these 35 derivations will be built: /nix/store/n3jzk6k0z3hrrr8i91ggmsqc7nzap3y2-system-path.drv /nix/store/6l50aald2ppcs0gkdhdxrq8ynkzfhw79-dbus-1.drv /nix/store/z4daj0ydl8arhm16qph6ycr1mrk6ckql-X-Restart-Triggers-dbus-broker.drv /nix/store/1a5lzp8x0r3hrixascn5rf3cg9jisbqw-unit-dbus-broker.service.drv /nix/store/mxrfv31y871c578zjrr8b94gj80si3qr-system-path.drv /nix/store/j7fmyyi3klzcimiq1kd9b3fzx82j0xa2-dbus-1.drv /nix/store/bkiqcbjr6mxd1g6617wkkvcskpaikqnz-X-Restart-Triggers-dbus-broker.drv /nix/store/465kpkkyksjq33d5x5ix68w5jx0pzj6f-unit-dbus-broker.service.drv /nix/store/jddyxwaqidsqhbhpld3jw8xnsammdycj-user-units.drv /nix/store/jc56zsw92znn8kc3nllxqf58ynl062aj-unit-dbus-broker.service.drv /nix/store/kaw4ps3l8m037k88qbkladws5zhkr8zp-system-units.drv /nix/store/s75k6h7ind4i6xbh1fpsx0q6jlw50kxr-etc.drv /nix/store/3xnh7qvcmgywkhibpaxzwbji7aa42scn-activate.drv /nix/store/nirr415w5j62q0z5h0rsbvw0hqd1apl9-user-units.drv /nix/store/a8jcz3srd1yndh7ayxlwlm94alvv0x8f-unit-dbus-broker.service.drv /nix/store/r728scqsl6l99hdylq93dhr22shw2fqj-system-units.drv /nix/store/nb8rlaplidlg81yq6c29lhmkkagwm4m9-etc.drv /nix/store/6j4lj79gk123w4wiak52ysgsqa2ayycx-activate.drv /nix/store/7rsfcrpi1xkbzc8r28gqp3cyccrz8qhc-nixos-system-server-test.drv /nix/store/4qps056ly4869iac0xarp211y42jx2w9-closure-info.drv /nix/store/a9c8c9fb4i5w7nvj7vy7fjkwy3yc185v-system-path.drv /nix/store/jc6hjhrm6gb3a84wmr5rc867qscfpgm6-dbus-1.drv /nix/store/x30clg9m3r6y7inpambhr40iir47bkwn-X-Restart-Triggers-dbus-broker.drv /nix/store/m0gppg6lz9h2ygy4xb0d5m96j74gnvdz-unit-dbus-broker.service.drv /nix/store/ka9x61vr2x0vdiq7b4l4b26rvp55cv22-system-units.drv /nix/store/l034faa1rx1bhn12m0gdy1nng41raywn-unit-dbus-broker.service.drv /nix/store/qz2ssyfmgsc287csv08cisdyp8kss0pj-user-units.drv /nix/store/j6l1frf7mmh33abpl18yxq596q6r8fhi-etc.drv /nix/store/hwsy9bh8rmi3ylq5whs4bnllf95vbpm9-activate.drv /nix/store/lxjyyysx36p1yml2sifm47sr9qfwwfdb-nixos-system-ca-test.drv /nix/store/a16s03fwy1z1pqsahmlqgy5w0qakqphs-closure-info.drv /nix/store/h8rshsmgwvgizmnl81j2ipb0iy79634s-nixos-system-client-test.drv /nix/store/az6nx34vrrz29mr448dgbllr7ijwdnjs-closure-info.drv /nix/store/i0002lznk0jacrhlvwap2q1ggkbmlmvv-nixos-test-driver-certificates.drv /nix/store/96plwkkc91wqvbi35pip7fyrja86drs6-container-test-run-certificates.drv building '/nix/store/a9c8c9fb4i5w7nvj7vy7fjkwy3yc185v-system-path.drv' building '/nix/store/mxrfv31y871c578zjrr8b94gj80si3qr-system-path.drv' building '/nix/store/n3jzk6k0z3hrrr8i91ggmsqc7nzap3y2-system-path.drv' system-path> structuredAttrs is enabled system-path> created 1817 symlinks in user environment system-path> structuredAttrs is enabled system-path> structuredAttrs is enabled building '/nix/store/jc6hjhrm6gb3a84wmr5rc867qscfpgm6-dbus-1.drv' system-path> created 1817 symlinks in user environment system-path> created 1817 symlinks in user environment building '/nix/store/x30clg9m3r6y7inpambhr40iir47bkwn-X-Restart-Triggers-dbus-broker.drv' building '/nix/store/6l50aald2ppcs0gkdhdxrq8ynkzfhw79-dbus-1.drv' building '/nix/store/j7fmyyi3klzcimiq1kd9b3fzx82j0xa2-dbus-1.drv' building '/nix/store/l034faa1rx1bhn12m0gdy1nng41raywn-unit-dbus-broker.service.drv' building '/nix/store/m0gppg6lz9h2ygy4xb0d5m96j74gnvdz-unit-dbus-broker.service.drv' building '/nix/store/bkiqcbjr6mxd1g6617wkkvcskpaikqnz-X-Restart-Triggers-dbus-broker.drv' building '/nix/store/z4daj0ydl8arhm16qph6ycr1mrk6ckql-X-Restart-Triggers-dbus-broker.drv' building '/nix/store/ka9x61vr2x0vdiq7b4l4b26rvp55cv22-system-units.drv' building '/nix/store/qz2ssyfmgsc287csv08cisdyp8kss0pj-user-units.drv' building '/nix/store/1a5lzp8x0r3hrixascn5rf3cg9jisbqw-unit-dbus-broker.service.drv' building '/nix/store/465kpkkyksjq33d5x5ix68w5jx0pzj6f-unit-dbus-broker.service.drv' building '/nix/store/a8jcz3srd1yndh7ayxlwlm94alvv0x8f-unit-dbus-broker.service.drv' building '/nix/store/jc56zsw92znn8kc3nllxqf58ynl062aj-unit-dbus-broker.service.drv' building '/nix/store/r728scqsl6l99hdylq93dhr22shw2fqj-system-units.drv' building '/nix/store/jddyxwaqidsqhbhpld3jw8xnsammdycj-user-units.drv' building '/nix/store/nirr415w5j62q0z5h0rsbvw0hqd1apl9-user-units.drv' building '/nix/store/kaw4ps3l8m037k88qbkladws5zhkr8zp-system-units.drv' building '/nix/store/j6l1frf7mmh33abpl18yxq596q6r8fhi-etc.drv' building '/nix/store/hwsy9bh8rmi3ylq5whs4bnllf95vbpm9-activate.drv' building '/nix/store/nb8rlaplidlg81yq6c29lhmkkagwm4m9-etc.drv' building '/nix/store/s75k6h7ind4i6xbh1fpsx0q6jlw50kxr-etc.drv' building '/nix/store/lxjyyysx36p1yml2sifm47sr9qfwwfdb-nixos-system-ca-test.drv' nixos-system-ca-test> structuredAttrs is enabled building '/nix/store/6j4lj79gk123w4wiak52ysgsqa2ayycx-activate.drv' building '/nix/store/a16s03fwy1z1pqsahmlqgy5w0qakqphs-closure-info.drv' building '/nix/store/3xnh7qvcmgywkhibpaxzwbji7aa42scn-activate.drv' building '/nix/store/7rsfcrpi1xkbzc8r28gqp3cyccrz8qhc-nixos-system-server-test.drv' closure-info> structuredAttrs is enabled nixos-system-server-test> structuredAttrs is enabled building '/nix/store/h8rshsmgwvgizmnl81j2ipb0iy79634s-nixos-system-client-test.drv' building '/nix/store/4qps056ly4869iac0xarp211y42jx2w9-closure-info.drv' nixos-system-client-test> structuredAttrs is enabled building '/nix/store/az6nx34vrrz29mr448dgbllr7ijwdnjs-closure-info.drv' closure-info> structuredAttrs is enabled closure-info> structuredAttrs is enabled building '/nix/store/i0002lznk0jacrhlvwap2q1ggkbmlmvv-nixos-test-driver-certificates.drv' nixos-test-driver-certificates> Running type check (enable/disable: config.skipTypeCheck) nixos-test-driver-certificates> See https://nixos.org/manual/nixos/stable/#test-opt-skipTypeCheck nixos-test-driver-certificates> Success: no issues found in 1 source file building '/nix/store/96plwkkc91wqvbi35pip7fyrja86drs6-container-test-run-certificates.drv' on 'ssh-ng://builder@build-x86-01.clan.lol' building '/nix/store/96plwkkc91wqvbi35pip7fyrja86drs6-container-test-run-certificates.drv' container-test-run-certificates> additionally exposed symbols: container-test-run-certificates> ca, client, server, container-test-run-certificates> start_all, machines, driver, Machine, wait_for_signal container-test-run-certificates> Starting ca container-test-run-certificates> Starting client container-test-run-certificates> Starting server container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> <<< NixOS Stage 2 >>> container-test-run-certificates> container-test-run-certificates> booting system configuration /nix/store/4r04jrsqaibid1h61w3h6g3fr6jdk0lq-nixos-system-ca-test container-test-run-certificates> running activation script... container-test-run-certificates> setting up /etc... container-test-run-certificates> 2: host0@if3: mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000 container-test-run-certificates> link/ether 42:06:76:42:a9:8d brd ff:ff:ff:ff:ff:ff link-netnsid 0 container-test-run-certificates> setting up age secrets... container-test-run-certificates> starting systemd... container-test-run-certificates> systemd 260.4 running in system mode (+PAM +AUDIT -SELINUX +APPARMOR +IMA +IPE +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS +FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 +PWQUALITY +P11KIT +QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD +BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP +LIBARCHIVE) container-test-run-certificates> Detected virtualization systemd-nspawn. container-test-run-certificates> Detected architecture x86-64. container-test-run-certificates> Detected first boot. container-test-run-certificates> Initializing machine ID from container UUID. container-test-run-certificates> Applying preset policy. container-test-run-certificates> Populated /etc with preset unit settings. container-test-run-certificates> Queued start job for default target Multi-User System. container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> <<< Welcome to NixOS test (x86_64) - console >>> container-test-run-certificates> + systemd-run /bin/sh -c '/nix/store/833invqvsk7anqnqrki5hqncrcllj825-coreutils-9.11/bin/sleep 999999999 && echo 73aab692-ab12-4382-a848-a537dbf393a9' container-test-run-certificates> Running as unit: run-p434-i15479244.service; invocation ID: 6a483cd521b14473b2c7824a9ceb194c container-test-run-certificates> To attach to container ca run on the same machine that runs the test: container-test-run-certificates> sudo nsenter --user --target $(\pgrep -f '^/bin/sh.*73aab692-ab12-4382-a848-a537dbf393a9') --mount --uts --ipc --net --pid --cgroup /bin/sh -c bash container-test-run-certificates> container-test-run-certificates> To inject external network and continue test, run: container-test-run-certificates> sudo /nix/store/9r02ykx9y35lf4gk6gc30gnag1y8ncp7-python3-3.13.15/bin/python3.13 /nix/store/7pcwg3l52sff9p90k03qhavpaqk1zhfi-test-driver-0.0.1/lib/python3.13/site-packages/test_driver/inject_network.py 73aab692-ab12-4382-a848-a537dbf393a9 container-test-run-certificates> container-test-run-certificates> <<< NixOS Stage 2 >>> container-test-run-certificates> container-test-run-certificates> booting system configuration /nix/store/mi8w7s1bpzjlg1dzpnanfbbh4zgsl4hi-nixos-system-client-test container-test-run-certificates> running activation script... container-test-run-certificates> setting up /etc... container-test-run-certificates> 2: host0@if5: mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000 container-test-run-certificates> link/ether 2a:42:35:28:b1:2f brd ff:ff:ff:ff:ff:ff link-netnsid 0 container-test-run-certificates> setting up age secrets... container-test-run-certificates> starting systemd... container-test-run-certificates> systemd 260.4 running in system mode (+PAM +AUDIT -SELINUX +APPARMOR +IMA +IPE +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS +FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 +PWQUALITY +P11KIT +QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD +BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP +LIBARCHIVE) container-test-run-certificates> Detected virtualization systemd-nspawn. container-test-run-certificates> Detected architecture x86-64. container-test-run-certificates> Detected first boot. container-test-run-certificates> Initializing machine ID from container UUID. container-test-run-certificates> Applying preset policy. container-test-run-certificates> Populated /etc with preset unit settings. container-test-run-certificates> Queued start job for default target Multi-User System. container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> <<< Welcome to NixOS test (x86_64) - console >>> container-test-run-certificates> + systemd-run /bin/sh -c '/nix/store/833invqvsk7anqnqrki5hqncrcllj825-coreutils-9.11/bin/sleep 999999999 && echo 891b70ac-1478-4960-8ae3-ce4bc39a2b2e' container-test-run-certificates> Running as unit: run-p303-i15479274.service; invocation ID: 68ca5a2298574010a3a4b7a29f0ac72c container-test-run-certificates> To attach to container client run on the same machine that runs the test: container-test-run-certificates> sudo nsenter --user --target $(\pgrep -f '^/bin/sh.*891b70ac-1478-4960-8ae3-ce4bc39a2b2e') --mount --uts --ipc --net --pid --cgroup /bin/sh -c bash container-test-run-certificates> container-test-run-certificates> To inject external network and continue test, run: container-test-run-certificates> sudo /nix/store/9r02ykx9y35lf4gk6gc30gnag1y8ncp7-python3-3.13.15/bin/python3.13 /nix/store/7pcwg3l52sff9p90k03qhavpaqk1zhfi-test-driver-0.0.1/lib/python3.13/site-packages/test_driver/inject_network.py 891b70ac-1478-4960-8ae3-ce4bc39a2b2e container-test-run-certificates> container-test-run-certificates> <<< NixOS Stage 2 >>> container-test-run-certificates> container-test-run-certificates> booting system configuration /nix/store/gxlygxf7slagq3qsxjrr5h50wxfr1xv1-nixos-system-server-test container-test-run-certificates> running activation script... container-test-run-certificates> setting up /etc... container-test-run-certificates> 2: host0@if4: mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000 container-test-run-certificates> link/ether be:aa:dd:39:86:e7 brd ff:ff:ff:ff:ff:ff link-netnsid 0 container-test-run-certificates> setting up age secrets... container-test-run-certificates> starting systemd... container-test-run-certificates> systemd 260.4 running in system mode (+PAM +AUDIT -SELINUX +APPARMOR +IMA +IPE +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS +FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 +PWQUALITY +P11KIT +QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD +BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP +LIBARCHIVE) container-test-run-certificates> Detected virtualization systemd-nspawn. container-test-run-certificates> Detected architecture x86-64. container-test-run-certificates> Detected first boot. container-test-run-certificates> Initializing machine ID from container UUID. container-test-run-certificates> Applying preset policy. container-test-run-certificates> Populated /etc with preset unit settings. container-test-run-certificates> Queued start job for default target Multi-User System. container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> <<< Welcome to NixOS test (x86_64) - console >>> container-test-run-certificates> + systemd-run /bin/sh -c '/nix/store/833invqvsk7anqnqrki5hqncrcllj825-coreutils-9.11/bin/sleep 999999999 && echo ece55724-f722-41ec-b3be-73713a6a2708' container-test-run-certificates> Running as unit: run-p383-i15479284.service; invocation ID: b0cee2a913b3475dbf1e4c632fb57b19 container-test-run-certificates> To attach to container server run on the same machine that runs the test: container-test-run-certificates> sudo nsenter --user --target $(\pgrep -f '^/bin/sh.*ece55724-f722-41ec-b3be-73713a6a2708') --mount --uts --ipc --net --pid --cgroup /bin/sh -c bash container-test-run-certificates> container-test-run-certificates> To inject external network and continue test, run: container-test-run-certificates> sudo /nix/store/9r02ykx9y35lf4gk6gc30gnag1y8ncp7-python3-3.13.15/bin/python3.13 /nix/store/7pcwg3l52sff9p90k03qhavpaqk1zhfi-test-driver-0.0.1/lib/python3.13/site-packages/test_driver/inject_network.py ece55724-f722-41ec-b3be-73713a6a2708 container-test-run-certificates> + systemctl restart acme-order-renew-ca.foo.service container-test-run-certificates> + systemctl restart acme-test.foo.service container-test-run-certificates> client: waiting for success: curl -v https://test.foo container-test-run-certificates> + curl -v https://test.foo container-test-run-certificates> * Host test.foo:443 was resolved. container-test-run-certificates> * IPv6: (none) container-test-run-certificates> * IPv4: 192.168.1.3 container-test-run-certificates> * Trying 192.168.1.3:443... container-test-run-certificates> * ALPN: curl offers h2,http/1.1 container-test-run-certificates> } [5 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Client hello (1): container-test-run-certificates> } [1552 bytes data] container-test-run-certificates> * SSL Trust Anchors: container-test-run-certificates> * OpenSSL default paths (fallback) container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Server hello (2): container-test-run-certificates> { [1210 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS change cipher, Change cipher spec (1): container-test-run-certificates> { [1 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): container-test-run-certificates> { [19 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Certificate (11): container-test-run-certificates> { [1009 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, CERT verify (15): container-test-run-certificates> { [110 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Finished (20): container-test-run-certificates> { [52 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): container-test-run-certificates> } [1 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Finished (20): container-test-run-certificates> } [52 bytes data] container-test-run-certificates> * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey container-test-run-certificates> * ALPN: server accepted h2 container-test-run-certificates> * Server certificate: container-test-run-certificates> * subject: CN=test.foo container-test-run-certificates> * start date: Sep 22 05:15:52 2026 GMT container-test-run-certificates> * expire date: Oct 22 05:15:52 2028 GMT container-test-run-certificates> * issuer: CN=minica root ca 6d0af2 container-test-run-certificates> * Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * subjectAltName: "test.foo" matches cert's "test.foo" container-test-run-certificates> * OpenSSL verify result: 13 container-test-run-certificates> * SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> * closing connection #0 container-test-run-certificates> curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> More details here: https://curl.se/docs/sslcerts.html container-test-run-certificates> container-test-run-certificates> curl failed to verify the legitimacy of the server and therefore could not container-test-run-certificates> establish a secure connection to it. To learn more about this situation and container-test-run-certificates> how to fix it, please visit the webpage mentioned above. container-test-run-certificates> + curl -v https://test.foo container-test-run-certificates> * Host test.foo:443 was resolved. container-test-run-certificates> * IPv6: (none) container-test-run-certificates> * IPv4: 192.168.1.3 container-test-run-certificates> * Trying 192.168.1.3:443... container-test-run-certificates> * ALPN: curl offers h2,http/1.1 container-test-run-certificates> } [5 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Client hello (1): container-test-run-certificates> } [1552 bytes data] container-test-run-certificates> * SSL Trust Anchors: container-test-run-certificates> * OpenSSL default paths (fallback) container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Server hello (2): container-test-run-certificates> { [1210 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS change cipher, Change cipher spec (1): container-test-run-certificates> { [1 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): container-test-run-certificates> { [19 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Certificate (11): container-test-run-certificates> { [1009 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, CERT verify (15): container-test-run-certificates> { [112 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Finished (20): container-test-run-certificates> { [52 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): container-test-run-certificates> } [1 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Finished (20): container-test-run-certificates> } [52 bytes data] container-test-run-certificates> * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey container-test-run-certificates> * ALPN: server accepted h2 container-test-run-certificates> * Server certificate: container-test-run-certificates> * subject: CN=test.foo container-test-run-certificates> * start date: Sep 22 05:15:52 2026 GMT container-test-run-certificates> * expire date: Oct 22 05:15:52 2028 GMT container-test-run-certificates> * issuer: CN=minica root ca 6d0af2 container-test-run-certificates> * Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * subjectAltName: "test.foo" matches cert's "test.foo" container-test-run-certificates> * OpenSSL verify result: 13 container-test-run-certificates> * SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> * closing connection #0 container-test-run-certificates> curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> More details here: https://curl.se/docs/sslcerts.html container-test-run-certificates> container-test-run-certificates> curl failed to verify the legitimacy of the server and therefore could not container-test-run-certificates> establish a secure connection to it. To learn more about this situation and container-test-run-certificates> how to fix it, please visit the webpage mentioned above. container-test-run-certificates> + curl -v https://test.foo container-test-run-certificates> * Host test.foo:443 was resolved. container-test-run-certificates> * IPv6: (none) container-test-run-certificates> * IPv4: 192.168.1.3 container-test-run-certificates> * Trying 192.168.1.3:443... container-test-run-certificates> * ALPN: curl offers h2,http/1.1 container-test-run-certificates> } [5 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Client hello (1): container-test-run-certificates> } [1552 bytes data] container-test-run-certificates> * SSL Trust Anchors: container-test-run-certificates> * OpenSSL default paths (fallback) container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Server hello (2): container-test-run-certificates> { [1210 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS change cipher, Change cipher spec (1): container-test-run-certificates> { [1 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): container-test-run-certificates> { [19 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Certificate (11): container-test-run-certificates> { [1009 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, CERT verify (15): container-test-run-certificates> { [112 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Finished (20): container-test-run-certificates> { [52 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): container-test-run-certificates> } [1 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Finished (20): container-test-run-certificates> } [52 bytes data] container-test-run-certificates> * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey container-test-run-certificates> * ALPN: server accepted h2 container-test-run-certificates> * Server certificate: container-test-run-certificates> * subject: CN=test.foo container-test-run-certificates> * start date: Sep 22 05:15:52 2026 GMT container-test-run-certificates> * expire date: Oct 22 05:15:52 2028 GMT container-test-run-certificates> * issuer: CN=minica root ca 6d0af2 container-test-run-certificates> * Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * subjectAltName: "test.foo" matches cert's "test.foo" container-test-run-certificates> * OpenSSL verify result: 13 container-test-run-certificates> * SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> * closing connection #0 container-test-run-certificates> curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> More details here: https://curl.se/docs/sslcerts.html container-test-run-certificates> container-test-run-certificates> curl failed to verify the legitimacy of the server and therefore could not container-test-run-certificates> establish a secure connection to it. To learn more about this situation and container-test-run-certificates> how to fix it, please visit the webpage mentioned above. container-test-run-certificates> + curl -v https://test.foo container-test-run-certificates> * Host test.foo:443 was resolved. container-test-run-certificates> * IPv6: (none) container-test-run-certificates> * IPv4: 192.168.1.3 container-test-run-certificates> * Trying 192.168.1.3:443... container-test-run-certificates> * ALPN: curl offers h2,http/1.1 container-test-run-certificates> } [5 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Client hello (1): container-test-run-certificates> } [1552 bytes data] container-test-run-certificates> * SSL Trust Anchors: container-test-run-certificates> * OpenSSL default paths (fallback) container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Server hello (2): container-test-run-certificates> { [1210 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS change cipher, Change cipher spec (1): container-test-run-certificates> { [1 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): container-test-run-certificates> { [19 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Certificate (11): container-test-run-certificates> { [931 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, CERT verify (15): container-test-run-certificates> { [79 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Finished (20): container-test-run-certificates> { [52 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): container-test-run-certificates> } [1 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Finished (20): container-test-run-certificates> } [52 bytes data] container-test-run-certificates> * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey container-test-run-certificates> * ALPN: server accepted h2 container-test-run-certificates> * Server certificate: container-test-run-certificates> * subject: CN=test.foo container-test-run-certificates> * start date: Sep 22 05:15:06 2026 GMT container-test-run-certificates> * expire date: Dec 21 05:16:06 2026 GMT container-test-run-certificates> * issuer: CN=Clan Intermediate CA container-test-run-certificates> * Certificate level 0: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA256 container-test-run-certificates> * Certificate level 1: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA256 container-test-run-certificates> * Certificate level 2: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA256 container-test-run-certificates> * subjectAltName: "test.foo" matches cert's "test.foo" container-test-run-certificates> * OpenSSL verify result: 0 container-test-run-certificates> * SSL certificate verified via OpenSSL. container-test-run-certificates> * Established connection to test.foo (192.168.1.3 port 443) from 192.168.1.2 port 36186 container-test-run-certificates> % Total % Received % Xferd Average Speed Time Time Time Current container-test-run-certificates> Dload Upload Total Spent Left Speed container-test-run-certificates> 0 0 0 0 0 0 0 0 0* using HTTP/2 container-test-run-certificates> * [HTTP/2] [1] OPENED stream for https://test.foo/ container-test-run-certificates> * [HTTP/2] [1] [:method: GET] container-test-run-certificates> * [HTTP/2] [1] [:scheme: https] container-test-run-certificates> * [HTTP/2] [1] [:authority: test.foo] container-test-run-certificates> * [HTTP/2] [1] [:path: /] container-test-run-certificates> * [HTTP/2] [1] [user-agent: curl/8.22.0] container-test-run-certificates> * [HTTP/2] [1] [accept: */*] container-test-run-certificates> } [5 bytes data] container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> * Request completely sent off container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4): container-test-run-certificates> { [265 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4): container-test-run-certificates> { [265 bytes data] container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> { [5 bytes data] container-test-run-certificates> 100 20 100 20 0 0 939 0 0 container-test-run-certificates> * Connection #0 to host test.foo:443 left intact container-test-run-certificates> (finished: waiting for success: curl -v https://test.foo, in 3.17 seconds) container-test-run-certificates> + openssl s_client -connect test.foo:443 -servername test.foo container-test-run-certificates> + openssl x509 -text -noout container-test-run-certificates> Certificate: container-test-run-certificates> Data: container-test-run-certificates> Version: 3 (0x2) container-test-run-certificates> Serial Number: container-test-run-certificates> 62:95:25:78:d9:ef:41:78:fe:91:60:52:d5:a8:e3:1a container-test-run-certificates> Signature Algorithm: ecdsa-with-SHA256 container-test-run-certificates> Issuer: CN=Clan Intermediate CA container-test-run-certificates> Validity container-test-run-certificates> Not Before: Sep 22 05:15:06 2026 GMT container-test-run-certificates> Not After : Dec 21 05:16:06 2026 GMT container-test-run-certificates> Subject: CN=test.foo container-test-run-certificates> Subject Public Key Info: container-test-run-certificates> Public Key Algorithm: id-ecPublicKey container-test-run-certificates> Public-Key: (256 bit) container-test-run-certificates> pub: container-test-run-certificates> 04:fd:b5:dc:73:65:9d:8f:30:ac:19:fa:27:16:f5: container-test-run-certificates> 31:56:6a:83:e8:59:e6:e1:e3:32:45:9c:46:88:76: container-test-run-certificates> eb:13:26:88:0f:cc:da:e1:3a:6c:b7:98:02:16:55: container-test-run-certificates> f0:53:7e:7a:b0:4d:78:71:58:59:48:6c:d9:f3:d1: container-test-run-certificates> 3c:f5:a9:bb:e1 container-test-run-certificates> ASN1 OID: prime256v1 container-test-run-certificates> NIST CURVE: P-256 container-test-run-certificates> X509v3 extensions: container-test-run-certificates> X509v3 Key Usage: critical container-test-run-certificates> Digital Signature container-test-run-certificates> X509v3 Extended Key Usage: container-test-run-certificates> TLS Web Server Authentication, TLS Web Client Authentication container-test-run-certificates> X509v3 Subject Key Identifier: container-test-run-certificates> E0:D4:29:D3:A3:A9:D5:43:42:75:FF:C5:DB:93:31:AA:76:6C:0C:29 container-test-run-certificates> X509v3 Authority Key Identifier: container-test-run-certificates> 85:3F:57:27:A1:24:85:A3:F5:B8:75:53:3B:E2:FB:61:7C:0F:01:2B container-test-run-certificates> X509v3 Subject Alternative Name: container-test-run-certificates> DNS:test.foo container-test-run-certificates> 1.3.6.1.4.1.37476.9000.64.1: container-test-run-certificates> 0......acme.. container-test-run-certificates> Signature Algorithm: ecdsa-with-SHA256 container-test-run-certificates> Signature Value: container-test-run-certificates> 30:45:02:21:00:e3:ce:c1:5e:39:3b:0c:02:a8:bb:3f:95:f3: container-test-run-certificates> b0:b1:45:a0:e6:ad:be:c2:21:b4:60:f6:a3:dd:df:cf:0a:8d: container-test-run-certificates> f5:02:20:18:bf:98:fc:c4:d6:47:68:44:70:19:00:20:51:d5: container-test-run-certificates> d3:a3:07:eb:cf:b4:aa:8e:e4:ed:ff:c4:3a:1f:df:13:14 container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> post-build step Upload to niks3: ok time=2026-09-22T05:16:11.170Z level=INFO msg="Uploading 0 paths to niks3.clan.lol (1 already cached)" time=2026-09-22T05:16:11.549Z level=INFO msg="Uploading 1 narinfos" time=2026-09-22T05:16:11.864Z level=INFO msg="Upload complete. (752ms)"