�[2mserver # * Connected to subdomain.example.com (127.0.0.1) port 443�[0m
�[2mserver # * ALPN: curl offers h2,http/1.1�[0m
�[2mserver # } [5 bytes data]�[0m
�[2mserver # * TLSv1.3 (OUT), TLS handshake, Client hello (1):�[0m
�[2mserver # } [512 bytes data]�[0m
�[2mserver # *  CAfile: /etc/static/ssl/certs/ca-bundle.crt�[0m
�[2mserver # *  CApath: none�[0m
�[2mserver # { [5 bytes data]�[0m
�[2mserver # * TLSv1.3 (IN), TLS handshake, Server hello (2):�[0m
�[2mserver # { [122 bytes data]�[0m
�[2mserver # * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):�[0m
�[2mserver # { [19 bytes data]�[0m
�[2mserver # * TLSv1.3 (IN), TLS handshake, Certificate (11):�[0m
�[2mserver # { [1152 bytes data]�[0m
�[2mserver # * TLSv1.3 (OUT), TLS alert, unknown CA (560):�[0m
�[2mserver # } [2 bytes data]�[0m
�[2mserver # * SSL certificate problem: unable to get local issuer certificate�[0m
�[2mserver #   0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0�[0m
�[2mserver # * closing connection #0�[0m
�[2mserver # curl: (60) SSL certificate problem: unable to get local issuer certificate�[0m
�[2mserver # More details here: https://curl.se/docs/sslcerts.html�[0m
�[2mserver # �[0m
�[2mserver # curl failed to verify the legitimacy of the server and therefore could not�[0m
�[2mserver # establish a secure connection to it. To learn more about this situation and�[0m
�[2mserver # how to fix it, please visit the webpage mentioned above.�[0m
(finished: must fail: curl --cacert /etc/static/ssl/certs/ca-bundle.crt --fail-with-body -v https://subdomain.example.com, in 0.12 seconds)
server: �[1m�[32mmust fail: curl --cacert /etc/static/ssl/certs/ca-certificates.crt --fail-with-body -v https://example.com�[0m
�[2mserver #   % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current�[0m
�[2mserver #                                  Dload  Upload   Total   Spent    Left  Speed�[0m
�[2mserver #   0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0* Host example.com:443 was resolved.�[0m
�[2mserver # * IPv6: (none)�[0m
�[2mserver # * IPv4: 127.0.0.1�[0m
�[2mserver # *   Trying 127.0.0.1:443...�[0m
�[2mserver # * Connected to example.com (127.0.0.1) port 443�[0m
�[2mserver # * ALPN: curl offers h2,http/1.1�[0m
�[2mserver # } [5 bytes data]�[0m
�[2mserver # * TLSv1.3 (OUT), TLS handshake, Client hello (1):�[0m
�[2mserver # } [512 bytes data]�[0m
�[2mserver # *  CAfile: /etc/static/ssl/certs/ca-certificates.crt�[0m
�[2mserver # *  CApath: none�[0m
�[2mserver # { [5 bytes data]�[0m
�[2mserver # * TLSv1.3 (IN), TLS handshake, Server hello (2):�[0m
�[2mserver # { [122 bytes data]�[0m
�[2mserver # * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):�[0m
�[2mserver # { [19 bytes data]�[0m
�[2mserver # * TLSv1.3 (IN), TLS handshake, Certificate (11):�[0m
�[2mserver # { [1130 bytes data]�[0m
�[2mserver # * TLSv1.3 (OUT), TLS alert, unknown CA (560):�[0m
�[2mserver # } [2 bytes data]�[0m
�[2mserver # * SSL certificate problem: unable to get local issuer certificate�[0m
�[2mserver #   0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0�[0m
�[2mserver # * closing connection #0�[0m
�[2mserver # curl: (60) SSL certificate problem: unable to get local issuer certificate�[0m
�[2mserver # More details here: https://curl.se/docs/sslcerts.html�[0m
�[2mserver # �[0m
�[2mserver # curl failed to verify the legitimacy of the server and therefore could not�[0m
�[2mserver # establish a secure connection to it. To learn more about this situation and�[0m
�[2mserver # how to fix it, please visit the webpage mentioned above.�[0m
(finished: must fail: curl --cacert /etc/static/ssl/certs/ca-certificates.crt --fail-with-body -v https://example.com, in 0.11 seconds)
server: �[1m�[32mmust fail: curl --cacert /etc/static/ssl/certs/ca-certificates.crt --fail-with-body -v https://subdomain.example.com�[0m
�[2mserver #   % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current�[0m
�[2mserver #                                  Dload  Upload   Total   Spent    Left  Speed�[0m
�[2mserver #   0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0* Host subdomain.example.com:443 was resolved.�[0m
�[2mserver # * IPv6: (none)�[0m
�[2mserver # * IPv4: 127.0.0.1�[0m
�[2mserver # *   Trying 127.0.0.1:443...�[0m
�[2mserver # * Connected to subdomain.example.com (127.0.0.1) port 443�[0m
�[2mserver # * ALPN: curl offers h2,http/1.1�[0m
�[2mserver # } [5 bytes data]�[0m
�[2mserver # * TLSv1.3 (OUT), TLS handshake, Client hello (1):�[0m
�[2mserver # } [512 bytes data]�[0m
�[2mserver # *  CAfile: /etc/static/ssl/certs/ca-certificates.crt�[0m
�[2mserver # *  CApath: none�[0m
�[2mserver # { [5 bytes data]�[0m
�[2mserver # * TLSv1.3 (IN), TLS handshake, Server hello (2):�[0m
�[2mserver # { [122 bytes data]�[0m
�[2mserver # * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):�[0m
�[2mserver # { [19 bytes data]�[0m
�[2mserver # * TLSv1.3 (IN), TLS handshake, Certificate (11):�[0m
�[2mserver # { [1152 bytes data]�[0m
�[2mserver # * TLSv1.3 (OUT), TLS alert, unknown CA (560):�[0m
�[2mserver # } [2 bytes data]�[0m
�[2mserver # * SSL certificate problem: unable to get local issuer certificate�[0m
�[2mserver #   0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0�[0m
�[2mserver # * closing connection #0�[0m
�[2mserver # curl: (60) SSL certificate problem: unable to get local issuer certificate�[0m
�[2mserver # More details here: https://curl.se/docs/sslcerts.html�[0m
�[2mserver # �[0m
�[2mserver # curl failed to verify the legitimacy of the server and therefore could not�[0m
�[2mserver # establish a secure connection to it. To learn more about this situation and�[0m
�[2mserver # how to fix it, please visit the webpage mentioned above.�[0m
(finished: must fail: curl --cacert /etc/static/ssl/certs/ca-certificates.crt --fail-with-body -v https://subdomain.example.com, in 0.11 seconds)
(finished: subtest: Fail if certificate is not in CA bundle, in 0.45 seconds)
(finished: run the VM test script, in 9.17 seconds)
test script finished in 9.20s
�[1m�[32mcleanup�[0m
kill machine (pid 8)
qemu-kvm: terminating on signal 15 from pid 5 (/nix/store/h3i0acpmr8mrjx07519xxmidv8mpax4y-python3-3.12.5/bin/python3.12)
(finished: cleanup, in 0.01 seconds)
kill vlan (pid 6)