don't know how to build these paths: /nix/store/jj8vh1iq5shxpm0zqc725j65r8p0gkvp-container-test-run-certificates.drv warning: ignoring the client-specified setting 'store', because it is a restricted setting and you are not a trusted user building '/nix/store/lm1dm8x3qfbybkq0l4y3s3lkwwb65hws-unit-acme-renew-ca.foo.timer.drv' on nix-store.geninf.io:50051 unit-acme-renew-ca.foo.timer> web01: building lm1dm8x3qfbybkq0l4y3s3lkwwb65hws-unit-acme-renew-ca.foo.timer.drv building '/nix/store/nmd2dkz5yy1wbnmfchm12r59gnlznb0n-unit-acme-account-d22a46d9459bf683a338.target.drv' on nix-store.geninf.io:50051 unit-acme-account-d22a46d9459bf683a338.target> web01: building nmd2dkz5yy1wbnmfchm12r59gnlznb0n-unit-acme-account-d22a46d9459bf683a338.target.drv building '/nix/store/wzjd82p08l8z0il44d0y69cr7grh1wgh-ca.json.drv' on nix-store.geninf.io:50051 ca.json> web01: building wzjd82p08l8z0il44d0y69cr7grh1wgh-ca.json.drv ca.json> structuredAttrs is enabled building '/nix/store/7ydxq449d906452ld9xgvrc1g69s1gxq-acme-setup-privileged.drv' on nix-store.geninf.io:50051 acme-setup-privileged> web01: building 7ydxq449d906452ld9xgvrc1g69s1gxq-acme-setup-privileged.drv building '/nix/store/j0dg65sc30arlimww36rscva04jq6h8d-nginx.conf.drv' on nix-store.geninf.io:50051 nginx.conf> web01: building j0dg65sc30arlimww36rscva04jq6h8d-nginx.conf.drv nginx.conf> nginx.conf> ==================== Results =================== nginx.conf> No issues found. nginx.conf> nginx.conf> ==================== Summary =================== nginx.conf> Total issues: nginx.conf> Unspecified: 0 nginx.conf> Low: 0 nginx.conf> Medium: 0 nginx.conf> High: 0 nginx.conf> building '/nix/store/srnyb26ghhrni4czfnrinbk6y2584hkz-etc-hostname.drv' on nix-store.geninf.io:50051 etc-hostname> gi-build-x86-01: building srnyb26ghhrni4czfnrinbk6y2584hkz-etc-hostname.drv building '/nix/store/yv6hj0hpvssskf5bi7d3firdh80grdhp-unit-nginx-config-reload.service.drv' on nix-store.geninf.io:50051 unit-nginx-config-reload.service> web01: building yv6hj0hpvssskf5bi7d3firdh80grdhp-unit-nginx-config-reload.service.drv building '/nix/store/51y85hnfk7wl72k9hmiv2qpn5nd5hvqk-X-Restart-Triggers-step-ca.drv' on nix-store.geninf.io:50051 X-Restart-Triggers-step-ca> web01: building 51y85hnfk7wl72k9hmiv2qpn5nd5hvqk-X-Restart-Triggers-step-ca.drv building '/nix/store/l0j9b16ssfqizb2cjm55qq9ib6kwn394-unit-script-nginx-pre-start.drv' on nix-store.geninf.io:50051 unit-script-nginx-pre-start> web01: building l0j9b16ssfqizb2cjm55qq9ib6kwn394-unit-script-nginx-pre-start.drv building '/nix/store/6x22lamkzv04pnzhmsss7dbs5fd05lnl-unit-acme-setup.service.drv' on nix-store.geninf.io:50051 unit-acme-setup.service> web01: building 6x22lamkzv04pnzhmsss7dbs5fd05lnl-unit-acme-setup.service.drv building '/nix/store/34pv1zsrs835fvxlsprda9c4n7jwhid2-extra-hosts.drv' on nix-store.geninf.io:50051 extra-hosts> build-x86-01: building 34pv1zsrs835fvxlsprda9c4n7jwhid2-extra-hosts.drv building '/nix/store/49jr3s47ml515qf50lc781ng6ajabc80-unit-acme-renew-test.foo.timer.drv' on nix-store.geninf.io:50051 unit-acme-renew-test.foo.timer> build-x86-01: building 49jr3s47ml515qf50lc781ng6ajabc80-unit-acme-renew-test.foo.timer.drv building '/nix/store/100l3ig3jliv6x0n4y8p8zlzhnarfgnq-unit-nginx.service.drv' on nix-store.geninf.io:50051 unit-nginx.service> web01: building 100l3ig3jliv6x0n4y8p8zlzhnarfgnq-unit-nginx.service.drv building '/nix/store/r75lq06884llv02rvjy3hzii5mc5w63v-users-groups.json.drv' on nix-store.geninf.io:50051 users-groups.json> build-x86-01: building r75lq06884llv02rvjy3hzii5mc5w63v-users-groups.json.drv building '/nix/store/iyx80gzl1y01l6h2a10ag2pi3fks04kw-unit-step-ca.service.drv' on nix-store.geninf.io:50051 unit-step-ca.service> web01: building iyx80gzl1y01l6h2a10ag2pi3fks04kw-unit-step-ca.service.drv building '/nix/store/fhiwk1r75x7asrp654v3z927yg9zmyaf-decrypt-age-secrets.drv' on nix-store.geninf.io:50051 decrypt-age-secrets> build-x86-01: building fhiwk1r75x7asrp654v3z927yg9zmyaf-decrypt-age-secrets.drv building '/nix/store/6q1004lddnr6jbsv4z788wcgiaqmxma3-acme-postrun.drv' on nix-store.geninf.io:50051 acme-postrun> build-x86-01: building 6q1004lddnr6jbsv4z788wcgiaqmxma3-acme-postrun.drv building '/nix/store/jn2r936hlp7n2r9dby81kc5jysa7192z-X-Restart-Triggers-acme-ca.foo.drv' on nix-store.geninf.io:50051 X-Restart-Triggers-acme-ca.foo> build-x86-01: building jn2r936hlp7n2r9dby81kc5jysa7192z-X-Restart-Triggers-acme-ca.foo.drv building '/nix/store/njmqivv43amk4ckal2frklpafv0f5fzk-nginx.conf.drv' on nix-store.geninf.io:50051 nginx.conf> gi-build-x86-01: building njmqivv43amk4ckal2frklpafv0f5fzk-nginx.conf.drv building '/nix/store/x7xcvzk4m0skyfbza5y416gifw1w9kvq-unit-script-acme-ca.foo-start.drv' on nix-store.geninf.io:50051 unit-script-acme-ca.foo-start> gi-build-x86-01: building x7xcvzk4m0skyfbza5y416gifw1w9kvq-unit-script-acme-ca.foo-start.drv building '/nix/store/ldcddlp6zyma61sgc0jw13h14r4n6i8p-vars-check-certificates.drv' on nix-store.geninf.io:50051 vars-check-certificates> gi-build-x86-01: building ldcddlp6zyma61sgc0jw13h14r4n6i8p-vars-check-certificates.drv building '/nix/store/liwn5rhxksxirwvm73i08vzjrbhd80yz-system-path.drv' on nix-store.geninf.io:50051 system-path> build-x86-01: building liwn5rhxksxirwvm73i08vzjrbhd80yz-system-path.drv nginx.conf> nginx.conf> ==================== Results =================== nginx.conf> No issues found. nginx.conf> nginx.conf> ==================== Summary =================== nginx.conf> Total issues: nginx.conf> Unspecified: 0 nginx.conf> Low: 0 nginx.conf> Medium: 0 nginx.conf> High: 0 nginx.conf> system-path> structuredAttrs is enabled system-path> created 1816 symlinks in user environment building '/nix/store/8a4ivjb9nypfxs6jz1xpwqr42crk1wbq-acme-postrun.drv' on nix-store.geninf.io:50051 acme-postrun> build-x86-01: building 8a4ivjb9nypfxs6jz1xpwqr42crk1wbq-acme-postrun.drv building '/nix/store/3ck569s58glnrk9gj227la3y6qm3pqcs-string-hosts.drv' on nix-store.geninf.io:50051 string-hosts> build-x86-01: building 3ck569s58glnrk9gj227la3y6qm3pqcs-string-hosts.drv vars-check-certificates> Running vars check using Nix-based executor... vars-check-certificates> Executing shared generators... vars-check-certificates> Executing shared generator: step-ca vars-check-certificates> + set -euo pipefail vars-check-certificates> + PATH=/nix/store/id54fjjhi1d7x1bbvlr73kf9vnkbqw38-step-cli-0.30.2/bin:/nix/store/bhv6xyvqw6gjs3j488gi1z6wdv18bdpa-coreutils-9.11/bin vars-check-certificates> + [[ ! -d /etc ]] vars-check-certificates> + mkdir -p /etc vars-check-certificates> + cat vars-check-certificates> ++ id -g vars-check-certificates> + cat vars-check-certificates> ++ id -u vars-check-certificates> ++ id -g vars-check-certificates> + cat vars-check-certificates> + step certificate create --template /nix/store/hs8zdxfcnys1dcrjax0jfinynsjx02vz-root.tmpl 'Clan Root CA' /output/ca.crt /output/ca.key --kty EC --curve P-256 --not-after=8760h --not-before=-12h --no-password --insecure vars-check-certificates> Your certificate has been saved in /output/ca.crt. vars-check-certificates> Your private key has been saved in /output/ca.key. vars-check-certificates> ✓ Generated shared file: step-ca/ca.crt vars-check-certificates> ✓ Generated shared file: step-ca/ca.key vars-check-certificates> ✓ Shared Generator step-ca completed vars-check-certificates> ✓ Shared generators completed vars-check-certificates> Processing machine: ca vars-check-certificates> Generator execution order: state-version -> step-intermediate-key -> step-intermediate-cert vars-check-certificates> Executing generator: state-version vars-check-certificates> + set -euo pipefail vars-check-certificates> + PATH=/nix/store/bhv6xyvqw6gjs3j488gi1z6wdv18bdpa-coreutils-9.11/bin vars-check-certificates> + [[ ! -d /etc ]] vars-check-certificates> + mkdir -p /etc vars-check-certificates> + cat vars-check-certificates> ++ id -g vars-check-certificates> + cat vars-check-certificates> ++ id -u vars-check-certificates> ++ id -g vars-check-certificates> + cat vars-check-certificates> + echo -n 26.05 vars-check-certificates> ✓ Generated file: state-version/version vars-check-certificates> ✓ Generator state-version completed vars-check-certificates> Executing generator: step-intermediate-key vars-check-certificates> + set -euo pipefail vars-check-certificates> + PATH=/nix/store/id54fjjhi1d7x1bbvlr73kf9vnkbqw38-step-cli-0.30.2/bin:/nix/store/bhv6xyvqw6gjs3j488gi1z6wdv18bdpa-coreutils-9.11/bin vars-check-certificates> + [[ ! -d /etc ]] vars-check-certificates> + mkdir -p /etc vars-check-certificates> + cat vars-check-certificates> ++ id -g vars-check-certificates> + cat vars-check-certificates> ++ id -u vars-check-certificates> ++ id -g vars-check-certificates> + cat vars-check-certificates> + step crypto keypair --kty EC --curve P-256 --no-password --insecure /output/intermediate.pub /output/intermediate.key vars-check-certificates> Your public key has been saved in /output/intermediate.pub. vars-check-certificates> Your private key has been saved in /output/intermediate.key. vars-check-certificates> ✓ Generated file: step-intermediate-key/intermediate.key vars-check-certificates> ✓ Generator step-intermediate-key completed vars-check-certificates> Executing generator: step-intermediate-cert vars-check-certificates> + set -euo pipefail vars-check-certificates> + PATH=/nix/store/id54fjjhi1d7x1bbvlr73kf9vnkbqw38-step-cli-0.30.2/bin:/nix/store/bhv6xyvqw6gjs3j488gi1z6wdv18bdpa-coreutils-9.11/bin vars-check-certificates> + [[ ! -d /etc ]] vars-check-certificates> + mkdir -p /etc vars-check-certificates> + cat vars-check-certificates> ++ id -g vars-check-certificates> + cat vars-check-certificates> ++ id -u vars-check-certificates> ++ id -g vars-check-certificates> + cat vars-check-certificates> + step certificate create --ca /input/step-ca/ca.crt --ca-key /input/step-ca/ca.key --ca-password-file /dev/null --key /input/step-intermediate-key/intermediate.key --template /nix/store/cl2vk56n9g39nf7arqyx4b73vihlfp33-intermediate.tmpl --not-after 8760h --not-before=-12h --no-password --insecure 'Clan Intermediate CA' /output/intermediate.crt vars-check-certificates> Your certificate has been saved in /output/intermediate.crt. vars-check-certificates> ✓ Generated file: step-intermediate-cert/intermediate.crt vars-check-certificates> ✓ Generator step-intermediate-cert completed vars-check-certificates> ✓ Machine ca completed vars-check-certificates> Processing machine: client vars-check-certificates> Generator execution order: state-version vars-check-certificates> Executing generator: state-version vars-check-certificates> + set -euo pipefail vars-check-certificates> + PATH=/nix/store/bhv6xyvqw6gjs3j488gi1z6wdv18bdpa-coreutils-9.11/bin vars-check-certificates> + [[ ! -d /etc ]] vars-check-certificates> + mkdir -p /etc vars-check-certificates> + cat vars-check-certificates> ++ id -g vars-check-certificates> + cat vars-check-certificates> ++ id -u vars-check-certificates> ++ id -g vars-check-certificates> + cat vars-check-certificates> + echo -n 26.05 vars-check-certificates> ✓ Generated file: state-version/version vars-check-certificates> ✓ Generator state-version completed vars-check-certificates> ✓ Machine client completed vars-check-certificates> Processing machine: server vars-check-certificates> Generator execution order: state-version vars-check-certificates> Executing generator: state-version vars-check-certificates> + set -euo pipefail vars-check-certificates> + PATH=/nix/store/bhv6xyvqw6gjs3j488gi1z6wdv18bdpa-coreutils-9.11/bin vars-check-certificates> + [[ ! -d /etc ]] vars-check-certificates> + mkdir -p /etc vars-check-certificates> + cat vars-check-certificates> ++ id -g vars-check-certificates> + cat vars-check-certificates> ++ id -u vars-check-certificates> ++ id -g vars-check-certificates> + cat vars-check-certificates> + echo -n 26.05 vars-check-certificates> ✓ Generated file: state-version/version vars-check-certificates> ✓ Generator state-version completed vars-check-certificates> ✓ Machine server completed vars-check-certificates> ✓ All vars checks completed successfully building '/nix/store/sqbpyw9cjfkr3h0crci99bpw9cdd22l1-unit-script-acme-order-renew-test.foo-start.drv' on nix-store.geninf.io:50051 unit-script-acme-order-renew-test.foo-start> gi-build-x86-02: building sqbpyw9cjfkr3h0crci99bpw9cdd22l1-unit-script-acme-order-renew-test.foo-start.drv building '/nix/store/wi4kxax1kbmaa4ahq5ydzcbgf3jvj8na-system-generators.drv' on nix-store.geninf.io:50051 system-generators> build-x86-01: building wi4kxax1kbmaa4ahq5ydzcbgf3jvj8na-system-generators.drv building '/nix/store/lh22l3nfq0nph2mii59kcrh0zgnj9m4i-X-Restart-Triggers-acme-test.foo.drv' on nix-store.geninf.io:50051 X-Restart-Triggers-acme-test.foo> gi-build-x86-02: building lh22l3nfq0nph2mii59kcrh0zgnj9m4i-X-Restart-Triggers-acme-test.foo.drv building '/nix/store/kw886hm0bbzza5abmj6kakcikyzvb38j-unit-nginx-config-reload.service.drv' on nix-store.geninf.io:50051 unit-nginx-config-reload.service> gi-build-x86-02: building kw886hm0bbzza5abmj6kakcikyzvb38j-unit-nginx-config-reload.service.drv building '/nix/store/076f03wpi7p631wla717ipdlc043kq3l-system-path.drv' on nix-store.geninf.io:50051 system-path> build-x86-01: building 076f03wpi7p631wla717ipdlc043kq3l-system-path.drv system-path> structuredAttrs is enabled building '/nix/store/3l4bafj76x3p81si16wwzlvlsrmnn4nl-unit-script-acme-test.foo-start.drv' on nix-store.geninf.io:50051 unit-script-acme-test.foo-start> gi-build-x86-02: building 3l4bafj76x3p81si16wwzlvlsrmnn4nl-unit-script-acme-test.foo-start.drv building '/nix/store/6f8b929gbvb4z3gnpyx7a1lvak4ln7wz-users-groups.json.drv' on nix-store.geninf.io:50051 users-groups.json> gi-build-x86-02: building 6f8b929gbvb4z3gnpyx7a1lvak4ln7wz-users-groups.json.drv building '/nix/store/1zyvslbjc4asa4jp6izgj9cdlzq2wg14-unit-script-acme-order-renew-ca.foo-start.drv' on nix-store.geninf.io:50051 unit-script-acme-order-renew-ca.foo-start> gi-build-x86-02: building 1zyvslbjc4asa4jp6izgj9cdlzq2wg14-unit-script-acme-order-renew-ca.foo-start.drv building '/nix/store/9y8qddjxgjiqly9dj687qmmp36rbri61-testScript.drv' on nix-store.geninf.io:50051 testScript> gi-build-x86-02: building 9y8qddjxgjiqly9dj687qmmp36rbri61-testScript.drv building '/nix/store/f6bxpdaka7npffnqh8rb2cc6hqhqlwf0-acme-setup-privileged.drv' on nix-store.geninf.io:50051 acme-setup-privileged> gi-build-x86-02: building f6bxpdaka7npffnqh8rb2cc6hqhqlwf0-acme-setup-privileged.drv building '/nix/store/whcnfk0gb9zbccv4vds4728namcz2v21-unit-acme-account-2c44cb477b4787b2cf13.target.drv' on nix-store.geninf.io:50051 unit-acme-account-2c44cb477b4787b2cf13.target> gi-build-x86-02: building whcnfk0gb9zbccv4vds4728namcz2v21-unit-acme-account-2c44cb477b4787b2cf13.target.drv building '/nix/store/hz9f3xcpvla9dszq2w2zsb5rjkqanyq4-system-path.drv' on nix-store.geninf.io:50051 system-path> web01: building hz9f3xcpvla9dszq2w2zsb5rjkqanyq4-system-path.drv system-path> structuredAttrs is enabled system-path> created 1816 symlinks in user environment building '/nix/store/cbsxdfl346kgfm46f2gqwj83y143b83s-system-shutdown.drv' on nix-store.geninf.io:50051 system-shutdown> gi-build-x86-01: building cbsxdfl346kgfm46f2gqwj83y143b83s-system-shutdown.drv building '/nix/store/d2drmg5fd06pfqxab8wg1wcbnsyh1xr3-hosts.drv' on nix-store.geninf.io:50051 hosts> build-x86-01: building d2drmg5fd06pfqxab8wg1wcbnsyh1xr3-hosts.drv system-path> created 1816 symlinks in user environment building '/nix/store/jchggb1h814zrvkgqmrrgzify8sf403v-hosts.drv' on nix-store.geninf.io:50051 hosts> build-x86-01: building jchggb1h814zrvkgqmrrgzify8sf403v-hosts.drv building '/nix/store/6rg8ga9idxb6j1a6kfk6ynjp3bqn4d18-dry-activate.drv' on nix-store.geninf.io:50051 dry-activate> build-x86-01: building 6rg8ga9idxb6j1a6kfk6ynjp3bqn4d18-dry-activate.drv building '/nix/store/i5isjlv1w1gv28dnajc9rwji27j0mv4d-user-generators.drv' on nix-store.geninf.io:50051 user-generators> gi-build-x86-01: building i5isjlv1w1gv28dnajc9rwji27j0mv4d-user-generators.drv building '/nix/store/qwywf77a5zhc7pfjf8h0zg7yg8sm87w7-dbus-1.drv' on nix-store.geninf.io:50051 dbus-1> web01: building qwywf77a5zhc7pfjf8h0zg7yg8sm87w7-dbus-1.drv building '/nix/store/jq4149nkvmxbxf2a0jkvm294p6h8cpvm-unit-acme-ca.foo.service.drv' on nix-store.geninf.io:50051 unit-acme-ca.foo.service> build-x86-01: building jq4149nkvmxbxf2a0jkvm294p6h8cpvm-unit-acme-ca.foo.service.drv building '/nix/store/dn7p5rsfh5fxrysxyaqpa8caf2hdvyfw-X-Restart-Triggers-dbus-broker.drv' on nix-store.geninf.io:50051 X-Restart-Triggers-dbus-broker> web01: building dn7p5rsfh5fxrysxyaqpa8caf2hdvyfw-X-Restart-Triggers-dbus-broker.drv building '/nix/store/ixlqyn42hvi8z3j9lf1iv0lpirjrah7k-unit-dbus-broker.service.drv' on nix-store.geninf.io:50051 unit-dbus-broker.service> web01: building ixlqyn42hvi8z3j9lf1iv0lpirjrah7k-unit-dbus-broker.service.drv building '/nix/store/ackr9jxrhy5ndl7j2x1frfvx9li2nbf9-unit-script-nginx-pre-start.drv' on nix-store.geninf.io:50051 unit-script-nginx-pre-start> gi-build-x86-01: building ackr9jxrhy5ndl7j2x1frfvx9li2nbf9-unit-script-nginx-pre-start.drv building '/nix/store/fn279m4zdgsvrr6w6wz76352lc6xy883-hosts.drv' on nix-store.geninf.io:50051 hosts> build-x86-01: building fn279m4zdgsvrr6w6wz76352lc6xy883-hosts.drv building '/nix/store/qn0wsnpd5k8ibrs4w7w7l3fn43hbgknq-dbus-1.drv' on nix-store.geninf.io:50051 dbus-1> build-x86-01: building qn0wsnpd5k8ibrs4w7w7l3fn43hbgknq-dbus-1.drv building '/nix/store/ddsxx3lf6d823zg5ak7ck383ggrbm79w-dbus-1.drv' on nix-store.geninf.io:50051 dbus-1> build-x86-01: building ddsxx3lf6d823zg5ak7ck383ggrbm79w-dbus-1.drv building '/nix/store/fvh4rmcv8s6fxzs0cnkdmp254rs2m4dx-unit-dbus-broker.service.drv' on nix-store.geninf.io:50051 unit-dbus-broker.service> build-x86-01: building fvh4rmcv8s6fxzs0cnkdmp254rs2m4dx-unit-dbus-broker.service.drv building '/nix/store/4qf5pp6lm80z3vbcmv62vgvgr3b0k1ca-X-Restart-Triggers-dbus-broker.drv' on nix-store.geninf.io:50051 X-Restart-Triggers-dbus-broker> build-x86-01: building 4qf5pp6lm80z3vbcmv62vgvgr3b0k1ca-X-Restart-Triggers-dbus-broker.drv building '/nix/store/qs9hmkvp38p7d11hq9l75xd0hys970yk-user-units.drv' on nix-store.geninf.io:50051 user-units> build-x86-01: building qs9hmkvp38p7d11hq9l75xd0hys970yk-user-units.drv building '/nix/store/ksyhrjas97l5zaavd4yk2ldrplx0wkv9-X-Restart-Triggers-dbus-broker.drv' on nix-store.geninf.io:50051 X-Restart-Triggers-dbus-broker> build-x86-01: building ksyhrjas97l5zaavd4yk2ldrplx0wkv9-X-Restart-Triggers-dbus-broker.drv building '/nix/store/g8a9m753irw7hcrw4yi1jhvqrgzi2crx-unit-dbus-broker.service.drv' on nix-store.geninf.io:50051 unit-dbus-broker.service> build-x86-01: building g8a9m753irw7hcrw4yi1jhvqrgzi2crx-unit-dbus-broker.service.drv building '/nix/store/53mi40p5b7sqg6frss21sqkrxricxkdg-unit-dbus-broker.service.drv' on nix-store.geninf.io:50051 unit-dbus-broker.service> build-x86-01: building 53mi40p5b7sqg6frss21sqkrxricxkdg-unit-dbus-broker.service.drv building '/nix/store/a4n1yb14xrx5w6qq3dswmazlby1zqiz5-unit-dbus-broker.service.drv' on nix-store.geninf.io:50051 unit-dbus-broker.service> build-x86-01: building a4n1yb14xrx5w6qq3dswmazlby1zqiz5-unit-dbus-broker.service.drv building '/nix/store/0spcnnjyc8vbqcgmavzxjsm45jbck2ya-unit-dbus-broker.service.drv' on nix-store.geninf.io:50051 unit-dbus-broker.service> build-x86-01: building 0spcnnjyc8vbqcgmavzxjsm45jbck2ya-unit-dbus-broker.service.drv building '/nix/store/cppdhls9cbdqpfbljgmw9lm2dif0jhij-user-units.drv' on nix-store.geninf.io:50051 user-units> build-x86-01: building cppdhls9cbdqpfbljgmw9lm2dif0jhij-user-units.drv building '/nix/store/bv3rhq11hdn3g2vq7xh8776v18arn6k0-user-units.drv' on nix-store.geninf.io:50051 user-units> build-x86-01: building bv3rhq11hdn3g2vq7xh8776v18arn6k0-user-units.drv building '/nix/store/4w1fqmv23p7if9qffnrqspvvbab9qpdc-unit-acme-setup.service.drv' on nix-store.geninf.io:50051 unit-acme-setup.service> build-x86-01: building 4w1fqmv23p7if9qffnrqspvvbab9qpdc-unit-acme-setup.service.drv building '/nix/store/xhv3xv7fh92qz40vlwj1dd7jnmbf7xn8-unit-acme-order-renew-test.foo.service.drv' on nix-store.geninf.io:50051 unit-acme-order-renew-test.foo.service> build-x86-01: building xhv3xv7fh92qz40vlwj1dd7jnmbf7xn8-unit-acme-order-renew-test.foo.service.drv building '/nix/store/pcwkdnr6kayz25xjxzp28w4ma1sj5rpk-unit-acme-test.foo.service.drv' on nix-store.geninf.io:50051 unit-acme-test.foo.service> build-x86-01: building pcwkdnr6kayz25xjxzp28w4ma1sj5rpk-unit-acme-test.foo.service.drv building '/nix/store/baslhyn8i1skgrmxr7plr5j79c8vzr25-dry-activate.drv' on nix-store.geninf.io:50051 dry-activate> build-x86-01: building baslhyn8i1skgrmxr7plr5j79c8vzr25-dry-activate.drv building '/nix/store/zcq6a0cxdz5bn0bs1w2pxr1ii9g5gbzr-unit-nginx.service.drv' on nix-store.geninf.io:50051 unit-nginx.service> build-x86-01: building zcq6a0cxdz5bn0bs1w2pxr1ii9g5gbzr-unit-nginx.service.drv building '/nix/store/34shgp24ns99ap16672kmg16axkzdd55-nss-cacert-3.126.drv' on nix-store.geninf.io:50051 nss-cacert-3.126> gi-build-x86-02: building 34shgp24ns99ap16672kmg16axkzdd55-nss-cacert-3.126.drv nss-cacert-3.126> Running phase: unpackPhase nss-cacert-3.126> Running phase: patchPhase nss-cacert-3.126> Running phase: updateAutotoolsGnuConfigScriptsPhase nss-cacert-3.126> Running phase: configurePhase nss-cacert-3.126> no configure script, doing nothing nss-cacert-3.126> Running phase: buildPhase nss-cacert-3.126> Running phase: installPhase nss-cacert-3.126> Running phase: fixupPhase nss-cacert-3.126> shrinking RPATHs of ELF executables and libraries in /nix/store/5582l9pyiyylnc0mp5mmhxl2cki3m6ym-nss-cacert-3.126 nss-cacert-3.126> checking for references to /build/ in /nix/store/5582l9pyiyylnc0mp5mmhxl2cki3m6ym-nss-cacert-3.126... nss-cacert-3.126> patching script interpreter paths in /nix/store/5582l9pyiyylnc0mp5mmhxl2cki3m6ym-nss-cacert-3.126 nss-cacert-3.126> shrinking RPATHs of ELF executables and libraries in /nix/store/v6bvy4b1clvzw1gz3l792w16x17ny7x5-nss-cacert-3.126-unbundled nss-cacert-3.126> checking for references to /build/ in /nix/store/v6bvy4b1clvzw1gz3l792w16x17ny7x5-nss-cacert-3.126-unbundled... nss-cacert-3.126> patching script interpreter paths in /nix/store/v6bvy4b1clvzw1gz3l792w16x17ny7x5-nss-cacert-3.126-unbundled nss-cacert-3.126> shrinking RPATHs of ELF executables and libraries in /nix/store/9sjpqbgy80n5nis6n4sz7bfgi4qy3l8j-nss-cacert-3.126-p11kit nss-cacert-3.126> checking for references to /build/ in /nix/store/9sjpqbgy80n5nis6n4sz7bfgi4qy3l8j-nss-cacert-3.126-p11kit... nss-cacert-3.126> patching script interpreter paths in /nix/store/9sjpqbgy80n5nis6n4sz7bfgi4qy3l8j-nss-cacert-3.126-p11kit nss-cacert-3.126> shrinking RPATHs of ELF executables and libraries in /nix/store/hvmns155bmvlfjrrw24146vvfp4q3ysy-nss-cacert-3.126-hashed nss-cacert-3.126> checking for references to /build/ in /nix/store/hvmns155bmvlfjrrw24146vvfp4q3ysy-nss-cacert-3.126-hashed... nss-cacert-3.126> patching script interpreter paths in /nix/store/hvmns155bmvlfjrrw24146vvfp4q3ysy-nss-cacert-3.126-hashed building '/nix/store/47zh5pihddsjpdpqwwkx56nab6jc9h3w-unit-acme-order-renew-ca.foo.service.drv' on nix-store.geninf.io:50051 unit-acme-order-renew-ca.foo.service> build-x86-01: building 47zh5pihddsjpdpqwwkx56nab6jc9h3w-unit-acme-order-renew-ca.foo.service.drv building '/nix/store/13rsh609s5fkkj42d8pcjdl3gg7rniz4-unit-nix-daemon.service.drv' on nix-store.geninf.io:50051 unit-nix-daemon.service> gi-build-x86-02: building 13rsh609s5fkkj42d8pcjdl3gg7rniz4-unit-nix-daemon.service.drv building '/nix/store/w9r803ahnknxr8ghnhkdvcyvk61x4w66-system-units.drv' on nix-store.geninf.io:50051 system-units> gi-build-x86-02: building w9r803ahnknxr8ghnhkdvcyvk61x4w66-system-units.drv building '/nix/store/c9b4k7942hs578518qpzph42yhwy69dq-system-units.drv' on nix-store.geninf.io:50051 system-units> gi-build-x86-02: building c9b4k7942hs578518qpzph42yhwy69dq-system-units.drv building '/nix/store/vgbgxywijbhi0in369sc2qwyj2zycmnd-system-units.drv' on nix-store.geninf.io:50051 system-units> gi-build-x86-02: building vgbgxywijbhi0in369sc2qwyj2zycmnd-system-units.drv building '/nix/store/78vfqr2f4inyg4415h4zpn4yq8qx9q8b-etc.drv' on nix-store.geninf.io:50051 etc> build-x86-01: building 78vfqr2f4inyg4415h4zpn4yq8qx9q8b-etc.drv building '/nix/store/x8ndppi3damzpqw5k1nxmzsjan6mhzhv-etc.drv' on nix-store.geninf.io:50051 etc> build-x86-01: building x8ndppi3damzpqw5k1nxmzsjan6mhzhv-etc.drv building '/nix/store/60dl5ks0ad9szpw3gyypi3b6jpcxfa3m-activate.drv' on nix-store.geninf.io:50051 activate> build-x86-01: building 60dl5ks0ad9szpw3gyypi3b6jpcxfa3m-activate.drv building '/nix/store/9qickf91hndssq1vbpg55m84ra5a6lfc-activate.drv' on nix-store.geninf.io:50051 activate> build-x86-01: building 9qickf91hndssq1vbpg55m84ra5a6lfc-activate.drv building '/nix/store/bcaln9aj8gp5nr7lfl1v9kzaic10yfg2-etc.drv' on nix-store.geninf.io:50051 etc> build-x86-01: building bcaln9aj8gp5nr7lfl1v9kzaic10yfg2-etc.drv building '/nix/store/s55saxgnm168isfv71sdvabz45ps8qng-nixos-system-client-test.drv' on nix-store.geninf.io:50051 nixos-system-client-test> build-x86-01: building s55saxgnm168isfv71sdvabz45ps8qng-nixos-system-client-test.drv nixos-system-client-test> structuredAttrs is enabled building '/nix/store/2j6y9h26g5yrlx9qx46z8hsm47h1cyl3-nixos-system-ca-test.drv' on nix-store.geninf.io:50051 nixos-system-ca-test> build-x86-01: building 2j6y9h26g5yrlx9qx46z8hsm47h1cyl3-nixos-system-ca-test.drv nixos-system-ca-test> structuredAttrs is enabled building '/nix/store/ml2vilzbmzn4hckg9g3ma4fb6rhv340j-activate.drv' on nix-store.geninf.io:50051 activate> build-x86-01: building ml2vilzbmzn4hckg9g3ma4fb6rhv340j-activate.drv building '/nix/store/5sdrcvpf4nq6lhkf0ladj8varf07jjg4-closure-info.drv' on nix-store.geninf.io:50051 closure-info> build-x86-01: building 5sdrcvpf4nq6lhkf0ladj8varf07jjg4-closure-info.drv closure-info> structuredAttrs is enabled building '/nix/store/l98294m57528kwm3lz2b8178qfbv4jfg-closure-info.drv' on nix-store.geninf.io:50051 closure-info> build-x86-01: building l98294m57528kwm3lz2b8178qfbv4jfg-closure-info.drv closure-info> structuredAttrs is enabled building '/nix/store/dgjsa4lfidhzaqwj2zxlf4k27rnrfipd-nixos-system-server-test.drv' on nix-store.geninf.io:50051 nixos-system-server-test> build-x86-01: building dgjsa4lfidhzaqwj2zxlf4k27rnrfipd-nixos-system-server-test.drv nixos-system-server-test> structuredAttrs is enabled building '/nix/store/2p6ka6f338pixyj1lffx4jzv3cm7b6lv-closure-info.drv' on nix-store.geninf.io:50051 closure-info> build-x86-01: building 2p6ka6f338pixyj1lffx4jzv3cm7b6lv-closure-info.drv closure-info> structuredAttrs is enabled building '/nix/store/0y87qgi2d5ds2lijmjp6pn2ds6da1x6k-nixos-test-driver-certificates.drv' on nix-store.geninf.io:50051 nixos-test-driver-certificates> build-x86-01: building 0y87qgi2d5ds2lijmjp6pn2ds6da1x6k-nixos-test-driver-certificates.drv nixos-test-driver-certificates> Running type check (enable/disable: config.skipTypeCheck) nixos-test-driver-certificates> See https://nixos.org/manual/nixos/stable/#test-opt-skipTypeCheck nixos-test-driver-certificates> Success: no issues found in 1 source file building '/nix/store/jj8vh1iq5shxpm0zqc725j65r8p0gkvp-container-test-run-certificates.drv' on nix-store.geninf.io:50051 container-test-run-certificates> build-x86-01: building jj8vh1iq5shxpm0zqc725j65r8p0gkvp-container-test-run-certificates.drv container-test-run-certificates> additionally exposed symbols: container-test-run-certificates> ca, client, server, container-test-run-certificates> start_all, machines, driver, Machine, wait_for_signal container-test-run-certificates> Starting ca container-test-run-certificates> Starting client container-test-run-certificates> Starting server container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> <<< NixOS Stage 2 >>> container-test-run-certificates> container-test-run-certificates> booting system configuration /nix/store/p2fnx9l9413gdvsj85snpmhshd8ysjnn-nixos-system-ca-test container-test-run-certificates> running activation script... container-test-run-certificates> setting up /etc... container-test-run-certificates> 2: host0@if3: mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000 container-test-run-certificates> link/ether 42:06:76:42:a9:8d brd ff:ff:ff:ff:ff:ff link-netnsid 0 container-test-run-certificates> setting up age secrets... container-test-run-certificates> starting systemd... container-test-run-certificates> systemd 260.5 running in system mode (+PAM +AUDIT -SELINUX +APPARMOR +IMA +IPE +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS +FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 +PWQUALITY +P11KIT +QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD +BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP +LIBARCHIVE) container-test-run-certificates> Detected virtualization systemd-nspawn. container-test-run-certificates> Detected architecture x86-64. container-test-run-certificates> Detected first boot. container-test-run-certificates> Initializing machine ID from container UUID. container-test-run-certificates> Applying preset policy. container-test-run-certificates> Populated /etc with preset unit settings. container-test-run-certificates> Queued start job for default target Multi-User System. container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> <<< Welcome to NixOS test (x86_64) - console >>> container-test-run-certificates> + systemd-run /bin/sh -c '/nix/store/bhv6xyvqw6gjs3j488gi1z6wdv18bdpa-coreutils-9.11/bin/sleep 999999999 && echo 49731e92-4780-4689-9dcf-d62f69df26a9' container-test-run-certificates> Running as unit: run-p447-i3627723.service; invocation ID: c8af95a5cc94443ea83e95e8ace88214 container-test-run-certificates> To attach to container ca run on the same machine that runs the test: container-test-run-certificates> sudo nsenter --user --target $(\pgrep -f '^/bin/sh.*49731e92-4780-4689-9dcf-d62f69df26a9') --mount --uts --ipc --net --pid --cgroup /bin/sh -c bash container-test-run-certificates> container-test-run-certificates> To inject external network and continue test, run: container-test-run-certificates> sudo /nix/store/jy00n3jp5xj8s40n1fbldmkcr5n7avxc-python3-3.13.15/bin/python3.13 /nix/store/pqlr0hs92wdh0vmqbq39r6rca632xhkp-test-driver-0.0.1/lib/python3.13/site-packages/test_driver/inject_network.py 49731e92-4780-4689-9dcf-d62f69df26a9 container-test-run-certificates> container-test-run-certificates> <<< NixOS Stage 2 >>> container-test-run-certificates> container-test-run-certificates> booting system configuration /nix/store/5720g3kpyn7irf1ikjlgd2vlqnkw2k5r-nixos-system-client-test container-test-run-certificates> running activation script... container-test-run-certificates> setting up /etc... container-test-run-certificates> 2: host0@if5: mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000 container-test-run-certificates> link/ether 2a:42:35:28:b1:2f brd ff:ff:ff:ff:ff:ff link-netnsid 0 container-test-run-certificates> setting up age secrets... container-test-run-certificates> starting systemd... container-test-run-certificates> systemd 260.5 running in system mode (+PAM +AUDIT -SELINUX +APPARMOR +IMA +IPE +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS +FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 +PWQUALITY +P11KIT +QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD +BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP +LIBARCHIVE) container-test-run-certificates> Detected virtualization systemd-nspawn. container-test-run-certificates> Detected architecture x86-64. container-test-run-certificates> Detected first boot. container-test-run-certificates> Initializing machine ID from container UUID. container-test-run-certificates> Applying preset policy. container-test-run-certificates> Populated /etc with preset unit settings. container-test-run-certificates> Queued start job for default target Multi-User System. container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> <<< Welcome to NixOS test (x86_64) - console >>> container-test-run-certificates> + systemd-run /bin/sh -c '/nix/store/bhv6xyvqw6gjs3j488gi1z6wdv18bdpa-coreutils-9.11/bin/sleep 999999999 && echo 20f9a37b-4733-4ac5-bfb6-a7efbf45c5a5' container-test-run-certificates> Running as unit: run-p304-i3627726.service; invocation ID: d56b072926a2459697a8e4f3246fa5b9 container-test-run-certificates> To attach to container client run on the same machine that runs the test: container-test-run-certificates> sudo nsenter --user --target $(\pgrep -f '^/bin/sh.*20f9a37b-4733-4ac5-bfb6-a7efbf45c5a5') --mount --uts --ipc --net --pid --cgroup /bin/sh -c bash container-test-run-certificates> container-test-run-certificates> To inject external network and continue test, run: container-test-run-certificates> sudo /nix/store/jy00n3jp5xj8s40n1fbldmkcr5n7avxc-python3-3.13.15/bin/python3.13 /nix/store/pqlr0hs92wdh0vmqbq39r6rca632xhkp-test-driver-0.0.1/lib/python3.13/site-packages/test_driver/inject_network.py 20f9a37b-4733-4ac5-bfb6-a7efbf45c5a5 container-test-run-certificates> container-test-run-certificates> <<< NixOS Stage 2 >>> container-test-run-certificates> container-test-run-certificates> booting system configuration /nix/store/pgd3bgy3r6zn2y52g4hd235qmf1an7g9-nixos-system-server-test container-test-run-certificates> running activation script... container-test-run-certificates> setting up /etc... container-test-run-certificates> 2: host0@if4: mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000 container-test-run-certificates> link/ether be:aa:dd:39:86:e7 brd ff:ff:ff:ff:ff:ff link-netnsid 0 container-test-run-certificates> setting up age secrets... container-test-run-certificates> starting systemd... container-test-run-certificates> systemd 260.5 running in system mode (+PAM +AUDIT -SELINUX +APPARMOR +IMA +IPE +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS +FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 +PWQUALITY +P11KIT +QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD +BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP +LIBARCHIVE) container-test-run-certificates> Detected virtualization systemd-nspawn. container-test-run-certificates> Detected architecture x86-64. container-test-run-certificates> Detected first boot. container-test-run-certificates> Initializing machine ID from container UUID. container-test-run-certificates> Applying preset policy. container-test-run-certificates> Populated /etc with preset unit settings. container-test-run-certificates> Queued start job for default target Multi-User System. container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> <<< Welcome to NixOS test (x86_64) - console >>> container-test-run-certificates> + systemd-run /bin/sh -c '/nix/store/bhv6xyvqw6gjs3j488gi1z6wdv18bdpa-coreutils-9.11/bin/sleep 999999999 && echo 1c2a5c60-ca9a-445a-8444-7a4e58634d6c' container-test-run-certificates> Running as unit: run-p385-i3627729.service; invocation ID: 135467013bf643da9d11df529dc676ce container-test-run-certificates> To attach to container server run on the same machine that runs the test: container-test-run-certificates> sudo nsenter --user --target $(\pgrep -f '^/bin/sh.*1c2a5c60-ca9a-445a-8444-7a4e58634d6c') --mount --uts --ipc --net --pid --cgroup /bin/sh -c bash container-test-run-certificates> container-test-run-certificates> To inject external network and continue test, run: container-test-run-certificates> sudo /nix/store/jy00n3jp5xj8s40n1fbldmkcr5n7avxc-python3-3.13.15/bin/python3.13 /nix/store/pqlr0hs92wdh0vmqbq39r6rca632xhkp-test-driver-0.0.1/lib/python3.13/site-packages/test_driver/inject_network.py 1c2a5c60-ca9a-445a-8444-7a4e58634d6c container-test-run-certificates> + systemctl restart acme-order-renew-ca.foo.service container-test-run-certificates> + systemctl restart acme-test.foo.service container-test-run-certificates> client: waiting for success: curl -v https://test.foo container-test-run-certificates> + curl -v https://test.foo container-test-run-certificates> * Host test.foo:443 was resolved. container-test-run-certificates> * IPv6: (none) container-test-run-certificates> * IPv4: 192.168.1.3 container-test-run-certificates> * Trying 192.168.1.3:443... container-test-run-certificates> * ALPN: curl offers h2,http/1.1 container-test-run-certificates> } [5 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Client hello (1): container-test-run-certificates> } [1552 bytes data] container-test-run-certificates> * SSL Trust Anchors: container-test-run-certificates> * OpenSSL default paths (fallback) container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Server hello (2): container-test-run-certificates> { [1210 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS change cipher, Change cipher spec (1): container-test-run-certificates> { [1 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): container-test-run-certificates> { [19 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Certificate (11): container-test-run-certificates> { [1008 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, CERT verify (15): container-test-run-certificates> { [111 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Finished (20): container-test-run-certificates> { [52 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): container-test-run-certificates> } [1 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Finished (20): container-test-run-certificates> } [52 bytes data] container-test-run-certificates> * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey container-test-run-certificates> * ALPN: server accepted h2 container-test-run-certificates> * Server certificate: container-test-run-certificates> * subject: CN=test.foo container-test-run-certificates> * start date: Oct 13 15:42:33 2026 GMT container-test-run-certificates> * expire date: Nov 12 15:42:33 2028 GMT container-test-run-certificates> * issuer: CN=minica root ca 56bc98 container-test-run-certificates> * Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * subjectAltName: "test.foo" matches cert's "test.foo" container-test-run-certificates> * OpenSSL verify result: 13 container-test-run-certificates> * SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> * closing connection #0 container-test-run-certificates> curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> More details here: https://curl.se/docs/sslcerts.html container-test-run-certificates> container-test-run-certificates> curl failed to verify the legitimacy of the server and therefore could not container-test-run-certificates> establish a secure connection to it. To learn more about this situation and container-test-run-certificates> how to fix it, please visit the webpage mentioned above. container-test-run-certificates> + curl -v https://test.foo container-test-run-certificates> * Host test.foo:443 was resolved. container-test-run-certificates> * IPv6: (none) container-test-run-certificates> * IPv4: 192.168.1.3 container-test-run-certificates> * Trying 192.168.1.3:443... container-test-run-certificates> * ALPN: curl offers h2,http/1.1 container-test-run-certificates> } [5 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Client hello (1): container-test-run-certificates> } [1552 bytes data] container-test-run-certificates> * SSL Trust Anchors: container-test-run-certificates> * OpenSSL default paths (fallback) container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Server hello (2): container-test-run-certificates> { [1210 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS change cipher, Change cipher spec (1): container-test-run-certificates> { [1 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): container-test-run-certificates> { [19 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Certificate (11): container-test-run-certificates> { [1008 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, CERT verify (15): container-test-run-certificates> { [112 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Finished (20): container-test-run-certificates> { [52 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): container-test-run-certificates> } [1 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Finished (20): container-test-run-certificates> } [52 bytes data] container-test-run-certificates> * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey container-test-run-certificates> * ALPN: server accepted h2 container-test-run-certificates> * Server certificate: container-test-run-certificates> * subject: CN=test.foo container-test-run-certificates> * start date: Oct 13 15:42:33 2026 GMT container-test-run-certificates> * expire date: Nov 12 15:42:33 2028 GMT container-test-run-certificates> * issuer: CN=minica root ca 56bc98 container-test-run-certificates> * Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * subjectAltName: "test.foo" matches cert's "test.foo" container-test-run-certificates> * OpenSSL verify result: 13 container-test-run-certificates> * SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> * closing connection #0 container-test-run-certificates> curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> More details here: https://curl.se/docs/sslcerts.html container-test-run-certificates> container-test-run-certificates> curl failed to verify the legitimacy of the server and therefore could not container-test-run-certificates> establish a secure connection to it. To learn more about this situation and container-test-run-certificates> how to fix it, please visit the webpage mentioned above. container-test-run-certificates> + curl -v https://test.foo container-test-run-certificates> * Host test.foo:443 was resolved. container-test-run-certificates> * IPv6: (none) container-test-run-certificates> * IPv4: 192.168.1.3 container-test-run-certificates> * Trying 192.168.1.3:443... container-test-run-certificates> * ALPN: curl offers h2,http/1.1 container-test-run-certificates> } [5 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Client hello (1): container-test-run-certificates> } [1552 bytes data] container-test-run-certificates> * SSL Trust Anchors: container-test-run-certificates> * OpenSSL default paths (fallback) container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Server hello (2): container-test-run-certificates> { [1210 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS change cipher, Change cipher spec (1): container-test-run-certificates> { [1 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): container-test-run-certificates> { [19 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Certificate (11): container-test-run-certificates> { [931 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, CERT verify (15): container-test-run-certificates> { [80 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Finished (20): container-test-run-certificates> { [52 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): container-test-run-certificates> } [1 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Finished (20): container-test-run-certificates> } [52 bytes data] container-test-run-certificates> * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey container-test-run-certificates> * ALPN: server accepted h2 container-test-run-certificates> * Server certificate: container-test-run-certificates> * subject: CN=test.foo container-test-run-certificates> * start date: Oct 13 15:41:44 2026 GMT container-test-run-certificates> * expire date: Jan 11 15:42:44 2027 GMT container-test-run-certificates> * issuer: CN=Clan Intermediate CA container-test-run-certificates> * Certificate level 0: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA256 container-test-run-certificates> * Certificate level 1: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA256 container-test-run-certificates> * Certificate level 2: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA256 container-test-run-certificates> * subjectAltName: "test.foo" matches cert's "test.foo" container-test-run-certificates> * OpenSSL verify result: 0 container-test-run-certificates> * SSL certificate verified via OpenSSL. container-test-run-certificates> * Established connection to test.foo (192.168.1.3 port 443) from 192.168.1.2 port 60402 container-test-run-certificates> % Total % Received % Xferd Average Speed Time Time Time Current container-test-run-certificates> Dload Upload Total Spent Left Speed container-test-run-certificates> 0 0 0 0 0 0 0 0 0* using HTTP/2 container-test-run-certificates> * [HTTP/2] [1] OPENED stream for https://test.foo/ container-test-run-certificates> * [HTTP/2] [1] [:method: GET] container-test-run-certificates> * [HTTP/2] [1] [:scheme: https] container-test-run-certificates> * [HTTP/2] [1] [:authority: test.foo] container-test-run-certificates> * [HTTP/2] [1] [:path: /] container-test-run-certificates> * [HTTP/2] [1] [user-agent: curl/8.22.0] container-test-run-certificates> * [HTTP/2] [1] [accept: */*] container-test-run-certificates> } [5 bytes data] container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> * Request completely sent off container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4): container-test-run-certificates> { [265 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4): container-test-run-certificates> { [265 bytes data] container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> { [5 bytes data] container-test-run-certificates> 100 20 100 20 0 0 1847 0 0 container-test-run-certificates> * Connection #0 to host test.foo:443 left intact container-test-run-certificates> (finished: waiting for success: curl -v https://test.foo, in 2.06 seconds) container-test-run-certificates> + openssl s_client -connect test.foo:443 -servername test.foo container-test-run-certificates> + openssl x509 -text -noout container-test-run-certificates> Certificate: container-test-run-certificates> Data: container-test-run-certificates> Version: 3 (0x2) container-test-run-certificates> Serial Number: container-test-run-certificates> d1:bf:6f:a2:91:02:ec:17:1c:81:c1:6d:93:65:a6:aa container-test-run-certificates> Signature Algorithm: ecdsa-with-SHA256 container-test-run-certificates> Issuer: CN=Clan Intermediate CA container-test-run-certificates> Validity container-test-run-certificates> Not Before: Oct 13 15:41:44 2026 GMT container-test-run-certificates> Not After : Jan 11 15:42:44 2027 GMT container-test-run-certificates> Subject: CN=test.foo container-test-run-certificates> Subject Public Key Info: container-test-run-certificates> Public Key Algorithm: id-ecPublicKey container-test-run-certificates> Public-Key: (256 bit) container-test-run-certificates> pub: container-test-run-certificates> 04:ee:dc:1e:dc:ec:d9:cd:fd:d4:c8:11:f6:3d:45: container-test-run-certificates> 50:da:27:d3:ac:da:0d:13:8c:7f:99:a3:f2:53:5e: container-test-run-certificates> 7a:13:0d:e7:8a:45:00:8d:80:84:5c:85:09:72:07: container-test-run-certificates> 6b:2d:29:21:a6:ea:e8:63:d5:b0:45:80:8b:de:2d: container-test-run-certificates> d3:f4:ca:31:0f container-test-run-certificates> ASN1 OID: prime256v1 container-test-run-certificates> NIST CURVE: P-256 container-test-run-certificates> X509v3 extensions: container-test-run-certificates> X509v3 Key Usage: critical container-test-run-certificates> Digital Signature container-test-run-certificates> X509v3 Extended Key Usage: container-test-run-certificates> TLS Web Server Authentication, TLS Web Client Authentication container-test-run-certificates> X509v3 Subject Key Identifier: container-test-run-certificates> 04:F8:41:5C:05:FC:FC:49:4A:FF:46:BB:8A:DE:94:E0:C6:38:AF:CA container-test-run-certificates> X509v3 Authority Key Identifier: container-test-run-certificates> AF:3D:FB:7F:3A:E2:22:0C:FC:17:43:CF:2B:14:28:42:1E:EC:D0:EF container-test-run-certificates> X509v3 Subject Alternative Name: container-test-run-certificates> DNS:test.foo container-test-run-certificates> 1.3.6.1.4.1.37476.9000.64.1: container-test-run-certificates> 0......acme.. container-test-run-certificates> Signature Algorithm: ecdsa-with-SHA256 container-test-run-certificates> Signature Value: container-test-run-certificates> 30:44:02:20:14:23:6f:49:ac:f7:80:7e:5b:fe:2d:42:cf:0d: container-test-run-certificates> cf:99:1a:57:04:59:d7:32:83:b4:b6:95:a1:df:ca:5c:c7:9f: container-test-run-certificates> 02:20:4f:7e:93:86:77:23:61:cc:e2:a7:cf:c2:fc:1b:3b:d6: container-test-run-certificates> ff:8d:0a:17:ef:51:05:56:e9:56:42:17:f3:9c:d3:1f container-test-run-certificates> container-test-run-certificates> container-test-run-certificates>