don't know how to build these paths: /nix/store/wfz7qnmpwvirqy901alwdwzr1bhd8ii6-container-test-run-certificates.drv warning: ignoring the client-specified setting 'store', because it is a restricted setting and you are not a trusted user hj38yjyikasj83a2pymx35whmfwbahsk-command-not-found.drv: gi-build-x86-02: not scheduled here: hj38yjyikasj83a2pymx35whmfwbahsk-command-not-found.drv, asking the scheduler again building '/nix/store/hj38yjyikasj83a2pymx35whmfwbahsk-command-not-found.drv' on nix-store.geninf.io:50051 command-not-found> attached to the build already running on this worker 75pakwlgmb35kq47jsnm8ijd20czbs1s-system-path.drv: error: gRPC QueryValidPaths on 'nix-store.geninf.io:50051' failed: error: substituter 'https://cache.geninf.io' is disabled gi08913ayp3n5cqj24sd0hibyj644c3m-system-path.drv: gi-build-x86-02: not scheduled here: gi08913ayp3n5cqj24sd0hibyj644c3m-system-path.drv, asking the scheduler again 4v7dj0dbxpl32g7pa8gz7rx0liwk3wzh-system-path.drv: gi-build-x86-02: not scheduled here: 4v7dj0dbxpl32g7pa8gz7rx0liwk3wzh-system-path.drv, asking the scheduler again building '/nix/store/rjkr7j8vvzrid1w57fqzi7g9cfbakk2n-etc-bashrc.drv' on nix-store.geninf.io:50051 etc-bashrc> attached to the build already running on this worker building '/nix/store/4v7dj0dbxpl32g7pa8gz7rx0liwk3wzh-system-path.drv' on nix-store.geninf.io:50051 system-path> build-x86-01: building 4v7dj0dbxpl32g7pa8gz7rx0liwk3wzh-system-path.drv system-path> structuredAttrs is enabled system-path> created 1817 symlinks in user environment building '/nix/store/gi08913ayp3n5cqj24sd0hibyj644c3m-system-path.drv' on nix-store.geninf.io:50051 system-path> build-x86-01: building gi08913ayp3n5cqj24sd0hibyj644c3m-system-path.drv system-path> structuredAttrs is enabled system-path> created 1817 symlinks in user environment building '/nix/store/ds4nnaid6psm1zsrjb74jbp1r32zfz8s-dbus-1.drv' on nix-store.geninf.io:50051 dbus-1> build-x86-01: building ds4nnaid6psm1zsrjb74jbp1r32zfz8s-dbus-1.drv building '/nix/store/3792wmk623wirgsbh9fz7lxg118m8min-dbus-1.drv' on nix-store.geninf.io:50051 dbus-1> build-x86-01: building 3792wmk623wirgsbh9fz7lxg118m8min-dbus-1.drv building '/nix/store/j7f8ik2h02pnv7bz67m1ms5r63nd17v0-X-Restart-Triggers-dbus-broker.drv' on nix-store.geninf.io:50051 X-Restart-Triggers-dbus-broker> build-x86-01: building j7f8ik2h02pnv7bz67m1ms5r63nd17v0-X-Restart-Triggers-dbus-broker.drv building '/nix/store/hn41jj3spxgxvmcdqs0scp8dh29lq8rv-X-Restart-Triggers-dbus-broker.drv' on nix-store.geninf.io:50051 X-Restart-Triggers-dbus-broker> build-x86-01: building hn41jj3spxgxvmcdqs0scp8dh29lq8rv-X-Restart-Triggers-dbus-broker.drv building '/nix/store/v6jqjjr8gm6ni0z06jdvpgqvaq1pyh6h-unit-dbus-broker.service.drv' on nix-store.geninf.io:50051 unit-dbus-broker.service> gi-build-x86-02: building v6jqjjr8gm6ni0z06jdvpgqvaq1pyh6h-unit-dbus-broker.service.drv building '/nix/store/lxv4b8zaw8k1nfaaaa864dpxdss1mqkn-unit-dbus-broker.service.drv' on nix-store.geninf.io:50051 unit-dbus-broker.service> build-x86-01: building lxv4b8zaw8k1nfaaaa864dpxdss1mqkn-unit-dbus-broker.service.drv building '/nix/store/3r25qrzliqkmzhln4fd17xmyvqs20mxf-unit-dbus-broker.service.drv' on nix-store.geninf.io:50051 unit-dbus-broker.service> build-x86-01: building 3r25qrzliqkmzhln4fd17xmyvqs20mxf-unit-dbus-broker.service.drv building '/nix/store/i9j6ncipxj9x4zvpx1qhmn4k35ic4byf-unit-dbus-broker.service.drv' on nix-store.geninf.io:50051 unit-dbus-broker.service> build-x86-01: building i9j6ncipxj9x4zvpx1qhmn4k35ic4byf-unit-dbus-broker.service.drv building '/nix/store/h2q90y3fnzbc5jpynfiy00w80qyhz6bw-system-units.drv' on nix-store.geninf.io:50051 system-units> gi-build-x86-02: building h2q90y3fnzbc5jpynfiy00w80qyhz6bw-system-units.drv building '/nix/store/crwcz653fk7r5dasy7hkhskl4yfwwf7w-user-units.drv' on nix-store.geninf.io:50051 user-units> build-x86-01: building crwcz653fk7r5dasy7hkhskl4yfwwf7w-user-units.drv building '/nix/store/1rnl3i7ia8wxzvy29vhsqic6kkmvwidz-user-units.drv' on nix-store.geninf.io:50051 user-units> build-x86-01: building 1rnl3i7ia8wxzvy29vhsqic6kkmvwidz-user-units.drv building '/nix/store/0k31yzqvn54kvd07xc3vv4y1w95rxpiw-system-units.drv' on nix-store.geninf.io:50051 system-units> build-x86-01: building 0k31yzqvn54kvd07xc3vv4y1w95rxpiw-system-units.drv building '/nix/store/b66fxglkm7vvmx9qp5bl5yasdjafga2p-etc.drv' on nix-store.geninf.io:50051 etc> build-x86-01: building b66fxglkm7vvmx9qp5bl5yasdjafga2p-etc.drv building '/nix/store/4776sv34mqx97llc522hxji5pis34vfh-activate.drv' on nix-store.geninf.io:50051 activate> build-x86-01: building 4776sv34mqx97llc522hxji5pis34vfh-activate.drv building '/nix/store/6b167900v5q9jw0pjp6cc5qlx0lwh7vd-etc.drv' on nix-store.geninf.io:50051 etc> gi-build-x86-02: building 6b167900v5q9jw0pjp6cc5qlx0lwh7vd-etc.drv building '/nix/store/v2648b6wdamavvb03izf21mfn48i3lwy-nixos-system-server-test.drv' on nix-store.geninf.io:50051 nixos-system-server-test> build-x86-01: building v2648b6wdamavvb03izf21mfn48i3lwy-nixos-system-server-test.drv nixos-system-server-test> structuredAttrs is enabled building '/nix/store/szrsld8jmcd701n256m8sy61ky6r0p9g-activate.drv' on nix-store.geninf.io:50051 activate> gi-build-x86-02: building szrsld8jmcd701n256m8sy61ky6r0p9g-activate.drv building '/nix/store/zd4gmprdiz3dzpd1ars3y8c9p9f7qyv7-closure-info.drv' on nix-store.geninf.io:50051 closure-info> build-x86-01: building zd4gmprdiz3dzpd1ars3y8c9p9f7qyv7-closure-info.drv closure-info> structuredAttrs is enabled building '/nix/store/895xkq20jm9ghj86hx2wnvwzwgcclp04-nixos-system-client-test.drv' on nix-store.geninf.io:50051 nixos-system-client-test> gi-build-x86-02: building 895xkq20jm9ghj86hx2wnvwzwgcclp04-nixos-system-client-test.drv nixos-system-client-test> structuredAttrs is enabled building '/nix/store/b27c8b584wygg0pzsggxm4qzvmn0l49y-closure-info.drv' on nix-store.geninf.io:50051 closure-info> gi-build-x86-02: building b27c8b584wygg0pzsggxm4qzvmn0l49y-closure-info.drv closure-info> structuredAttrs is enabled error: dependency 'vc76hy19m88px5bqqsc35y4k5vn125d3-nixos-test-driver-certificates.drv' failed nixbot: transient error detected, retrying once don't know how to build these paths: /nix/store/wfz7qnmpwvirqy901alwdwzr1bhd8ii6-container-test-run-certificates.drv warning: ignoring the client-specified setting 'store', because it is a restricted setting and you are not a trusted user building '/nix/store/75pakwlgmb35kq47jsnm8ijd20czbs1s-system-path.drv' on nix-store.geninf.io:50051 system-path> gi-build-x86-02: building 75pakwlgmb35kq47jsnm8ijd20czbs1s-system-path.drv system-path> structuredAttrs is enabled system-path> created 1817 symlinks in user environment building '/nix/store/rxafsmnamvzlzyzp95azyiribx953img-dbus-1.drv' on nix-store.geninf.io:50051 dbus-1> gi-build-x86-02: building rxafsmnamvzlzyzp95azyiribx953img-dbus-1.drv building '/nix/store/7r5ncr5x1w4ypps3kr04c65v6r80rjfm-X-Restart-Triggers-dbus-broker.drv' on nix-store.geninf.io:50051 X-Restart-Triggers-dbus-broker> gi-build-x86-02: building 7r5ncr5x1w4ypps3kr04c65v6r80rjfm-X-Restart-Triggers-dbus-broker.drv building '/nix/store/7p4q2rrzzifj9sgbqjjxi8408na48ygi-unit-dbus-broker.service.drv' on nix-store.geninf.io:50051 unit-dbus-broker.service> gi-build-x86-02: building 7p4q2rrzzifj9sgbqjjxi8408na48ygi-unit-dbus-broker.service.drv building '/nix/store/f2qz7m75sm1kbacg810jy0f82csilv99-unit-dbus-broker.service.drv' on nix-store.geninf.io:50051 unit-dbus-broker.service> gi-build-x86-02: building f2qz7m75sm1kbacg810jy0f82csilv99-unit-dbus-broker.service.drv building '/nix/store/dg8q0i8w7xvngdpcv6zssskis0zji8ya-user-units.drv' on nix-store.geninf.io:50051 user-units> gi-build-x86-02: building dg8q0i8w7xvngdpcv6zssskis0zji8ya-user-units.drv building '/nix/store/x17360gvnijsgm54zwds3jvgknbq2q0s-system-units.drv' on nix-store.geninf.io:50051 system-units> gi-build-x86-02: building x17360gvnijsgm54zwds3jvgknbq2q0s-system-units.drv building '/nix/store/6v7wcmb2nl5778nry4ig9q7qlrcjzwq6-etc.drv' on nix-store.geninf.io:50051 etc> gi-build-x86-02: building 6v7wcmb2nl5778nry4ig9q7qlrcjzwq6-etc.drv building '/nix/store/q270jvra2xvn7qrqbn3k6mip9dcxvkrv-activate.drv' on nix-store.geninf.io:50051 activate> gi-build-x86-02: building q270jvra2xvn7qrqbn3k6mip9dcxvkrv-activate.drv building '/nix/store/hms24skcmzc15qfmkhadlbmm6h4zq346-nixos-system-ca-test.drv' on nix-store.geninf.io:50051 nixos-system-ca-test> gi-build-x86-02: building hms24skcmzc15qfmkhadlbmm6h4zq346-nixos-system-ca-test.drv nixos-system-ca-test> structuredAttrs is enabled building '/nix/store/w0fi6iql0587v1pvp02vjvp5zp7zmv59-closure-info.drv' on nix-store.geninf.io:50051 closure-info> gi-build-x86-02: building w0fi6iql0587v1pvp02vjvp5zp7zmv59-closure-info.drv closure-info> structuredAttrs is enabled building '/nix/store/vc76hy19m88px5bqqsc35y4k5vn125d3-nixos-test-driver-certificates.drv' on nix-store.geninf.io:50051 nixos-test-driver-certificates> gi-build-x86-02: building vc76hy19m88px5bqqsc35y4k5vn125d3-nixos-test-driver-certificates.drv nixos-test-driver-certificates> Running type check (enable/disable: config.skipTypeCheck) nixos-test-driver-certificates> See https://nixos.org/manual/nixos/stable/#test-opt-skipTypeCheck nixos-test-driver-certificates> Success: no issues found in 1 source file building '/nix/store/wfz7qnmpwvirqy901alwdwzr1bhd8ii6-container-test-run-certificates.drv' on nix-store.geninf.io:50051 container-test-run-certificates> build-x86-01: building wfz7qnmpwvirqy901alwdwzr1bhd8ii6-container-test-run-certificates.drv container-test-run-certificates> additionally exposed symbols: container-test-run-certificates> ca, client, server, container-test-run-certificates> start_all, machines, driver, Machine, wait_for_signal container-test-run-certificates> Starting ca container-test-run-certificates> Starting client container-test-run-certificates> Starting server container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> <<< NixOS Stage 2 >>> container-test-run-certificates> container-test-run-certificates> booting system configuration /nix/store/jp9fx5kg5f834k8p8ym1l9zv2n4nf4j8-nixos-system-ca-test container-test-run-certificates> running activation script... container-test-run-certificates> setting up /etc... container-test-run-certificates> 2: host0@if4: mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000 container-test-run-certificates> link/ether 42:06:76:42:a9:8d brd ff:ff:ff:ff:ff:ff link-netnsid 0 container-test-run-certificates> setting up age secrets... container-test-run-certificates> starting systemd... container-test-run-certificates> systemd 260.4 running in system mode (+PAM +AUDIT -SELINUX +APPARMOR +IMA +IPE +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS +FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 +PWQUALITY +P11KIT +QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD +BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP +LIBARCHIVE) container-test-run-certificates> Detected virtualization systemd-nspawn. container-test-run-certificates> Detected architecture x86-64. container-test-run-certificates> Detected first boot. container-test-run-certificates> Initializing machine ID from container UUID. container-test-run-certificates> Applying preset policy. container-test-run-certificates> Populated /etc with preset unit settings. container-test-run-certificates> Queued start job for default target Multi-User System. container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> <<< Welcome to NixOS test (x86_64) - console >>> container-test-run-certificates> + systemd-run /bin/sh -c '/nix/store/833invqvsk7anqnqrki5hqncrcllj825-coreutils-9.11/bin/sleep 999999999 && echo 92d2057b-dde7-4bf7-81d1-eabaa92a36b7' container-test-run-certificates> Running as unit: run-p447-i16636621.service; invocation ID: 14f6ffa3cdc64acdbfb2ca466f6e0279 container-test-run-certificates> To attach to container ca run on the same machine that runs the test: container-test-run-certificates> sudo nsenter --user --target $(\pgrep -f '^/bin/sh.*92d2057b-dde7-4bf7-81d1-eabaa92a36b7') --mount --uts --ipc --net --pid --cgroup /bin/sh -c bash container-test-run-certificates> container-test-run-certificates> To inject external network and continue test, run: container-test-run-certificates> sudo /nix/store/9r02ykx9y35lf4gk6gc30gnag1y8ncp7-python3-3.13.15/bin/python3.13 /nix/store/7pcwg3l52sff9p90k03qhavpaqk1zhfi-test-driver-0.0.1/lib/python3.13/site-packages/test_driver/inject_network.py 92d2057b-dde7-4bf7-81d1-eabaa92a36b7 container-test-run-certificates> container-test-run-certificates> <<< NixOS Stage 2 >>> container-test-run-certificates> container-test-run-certificates> booting system configuration /nix/store/v1nkv1z3bwrn40ds992f42k90a4s1k4f-nixos-system-client-test container-test-run-certificates> running activation script... container-test-run-certificates> setting up /etc... container-test-run-certificates> 2: host0@if5: mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000 container-test-run-certificates> link/ether 2a:42:35:28:b1:2f brd ff:ff:ff:ff:ff:ff link-netnsid 0 container-test-run-certificates> setting up age secrets... container-test-run-certificates> starting systemd... container-test-run-certificates> systemd 260.4 running in system mode (+PAM +AUDIT -SELINUX +APPARMOR +IMA +IPE +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS +FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 +PWQUALITY +P11KIT +QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD +BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP +LIBARCHIVE) container-test-run-certificates> Detected virtualization systemd-nspawn. container-test-run-certificates> Detected architecture x86-64. container-test-run-certificates> Detected first boot. container-test-run-certificates> Initializing machine ID from container UUID. container-test-run-certificates> Applying preset policy. container-test-run-certificates> Populated /etc with preset unit settings. container-test-run-certificates> Queued start job for default target Multi-User System. container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> <<< Welcome to NixOS test (x86_64) - console >>> container-test-run-certificates> + systemd-run /bin/sh -c '/nix/store/833invqvsk7anqnqrki5hqncrcllj825-coreutils-9.11/bin/sleep 999999999 && echo ea4daaaa-75ea-4fd0-a513-96381ab6615a' container-test-run-certificates> Running as unit: run-p304-i16636624.service; invocation ID: f6d1b75df9a34f988bcc67f13797ac56 container-test-run-certificates> To attach to container client run on the same machine that runs the test: container-test-run-certificates> sudo nsenter --user --target $(\pgrep -f '^/bin/sh.*ea4daaaa-75ea-4fd0-a513-96381ab6615a') --mount --uts --ipc --net --pid --cgroup /bin/sh -c bash container-test-run-certificates> container-test-run-certificates> To inject external network and continue test, run: container-test-run-certificates> sudo /nix/store/9r02ykx9y35lf4gk6gc30gnag1y8ncp7-python3-3.13.15/bin/python3.13 /nix/store/7pcwg3l52sff9p90k03qhavpaqk1zhfi-test-driver-0.0.1/lib/python3.13/site-packages/test_driver/inject_network.py ea4daaaa-75ea-4fd0-a513-96381ab6615a container-test-run-certificates> container-test-run-certificates> <<< NixOS Stage 2 >>> container-test-run-certificates> container-test-run-certificates> booting system configuration /nix/store/854il1jkjfjijm4x0qcnxgkd0ica8p9b-nixos-system-server-test container-test-run-certificates> running activation script... container-test-run-certificates> setting up /etc... container-test-run-certificates> 2: host0@if3: mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000 container-test-run-certificates> link/ether be:aa:dd:39:86:e7 brd ff:ff:ff:ff:ff:ff link-netnsid 0 container-test-run-certificates> setting up age secrets... container-test-run-certificates> starting systemd... container-test-run-certificates> systemd 260.4 running in system mode (+PAM +AUDIT -SELINUX +APPARMOR +IMA +IPE +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS +FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 +PWQUALITY +P11KIT +QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD +BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP +LIBARCHIVE) container-test-run-certificates> Detected virtualization systemd-nspawn. container-test-run-certificates> Detected architecture x86-64. container-test-run-certificates> Detected first boot. container-test-run-certificates> Initializing machine ID from container UUID. container-test-run-certificates> Applying preset policy. container-test-run-certificates> Populated /etc with preset unit settings. container-test-run-certificates> Queued start job for default target Multi-User System. container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> <<< Welcome to NixOS test (x86_64) - console >>> container-test-run-certificates> + systemd-run /bin/sh -c '/nix/store/833invqvsk7anqnqrki5hqncrcllj825-coreutils-9.11/bin/sleep 999999999 && echo 26186531-1037-4c52-9acc-c9fce3dc0ab1' container-test-run-certificates> Running as unit: run-p386-i16636629.service; invocation ID: ba7a48971cc2471f9ba7a87812b42a1f container-test-run-certificates> To attach to container server run on the same machine that runs the test: container-test-run-certificates> sudo nsenter --user --target $(\pgrep -f '^/bin/sh.*26186531-1037-4c52-9acc-c9fce3dc0ab1') --mount --uts --ipc --net --pid --cgroup /bin/sh -c bash container-test-run-certificates> container-test-run-certificates> To inject external network and continue test, run: container-test-run-certificates> sudo /nix/store/9r02ykx9y35lf4gk6gc30gnag1y8ncp7-python3-3.13.15/bin/python3.13 /nix/store/7pcwg3l52sff9p90k03qhavpaqk1zhfi-test-driver-0.0.1/lib/python3.13/site-packages/test_driver/inject_network.py 26186531-1037-4c52-9acc-c9fce3dc0ab1 container-test-run-certificates> + systemctl restart acme-order-renew-ca.foo.service container-test-run-certificates> + systemctl restart acme-test.foo.service container-test-run-certificates> client: waiting for success: curl -v https://test.foo container-test-run-certificates> + curl -v https://test.foo container-test-run-certificates> * Host test.foo:443 was resolved. container-test-run-certificates> * IPv6: (none) container-test-run-certificates> * IPv4: 192.168.1.3 container-test-run-certificates> * Trying 192.168.1.3:443... container-test-run-certificates> * ALPN: curl offers h2,http/1.1 container-test-run-certificates> } [5 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Client hello (1): container-test-run-certificates> } [1552 bytes data] container-test-run-certificates> * SSL Trust Anchors: container-test-run-certificates> * OpenSSL default paths (fallback) container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Server hello (2): container-test-run-certificates> { [1210 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS change cipher, Change cipher spec (1): container-test-run-certificates> { [1 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): container-test-run-certificates> { [19 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Certificate (11): container-test-run-certificates> { [1009 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, CERT verify (15): container-test-run-certificates> { [111 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Finished (20): container-test-run-certificates> { [52 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): container-test-run-certificates> } [1 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Finished (20): container-test-run-certificates> } [52 bytes data] container-test-run-certificates> * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey container-test-run-certificates> * ALPN: server accepted h2 container-test-run-certificates> * Server certificate: container-test-run-certificates> * subject: CN=test.foo container-test-run-certificates> * start date: Sep 24 18:32:40 2026 GMT container-test-run-certificates> * expire date: Oct 24 18:32:40 2028 GMT container-test-run-certificates> * issuer: CN=minica root ca 4d169b container-test-run-certificates> * Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * subjectAltName: "test.foo" matches cert's "test.foo" container-test-run-certificates> * OpenSSL verify result: 13 container-test-run-certificates> * SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> * closing connection #0 container-test-run-certificates> curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> More details here: https://curl.se/docs/sslcerts.html container-test-run-certificates> container-test-run-certificates> curl failed to verify the legitimacy of the server and therefore could not container-test-run-certificates> establish a secure connection to it. To learn more about this situation and container-test-run-certificates> how to fix it, please visit the webpage mentioned above. container-test-run-certificates> + curl -v https://test.foo container-test-run-certificates> * Host test.foo:443 was resolved. container-test-run-certificates> * IPv6: (none) container-test-run-certificates> * IPv4: 192.168.1.3 container-test-run-certificates> * Trying 192.168.1.3:443... container-test-run-certificates> * ALPN: curl offers h2,http/1.1 container-test-run-certificates> } [5 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Client hello (1): container-test-run-certificates> } [1552 bytes data] container-test-run-certificates> * SSL Trust Anchors: container-test-run-certificates> * OpenSSL default paths (fallback) container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Server hello (2): container-test-run-certificates> { [1210 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS change cipher, Change cipher spec (1): container-test-run-certificates> { [1 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): container-test-run-certificates> { [19 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Certificate (11): container-test-run-certificates> { [1009 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, CERT verify (15): container-test-run-certificates> { [111 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Finished (20): container-test-run-certificates> { [52 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): container-test-run-certificates> } [1 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Finished (20): container-test-run-certificates> } [52 bytes data] container-test-run-certificates> * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey container-test-run-certificates> * ALPN: server accepted h2 container-test-run-certificates> * Server certificate: container-test-run-certificates> * subject: CN=test.foo container-test-run-certificates> * start date: Sep 24 18:32:40 2026 GMT container-test-run-certificates> * expire date: Oct 24 18:32:40 2028 GMT container-test-run-certificates> * issuer: CN=minica root ca 4d169b container-test-run-certificates> * Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * subjectAltName: "test.foo" matches cert's "test.foo" container-test-run-certificates> * OpenSSL verify result: 13 container-test-run-certificates> * SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> * closing connection #0 container-test-run-certificates> curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> More details here: https://curl.se/docs/sslcerts.html container-test-run-certificates> container-test-run-certificates> curl failed to verify the legitimacy of the server and therefore could not container-test-run-certificates> establish a secure connection to it. To learn more about this situation and container-test-run-certificates> how to fix it, please visit the webpage mentioned above. container-test-run-certificates> + curl -v https://test.foo container-test-run-certificates> * Host test.foo:443 was resolved. container-test-run-certificates> * IPv6: (none) container-test-run-certificates> * IPv4: 192.168.1.3 container-test-run-certificates> * Trying 192.168.1.3:443... container-test-run-certificates> * ALPN: curl offers h2,http/1.1 container-test-run-certificates> } [5 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Client hello (1): container-test-run-certificates> } [1552 bytes data] container-test-run-certificates> * SSL Trust Anchors: container-test-run-certificates> * OpenSSL default paths (fallback) container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Server hello (2): container-test-run-certificates> { [1210 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS change cipher, Change cipher spec (1): container-test-run-certificates> { [1 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): container-test-run-certificates> { [19 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Certificate (11): container-test-run-certificates> { [930 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, CERT verify (15): container-test-run-certificates> { [79 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Finished (20): container-test-run-certificates> { [52 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): container-test-run-certificates> } [1 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Finished (20): container-test-run-certificates> } [52 bytes data] container-test-run-certificates> * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey container-test-run-certificates> * ALPN: server accepted h2 container-test-run-certificates> * Server certificate: container-test-run-certificates> * subject: CN=test.foo container-test-run-certificates> * start date: Sep 24 18:31:51 2026 GMT container-test-run-certificates> * expire date: Dec 23 18:32:51 2026 GMT container-test-run-certificates> * issuer: CN=Clan Intermediate CA container-test-run-certificates> * Certificate level 0: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA256 container-test-run-certificates> * Certificate level 1: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA256 container-test-run-certificates> * Certificate level 2: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA256 container-test-run-certificates> * subjectAltName: "test.foo" matches cert's "test.foo" container-test-run-certificates> * OpenSSL verify result: 0 container-test-run-certificates> * SSL certificate verified via OpenSSL. container-test-run-certificates> * Established connection to test.foo (192.168.1.3 port 443) from 192.168.1.2 port 40224 container-test-run-certificates> % Total % Received % Xferd Average Speed Time Time Time Current container-test-run-certificates> Dload Upload Total Spent Left Speed container-test-run-certificates> 0 0 0 0 0 0 0 0 0* using HTTP/2 container-test-run-certificates> * [HTTP/2] [1] OPENED stream for https://test.foo/ container-test-run-certificates> * [HTTP/2] [1] [:method: GET] container-test-run-certificates> * [HTTP/2] [1] [:scheme: https] container-test-run-certificates> * [HTTP/2] [1] [:authority: test.foo] container-test-run-certificates> * [HTTP/2] [1] [:path: /] container-test-run-certificates> * [HTTP/2] [1] [user-agent: curl/8.22.0] container-test-run-certificates> * [HTTP/2] [1] [accept: */*] container-test-run-certificates> } [5 bytes data] container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> * Request completely sent off container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4): container-test-run-certificates> { [265 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4): container-test-run-certificates> { [265 bytes data] container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> { [5 bytes data] container-test-run-certificates> 100 20 100 20 0 0 2035 0 0 container-test-run-certificates> * Connection #0 to host test.foo:443 left intact container-test-run-certificates> (finished: waiting for success: curl -v https://test.foo, in 2.06 seconds) container-test-run-certificates> + openssl s_client -connect test.foo:443 -servername test.foo container-test-run-certificates> + openssl x509 -text -noout container-test-run-certificates> Certificate: container-test-run-certificates> Data: container-test-run-certificates> Version: 3 (0x2) container-test-run-certificates> Serial Number: container-test-run-certificates> 66:ea:74:cd:75:4e:52:95:66:41:3d:3a:51:77:37:ad container-test-run-certificates> Signature Algorithm: ecdsa-with-SHA256 container-test-run-certificates> Issuer: CN=Clan Intermediate CA container-test-run-certificates> Validity container-test-run-certificates> Not Before: Sep 24 18:31:51 2026 GMT container-test-run-certificates> Not After : Dec 23 18:32:51 2026 GMT container-test-run-certificates> Subject: CN=test.foo container-test-run-certificates> Subject Public Key Info: container-test-run-certificates> Public Key Algorithm: id-ecPublicKey container-test-run-certificates> Public-Key: (256 bit) container-test-run-certificates> pub: container-test-run-certificates> 04:af:57:f8:e1:6d:bf:21:07:bf:30:6f:26:4f:0a: container-test-run-certificates> 01:b0:9c:33:4c:c0:79:99:8a:87:4d:a1:e9:c5:a7: container-test-run-certificates> 95:ba:4f:f0:d8:9d:4d:fd:5d:3e:47:fd:e8:26:86: container-test-run-certificates> 1b:50:22:f8:57:be:d0:e3:dc:19:62:de:6d:58:ea: container-test-run-certificates> 4b:22:4b:22:7a container-test-run-certificates> ASN1 OID: prime256v1 container-test-run-certificates> NIST CURVE: P-256 container-test-run-certificates> X509v3 extensions: container-test-run-certificates> X509v3 Key Usage: critical container-test-run-certificates> Digital Signature container-test-run-certificates> X509v3 Extended Key Usage: container-test-run-certificates> TLS Web Server Authentication, TLS Web Client Authentication container-test-run-certificates> X509v3 Subject Key Identifier: container-test-run-certificates> 43:DD:F5:42:61:DA:40:ED:9B:65:51:40:7D:41:7C:EB:BA:17:97:97 container-test-run-certificates> X509v3 Authority Key Identifier: container-test-run-certificates> 12:7B:BB:87:0A:DE:A2:A4:61:95:C5:6B:DF:BC:AA:93:FE:C3:16:9F container-test-run-certificates> X509v3 Subject Alternative Name: container-test-run-certificates> DNS:test.foo container-test-run-certificates> 1.3.6.1.4.1.37476.9000.64.1: container-test-run-certificates> 0......acme.. container-test-run-certificates> Signature Algorithm: ecdsa-with-SHA256 container-test-run-certificates> Signature Value: container-test-run-certificates> 30:45:02:20:1e:e2:da:c0:34:1a:6f:9a:da:63:be:09:c3:41: container-test-run-certificates> a2:58:ba:78:40:4c:97:83:d2:b0:b3:d2:0f:56:9e:e8:7b:54: container-test-run-certificates> 02:21:00:b0:9f:ca:19:12:eb:44:14:cd:b6:42:34:d4:0d:66: container-test-run-certificates> c8:2c:da:3d:0d:fa:6a:22:65:78:62:7d:0b:28:f0:41:b8 container-test-run-certificates> container-test-run-certificates> container-test-run-certificates>