don't know how to build these paths: /nix/store/pd3qivmqhgfmgf62w3ylbhjhmj1z4nd6-container-test-run-certificates.drv warning: ignoring the client-specified setting 'store', because it is a restricted setting and you are not a trusted user building '/nix/store/27rac7mg1v088rlkj7fq7vp5iffzlc4p-system-path.drv' on nix-store.geninf.io:50051 system-path> build01: building 27rac7mg1v088rlkj7fq7vp5iffzlc4p-system-path.drv system-path> structuredAttrs is enabled system-path> created 1811 symlinks in user environment building '/nix/store/jw5nw2ibby9kay3gimkiy05vkms7xzia-system-path.drv' on nix-store.geninf.io:50051 system-path> build01: building jw5nw2ibby9kay3gimkiy05vkms7xzia-system-path.drv system-path> structuredAttrs is enabled system-path> created 1811 symlinks in user environment building '/nix/store/y4gyikahsikdpjhrc0z47715ygqdfdvy-system-path.drv' on nix-store.geninf.io:50051 system-path> build01: building y4gyikahsikdpjhrc0z47715ygqdfdvy-system-path.drv system-path> structuredAttrs is enabled system-path> created 1811 symlinks in user environment building '/nix/store/qa512faq7kw3dan3annsgi5k3x1fcmbf-dbus-1.drv' on nix-store.geninf.io:50051 dbus-1> build01: building qa512faq7kw3dan3annsgi5k3x1fcmbf-dbus-1.drv building '/nix/store/hb36zfy09ybv067p0chknrg632psx2bp-dbus-1.drv' on nix-store.geninf.io:50051 dbus-1> build01: building hb36zfy09ybv067p0chknrg632psx2bp-dbus-1.drv building '/nix/store/3kxydyvsrp1s5j2j76qzdzyczv5vr6qq-dbus-1.drv' on nix-store.geninf.io:50051 dbus-1> build01: building 3kxydyvsrp1s5j2j76qzdzyczv5vr6qq-dbus-1.drv building '/nix/store/2k86986xngmgrina51kdbmjl1rnp1znd-X-Restart-Triggers-dbus-broker.drv' on nix-store.geninf.io:50051 X-Restart-Triggers-dbus-broker> build01: building 2k86986xngmgrina51kdbmjl1rnp1znd-X-Restart-Triggers-dbus-broker.drv building '/nix/store/rdnqzl56zcc21fivnkhpzbs9nlwbwi83-X-Restart-Triggers-dbus-broker.drv' on nix-store.geninf.io:50051 X-Restart-Triggers-dbus-broker> build01: building rdnqzl56zcc21fivnkhpzbs9nlwbwi83-X-Restart-Triggers-dbus-broker.drv building '/nix/store/w6cs9xzsr4yxalsaij262w0wif3f2av7-X-Restart-Triggers-dbus-broker.drv' on nix-store.geninf.io:50051 X-Restart-Triggers-dbus-broker> build01: building w6cs9xzsr4yxalsaij262w0wif3f2av7-X-Restart-Triggers-dbus-broker.drv building '/nix/store/hw43h3qc38yz2bk9jbmcbqrnka7r0fdg-unit-dbus-broker.service.drv' on nix-store.geninf.io:50051 unit-dbus-broker.service> build01: building hw43h3qc38yz2bk9jbmcbqrnka7r0fdg-unit-dbus-broker.service.drv building '/nix/store/cs56hpz2l6bcbd3g4bjsgicxrvhcbjgz-unit-dbus-broker.service.drv' on nix-store.geninf.io:50051 unit-dbus-broker.service> build01: building cs56hpz2l6bcbd3g4bjsgicxrvhcbjgz-unit-dbus-broker.service.drv building '/nix/store/qm2yk9sv4sc3xkhh18an4rpsb3pn25k3-unit-dbus-broker.service.drv' on nix-store.geninf.io:50051 unit-dbus-broker.service> build01: building qm2yk9sv4sc3xkhh18an4rpsb3pn25k3-unit-dbus-broker.service.drv building '/nix/store/7cirq97j25xyraiplhpdl9vyxbpycp1f-unit-dbus-broker.service.drv' on nix-store.geninf.io:50051 unit-dbus-broker.service> build01: building 7cirq97j25xyraiplhpdl9vyxbpycp1f-unit-dbus-broker.service.drv building '/nix/store/iyc9v1n664gdjs752qwcbbcl832z0y3m-unit-dbus-broker.service.drv' on nix-store.geninf.io:50051 unit-dbus-broker.service> build01: building iyc9v1n664gdjs752qwcbbcl832z0y3m-unit-dbus-broker.service.drv building '/nix/store/6hbyyj9iryw685m3lzfjs6xgjxg24f0z-unit-dbus-broker.service.drv' on nix-store.geninf.io:50051 unit-dbus-broker.service> build01: building 6hbyyj9iryw685m3lzfjs6xgjxg24f0z-unit-dbus-broker.service.drv building '/nix/store/c2isvqix3j8dbl22di88xma0xnfh53kr-system-units.drv' on nix-store.geninf.io:50051 system-units> build01: building c2isvqix3j8dbl22di88xma0xnfh53kr-system-units.drv building '/nix/store/g4ap2sr581v5xwc9nsds9c2j43w9wj1f-user-units.drv' on nix-store.geninf.io:50051 user-units> build01: building g4ap2sr581v5xwc9nsds9c2j43w9wj1f-user-units.drv building '/nix/store/sxf7w2nh3pl0zyb8frwl087zzcxfcgyv-system-units.drv' on nix-store.geninf.io:50051 system-units> build01: building sxf7w2nh3pl0zyb8frwl087zzcxfcgyv-system-units.drv building '/nix/store/znm96mpslxw9iyk45s66r2lg280f3wnw-user-units.drv' on nix-store.geninf.io:50051 user-units> build01: building znm96mpslxw9iyk45s66r2lg280f3wnw-user-units.drv d8d33vjnpi7cmhpqf1j9nd0jyi18m5ak-user-units.drv: build01: not scheduled here: d8d33vjnpi7cmhpqf1j9nd0jyi18m5ak-user-units.drv, asking the scheduler again bddzp3nz04n7rfzz9g2vxdirxa28lcqm-system-units.drv: build01: not scheduled here: bddzp3nz04n7rfzz9g2vxdirxa28lcqm-system-units.drv, asking the scheduler again building '/nix/store/d8d33vjnpi7cmhpqf1j9nd0jyi18m5ak-user-units.drv' on nix-store.geninf.io:50051 user-units> build01: building d8d33vjnpi7cmhpqf1j9nd0jyi18m5ak-user-units.drv building '/nix/store/bddzp3nz04n7rfzz9g2vxdirxa28lcqm-system-units.drv' on nix-store.geninf.io:50051 system-units> build01: building bddzp3nz04n7rfzz9g2vxdirxa28lcqm-system-units.drv j37zvzghc631vhsn7fncq1pp401dlxb0-etc.drv: build01: not scheduled here: j37zvzghc631vhsn7fncq1pp401dlxb0-etc.drv, asking the scheduler again hi3yq1fn8kxd5br7pwlx293c97w6y9pm-etc.drv: build01: not scheduled here: hi3yq1fn8kxd5br7pwlx293c97w6y9pm-etc.drv, asking the scheduler again building '/nix/store/j37zvzghc631vhsn7fncq1pp401dlxb0-etc.drv' on nix-store.geninf.io:50051 etc> build01: building j37zvzghc631vhsn7fncq1pp401dlxb0-etc.drv building '/nix/store/hi3yq1fn8kxd5br7pwlx293c97w6y9pm-etc.drv' on nix-store.geninf.io:50051 etc> build01: building hi3yq1fn8kxd5br7pwlx293c97w6y9pm-etc.drv 4c1qhwfzg17z6y16w16pbv2csrwr2f2q-etc.drv: build01: not scheduled here: 4c1qhwfzg17z6y16w16pbv2csrwr2f2q-etc.drv, asking the scheduler again building '/nix/store/4c1qhwfzg17z6y16w16pbv2csrwr2f2q-etc.drv' on nix-store.geninf.io:50051 etc> build01: building 4c1qhwfzg17z6y16w16pbv2csrwr2f2q-etc.drv 2wq7gffvkdxkzryfw7lrcg1c3raz1j6g-activate.drv: build01: not scheduled here: 2wq7gffvkdxkzryfw7lrcg1c3raz1j6g-activate.drv, asking the scheduler again building '/nix/store/2wq7gffvkdxkzryfw7lrcg1c3raz1j6g-activate.drv' on nix-store.geninf.io:50051 activate> build01: building 2wq7gffvkdxkzryfw7lrcg1c3raz1j6g-activate.drv lhqviva8644y8f33457xilvw03fwywx5-activate.drv: build01: not scheduled here: lhqviva8644y8f33457xilvw03fwywx5-activate.drv, asking the scheduler again building '/nix/store/lhqviva8644y8f33457xilvw03fwywx5-activate.drv' on nix-store.geninf.io:50051 activate> build01: building lhqviva8644y8f33457xilvw03fwywx5-activate.drv kc3fsvd97qa26ka7nr43a2x6jdgw58yz-activate.drv: build01: not scheduled here: kc3fsvd97qa26ka7nr43a2x6jdgw58yz-activate.drv, asking the scheduler again building '/nix/store/kc3fsvd97qa26ka7nr43a2x6jdgw58yz-activate.drv' on nix-store.geninf.io:50051 activate> build01: building kc3fsvd97qa26ka7nr43a2x6jdgw58yz-activate.drv x619sxjq6y7qjczzj1psh5kf043hig39-nixos-system-server-test.drv: build01: not scheduled here: x619sxjq6y7qjczzj1psh5kf043hig39-nixos-system-server-test.drv, asking the scheduler again building '/nix/store/x619sxjq6y7qjczzj1psh5kf043hig39-nixos-system-server-test.drv' on nix-store.geninf.io:50051 nixos-system-server-test> build01: building x619sxjq6y7qjczzj1psh5kf043hig39-nixos-system-server-test.drv nixos-system-server-test> structuredAttrs is enabled nipqq68az9xx57632ylhns3wich2dkiq-nixos-system-ca-test.drv: build01: not scheduled here: nipqq68az9xx57632ylhns3wich2dkiq-nixos-system-ca-test.drv, asking the scheduler again building '/nix/store/nipqq68az9xx57632ylhns3wich2dkiq-nixos-system-ca-test.drv' on nix-store.geninf.io:50051 nixos-system-ca-test> build01: building nipqq68az9xx57632ylhns3wich2dkiq-nixos-system-ca-test.drv nixos-system-ca-test> structuredAttrs is enabled 4vv9xv8wydm3ydjb8svsmaajvfxpx075-nixos-system-client-test.drv: build01: not scheduled here: 4vv9xv8wydm3ydjb8svsmaajvfxpx075-nixos-system-client-test.drv, asking the scheduler again building '/nix/store/4vv9xv8wydm3ydjb8svsmaajvfxpx075-nixos-system-client-test.drv' on nix-store.geninf.io:50051 nixos-system-client-test> build01: building 4vv9xv8wydm3ydjb8svsmaajvfxpx075-nixos-system-client-test.drv nixos-system-client-test> structuredAttrs is enabled l4c7g1aii21c13hw6s33r9wmrrny7h7b-closure-info.drv: build01: not scheduled here: l4c7g1aii21c13hw6s33r9wmrrny7h7b-closure-info.drv, asking the scheduler again building '/nix/store/l4c7g1aii21c13hw6s33r9wmrrny7h7b-closure-info.drv' on nix-store.geninf.io:50051 closure-info> build01: building l4c7g1aii21c13hw6s33r9wmrrny7h7b-closure-info.drv closure-info> structuredAttrs is enabled nfr3x2kgxy02cbqydiysvmyi2w4zdmmn-closure-info.drv: build01: not scheduled here: nfr3x2kgxy02cbqydiysvmyi2w4zdmmn-closure-info.drv, asking the scheduler again building '/nix/store/nfr3x2kgxy02cbqydiysvmyi2w4zdmmn-closure-info.drv' on nix-store.geninf.io:50051 closure-info> build01: building nfr3x2kgxy02cbqydiysvmyi2w4zdmmn-closure-info.drv closure-info> structuredAttrs is enabled ghcq9hr5nkqjmv0v5y0kk6w60i87i7i3-closure-info.drv: build01: not scheduled here: ghcq9hr5nkqjmv0v5y0kk6w60i87i7i3-closure-info.drv, asking the scheduler again building '/nix/store/ghcq9hr5nkqjmv0v5y0kk6w60i87i7i3-closure-info.drv' on nix-store.geninf.io:50051 closure-info> build01: building ghcq9hr5nkqjmv0v5y0kk6w60i87i7i3-closure-info.drv closure-info> structuredAttrs is enabled building '/nix/store/q7xbfw6gbrvcqx2vx6xml1n2rfrppisx-nixos-test-driver-certificates.drv' on nix-store.geninf.io:50051 nixos-test-driver-certificates> build01: building q7xbfw6gbrvcqx2vx6xml1n2rfrppisx-nixos-test-driver-certificates.drv nixos-test-driver-certificates> Running type check (enable/disable: config.skipTypeCheck) nixos-test-driver-certificates> See https://nixos.org/manual/nixos/stable/#test-opt-skipTypeCheck nixos-test-driver-certificates> Success: no issues found in 1 source file pd3qivmqhgfmgf62w3ylbhjhmj1z4nd6-container-test-run-certificates.drv: build01: not scheduled here: pd3qivmqhgfmgf62w3ylbhjhmj1z4nd6-container-test-run-certificates.drv, asking the scheduler again building '/nix/store/pd3qivmqhgfmgf62w3ylbhjhmj1z4nd6-container-test-run-certificates.drv' on nix-store.geninf.io:50051 container-test-run-certificates> build01: building pd3qivmqhgfmgf62w3ylbhjhmj1z4nd6-container-test-run-certificates.drv container-test-run-certificates> additionally exposed symbols: container-test-run-certificates> ca, client, server, container-test-run-certificates> start_all, machines, driver, Machine, wait_for_signal container-test-run-certificates> Starting ca container-test-run-certificates> Starting client container-test-run-certificates> Starting server container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> <<< NixOS Stage 2 >>> container-test-run-certificates> container-test-run-certificates> booting system configuration /nix/store/2gl5pxzxsrhsmcvfsrnc6r5ls5zrgna8-nixos-system-ca-test container-test-run-certificates> running activation script... container-test-run-certificates> setting up /etc... container-test-run-certificates> 2: host0@if4: mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000 container-test-run-certificates> link/ether 42:06:76:42:a9:8d brd ff:ff:ff:ff:ff:ff link-netnsid 0 container-test-run-certificates> setting up age secrets... container-test-run-certificates> starting systemd... container-test-run-certificates> systemd 260.4 running in system mode (+PAM +AUDIT -SELINUX +APPARMOR +IMA +IPE +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS +FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 +PWQUALITY +P11KIT +QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD +BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP +LIBARCHIVE) container-test-run-certificates> Detected virtualization systemd-nspawn. container-test-run-certificates> Detected architecture arm64. container-test-run-certificates> Detected first boot. container-test-run-certificates> Initializing machine ID from container UUID. container-test-run-certificates> Applying preset policy. container-test-run-certificates> Populated /etc with preset unit settings. container-test-run-certificates> Queued start job for default target Multi-User System. container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> <<< Welcome to NixOS test (aarch64) - console >>> container-test-run-certificates> + systemd-run /bin/sh -c '/nix/store/fl0k50cdb33a5xxzlzmz5782yw66rj4r-coreutils-9.11/bin/sleep 999999999 && echo 17b2a0ab-a4d4-4e0c-95d7-fddd71ad5aeb' container-test-run-certificates> Running as unit: run-p468-i28306934.service; invocation ID: 0123687989cb4471872990ea9163cda7 container-test-run-certificates> To attach to container ca run on the same machine that runs the test: container-test-run-certificates> sudo nsenter --user --target $(\pgrep -f '^/bin/sh.*17b2a0ab-a4d4-4e0c-95d7-fddd71ad5aeb') --mount --uts --ipc --net --pid --cgroup /bin/sh -c bash container-test-run-certificates> container-test-run-certificates> To inject external network and continue test, run: container-test-run-certificates> sudo /nix/store/76jq0mngg7m8zv5yjz1qgg0xspzi8x2w-python3-3.13.15/bin/python3.13 /nix/store/1v002aslhnn1b7kr1fq8m14lldran2b0-test-driver-0.0.1/lib/python3.13/site-packages/test_driver/inject_network.py 17b2a0ab-a4d4-4e0c-95d7-fddd71ad5aeb container-test-run-certificates> container-test-run-certificates> <<< NixOS Stage 2 >>> container-test-run-certificates> container-test-run-certificates> booting system configuration /nix/store/9wlvxr4ms80hixqsz71mcwd0n2k4n4bw-nixos-system-client-test container-test-run-certificates> running activation script... container-test-run-certificates> setting up /etc... container-test-run-certificates> 2: host0@if3: mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000 container-test-run-certificates> link/ether 2a:42:35:28:b1:2f brd ff:ff:ff:ff:ff:ff link-netnsid 0 container-test-run-certificates> setting up age secrets... container-test-run-certificates> starting systemd... container-test-run-certificates> systemd 260.4 running in system mode (+PAM +AUDIT -SELINUX +APPARMOR +IMA +IPE +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS +FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 +PWQUALITY +P11KIT +QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD +BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP +LIBARCHIVE) container-test-run-certificates> Detected virtualization systemd-nspawn. container-test-run-certificates> Detected architecture arm64. container-test-run-certificates> Detected first boot. container-test-run-certificates> Initializing machine ID from container UUID. container-test-run-certificates> Applying preset policy. container-test-run-certificates> Populated /etc with preset unit settings. container-test-run-certificates> Queued start job for default target Multi-User System. container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> <<< Welcome to NixOS test (aarch64) - console >>> container-test-run-certificates> + systemd-run /bin/sh -c '/nix/store/fl0k50cdb33a5xxzlzmz5782yw66rj4r-coreutils-9.11/bin/sleep 999999999 && echo 90c17413-0f6a-4d18-9dab-aa99341f7648' container-test-run-certificates> Running as unit: run-p304-i28306939.service; invocation ID: a16d72ab5eec4651bf920b3e73b0cff5 container-test-run-certificates> To attach to container client run on the same machine that runs the test: container-test-run-certificates> sudo nsenter --user --target $(\pgrep -f '^/bin/sh.*90c17413-0f6a-4d18-9dab-aa99341f7648') --mount --uts --ipc --net --pid --cgroup /bin/sh -c bash container-test-run-certificates> container-test-run-certificates> To inject external network and continue test, run: container-test-run-certificates> sudo /nix/store/76jq0mngg7m8zv5yjz1qgg0xspzi8x2w-python3-3.13.15/bin/python3.13 /nix/store/1v002aslhnn1b7kr1fq8m14lldran2b0-test-driver-0.0.1/lib/python3.13/site-packages/test_driver/inject_network.py 90c17413-0f6a-4d18-9dab-aa99341f7648 container-test-run-certificates> container-test-run-certificates> <<< NixOS Stage 2 >>> container-test-run-certificates> container-test-run-certificates> booting system configuration /nix/store/yy2gpyndwlx0k175ldkv2z3bnqqg7kih-nixos-system-server-test container-test-run-certificates> running activation script... container-test-run-certificates> setting up /etc... container-test-run-certificates> 2: host0@if5: mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000 container-test-run-certificates> link/ether be:aa:dd:39:86:e7 brd ff:ff:ff:ff:ff:ff link-netnsid 0 container-test-run-certificates> setting up age secrets... container-test-run-certificates> starting systemd... container-test-run-certificates> systemd 260.4 running in system mode (+PAM +AUDIT -SELINUX +APPARMOR +IMA +IPE +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS +FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 +PWQUALITY +P11KIT +QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD +BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP +LIBARCHIVE) container-test-run-certificates> Detected virtualization systemd-nspawn. container-test-run-certificates> Detected architecture arm64. container-test-run-certificates> Detected first boot. container-test-run-certificates> Initializing machine ID from container UUID. container-test-run-certificates> Applying preset policy. container-test-run-certificates> Populated /etc with preset unit settings. container-test-run-certificates> Queued start job for default target Multi-User System. container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> <<< Welcome to NixOS test (aarch64) - console >>> container-test-run-certificates> + systemd-run /bin/sh -c '/nix/store/fl0k50cdb33a5xxzlzmz5782yw66rj4r-coreutils-9.11/bin/sleep 999999999 && echo 004ba63d-b781-46f9-9d48-3534aa0b7c39' container-test-run-certificates> Running as unit: run-p397-i28306945.service; invocation ID: 80f3769b739a42faa7fb2b509b13bf39 container-test-run-certificates> To attach to container server run on the same machine that runs the test: container-test-run-certificates> sudo nsenter --user --target $(\pgrep -f '^/bin/sh.*004ba63d-b781-46f9-9d48-3534aa0b7c39') --mount --uts --ipc --net --pid --cgroup /bin/sh -c bash container-test-run-certificates> container-test-run-certificates> To inject external network and continue test, run: container-test-run-certificates> sudo /nix/store/76jq0mngg7m8zv5yjz1qgg0xspzi8x2w-python3-3.13.15/bin/python3.13 /nix/store/1v002aslhnn1b7kr1fq8m14lldran2b0-test-driver-0.0.1/lib/python3.13/site-packages/test_driver/inject_network.py 004ba63d-b781-46f9-9d48-3534aa0b7c39 container-test-run-certificates> + systemctl restart acme-order-renew-ca.foo.service container-test-run-certificates> + systemctl restart acme-test.foo.service container-test-run-certificates> client: waiting for success: curl -v https://test.foo container-test-run-certificates> + curl -v https://test.foo container-test-run-certificates> * Host test.foo:443 was resolved. container-test-run-certificates> * IPv6: (none) container-test-run-certificates> * IPv4: 192.168.1.3 container-test-run-certificates> * Trying 192.168.1.3:443... container-test-run-certificates> * ALPN: curl offers h2,http/1.1 container-test-run-certificates> } [5 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Client hello (1): container-test-run-certificates> } [1552 bytes data] container-test-run-certificates> * SSL Trust Anchors: container-test-run-certificates> * OpenSSL default paths (fallback) container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Server hello (2): container-test-run-certificates> { [1210 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS change cipher, Change cipher spec (1): container-test-run-certificates> { [1 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): container-test-run-certificates> { [19 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Certificate (11): container-test-run-certificates> { [1008 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, CERT verify (15): container-test-run-certificates> { [111 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Finished (20): container-test-run-certificates> { [52 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): container-test-run-certificates> } [1 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Finished (20): container-test-run-certificates> } [52 bytes data] container-test-run-certificates> * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey container-test-run-certificates> * ALPN: server accepted h2 container-test-run-certificates> * Server certificate: container-test-run-certificates> * subject: CN=test.foo container-test-run-certificates> * start date: Oct 1 00:21:06 2026 GMT container-test-run-certificates> * expire date: Oct 31 00:21:06 2028 GMT container-test-run-certificates> * issuer: CN=minica root ca 4c8395 container-test-run-certificates> * Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * subjectAltName: "test.foo" matches cert's "test.foo" container-test-run-certificates> * OpenSSL verify result: 13 container-test-run-certificates> * SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> * closing connection #0 container-test-run-certificates> curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> More details here: https://curl.se/docs/sslcerts.html container-test-run-certificates> container-test-run-certificates> curl failed to verify the legitimacy of the server and therefore could not container-test-run-certificates> establish a secure connection to it. To learn more about this situation and container-test-run-certificates> how to fix it, please visit the webpage mentioned above. container-test-run-certificates> + curl -v https://test.foo container-test-run-certificates> * Host test.foo:443 was resolved. container-test-run-certificates> * IPv6: (none) container-test-run-certificates> * IPv4: 192.168.1.3 container-test-run-certificates> * Trying 192.168.1.3:443... container-test-run-certificates> * ALPN: curl offers h2,http/1.1 container-test-run-certificates> } [5 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Client hello (1): container-test-run-certificates> } [1552 bytes data] container-test-run-certificates> * SSL Trust Anchors: container-test-run-certificates> * OpenSSL default paths (fallback) container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Server hello (2): container-test-run-certificates> { [1210 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS change cipher, Change cipher spec (1): container-test-run-certificates> { [1 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): container-test-run-certificates> { [19 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Certificate (11): container-test-run-certificates> { [1008 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, CERT verify (15): container-test-run-certificates> { [111 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Finished (20): container-test-run-certificates> { [52 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): container-test-run-certificates> } [1 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Finished (20): container-test-run-certificates> } [52 bytes data] container-test-run-certificates> * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey container-test-run-certificates> * ALPN: server accepted h2 container-test-run-certificates> * Server certificate: container-test-run-certificates> * subject: CN=test.foo container-test-run-certificates> * start date: Oct 1 00:21:06 2026 GMT container-test-run-certificates> * expire date: Oct 31 00:21:06 2028 GMT container-test-run-certificates> * issuer: CN=minica root ca 4c8395 container-test-run-certificates> * Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * subjectAltName: "test.foo" matches cert's "test.foo" container-test-run-certificates> * OpenSSL verify result: 13 container-test-run-certificates> * SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> * closing connection #0 container-test-run-certificates> curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> More details here: https://curl.se/docs/sslcerts.html container-test-run-certificates> container-test-run-certificates> curl failed to verify the legitimacy of the server and therefore could not container-test-run-certificates> establish a secure connection to it. To learn more about this situation and container-test-run-certificates> how to fix it, please visit the webpage mentioned above. container-test-run-certificates> + curl -v https://test.foo container-test-run-certificates> * Host test.foo:443 was resolved. container-test-run-certificates> * IPv6: (none) container-test-run-certificates> * IPv4: 192.168.1.3 container-test-run-certificates> * Trying 192.168.1.3:443... container-test-run-certificates> * ALPN: curl offers h2,http/1.1 container-test-run-certificates> } [5 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Client hello (1): container-test-run-certificates> } [1552 bytes data] container-test-run-certificates> * SSL Trust Anchors: container-test-run-certificates> * OpenSSL default paths (fallback) container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Server hello (2): container-test-run-certificates> { [1210 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS change cipher, Change cipher spec (1): container-test-run-certificates> { [1 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): container-test-run-certificates> { [19 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Certificate (11): container-test-run-certificates> { [1008 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, CERT verify (15): container-test-run-certificates> { [112 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Finished (20): container-test-run-certificates> { [52 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): container-test-run-certificates> } [1 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Finished (20): container-test-run-certificates> } [52 bytes data] container-test-run-certificates> * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey container-test-run-certificates> * ALPN: server accepted h2 container-test-run-certificates> * Server certificate: container-test-run-certificates> * subject: CN=test.foo container-test-run-certificates> * start date: Oct 1 00:21:06 2026 GMT container-test-run-certificates> * expire date: Oct 31 00:21:06 2028 GMT container-test-run-certificates> * issuer: CN=minica root ca 4c8395 container-test-run-certificates> * Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * subjectAltName: "test.foo" matches cert's "test.foo" container-test-run-certificates> * OpenSSL verify result: 13 container-test-run-certificates> * SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> * closing connection #0 container-test-run-certificates> curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> More details here: https://curl.se/docs/sslcerts.html container-test-run-certificates> container-test-run-certificates> curl failed to verify the legitimacy of the server and therefore could not container-test-run-certificates> establish a secure connection to it. To learn more about this situation and container-test-run-certificates> how to fix it, please visit the webpage mentioned above. container-test-run-certificates> + curl -v https://test.foo container-test-run-certificates> * Host test.foo:443 was resolved. container-test-run-certificates> * IPv6: (none) container-test-run-certificates> * IPv4: 192.168.1.3 container-test-run-certificates> * Trying 192.168.1.3:443... container-test-run-certificates> * ALPN: curl offers h2,http/1.1 container-test-run-certificates> } [5 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Client hello (1): container-test-run-certificates> } [1552 bytes data] container-test-run-certificates> * SSL Trust Anchors: container-test-run-certificates> * OpenSSL default paths (fallback) container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Server hello (2): container-test-run-certificates> { [1210 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS change cipher, Change cipher spec (1): container-test-run-certificates> { [1 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): container-test-run-certificates> { [19 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Certificate (11): container-test-run-certificates> { [931 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, CERT verify (15): container-test-run-certificates> { [79 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Finished (20): container-test-run-certificates> { [52 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): container-test-run-certificates> } [1 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Finished (20): container-test-run-certificates> } [52 bytes data] container-test-run-certificates> * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey container-test-run-certificates> * ALPN: server accepted h2 container-test-run-certificates> * Server certificate: container-test-run-certificates> * subject: CN=test.foo container-test-run-certificates> * start date: Oct 1 00:20:19 2026 GMT container-test-run-certificates> * expire date: Dec 30 00:21:19 2026 GMT container-test-run-certificates> * issuer: CN=Clan Intermediate CA container-test-run-certificates> * Certificate level 0: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA256 container-test-run-certificates> * Certificate level 1: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA256 container-test-run-certificates> * Certificate level 2: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA256 container-test-run-certificates> * subjectAltName: "test.foo" matches cert's "test.foo" container-test-run-certificates> * OpenSSL verify result: 0 container-test-run-certificates> * SSL certificate verified via OpenSSL. container-test-run-certificates> * Established connection to test.foo (192.168.1.3 port 443) from 192.168.1.2 port 52584 container-test-run-certificates> % Total % Received % Xferd Average Speed Time Time Time Current container-test-run-certificates> Dload Upload Total Spent Left Speed container-test-run-certificates> 0 0 0 0 0 0 0 0 0* using HTTP/2 container-test-run-certificates> * [HTTP/2] [1] OPENED stream for https://test.foo/ container-test-run-certificates> * [HTTP/2] [1] [:method: GET] container-test-run-certificates> * [HTTP/2] [1] [:scheme: https] container-test-run-certificates> * [HTTP/2] [1] [:authority: test.foo] container-test-run-certificates> * [HTTP/2] [1] [:path: /] container-test-run-certificates> * [HTTP/2] [1] [user-agent: curl/8.22.0] container-test-run-certificates> * [HTTP/2] [1] [accept: */*] container-test-run-certificates> } [5 bytes data] container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> * Request completely sent off container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4): container-test-run-certificates> { [265 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4): container-test-run-certificates> { [265 bytes data] container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> { [5 bytes data] container-test-run-certificates> 100 20 100 20 0 0 664 0 0 container-test-run-certificates> * Connection #0 to host test.foo:443 left intact container-test-run-certificates> (finished: waiting for success: curl -v https://test.foo, in 3.18 seconds) container-test-run-certificates> + openssl s_client -connect test.foo:443 -servername test.foo container-test-run-certificates> + openssl x509 -text -noout container-test-run-certificates> Certificate: container-test-run-certificates> Data: container-test-run-certificates> Version: 3 (0x2) container-test-run-certificates> Serial Number: container-test-run-certificates> 61:35:ec:84:99:61:02:11:d1:de:2d:e2:cb:96:8d:43 container-test-run-certificates> Signature Algorithm: ecdsa-with-SHA256 container-test-run-certificates> Issuer: CN=Clan Intermediate CA container-test-run-certificates> Validity container-test-run-certificates> Not Before: Oct 1 00:20:19 2026 GMT container-test-run-certificates> Not After : Dec 30 00:21:19 2026 GMT container-test-run-certificates> Subject: CN=test.foo container-test-run-certificates> Subject Public Key Info: container-test-run-certificates> Public Key Algorithm: id-ecPublicKey container-test-run-certificates> Public-Key: (256 bit) container-test-run-certificates> pub: container-test-run-certificates> 04:8f:e2:a8:87:eb:60:9d:a2:4b:82:5d:cc:bd:37: container-test-run-certificates> 49:34:93:de:c2:12:c4:f0:86:bb:71:26:16:bf:a0: container-test-run-certificates> 73:b0:fa:82:ba:83:7e:0e:cd:1e:37:cb:3a:c0:30: container-test-run-certificates> eb:e9:67:a6:30:ed:63:3f:7c:09:ab:23:1b:de:81: container-test-run-certificates> 5e:77:01:37:cc container-test-run-certificates> ASN1 OID: prime256v1 container-test-run-certificates> NIST CURVE: P-256 container-test-run-certificates> X509v3 extensions: container-test-run-certificates> X509v3 Key Usage: critical container-test-run-certificates> Digital Signature container-test-run-certificates> X509v3 Extended Key Usage: container-test-run-certificates> TLS Web Server Authentication, TLS Web Client Authentication container-test-run-certificates> X509v3 Subject Key Identifier: container-test-run-certificates> F2:62:9C:BD:70:9E:1D:5B:78:5A:72:91:6E:1A:D4:C9:33:9A:27:DE container-test-run-certificates> X509v3 Authority Key Identifier: container-test-run-certificates> 12:7B:BB:87:0A:DE:A2:A4:61:95:C5:6B:DF:BC:AA:93:FE:C3:16:9F container-test-run-certificates> X509v3 Subject Alternative Name: container-test-run-certificates> DNS:test.foo container-test-run-certificates> 1.3.6.1.4.1.37476.9000.64.1: container-test-run-certificates> 0......acme.. container-test-run-certificates> Signature Algorithm: ecdsa-with-SHA256 container-test-run-certificates> Signature Value: container-test-run-certificates> 30:46:02:21:00:d5:53:36:48:a5:18:9f:9d:18:a9:aa:47:3e: container-test-run-certificates> 0b:db:6c:f2:20:2a:ac:b4:d9:6a:74:60:14:7e:5a:d7:61:05: container-test-run-certificates> 15:02:21:00:d1:b0:1c:7f:cb:bf:67:1f:b9:22:7a:6b:ac:14: container-test-run-certificates> 2c:fa:0d:1f:1d:88:1d:d5:82:a8:a6:19:61:e9:f5:40:44:ce container-test-run-certificates> container-test-run-certificates> container-test-run-certificates>