake, CERT verify (15):38071{ [111 bytes data]38072* TLSv1.3 (IN), TLS handshake, Finished (20):38073{ [52 bytes data]38074* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38075} [1 bytes data]38076* TLSv1.3 (OUT), TLS handshake, Finished (20):38077} [52 bytes data]38078* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38079* ALPN: server accepted h238080* Server certificate:38081* subject: CN=test.foo38082* start date: Sep 20 16:52:02 2026 GMT38083* expire date: Oct 20 16:52:02 2028 GMT38084* issuer: CN=minica root ca 010aed38085* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438086* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438087* subjectAltName: "test.foo" matches cert's "test.foo"38088* OpenSSL verify result: 1338089* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38090* closing connection #038091curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38092More details here: https://curl.se/docs/sslcerts.html3809338094curl failed to verify the legitimacy of the server and therefore could not38095establish a secure connection to it. To learn more about this situation and38096how to fix it, please visit the webpage mentioned above.38097* Host test.foo:443 was resolved.38098* IPv6: 2001:db8:1::338099* IPv4: 192.168.1.338100* Trying [2001:db8:1::3]:443...38101* ALPN: curl offers h2,http/1.138102} [5 bytes data]38103* TLSv1.3 (OUT), TLS handshake, Client hello (1):38104} [1552 bytes data]38105* SSL Trust Anchors:38106* OpenSSL default paths (fallback)38107{ [5 bytes data]38108* TLSv1.3 (IN), TLS handshake, Server hello (2):38109{ [1210 bytes data]38110* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38111{ [1 bytes data]38112* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38113{ [19 bytes data]38114* TLSv1.3 (IN), TLS handshake, Certificate (11):38115{ [1010 bytes data]38116* TLSv1.3 (IN), TLS handshake, CERT verify (15):38117{ [111 bytes data]38118* TLSv1.3 (IN), TLS handshake, Finished (20):38119{ [52 bytes data]38120* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38121} [1 bytes data]38122* TLSv1.3 (OUT), TLS handshake, Finished (20):38123} [52 bytes data]38124* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38125* ALPN: server accepted h238126* Server certificate:38127* subject: CN=test.foo38128* start date: Sep 20 16:52:02 2026 GMT38129* expire date: Oct 20 16:52:02 2028 GMT38130* issuer: CN=minica root ca 010aed38131* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438132* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438133* subjectAltName: "test.foo" matches cert's "test.foo"38134* OpenSSL verify result: 1338135* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38136* closing connection #038137curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38138More details here: https://curl.se/docs/sslcerts.html3813938140curl failed to verify the legitimacy of the server and therefore could not38141establish a secure connection to it. To learn more about this situation and38142how to fix it, please visit the webpage mentioned above.38143* Host test.foo:443 was resolved.38144* IPv6: 2001:db8:1::338145* IPv4: 192.168.1.338146* Trying [2001:db8:1::3]:443...38147* ALPN: curl offers h2,http/1.138148} [5 bytes data]38149* TLSv1.3 (OUT), TLS handshake, Client hello (1):38150} [1552 bytes data]38151* SSL Trust Anchors:38152* OpenSSL default paths (fallback)38153{ [5 bytes data]38154* TLSv1.3 (IN), TLS handshake, Server hello (2):38155{ [1210 bytes data]38156* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38157{ [1 bytes data]38158* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38159{ [19 bytes data]38160* TLSv1.3 (IN), TLS handshake, Certificate (11):38161{ [1010 bytes data]38162* TLSv1.3 (IN), TLS handshake, CERT verify (15):38163{ [111 bytes data]38164* TLSv1.3 (IN), TLS handshake, Finished (20):38165{ [52 bytes data]38166* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38167} [1 bytes data]38168* TLSv1.3 (OUT), TLS handshake, Finished (20):38169} [52 bytes data]38170* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38171* ALPN: server accepted h238172* Server certificate:38173* subject: CN=test.foo38174* start date: Sep 20 16:52:02 2026 GMT38175* expire date: Oct 20 16:52:02 2028 GMT38176* issuer: CN=minica root ca 010aed38177* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438178* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438179* subjectAltName: "test.foo" matches cert's "test.foo"38180* OpenSSL verify result: 1338181* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38182* closing connection #038183curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38184More details here: https://curl.se/docs/sslcerts.html3818538186curl failed to verify the legitimacy of the server and therefore could not38187establish a secure connection to it. To learn more about this situation and38188how to fix it, please visit the webpage mentioned above.38189* Trying [2001:db8:1::3]:443...38190* Host test.foo:443 was resolved.38191* IPv6: 2001:db8:1::338192* IPv4: 192.168.1.338193* ALPN: curl offers h2,http/1.138194} [5 bytes data]38195* TLSv1.3 (OUT), TLS handshake, Client hello (1):38196} [1552 bytes data]38197* SSL Trust Anchors:38198* OpenSSL default paths (fallback)38199{ [5 bytes data]38200* TLSv1.3 (IN), TLS handshake, Server hello (2):38201{ [1210 bytes data]38202* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38203{ [1 bytes data]38204* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38205{ [19 bytes data]38206* TLSv1.3 (IN), TLS handshake, Certificate (11):38207{ [1010 bytes data]38208* TLSv1.3 (IN), TLS handshake, CERT verify (15):38209{ [110 bytes data]38210* TLSv1.3 (IN), TLS handshake, Finished (20):38211{ [52 bytes data]38212* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38213} [1 bytes data]38214* TLSv1.3 (OUT), TLS handshake, Finished (20):38215} [52 bytes data]38216* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38217* ALPN: server accepted h238218* Server certificate:38219* subject: CN=test.foo38220* start date: Sep 20 16:52:02 2026 GMT38221* expire date: Oct 20 16:52:02 2028 GMT38222* issuer: CN=minica root ca 010aed38223* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438224* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438225* subjectAltName: "test.foo" matches cert's "test.foo"38226* OpenSSL verify result: 1338227* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38228* closing connection #038229curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38230More details here: https://curl.se/docs/sslcerts.html3823138232curl failed to verify the legitimacy of the server and therefore could not38233establish a secure connection to it. To learn more about this situation and38234how to fix it, please visit the webpage mentioned above.38235* Trying [2001:db8:1::3]:443...38236* Host test.foo:443 was resolved.38237* IPv6: 2001:db8:1::338238* IPv4: 192.168.1.338239* ALPN: curl offers h2,http/1.138240} [5 bytes data]38241* TLSv1.3 (OUT), TLS handshake, Client hello (1):38242} [1552 bytes data]38243* SSL Trust Anchors:38244* OpenSSL default paths (fallback)38245{ [5 bytes data]38246* TLSv1.3 (IN), TLS handshake, Server hello (2):38247{ [1210 bytes data]38248* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38249{ [1 bytes data]38250* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38251{ [19 bytes data]38252* TLSv1.3 (IN), TLS handshake, Certificate (11):38253{ [1010 bytes data]38254* TLSv1.3 (IN), TLS handshake, CERT verify (15):38255{ [111 bytes data]38256* TLSv1.3 (IN), TLS handshake, Finished (20):38257{ [52 bytes data]38258* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38259} [1 bytes data]38260* TLSv1.3 (OUT), TLS handshake, Finished (20):38261} [52 bytes data]38262* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38263* ALPN: server accepted h238264* Server certificate:38265* subject: CN=test.foo38266* start date: Sep 20 16:52:02 2026 GMT38267* expire date: Oct 20 16:52:02 2028 GMT38268* issuer: CN=minica root ca 010aed38269* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438270* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438271* subjectAltName: "test.foo" matches cert's "test.foo"38272* OpenSSL verify result: 1338273* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38274* closing connection #038275curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38276More details here: https://curl.se/docs/sslcerts.html3827738278curl failed to verify the legitimacy of the server and therefore could not38279establish a secure connection to it. To learn more about this situation and38280how to fix it, please visit the webpage mentioned above.38281* Trying [2001:db8:1::3]:443...38282* Host test.foo:443 was resolved.38283* IPv6: 2001:db8:1::338284* IPv4: 192.168.1.338285* ALPN: curl offers h2,http/1.138286} [5 bytes data]38287* TLSv1.3 (OUT), TLS handshake, Client hello (1):38288} [1552 bytes data]38289* SSL Trust Anchors:38290* OpenSSL default paths (fallback)38291{ [5 bytes data]38292* TLSv1.3 (IN), TLS handshake, Server hello (2):38293{ [1210 bytes data]38294* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38295{ [1 bytes data]38296* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38297{ [19 bytes data]38298* TLSv1.3 (IN), TLS handshake, Certificate (11):38299{ [1010 bytes data]38300* TLSv1.3 (IN), TLS handshake, CERT verify (15):38301{ [110 bytes data]38302* TLSv1.3 (IN), TLS handshake, Finished (20):38303{ [52 bytes data]38304* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38305} [1 bytes data]38306* TLSv1.3 (OUT), TLS handshake, Finished (20):38307} [52 bytes data]38308* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38309* ALPN: server accepted h238310* Server certificate:38311* subject: CN=test.foo38312* start date: Sep 20 16:52:02 2026 GMT38313* expire date: Oct 20 16:52:02 2028 GMT38314* issuer: CN=minica root ca 010aed38315* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438316* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438317* subjectAltName: "test.foo" matches cert's "test.foo"38318* OpenSSL verify result: 1338319* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38320* closing connection #038321curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38322More details here: https://curl.se/docs/sslcerts.html3832338324curl failed to verify the legitimacy of the server and therefore could not38325establish a secure connection to it. To learn more about this situation and38326how to fix it, please visit the webpage mentioned above.38327* Host test.foo:443 was resolved.38328* IPv6: 2001:db8:1::338329* IPv4: 192.168.1.338330* Trying [2001:db8:1::3]:443...38331* ALPN: curl offers h2,http/1.138332} [5 bytes data]38333* TLSv1.3 (OUT), TLS handshake, Client hello (1):38334} [1552 bytes data]38335* SSL Trust Anchors:38336* OpenSSL default paths (fallback)38337{ [5 bytes data]38338* TLSv1.3 (IN), TLS handshake, Server hello (2):38339{ [1210 bytes data]38340* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38341{ [1 bytes data]38342* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38343{ [19 bytes data]38344* TLSv1.3 (IN), TLS handshake, Certificate (11):38345{ [1010 bytes data]38346* TLSv1.3 (IN), TLS handshake, CERT verify (15):38347{ [112 bytes data]38348* TLSv1.3 (IN), TLS handshake, Finished (20):38349{ [52 bytes data]38350* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38351} [1 bytes data]38352* TLSv1.3 (OUT), TLS handshake, Finished (20):38353} [52 bytes data]38354* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38355* ALPN: server accepted h238356* Server certificate:38357* subject: CN=test.foo38358* start date: Sep 20 16:52:02 2026 GMT38359* expire date: Oct 20 16:52:02 2028 GMT38360* issuer: CN=minica root ca 010aed38361* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438362* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438363* subjectAltName: "test.foo" matches cert's "test.foo"38364* OpenSSL verify result: 1338365* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38366* closing connection #038367curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38368More details here: https://curl.se/docs/sslcerts.html3836938370curl failed to verify the legitimacy of the server and therefore could not38371establish a secure connection to it. To learn more about this situation and38372how to fix it, please visit the webpage mentioned above.38373* Host test.foo:443 was resolved.38374* IPv6: 2001:db8:1::338375* IPv4: 192.168.1.338376* Trying [2001:db8:1::3]:443...38377* ALPN: curl offers h2,http/1.138378} [5 bytes data]38379* TLSv1.3 (OUT), TLS handshake, Client hello (1):38380} [1552 bytes data]38381* SSL Trust Anchors:38382* OpenSSL default paths (fallback)38383{ [5 bytes data]38384* TLSv1.3 (IN), TLS handshake, Server hello (2):38385{ [1210 bytes data]38386* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38387{ [1 bytes data]38388* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38389{ [19 bytes data]38390* TLSv1.3 (IN), TLS handshake, Certificate (11):38391{ [1010 bytes data]38392* TLSv1.3 (IN), TLS handshake, CERT verify (15):38393{ [111 bytes data]38394* TLSv1.3 (IN), TLS handshake, Finished (20):38395{ [52 bytes data]38396* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38397} [1 bytes data]38398* TLSv1.3 (OUT), TLS handshake, Finished (20):38399} [52 bytes data]38400* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38401* ALPN: server accepted h238402* Server certificate:38403* subject: CN=test.foo38404* start date: Sep 20 16:52:02 2026 GMT38405* expire date: Oct 20 16:52:02 2028 GMT38406* issuer: CN=minica root ca 010aed38407* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438408* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438409* subjectAltName: "test.foo" matches cert's "test.foo"38410* OpenSSL verify result: 1338411* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38412* closing connection #038413curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38414More details here: https://curl.se/docs/sslcerts.html3841538416curl failed to verify the legitimacy of the server and therefore could not38417establish a secure connection to it. To learn more about this situation and38418how to fix it, please visit the webpage mentioned above.38419* Host test.foo:443 was resolved.38420* IPv6: 2001:db8:1::338421* IPv4: 192.168.1.338422* Trying [2001:db8:1::3]:443...38423* ALPN: curl offers h2,http/1.138424} [5 bytes data]38425* TLSv1.3 (OUT), TLS handshake, Client hello (1):38426} [1552 bytes data]38427* SSL Trust Anchors:38428* OpenSSL default paths (fallback)38429{ [5 bytes data]38430* TLSv1.3 (IN), TLS handshake, Server hello (2):38431{ [1210 bytes data]38432* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38433{ [1 bytes data]38434* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38435{ [19 bytes data]38436* TLSv1.3 (IN), TLS handshake, Certificate (11):38437{ [1010 bytes data]38438* TLSv1.3 (IN), TLS handshake, CERT verify (15):38439{ [112 bytes data]38440* TLSv1.3 (IN), TLS handshake, Finished (20):38441{ [52 bytes data]38442* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38443} [1 bytes data]38444* TLSv1.3 (OUT), TLS handshake, Finished (20):38445} [52 bytes data]38446* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38447* ALPN: server accepted h238448* Server certificate:38449* subject: CN=test.foo38450* start date: Sep 20 16:52:02 2026 GMT38451* expire date: Oct 20 16:52:02 2028 GMT38452* issuer: CN=minica root ca 010aed38453* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438454* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438455* subjectAltName: "test.foo" matches cert's "test.foo"38456* OpenSSL verify result: 1338457* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38458* closing connection #038459curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38460More details here: https://curl.se/docs/sslcerts.html3846138462curl failed to verify the legitimacy of the server and therefore could not38463establish a secure connection to it. To learn more about this situation and38464how to fix it, please visit the webpage mentioned above.38465* Host test.foo:443 was resolved.38466* IPv6: 2001:db8:1::338467* IPv4: 192.168.1.338468* Trying [2001:db8:1::3]:443...38469* ALPN: curl offers h2,http/1.138470} [5 bytes data]38471* TLSv1.3 (OUT), TLS handshake, Client hello (1):38472} [1552 bytes data]38473* SSL Trust Anchors:38474* OpenSSL default paths (fallback)38475{ [5 bytes data]38476* TLSv1.3 (IN), TLS handshake, Server hello (2):38477{ [1210 bytes data]38478* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38479{ [1 bytes data]38480* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38481{ [19 bytes data]38482* TLSv1.3 (IN), TLS handshake, Certificate (11):38483{ [1010 bytes data]38484* TLSv1.3 (IN), TLS handshake, CERT verify (15):38485{ [110 bytes data]38486* TLSv1.3 (IN), TLS handshake, Finished (20):38487{ [52 bytes data]38488* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38489} [1 bytes data]38490* TLSv1.3 (OUT), TLS handshake, Finished (20):38491} [52 bytes data]38492* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38493* ALPN: server accepted h238494* Server certificate:38495* subject: CN=test.foo38496* start date: Sep 20 16:52:02 2026 GMT38497* expire date: Oct 20 16:52:02 2028 GMT38498* issuer: CN=minica root ca 010aed38499* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438500* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438501* subjectAltName: "test.foo" matches cert's "test.foo"38502* OpenSSL verify result: 1338503* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38504* closing connection #038505curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38506More details here: https://curl.se/docs/sslcerts.html3850738508curl failed to verify the legitimacy of the server and therefore could not38509establish a secure connection to it. To learn more about this situation and38510how to fix it, please visit the webpage mentioned above.38511* Host test.foo:443 was resolved.38512* IPv6: 2001:db8:1::338513* IPv4: 192.168.1.338514* Trying [2001:db8:1::3]:443...38515* ALPN: curl offers h2,http/1.138516} [5 bytes data]38517* TLSv1.3 (OUT), TLS handshake, Client hello (1):38518} [1552 bytes data]38519* SSL Trust Anchors:38520* OpenSSL default paths (fallback)38521{ [5 bytes data]38522* TLSv1.3 (IN), TLS handshake, Server hello (2):38523{ [1210 bytes data]38524* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38525{ [1 bytes data]38526* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38527{ [19 bytes data]38528* TLSv1.3 (IN), TLS handshake, Certificate (11):38529{ [1010 bytes data]38530* TLSv1.3 (IN), TLS handshake, CERT verify (15):38531{ [112 bytes data]38532* TLSv1.3 (IN), TLS handshake, Finished (20):38533{ [52 bytes data]38534* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38535} [1 bytes data]38536* TLSv1.3 (OUT), TLS handshake, Finished (20):38537} [52 bytes data]38538* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38539* ALPN: server accepted h238540* Server certificate:38541* subject: CN=test.foo38542* start date: Sep 20 16:52:02 2026 GMT38543* expire date: Oct 20 16:52:02 2028 GMT38544* issuer: CN=minica root ca 010aed38545* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438546* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438547* subjectAltName: "test.foo" matches cert's "test.foo"38548* OpenSSL verify result: 1338549* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38550* closing connection #038551curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38552More details here: https://curl.se/docs/sslcerts.html3855338554curl failed to verify the legitimacy of the server and therefore could not38555establish a secure connection to it. To learn more about this situation and38556how to fix it, please visit the webpage mentioned above.38557* Host test.foo:443 was resolved.38558* IPv6: 2001:db8:1::338559* IPv4: 192.168.1.338560* Trying [2001:db8:1::3]:443...38561* ALPN: curl offers h2,http/1.138562} [5 bytes data]38563* TLSv1.3 (OUT), TLS handshake, Client hello (1):38564} [1552 bytes data]38565* SSL Trust Anchors:38566* OpenSSL default paths (fallback)38567{ [5 bytes data]38568* TLSv1.3 (IN), TLS handshake, Server hello (2):38569{ [1210 bytes data]38570* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38571{ [1 bytes data]38572* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38573{ [19 bytes data]38574* TLSv1.3 (IN), TLS handshake, Certificate (11):38575{ [1010 bytes data]38576* TLSv1.3 (IN), TLS handshake, CERT verify (15):38577{ [111 bytes data]38578* TLSv1.3 (IN), TLS handshake, Finished (20):38579{ [52 bytes data]38580* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38581} [1 bytes data]38582* TLSv1.3 (OUT), TLS handshake, Finished (20):38583} [52 bytes data]38584* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38585* ALPN: server accepted h238586* Server certificate:38587* subject: CN=test.foo38588* start date: Sep 20 16:52:02 2026 GMT38589* expire date: Oct 20 16:52:02 2028 GMT38590* issuer: CN=minica root ca 010aed38591* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438592* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438593* subjectAltName: "test.foo" matches cert's "test.foo"38594* OpenSSL verify result: 1338595* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38596* closing connection #038597curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38598More details here: https://curl.se/docs/sslcerts.html3859938600curl failed to verify the legitimacy of the server and therefore could not38601establish a secure connection to it. To learn more about this situation and38602how to fix it, please visit the webpage mentioned above.38603* Host test.foo:443 was resolved.38604* IPv6: 2001:db8:1::338605* IPv4: 192.168.1.338606* Trying [2001:db8:1::3]:443...38607* ALPN: curl offers h2,http/1.138608} [5 bytes data]38609* TLSv1.3 (OUT), TLS handshake, Client hello (1):38610} [1552 bytes data]38611* SSL Trust Anchors:38612* OpenSSL default paths (fallback)38613{ [5 bytes data]38614* TLSv1.3 (IN), TLS handshake, Server hello (2):38615{ [1210 bytes data]38616* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38617{ [1 bytes data]38618* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38619{ [19 bytes data]38620* TLSv1.3 (IN), TLS handshake, Certificate (11):38621{ [1010 bytes data]38622* TLSv1.3 (IN), TLS handshake, CERT verify (15):38623{ [111 bytes data]38624* TLSv1.3 (IN), TLS handshake, Finished (20):38625{ [52 bytes data]38626* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38627} [1 bytes data]38628* TLSv1.3 (OUT), TLS handshake, Finished (20):38629} [52 bytes data]38630* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38631* ALPN: server accepted h238632* Server certificate:38633* subject: CN=test.foo38634* start date: Sep 20 16:52:02 2026 GMT38635* expire date: Oct 20 16:52:02 2028 GMT38636* issuer: CN=minica root ca 010aed38637* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438638* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438639* subjectAltName: "test.foo" matches cert's "test.foo"38640* OpenSSL verify result: 1338641* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38642* closing connection #038643curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38644More details here: https://curl.se/docs/sslcerts.html3864538646curl failed to verify the legitimacy of the server and therefore could not38647establish a secure connection to it. To learn more about this situation and38648how to fix it, please visit the webpage mentioned above.38649* Host test.foo:443 was resolved.38650* IPv6: 2001:db8:1::338651* IPv4: 192.168.1.338652* Trying [2001:db8:1::3]:443...38653* ALPN: curl offers h2,http/1.138654} [5 bytes data]38655* TLSv1.3 (OUT), TLS handshake, Client hello (1):38656} [1552 bytes data]38657* SSL Trust Anchors:38658* OpenSSL default paths (fallback)38659{ [5 bytes data]38660* TLSv1.3 (IN), TLS handshake, Server hello (2):38661{ [1210 bytes data]38662* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38663{ [1 bytes data]38664* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38665{ [19 bytes data]38666* TLSv1.3 (IN), TLS handshake, Certificate (11):38667{ [1010 bytes data]38668* TLSv1.3 (IN), TLS handshake, CERT verify (15):38669{ [111 bytes data]38670* TLSv1.3 (IN), TLS handshake, Finished (20):38671{ [52 bytes data]38672* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38673} [1 bytes data]38674* TLSv1.3 (OUT), TLS handshake, Finished (20):38675} [52 bytes data]38676* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38677* ALPN: server accepted h238678* Server certificate:38679* subject: CN=test.foo38680* start date: Sep 20 16:52:02 2026 GMT38681* expire date: Oct 20 16:52:02 2028 GMT38682* issuer: CN=minica root ca 010aed38683* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438684* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438685* subjectAltName: "test.foo" matches cert's "test.foo"38686* OpenSSL verify result: 1338687* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38688* closing connection #038689curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38690More details here: https://curl.se/docs/sslcerts.html3869138692curl failed to verify the legitimacy of the server and therefore could not38693establish a secure connection to it. To learn more about this situation and38694how to fix it, please visit the webpage mentioned above.38695* Trying [2001:db8:1::3]:443...38696* ALPN: curl offers h2,http/1.138697} [5 bytes data]38698* TLSv1.3 (OUT), TLS handshake, Client hello (1):38699} [1552 bytes data]38700* SSL Trust Anchors:38701* OpenSSL default paths (fallback)38702* Host test.foo:443 was resolved.38703* IPv6: 2001:db8:1::338704* IPv4: 192.168.1.338705{ [5 bytes data]38706* TLSv1.3 (IN), TLS handshake, Server hello (2):38707{ [1210 bytes data]38708* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38709{ [1 bytes data]38710* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38711{ [19 bytes data]38712* TLSv1.3 (IN), TLS handshake, Certificate (11):38713{ [1010 bytes data]38714* TLSv1.3 (IN), TLS handshake, CERT verify (15):38715{ [111 bytes data]38716* TLSv1.3 (IN), TLS handshake, Finished (20):38717{ [52 bytes data]38718* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38719} [1 bytes data]38720* TLSv1.3 (OUT), TLS handshake, Finished (20):38721} [52 bytes data]38722* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38723* ALPN: server accepted h238724* Server certificate:38725* subject: CN=test.foo38726* start date: Sep 20 16:52:02 2026 GMT38727* expire date: Oct 20 16:52:02 2028 GMT38728* issuer: CN=minica root ca 010aed38729* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438730* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438731* subjectAltName: "test.foo" matches cert's "test.foo"38732* OpenSSL verify result: 1338733* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38734* closing connection #038735curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38736More details here: https://curl.se/docs/sslcerts.html3873738738curl failed to verify the legitimacy of the server and therefore could not38739establish a secure connection to it. To learn more about this situation and38740how to fix it, please visit the webpage mentioned above.38741* Host test.foo:443 was resolved.38742* IPv6: 2001:db8:1::338743* IPv4: 192.168.1.338744* Trying [2001:db8:1::3]:443...38745* ALPN: curl offers h2,http/1.138746} [5 bytes data]38747* TLSv1.3 (OUT), TLS handshake, Client hello (1):38748} [1552 bytes data]38749* SSL Trust Anchors:38750* OpenSSL default paths (fallback)38751{ [5 bytes data]38752* TLSv1.3 (IN), TLS handshake, Server hello (2):38753{ [1210 bytes data]38754* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38755{ [1 bytes data]38756* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38757{ [19 bytes data]38758* TLSv1.3 (IN), TLS handshake, Certificate (11):38759{ [1010 bytes data]38760* TLSv1.3 (IN), TLS handshake, CERT verify (15):38761{ [111 bytes data]38762* TLSv1.3 (IN), TLS handshake, Finished (20):38763{ [52 bytes data]38764* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38765} [1 bytes data]38766* TLSv1.3 (OUT), TLS handshake, Finished (20):38767} [52 bytes data]38768* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38769* ALPN: server accepted h238770* Server certificate:38771* subject: CN=test.foo38772* start date: Sep 20 16:52:02 2026 GMT38773* expire date: Oct 20 16:52:02 2028 GMT38774* issuer: CN=minica root ca 010aed38775* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438776* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438777* subjectAltName: "test.foo" matches cert's "test.foo"38778* OpenSSL verify result: 1338779* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38780* closing connection #038781curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38782More details here: https://curl.se/docs/sslcerts.html3878338784curl failed to verify the legitimacy of the server and therefore could not38785establish a secure connection to it. To learn more about this situation and38786how to fix it, please visit the webpage mentioned above.38787* Host test.foo:443 was resolved.38788* IPv6: 2001:db8:1::338789* IPv4: 192.168.1.338790* Trying [2001:db8:1::3]:443...38791* ALPN: curl offers h2,http/1.138792} [5 bytes data]38793* TLSv1.3 (OUT), TLS handshake, Client hello (1):38794} [1552 bytes data]38795* SSL Trust Anchors:38796* OpenSSL default paths (fallback)38797{ [5 bytes data]38798* TLSv1.3 (IN), TLS handshake, Server hello (2):38799{ [1210 bytes data]38800* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38801{ [1 bytes data]38802* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38803{ [19 bytes data]38804* TLSv1.3 (IN), TLS handshake, Certificate (11):38805{ [1010 bytes data]38806* TLSv1.3 (IN), TLS handshake, CERT verify (15):38807{ [110 bytes data]38808* TLSv1.3 (IN), TLS handshake, Finished (20):38809{ [52 bytes data]38810* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38811} [1 bytes data]38812* TLSv1.3 (OUT), TLS handshake, Finished (20):38813} [52 bytes data]38814* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38815* ALPN: server accepted h238816* Server certificate:38817* subject: CN=test.foo38818* start date: Sep 20 16:52:02 2026 GMT38819* expire date: Oct 20 16:52:02 2028 GMT38820* issuer: CN=minica root ca 010aed38821* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438822* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438823* subjectAltName: "test.foo" matches cert's "test.foo"38824* OpenSSL verify result: 1338825* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38826* closing connection #038827curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38828More details here: https://curl.se/docs/sslcerts.html3882938830curl failed to verify the legitimacy of the server and therefore could not38831establish a secure connection to it. To learn more about this situation and38832how to fix it, please visit the webpage mentioned above.38833* Trying [2001:db8:1::3]:443...38834* Host test.foo:443 was resolved.38835* IPv6: 2001:db8:1::338836* IPv4: 192.168.1.338837* ALPN: curl offers h2,http/1.138838} [5 bytes data]38839* TLSv1.3 (OUT), TLS handshake, Client hello (1):38840} [1552 bytes data]38841* SSL Trust Anchors:38842* OpenSSL default paths (fallback)38843{ [5 bytes data]38844* TLSv1.3 (IN), TLS handshake, Server hello (2):38845{ [1210 bytes data]38846* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38847{ [1 bytes data]38848* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38849{ [19 bytes data]38850* TLSv1.3 (IN), TLS handshake, Certificate (11):38851{ [1010 bytes data]38852* TLSv1.3 (IN), TLS handshake, CERT verify (15):38853{ [112 bytes data]38854* TLSv1.3 (IN), TLS handshake, Finished (20):38855{ [52 bytes data]38856* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38857} [1 bytes data]38858* TLSv1.3 (OUT), TLS handshake, Finished (20):38859} [52 bytes data]38860* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38861* ALPN: server accepted h238862* Server certificate:38863* subject: CN=test.foo38864* start date: Sep 20 16:52:02 2026 GMT38865* expire date: Oct 20 16:52:02 2028 GMT38866* issuer: CN=minica root ca 010aed38867* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438868* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438869* subjectAltName: "test.foo" matches cert's "test.foo"38870* OpenSSL verify result: 1338871* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38872* closing connection #038873curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38874More details here: https://curl.se/docs/sslcerts.html3887538876curl failed to verify the legitimacy of the server and therefore could not38877establish a secure connection to it. To learn more about this situation and38878how to fix it, please visit the webpage mentioned above.38879* Host test.foo:443 was resolved.38880* IPv6: 2001:db8:1::338881* IPv4: 192.168.1.338882* Trying [2001:db8:1::3]:443...38883* ALPN: curl offers h2,http/1.138884} [5 bytes data]38885* TLSv1.3 (OUT), TLS handshake, Client hello (1):38886} [1552 bytes data]38887* SSL Trust Anchors:38888* OpenSSL default paths (fallback)38889{ [5 bytes data]38890* TLSv1.3 (IN), TLS handshake, Server hello (2):38891{ [1210 bytes data]38892* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38893{ [1 bytes data]38894* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38895{ [19 bytes data]38896* TLSv1.3 (IN), TLS handshake, Certificate (11):38897{ [1010 bytes data]38898* TLSv1.3 (IN), TLS handshake, CERT verify (15):38899{ [111 bytes data]38900* TLSv1.3 (IN), TLS handshake, Finished (20):38901{ [52 bytes data]38902* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38903} [1 bytes data]38904* TLSv1.3 (OUT), TLS handshake, Finished (20):38905} [52 bytes data]38906* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38907* ALPN: server accepted h238908* Server certificate:38909* subject: CN=test.foo38910* start date: Sep 20 16:52:02 2026 GMT38911* expire date: Oct 20 16:52:02 2028 GMT38912* issuer: CN=minica root ca 010aed38913* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438914* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438915* subjectAltName: "test.foo" matches cert's "test.foo"38916* OpenSSL verify result: 1338917* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38918* closing connection #038919curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38920More details here: https://curl.se/docs/sslcerts.html3892138922curl failed to verify the legitimacy of the server and therefore could not38923establish a secure connection to it. To learn more about this situation and38924how to fix it, please visit the webpage mentioned above.38925* Trying [2001:db8:1::3]:443...38926* Host test.foo:443 was resolved.38927* IPv6: 2001:db8:1::338928* IPv4: 192.168.1.338929* ALPN: curl offers h2,http/1.138930} [5 bytes data]38931* TLSv1.3 (OUT), TLS handshake, Client hello (1):38932} [1552 bytes data]38933* SSL Trust Anchors:38934* OpenSSL default paths (fallback)38935{ [5 bytes data]38936* TLSv1.3 (IN), TLS handshake, Server hello (2):38937{ [1210 bytes data]38938* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38939{ [1 bytes data]38940* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38941{ [19 bytes data]38942* TLSv1.3 (IN), TLS handshake, Certificate (11):38943{ [1010 bytes data]38944* TLSv1.3 (IN), TLS handshake, CERT verify (15):38945{ [111 bytes data]38946* TLSv1.3 (IN), TLS handshake, Finished (20):38947{ [52 bytes data]38948* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38949} [1 bytes data]38950* TLSv1.3 (OUT), TLS handshake, Finished (20):38951} [52 bytes data]38952* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38953* ALPN: server accepted h238954* Server certificate:38955* subject: CN=test.foo38956* start date: Sep 20 16:52:02 2026 GMT38957* expire date: Oct 20 16:52:02 2028 GMT38958* issuer: CN=minica root ca 010aed38959* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438960* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38438961* subjectAltName: "test.foo" matches cert's "test.foo"38962* OpenSSL verify result: 1338963* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38964* closing connection #038965curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)38966More details here: https://curl.se/docs/sslcerts.html3896738968curl failed to verify the legitimacy of the server and therefore could not38969establish a secure connection to it. To learn more about this situation and38970how to fix it, please visit the webpage mentioned above.38971* Host test.foo:443 was resolved.38972* IPv6: 2001:db8:1::338973* IPv4: 192.168.1.338974* Trying [2001:db8:1::3]:443...38975* ALPN: curl offers h2,http/1.138976} [5 bytes data]38977* TLSv1.3 (OUT), TLS handshake, Client hello (1):38978} [1552 bytes data]38979* SSL Trust Anchors:38980* OpenSSL default paths (fallback)38981{ [5 bytes data]38982* TLSv1.3 (IN), TLS handshake, Server hello (2):38983{ [1210 bytes data]38984* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):38985{ [1 bytes data]38986* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):38987{ [19 bytes data]38988* TLSv1.3 (IN), TLS handshake, Certificate (11):38989{ [1010 bytes data]38990* TLSv1.3 (IN), TLS handshake, CERT verify (15):38991{ [111 bytes data]38992* TLSv1.3 (IN), TLS handshake, Finished (20):38993{ [52 bytes data]38994* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):38995} [1 bytes data]38996* TLSv1.3 (OUT), TLS handshake, Finished (20):38997} [52 bytes data]38998* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey38999* ALPN: server accepted h239000* Server certificate:39001* subject: CN=test.foo39002* start date: Sep 20 16:52:02 2026 GMT39003* expire date: Oct 20 16:52:02 2028 GMT39004* issuer: CN=minica root ca 010aed39005* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439006* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439007* subjectAltName: "test.foo" matches cert's "test.foo"39008* OpenSSL verify result: 1339009* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39010* closing connection #039011curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39012More details here: https://curl.se/docs/sslcerts.html3901339014curl failed to verify the legitimacy of the server and therefore could not39015establish a secure connection to it. To learn more about this situation and39016how to fix it, please visit the webpage mentioned above.39017* Trying [2001:db8:1::3]:443...39018* Host test.foo:443 was resolved.39019* IPv6: 2001:db8:1::339020* IPv4: 192.168.1.339021* ALPN: curl offers h2,http/1.139022} [5 bytes data]39023* TLSv1.3 (OUT), TLS handshake, Client hello (1):39024} [1552 bytes data]39025* SSL Trust Anchors:39026* OpenSSL default paths (fallback)39027{ [5 bytes data]39028* TLSv1.3 (IN), TLS handshake, Server hello (2):39029{ [1210 bytes data]39030* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39031{ [1 bytes data]39032* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39033{ [19 bytes data]39034* TLSv1.3 (IN), TLS handshake, Certificate (11):39035{ [1010 bytes data]39036* TLSv1.3 (IN), TLS handshake, CERT verify (15):39037{ [111 bytes data]39038* TLSv1.3 (IN), TLS handshake, Finished (20):39039{ [52 bytes data]39040* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39041} [1 bytes data]39042* TLSv1.3 (OUT), TLS handshake, Finished (20):39043} [52 bytes data]39044* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39045* ALPN: server accepted h239046* Server certificate:39047* subject: CN=test.foo39048* start date: Sep 20 16:52:02 2026 GMT39049* expire date: Oct 20 16:52:02 2028 GMT39050* issuer: CN=minica root ca 010aed39051* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439052* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439053* subjectAltName: "test.foo" matches cert's "test.foo"39054* OpenSSL verify result: 1339055* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39056* closing connection #039057curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39058More details here: https://curl.se/docs/sslcerts.html3905939060curl failed to verify the legitimacy of the server and therefore could not39061establish a secure connection to it. To learn more about this situation and39062how to fix it, please visit the webpage mentioned above.39063* Host test.foo:443 was resolved.39064* IPv6: 2001:db8:1::339065* IPv4: 192.168.1.339066* Trying [2001:db8:1::3]:443...39067* ALPN: curl offers h2,http/1.139068} [5 bytes data]39069* TLSv1.3 (OUT), TLS handshake, Client hello (1):39070} [1552 bytes data]39071* SSL Trust Anchors:39072* OpenSSL default paths (fallback)39073{ [5 bytes data]39074* TLSv1.3 (IN), TLS handshake, Server hello (2):39075{ [1210 bytes data]39076* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39077{ [1 bytes data]39078* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39079{ [19 bytes data]39080* TLSv1.3 (IN), TLS handshake, Certificate (11):39081{ [1010 bytes data]39082* TLSv1.3 (IN), TLS handshake, CERT verify (15):39083{ [110 bytes data]39084* TLSv1.3 (IN), TLS handshake, Finished (20):39085{ [52 bytes data]39086* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39087} [1 bytes data]39088* TLSv1.3 (OUT), TLS handshake, Finished (20):39089} [52 bytes data]39090* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39091* ALPN: server accepted h239092* Server certificate:39093* subject: CN=test.foo39094* start date: Sep 20 16:52:02 2026 GMT39095* expire date: Oct 20 16:52:02 2028 GMT39096* issuer: CN=minica root ca 010aed39097* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439098* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439099* subjectAltName: "test.foo" matches cert's "test.foo"39100* OpenSSL verify result: 1339101* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39102* closing connection #039103curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39104More details here: https://curl.se/docs/sslcerts.html3910539106curl failed to verify the legitimacy of the server and therefore could not39107establish a secure connection to it. To learn more about this situation and39108how to fix it, please visit the webpage mentioned above.39109* Trying [2001:db8:1::3]:443...39110* Host test.foo:443 was resolved.39111* IPv6: 2001:db8:1::339112* IPv4: 192.168.1.339113* ALPN: curl offers h2,http/1.139114} [5 bytes data]39115* TLSv1.3 (OUT), TLS handshake, Client hello (1):39116} [1552 bytes data]39117* SSL Trust Anchors:39118* OpenSSL default paths (fallback)39119{ [5 bytes data]39120* TLSv1.3 (IN), TLS handshake, Server hello (2):39121{ [1210 bytes data]39122* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39123{ [1 bytes data]39124* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39125{ [19 bytes data]39126* TLSv1.3 (IN), TLS handshake, Certificate (11):39127{ [1010 bytes data]39128* TLSv1.3 (IN), TLS handshake, CERT verify (15):39129{ [111 bytes data]39130* TLSv1.3 (IN), TLS handshake, Finished (20):39131{ [52 bytes data]39132* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39133} [1 bytes data]39134* TLSv1.3 (OUT), TLS handshake, Finished (20):39135} [52 bytes data]39136* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39137* ALPN: server accepted h239138* Server certificate:39139* subject: CN=test.foo39140* start date: Sep 20 16:52:02 2026 GMT39141* expire date: Oct 20 16:52:02 2028 GMT39142* issuer: CN=minica root ca 010aed39143* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439144* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439145* subjectAltName: "test.foo" matches cert's "test.foo"39146* OpenSSL verify result: 1339147* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39148* closing connection #039149curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39150More details here: https://curl.se/docs/sslcerts.html3915139152curl failed to verify the legitimacy of the server and therefore could not39153establish a secure connection to it. To learn more about this situation and39154how to fix it, please visit the webpage mentioned above.39155* Host test.foo:443 was resolved.39156* IPv6: 2001:db8:1::339157* IPv4: 192.168.1.339158* Trying [2001:db8:1::3]:443...39159* ALPN: curl offers h2,http/1.139160} [5 bytes data]39161* TLSv1.3 (OUT), TLS handshake, Client hello (1):39162} [1552 bytes data]39163* SSL Trust Anchors:39164* OpenSSL default paths (fallback)39165{ [5 bytes data]39166* TLSv1.3 (IN), TLS handshake, Server hello (2):39167{ [1210 bytes data]39168* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39169{ [1 bytes data]39170* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39171{ [19 bytes data]39172* TLSv1.3 (IN), TLS handshake, Certificate (11):39173{ [1010 bytes data]39174* TLSv1.3 (IN), TLS handshake, CERT verify (15):39175{ [110 bytes data]39176* TLSv1.3 (IN), TLS handshake, Finished (20):39177{ [52 bytes data]39178* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39179} [1 bytes data]39180* TLSv1.3 (OUT), TLS handshake, Finished (20):39181} [52 bytes data]39182* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39183* ALPN: server accepted h239184* Server certificate:39185* subject: CN=test.foo39186* start date: Sep 20 16:52:02 2026 GMT39187* expire date: Oct 20 16:52:02 2028 GMT39188* issuer: CN=minica root ca 010aed39189* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439190* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439191* subjectAltName: "test.foo" matches cert's "test.foo"39192* OpenSSL verify result: 1339193* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39194* closing connection #039195curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39196More details here: https://curl.se/docs/sslcerts.html3919739198curl failed to verify the legitimacy of the server and therefore could not39199establish a secure connection to it. To learn more about this situation and39200how to fix it, please visit the webpage mentioned above.39201* Trying [2001:db8:1::3]:443...39202* Host test.foo:443 was resolved.39203* IPv6: 2001:db8:1::339204* IPv4: 192.168.1.339205* ALPN: curl offers h2,http/1.139206} [5 bytes data]39207* TLSv1.3 (OUT), TLS handshake, Client hello (1):39208} [1552 bytes data]39209* SSL Trust Anchors:39210* OpenSSL default paths (fallback)39211{ [5 bytes data]39212* TLSv1.3 (IN), TLS handshake, Server hello (2):39213{ [1210 bytes data]39214* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39215{ [1 bytes data]39216* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39217{ [19 bytes data]39218* TLSv1.3 (IN), TLS handshake, Certificate (11):39219{ [1010 bytes data]39220* TLSv1.3 (IN), TLS handshake, CERT verify (15):39221{ [110 bytes data]39222* TLSv1.3 (IN), TLS handshake, Finished (20):39223{ [52 bytes data]39224* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39225} [1 bytes data]39226* TLSv1.3 (OUT), TLS handshake, Finished (20):39227} [52 bytes data]39228* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39229* ALPN: server accepted h239230* Server certificate:39231* subject: CN=test.foo39232* start date: Sep 20 16:52:02 2026 GMT39233* expire date: Oct 20 16:52:02 2028 GMT39234* issuer: CN=minica root ca 010aed39235* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439236* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439237* subjectAltName: "test.foo" matches cert's "test.foo"39238* OpenSSL verify result: 1339239* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39240* closing connection #039241curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39242More details here: https://curl.se/docs/sslcerts.html3924339244curl failed to verify the legitimacy of the server and therefore could not39245establish a secure connection to it. To learn more about this situation and39246how to fix it, please visit the webpage mentioned above.39247* Trying [2001:db8:1::3]:443...39248* Host test.foo:443 was resolved.39249* IPv6: 2001:db8:1::339250* IPv4: 192.168.1.339251* ALPN: curl offers h2,http/1.139252} [5 bytes data]39253* TLSv1.3 (OUT), TLS handshake, Client hello (1):39254} [1552 bytes data]39255* SSL Trust Anchors:39256* OpenSSL default paths (fallback)39257{ [5 bytes data]39258* TLSv1.3 (IN), TLS handshake, Server hello (2):39259{ [1210 bytes data]39260* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39261{ [1 bytes data]39262* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39263{ [19 bytes data]39264* TLSv1.3 (IN), TLS handshake, Certificate (11):39265{ [1010 bytes data]39266* TLSv1.3 (IN), TLS handshake, CERT verify (15):39267{ [110 bytes data]39268* TLSv1.3 (IN), TLS handshake, Finished (20):39269{ [52 bytes data]39270* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39271} [1 bytes data]39272* TLSv1.3 (OUT), TLS handshake, Finished (20):39273} [52 bytes data]39274* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39275* ALPN: server accepted h239276* Server certificate:39277* subject: CN=test.foo39278* start date: Sep 20 16:52:02 2026 GMT39279* expire date: Oct 20 16:52:02 2028 GMT39280* issuer: CN=minica root ca 010aed39281* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439282* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439283* subjectAltName: "test.foo" matches cert's "test.foo"39284* OpenSSL verify result: 1339285* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39286* closing connection #039287curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39288More details here: https://curl.se/docs/sslcerts.html3928939290curl failed to verify the legitimacy of the server and therefore could not39291establish a secure connection to it. To learn more about this situation and39292how to fix it, please visit the webpage mentioned above.39293* Host test.foo:443 was resolved.39294* IPv6: 2001:db8:1::339295* IPv4: 192.168.1.339296* Trying [2001:db8:1::3]:443...39297* ALPN: curl offers h2,http/1.139298} [5 bytes data]39299* TLSv1.3 (OUT), TLS handshake, Client hello (1):39300} [1552 bytes data]39301* SSL Trust Anchors:39302* OpenSSL default paths (fallback)39303{ [5 bytes data]39304* TLSv1.3 (IN), TLS handshake, Server hello (2):39305{ [1210 bytes data]39306* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39307{ [1 bytes data]39308* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39309{ [19 bytes data]39310* TLSv1.3 (IN), TLS handshake, Certificate (11):39311{ [1010 bytes data]39312* TLSv1.3 (IN), TLS handshake, CERT verify (15):39313{ [111 bytes data]39314* TLSv1.3 (IN), TLS handshake, Finished (20):39315{ [52 bytes data]39316* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39317} [1 bytes data]39318* TLSv1.3 (OUT), TLS handshake, Finished (20):39319} [52 bytes data]39320* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39321* ALPN: server accepted h239322* Server certificate:39323* subject: CN=test.foo39324* start date: Sep 20 16:52:02 2026 GMT39325* expire date: Oct 20 16:52:02 2028 GMT39326* issuer: CN=minica root ca 010aed39327* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439328* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439329* subjectAltName: "test.foo" matches cert's "test.foo"39330* OpenSSL verify result: 1339331* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39332* closing connection #039333curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39334More details here: https://curl.se/docs/sslcerts.html3933539336curl failed to verify the legitimacy of the server and therefore could not39337establish a secure connection to it. To learn more about this situation and39338how to fix it, please visit the webpage mentioned above.39339* Host test.foo:443 was resolved.39340* IPv6: 2001:db8:1::339341* IPv4: 192.168.1.339342* Trying [2001:db8:1::3]:443...39343* ALPN: curl offers h2,http/1.139344} [5 bytes data]39345* TLSv1.3 (OUT), TLS handshake, Client hello (1):39346} [1552 bytes data]39347* SSL Trust Anchors:39348* OpenSSL default paths (fallback)39349{ [5 bytes data]39350* TLSv1.3 (IN), TLS handshake, Server hello (2):39351{ [1210 bytes data]39352* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39353{ [1 bytes data]39354* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39355{ [19 bytes data]39356* TLSv1.3 (IN), TLS handshake, Certificate (11):39357{ [1010 bytes data]39358* TLSv1.3 (IN), TLS handshake, CERT verify (15):39359{ [112 bytes data]39360* TLSv1.3 (IN), TLS handshake, Finished (20):39361{ [52 bytes data]39362* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39363} [1 bytes data]39364* TLSv1.3 (OUT), TLS handshake, Finished (20):39365} [52 bytes data]39366* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39367* ALPN: server accepted h239368* Server certificate:39369* subject: CN=test.foo39370* start date: Sep 20 16:52:02 2026 GMT39371* expire date: Oct 20 16:52:02 2028 GMT39372* issuer: CN=minica root ca 010aed39373* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439374* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439375* subjectAltName: "test.foo" matches cert's "test.foo"39376* OpenSSL verify result: 1339377* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39378* closing connection #039379curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39380More details here: https://curl.se/docs/sslcerts.html3938139382curl failed to verify the legitimacy of the server and therefore could not39383establish a secure connection to it. To learn more about this situation and39384how to fix it, please visit the webpage mentioned above.39385* Trying [2001:db8:1::3]:443...39386* Host test.foo:443 was resolved.39387* IPv6: 2001:db8:1::339388* IPv4: 192.168.1.339389* ALPN: curl offers h2,http/1.139390} [5 bytes data]39391* TLSv1.3 (OUT), TLS handshake, Client hello (1):39392} [1552 bytes data]39393* SSL Trust Anchors:39394* OpenSSL default paths (fallback)39395{ [5 bytes data]39396* TLSv1.3 (IN), TLS handshake, Server hello (2):39397{ [1210 bytes data]39398* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39399{ [1 bytes data]39400* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39401{ [19 bytes data]39402* TLSv1.3 (IN), TLS handshake, Certificate (11):39403{ [1010 bytes data]39404* TLSv1.3 (IN), TLS handshake, CERT verify (15):39405{ [110 bytes data]39406* TLSv1.3 (IN), TLS handshake, Finished (20):39407{ [52 bytes data]39408* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39409} [1 bytes data]39410* TLSv1.3 (OUT), TLS handshake, Finished (20):39411} [52 bytes data]39412* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39413* ALPN: server accepted h239414* Server certificate:39415* subject: CN=test.foo39416* start date: Sep 20 16:52:02 2026 GMT39417* expire date: Oct 20 16:52:02 2028 GMT39418* issuer: CN=minica root ca 010aed39419* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439420* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439421* subjectAltName: "test.foo" matches cert's "test.foo"39422* OpenSSL verify result: 1339423* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39424* closing connection #039425curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39426More details here: https://curl.se/docs/sslcerts.html3942739428curl failed to verify the legitimacy of the server and therefore could not39429establish a secure connection to it. To learn more about this situation and39430how to fix it, please visit the webpage mentioned above.39431* Trying [2001:db8:1::3]:443...39432* ALPN: curl offers h2,http/1.139433} [5 bytes data]39434* TLSv1.3 (OUT), TLS handshake, Client hello (1):39435} [1552 bytes data]39436* SSL Trust Anchors:39437* OpenSSL default paths (fallback)39438* Host test.foo:443 was resolved.39439* IPv6: 2001:db8:1::339440* IPv4: 192.168.1.339441{ [5 bytes data]39442* TLSv1.3 (IN), TLS handshake, Server hello (2):39443{ [1210 bytes data]39444* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39445{ [1 bytes data]39446* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39447{ [19 bytes data]39448* TLSv1.3 (IN), TLS handshake, Certificate (11):39449{ [1010 bytes data]39450* TLSv1.3 (IN), TLS handshake, CERT verify (15):39451{ [111 bytes data]39452* TLSv1.3 (IN), TLS handshake, Finished (20):39453{ [52 bytes data]39454* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39455} [1 bytes data]39456* TLSv1.3 (OUT), TLS handshake, Finished (20):39457} [52 bytes data]39458* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39459* ALPN: server accepted h239460* Server certificate:39461* subject: CN=test.foo39462* start date: Sep 20 16:52:02 2026 GMT39463* expire date: Oct 20 16:52:02 2028 GMT39464* issuer: CN=minica root ca 010aed39465* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439466* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439467* subjectAltName: "test.foo" matches cert's "test.foo"39468* OpenSSL verify result: 1339469* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39470* closing connection #039471curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39472More details here: https://curl.se/docs/sslcerts.html3947339474curl failed to verify the legitimacy of the server and therefore could not39475establish a secure connection to it. To learn more about this situation and39476how to fix it, please visit the webpage mentioned above.39477* Host test.foo:443 was resolved.39478* IPv6: 2001:db8:1::339479* IPv4: 192.168.1.339480* Trying [2001:db8:1::3]:443...39481* ALPN: curl offers h2,http/1.139482} [5 bytes data]39483* TLSv1.3 (OUT), TLS handshake, Client hello (1):39484} [1552 bytes data]39485* SSL Trust Anchors:39486* OpenSSL default paths (fallback)39487{ [5 bytes data]39488* TLSv1.3 (IN), TLS handshake, Server hello (2):39489{ [1210 bytes data]39490* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39491{ [1 bytes data]39492* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39493{ [19 bytes data]39494* TLSv1.3 (IN), TLS handshake, Certificate (11):39495{ [1010 bytes data]39496* TLSv1.3 (IN), TLS handshake, CERT verify (15):39497{ [111 bytes data]39498* TLSv1.3 (IN), TLS handshake, Finished (20):39499{ [52 bytes data]39500* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39501} [1 bytes data]39502* TLSv1.3 (OUT), TLS handshake, Finished (20):39503} [52 bytes data]39504* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39505* ALPN: server accepted h239506* Server certificate:39507* subject: CN=test.foo39508* start date: Sep 20 16:52:02 2026 GMT39509* expire date: Oct 20 16:52:02 2028 GMT39510* issuer: CN=minica root ca 010aed39511* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439512* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439513* subjectAltName: "test.foo" matches cert's "test.foo"39514* OpenSSL verify result: 1339515* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39516* closing connection #039517curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39518More details here: https://curl.se/docs/sslcerts.html3951939520curl failed to verify the legitimacy of the server and therefore could not39521establish a secure connection to it. To learn more about this situation and39522how to fix it, please visit the webpage mentioned above.39523* Trying [2001:db8:1::3]:443...39524* Host test.foo:443 was resolved.39525* IPv6: 2001:db8:1::339526* IPv4: 192.168.1.339527* ALPN: curl offers h2,http/1.139528} [5 bytes data]39529* TLSv1.3 (OUT), TLS handshake, Client hello (1):39530} [1552 bytes data]39531* SSL Trust Anchors:39532* OpenSSL default paths (fallback)39533{ [5 bytes data]39534* TLSv1.3 (IN), TLS handshake, Server hello (2):39535{ [1210 bytes data]39536* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39537{ [1 bytes data]39538* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39539{ [19 bytes data]39540* TLSv1.3 (IN), TLS handshake, Certificate (11):39541{ [1010 bytes data]39542* TLSv1.3 (IN), TLS handshake, CERT verify (15):39543{ [111 bytes data]39544* TLSv1.3 (IN), TLS handshake, Finished (20):39545{ [52 bytes data]39546* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39547} [1 bytes data]39548* TLSv1.3 (OUT), TLS handshake, Finished (20):39549} [52 bytes data]39550* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39551* ALPN: server accepted h239552* Server certificate:39553* subject: CN=test.foo39554* start date: Sep 20 16:52:02 2026 GMT39555* expire date: Oct 20 16:52:02 2028 GMT39556* issuer: CN=minica root ca 010aed39557* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439558* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439559* subjectAltName: "test.foo" matches cert's "test.foo"39560* OpenSSL verify result: 1339561* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39562* closing connection #039563curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39564More details here: https://curl.se/docs/sslcerts.html3956539566curl failed to verify the legitimacy of the server and therefore could not39567establish a secure connection to it. To learn more about this situation and39568how to fix it, please visit the webpage mentioned above.39569* Host test.foo:443 was resolved.39570* IPv6: 2001:db8:1::339571* IPv4: 192.168.1.339572* Trying [2001:db8:1::3]:443...39573* ALPN: curl offers h2,http/1.139574} [5 bytes data]39575* TLSv1.3 (OUT), TLS handshake, Client hello (1):39576} [1552 bytes data]39577* SSL Trust Anchors:39578* OpenSSL default paths (fallback)39579{ [5 bytes data]39580* TLSv1.3 (IN), TLS handshake, Server hello (2):39581{ [1210 bytes data]39582* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39583{ [1 bytes data]39584* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39585{ [19 bytes data]39586* TLSv1.3 (IN), TLS handshake, Certificate (11):39587{ [1010 bytes data]39588* TLSv1.3 (IN), TLS handshake, CERT verify (15):39589{ [111 bytes data]39590* TLSv1.3 (IN), TLS handshake, Finished (20):39591{ [52 bytes data]39592* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39593} [1 bytes data]39594* TLSv1.3 (OUT), TLS handshake, Finished (20):39595} [52 bytes data]39596* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39597* ALPN: server accepted h239598* Server certificate:39599* subject: CN=test.foo39600* start date: Sep 20 16:52:02 2026 GMT39601* expire date: Oct 20 16:52:02 2028 GMT39602* issuer: CN=minica root ca 010aed39603* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439604* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439605* subjectAltName: "test.foo" matches cert's "test.foo"39606* OpenSSL verify result: 1339607* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39608* closing connection #039609curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39610More details here: https://curl.se/docs/sslcerts.html3961139612curl failed to verify the legitimacy of the server and therefore could not39613establish a secure connection to it. To learn more about this situation and39614how to fix it, please visit the webpage mentioned above.39615* Host test.foo:443 was resolved.39616* IPv6: 2001:db8:1::339617* IPv4: 192.168.1.339618* Trying [2001:db8:1::3]:443...39619* ALPN: curl offers h2,http/1.139620} [5 bytes data]39621* TLSv1.3 (OUT), TLS handshake, Client hello (1):39622} [1552 bytes data]39623* SSL Trust Anchors:39624* OpenSSL default paths (fallback)39625{ [5 bytes data]39626* TLSv1.3 (IN), TLS handshake, Server hello (2):39627{ [1210 bytes data]39628* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39629{ [1 bytes data]39630* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39631{ [19 bytes data]39632* TLSv1.3 (IN), TLS handshake, Certificate (11):39633{ [1010 bytes data]39634* TLSv1.3 (IN), TLS handshake, CERT verify (15):39635{ [112 bytes data]39636* TLSv1.3 (IN), TLS handshake, Finished (20):39637{ [52 bytes data]39638* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39639} [1 bytes data]39640* TLSv1.3 (OUT), TLS handshake, Finished (20):39641} [52 bytes data]39642* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39643* ALPN: server accepted h239644* Server certificate:39645* subject: CN=test.foo39646* start date: Sep 20 16:52:02 2026 GMT39647* expire date: Oct 20 16:52:02 2028 GMT39648* issuer: CN=minica root ca 010aed39649* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439650* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439651* subjectAltName: "test.foo" matches cert's "test.foo"39652* OpenSSL verify result: 1339653* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39654* closing connection #039655curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39656More details here: https://curl.se/docs/sslcerts.html3965739658curl failed to verify the legitimacy of the server and therefore could not39659establish a secure connection to it. To learn more about this situation and39660how to fix it, please visit the webpage mentioned above.39661client # [1417202.927481] client systemd[1]: Starting Cleanup of Temporary Directories...39662client # [1417203.058217] client systemd[1]: systemd-tmpfiles-clean.service: Deactivated successfully.39663client # [1417203.058657] client systemd[1]: Finished Cleanup of Temporary Directories.39664* Host test.foo:443 was resolved.39665* IPv6: 2001:db8:1::339666* IPv4: 192.168.1.339667* Trying [2001:db8:1::3]:443...39668* ALPN: curl offers h2,http/1.139669} [5 bytes data]39670* TLSv1.3 (OUT), TLS handshake, Client hello (1):39671} [1552 bytes data]39672* SSL Trust Anchors:39673* OpenSSL default paths (fallback)39674{ [5 bytes data]39675* TLSv1.3 (IN), TLS handshake, Server hello (2):39676{ [1210 bytes data]39677* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39678{ [1 bytes data]39679* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39680{ [19 bytes data]39681* TLSv1.3 (IN), TLS handshake, Certificate (11):39682{ [1010 bytes data]39683* TLSv1.3 (IN), TLS handshake, CERT verify (15):39684{ [112 bytes data]39685* TLSv1.3 (IN), TLS handshake, Finished (20):39686{ [52 bytes data]39687* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39688} [1 bytes data]39689* TLSv1.3 (OUT), TLS handshake, Finished (20):39690} [52 bytes data]39691* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39692* ALPN: server accepted h239693* Server certificate:39694* subject: CN=test.foo39695* start date: Sep 20 16:52:02 2026 GMT39696* expire date: Oct 20 16:52:02 2028 GMT39697* issuer: CN=minica root ca 010aed39698* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439699* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439700* subjectAltName: "test.foo" matches cert's "test.foo"39701* OpenSSL verify result: 1339702* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39703* closing connection #039704curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39705More details here: https://curl.se/docs/sslcerts.html3970639707curl failed to verify the legitimacy of the server and therefore could not39708establish a secure connection to it. To learn more about this situation and39709how to fix it, please visit the webpage mentioned above.39710ca # [1417203.639918] ca systemd[1]: Starting Cleanup of Temporary Directories...39711ca # [1417203.749319] ca systemd[1]: systemd-tmpfiles-clean.service: Deactivated successfully.39712ca # [1417203.749645] ca systemd[1]: Finished Cleanup of Temporary Directories.39713* Host test.foo:443 was resolved.39714* IPv6: 2001:db8:1::339715* IPv4: 192.168.1.339716* Trying [2001:db8:1::3]:443...39717* ALPN: curl offers h2,http/1.139718} [5 bytes data]39719* TLSv1.3 (OUT), TLS handshake, Client hello (1):39720} [1552 bytes data]39721* SSL Trust Anchors:39722* OpenSSL default paths (fallback)39723{ [5 bytes data]39724* TLSv1.3 (IN), TLS handshake, Server hello (2):39725{ [1210 bytes data]39726* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39727{ [1 bytes data]39728* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39729{ [19 bytes data]39730* TLSv1.3 (IN), TLS handshake, Certificate (11):39731{ [1010 bytes data]39732* TLSv1.3 (IN), TLS handshake, CERT verify (15):39733{ [112 bytes data]39734* TLSv1.3 (IN), TLS handshake, Finished (20):39735{ [52 bytes data]39736* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39737} [1 bytes data]39738* TLSv1.3 (OUT), TLS handshake, Finished (20):39739} [52 bytes data]39740* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39741* ALPN: server accepted h239742* Server certificate:39743* subject: CN=test.foo39744* start date: Sep 20 16:52:02 2026 GMT39745* expire date: Oct 20 16:52:02 2028 GMT39746* issuer: CN=minica root ca 010aed39747* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439748* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439749* subjectAltName: "test.foo" matches cert's "test.foo"39750* OpenSSL verify result: 1339751* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39752* closing connection #039753curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39754More details here: https://curl.se/docs/sslcerts.html3975539756curl failed to verify the legitimacy of the server and therefore could not39757establish a secure connection to it. To learn more about this situation and39758how to fix it, please visit the webpage mentioned above.39759* Host test.foo:443 was resolved.39760* IPv6: 2001:db8:1::339761* IPv4: 192.168.1.339762* Trying [2001:db8:1::3]:443...39763* ALPN: curl offers h2,http/1.139764} [5 bytes data]39765* TLSv1.3 (OUT), TLS handshake, Client hello (1):39766} [1552 bytes data]39767* SSL Trust Anchors:39768* OpenSSL default paths (fallback)39769{ [5 bytes data]39770* TLSv1.3 (IN), TLS handshake, Server hello (2):39771{ [1210 bytes data]39772* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39773{ [1 bytes data]39774* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39775{ [19 bytes data]39776* TLSv1.3 (IN), TLS handshake, Certificate (11):39777{ [1010 bytes data]39778* TLSv1.3 (IN), TLS handshake, CERT verify (15):39779{ [111 bytes data]39780* TLSv1.3 (IN), TLS handshake, Finished (20):39781{ [52 bytes data]39782* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39783} [1 bytes data]39784* TLSv1.3 (OUT), TLS handshake, Finished (20):39785} [52 bytes data]39786* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39787* ALPN: server accepted h239788* Server certificate:39789* subject: CN=test.foo39790* start date: Sep 20 16:52:02 2026 GMT39791* expire date: Oct 20 16:52:02 2028 GMT39792* issuer: CN=minica root ca 010aed39793* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439794* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439795* subjectAltName: "test.foo" matches cert's "test.foo"39796* OpenSSL verify result: 1339797* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39798* closing connection #039799curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39800More details here: https://curl.se/docs/sslcerts.html3980139802curl failed to verify the legitimacy of the server and therefore could not39803establish a secure connection to it. To learn more about this situation and39804how to fix it, please visit the webpage mentioned above.39805* Host test.foo:443 was resolved.39806* IPv6: 2001:db8:1::339807* IPv4: 192.168.1.339808* Trying [2001:db8:1::3]:443...39809* ALPN: curl offers h2,http/1.139810} [5 bytes data]39811* TLSv1.3 (OUT), TLS handshake, Client hello (1):39812} [1552 bytes data]39813* SSL Trust Anchors:39814* OpenSSL default paths (fallback)39815{ [5 bytes data]39816* TLSv1.3 (IN), TLS handshake, Server hello (2):39817{ [1210 bytes data]39818* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39819{ [1 bytes data]39820* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39821{ [19 bytes data]39822* TLSv1.3 (IN), TLS handshake, Certificate (11):39823{ [1010 bytes data]39824* TLSv1.3 (IN), TLS handshake, CERT verify (15):39825{ [110 bytes data]39826* TLSv1.3 (IN), TLS handshake, Finished (20):39827{ [52 bytes data]39828* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39829} [1 bytes data]39830* TLSv1.3 (OUT), TLS handshake, Finished (20):39831} [52 bytes data]39832* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39833* ALPN: server accepted h239834* Server certificate:39835* subject: CN=test.foo39836* start date: Sep 20 16:52:02 2026 GMT39837* expire date: Oct 20 16:52:02 2028 GMT39838* issuer: CN=minica root ca 010aed39839* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439840* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439841* subjectAltName: "test.foo" matches cert's "test.foo"39842* OpenSSL verify result: 1339843* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39844* closing connection #039845curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39846More details here: https://curl.se/docs/sslcerts.html3984739848curl failed to verify the legitimacy of the server and therefore could not39849establish a secure connection to it. To learn more about this situation and39850how to fix it, please visit the webpage mentioned above.39851* Host test.foo:443 was resolved.39852* IPv6: 2001:db8:1::339853* IPv4: 192.168.1.339854* Trying [2001:db8:1::3]:443...39855* ALPN: curl offers h2,http/1.139856} [5 bytes data]39857* TLSv1.3 (OUT), TLS handshake, Client hello (1):39858} [1552 bytes data]39859* SSL Trust Anchors:39860* OpenSSL default paths (fallback)39861{ [5 bytes data]39862* TLSv1.3 (IN), TLS handshake, Server hello (2):39863{ [1210 bytes data]39864* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39865{ [1 bytes data]39866* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39867{ [19 bytes data]39868* TLSv1.3 (IN), TLS handshake, Certificate (11):39869{ [1010 bytes data]39870* TLSv1.3 (IN), TLS handshake, CERT verify (15):39871{ [111 bytes data]39872* TLSv1.3 (IN), TLS handshake, Finished (20):39873{ [52 bytes data]39874* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39875} [1 bytes data]39876* TLSv1.3 (OUT), TLS handshake, Finished (20):39877} [52 bytes data]39878* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39879* ALPN: server accepted h239880* Server certificate:39881* subject: CN=test.foo39882* start date: Sep 20 16:52:02 2026 GMT39883* expire date: Oct 20 16:52:02 2028 GMT39884* issuer: CN=minica root ca 010aed39885* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439886* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439887* subjectAltName: "test.foo" matches cert's "test.foo"39888* OpenSSL verify result: 1339889* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39890* closing connection #039891curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39892More details here: https://curl.se/docs/sslcerts.html3989339894curl failed to verify the legitimacy of the server and therefore could not39895establish a secure connection to it. To learn more about this situation and39896how to fix it, please visit the webpage mentioned above.39897server # [1417207.820906] server systemd[1]: Starting Cleanup of Temporary Directories...39898server # [1417207.932017] server systemd[1]: systemd-tmpfiles-clean.service: Deactivated successfully.39899server # [1417207.932384] server systemd[1]: Finished Cleanup of Temporary Directories.39900* Host test.foo:443 was resolved.39901* IPv6: 2001:db8:1::339902* IPv4: 192.168.1.339903* Trying [2001:db8:1::3]:443...39904* ALPN: curl offers h2,http/1.139905} [5 bytes data]39906* TLSv1.3 (OUT), TLS handshake, Client hello (1):39907} [1552 bytes data]39908* SSL Trust Anchors:39909* OpenSSL default paths (fallback)39910{ [5 bytes data]39911* TLSv1.3 (IN), TLS handshake, Server hello (2):39912{ [1210 bytes data]39913* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39914{ [1 bytes data]39915* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39916{ [19 bytes data]39917* TLSv1.3 (IN), TLS handshake, Certificate (11):39918{ [1010 bytes data]39919* TLSv1.3 (IN), TLS handshake, CERT verify (15):39920{ [110 bytes data]39921* TLSv1.3 (IN), TLS handshake, Finished (20):39922{ [52 bytes data]39923* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39924} [1 bytes data]39925* TLSv1.3 (OUT), TLS handshake, Finished (20):39926} [52 bytes data]39927* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39928* ALPN: server accepted h239929* Server certificate:39930* subject: CN=test.foo39931* start date: Sep 20 16:52:02 2026 GMT39932* expire date: Oct 20 16:52:02 2028 GMT39933* issuer: CN=minica root ca 010aed39934* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439935* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439936* subjectAltName: "test.foo" matches cert's "test.foo"39937* OpenSSL verify result: 1339938* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39939* closing connection #039940curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39941More details here: https://curl.se/docs/sslcerts.html3994239943curl failed to verify the legitimacy of the server and therefore could not39944establish a secure connection to it. To learn more about this situation and39945how to fix it, please visit the webpage mentioned above.39946* Host test.foo:443 was resolved.39947* IPv6: 2001:db8:1::339948* IPv4: 192.168.1.339949* Trying [2001:db8:1::3]:443...39950* ALPN: curl offers h2,http/1.139951} [5 bytes data]39952* TLSv1.3 (OUT), TLS handshake, Client hello (1):39953} [1552 bytes data]39954* SSL Trust Anchors:39955* OpenSSL default paths (fallback)39956{ [5 bytes data]39957* TLSv1.3 (IN), TLS handshake, Server hello (2):39958{ [1210 bytes data]39959* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):39960{ [1 bytes data]39961* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):39962{ [19 bytes data]39963* TLSv1.3 (IN), TLS handshake, Certificate (11):39964{ [1010 bytes data]39965* TLSv1.3 (IN), TLS handshake, CERT verify (15):39966{ [110 bytes data]39967* TLSv1.3 (IN), TLS handshake, Finished (20):39968{ [52 bytes data]39969* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):39970} [1 bytes data]39971* TLSv1.3 (OUT), TLS handshake, Finished (20):39972} [52 bytes data]39973* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey39974* ALPN: server accepted h239975* Server certificate:39976* subject: CN=test.foo39977* start date: Sep 20 16:52:02 2026 GMT39978* expire date: Oct 20 16:52:02 2028 GMT39979* issuer: CN=minica root ca 010aed39980* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439981* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38439982* subjectAltName: "test.foo" matches cert's "test.foo"39983* OpenSSL verify result: 1339984* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39985* closing connection #039986curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)39987More details here: https://curl.se/docs/sslcerts.html3998839989curl failed to verify the legitimacy of the server and therefore could not39990establish a secure connection to it. To learn more about this situation and39991how to fix it, please visit the webpage mentioned above.39992* Host test.foo:443 was resolved.39993* IPv6: 2001:db8:1::339994* IPv4: 192.168.1.339995* Trying [2001:db8:1::3]:443...39996* ALPN: curl offers h2,http/1.139997} [5 bytes data]39998* TLSv1.3 (OUT), TLS handshake, Client hello (1):39999} [1552 bytes data]40000* SSL Trust Anchors:40001* OpenSSL default paths (fallback)40002{ [5 bytes data]40003* TLSv1.3 (IN), TLS handshake, Server hello (2):40004{ [1210 bytes data]40005* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):40006{ [1 bytes data]40007* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):40008{ [19 bytes data]40009* TLSv1.3 (IN), TLS handshake, Certificate (11):40010{ [1010 bytes data]40011* TLSv1.3 (IN), TLS handshake, CERT verify (15):40012{ [112 bytes data]40013* TLSv1.3 (IN), TLS handshake, Finished (20):40014{ [52 bytes data]40015* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):40016} [1 bytes data]40017* TLSv1.3 (OUT), TLS handshake, Finished (20):40018} [52 bytes data]40019* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey40020* ALPN: server accepted h240021* Server certificate:40022* subject: CN=test.foo40023* start date: Sep 20 16:52:02 2026 GMT40024* expire date: Oct 20 16:52:02 2028 GMT40025* issuer: CN=minica root ca 010aed40026* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38440027* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38440028* subjectAltName: "test.foo" matches cert's "test.foo"40029* OpenSSL verify result: 1340030* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)40031* closing connection #040032curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)40033More details here: https://curl.se/docs/sslcerts.html4003440035curl failed to verify the legitimacy of the server and therefore could not40036establish a secure connection to it. To learn more about this situation and40037how to fix it, please visit the webpage mentioned above.40038* Host test.foo:443 was resolved.40039* IPv6: 2001:db8:1::340040* IPv4: 192.168.1.340041* Trying [2001:db8:1::3]:443...40042* ALPN: curl offers h2,http/1.140043} [5 bytes data]40044* TLSv1.3 (OUT), TLS handshake, Client hello (1):40045} [1552 bytes data]40046* SSL Trust Anchors:40047* OpenSSL default paths (fallback)40048{ [5 bytes data]40049* TLSv1.3 (IN), TLS handshake, Server hello (2):40050{ [1210 bytes data]40051* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):40052{ [1 bytes data]40053* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):40054{ [19 bytes data]40055* TLSv1.3 (IN), TLS handshake, Certificate (11):40056{ [1010 bytes data]40057* TLSv1.3 (IN), TLS handshake, CERT verify (15):40058{ [111 bytes data]40059* TLSv1.3 (IN), TLS handshake, Finished (20):40060{ [52 bytes data]40061* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):40062} [1 bytes data]40063* TLSv1.3 (OUT), TLS handshake, Finished (20):40064} [52 bytes data]40065* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey40066* ALPN: server accepted h240067* Server certificate:40068* subject: CN=test.foo40069* start date: Sep 20 16:52:02 2026 GMT40070* expire date: Oct 20 16:52:02 2028 GMT40071* issuer: CN=minica root ca 010aed40072* Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38440073* Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA38440074* subjectAltName: "test.foo" matches cert's "test.foo"40075* OpenSSL verify result: 1340076* SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)40077* closing connection #040078curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19)40079More details here: https://curl.se/docs/sslcerts.html4008040081curl failed to verify the legitimacy of the server and therefore could not40082establish a secure connection to it. To learn more about this situation and40083how to fix it, please visit the webpage mentioned above.40084!!! Traceback (most recent call last):40085!!! File "<string>", line 13, in <module>40086!!! client.wait_until_succeeds("curl -v https://test.foo")40087!!! 40088!!! RequestedAssertionFailed: action timed out after 900.24 seconds (timeout=900.0)40089cleanup40090kill NspawnMachine (pid 52)40091kill NspawnMachine (pid 54)40092Container ca terminated by signal KILL.40093kill NspawnMachine (pid 57)40094Container client terminated by signal KILL.40095Container server terminated by signal KILL.40096(finished: cleanup, in 0.49 seconds)