2026-02-20 10:12.41: New job: test mirage/ca-certs https://github.com/mirage/ca-certs.git#refs/heads/main (319c8a6e7c06da6a4fc3dab5db41cdd28be2e9cf) (linux-x86_64:fedora-42-5.4_opam-2.5)Base: ocaml/opam:fedora-42-ocaml-5.4@sha256:af3807edfde31652769b5a5011b4c8f9109875ac6f7e4ae119331178ca647aa8Opam project buildTo reproduce locally:git clone --recursive "https://github.com/mirage/ca-certs.git" -b "main" && cd "ca-certs" && git reset --hard 319c8a6ecat > Dockerfile <<'END-OF-DOCKERFILE'FROM ocaml/opam:fedora-42-ocaml-5.4@sha256:af3807edfde31652769b5a5011b4c8f9109875ac6f7e4ae119331178ca647aa8# fedora-42-5.4_opam-2.5USER 1000:1000ENV CLICOLOR_FORCE="1"ENV OPAMCOLOR="always"WORKDIR /srcRUN sudo dnf install -y findutilsRUN sudo ln -f /usr/bin/opam-2.5 /usr/bin/opamRUN opam init --reinit -niRUN uname -rs && opam exec -- ocaml -version && opam --versionWORKDIR /srcRUN sudo chown opam /srcRUN cd ~/opam-repository && (git cat-file -e d18d14011e4188f5c398421e2e99b297dd8150fb || git fetch origin master) && git reset -q --hard d18d14011e4188f5c398421e2e99b297dd8150fb && git log --no-decorate -n1 --oneline && opam update -uCOPY --chown=1000:1000 ca-certs.opam ./RUN opam pin add -yn ca-certs.dev './'RUN echo '(lang dune 3.0)' > './dune-project'ENV DEPS="alcotest.1.9.1 asn1-combinators.0.3.2 astring.0.8.5 base-bigarray.base base-domains.base base-effects.base base-nnp.base base-threads.base base-unix.base base64.3.5.2 bos.0.2.1 cmdliner.2.1.0 conf-gmp.5 conf-gmp-powm-sec.4 conf-pkg-config.4 csexp.1.5.2 digestif.1.3.0 domain-name.0.5.0 dune.3.21.1 dune-configurator.3.21.1 duration.0.2.1 eqaf.0.10 fmt.0.11.0 fpath.0.7.3 gmap.0.3.0 ipaddr.5.6.2 kdf.1.0.0 logs.0.10.0 macaddr.5.6.2 mirage-crypto.2.0.3 mirage-crypto-ec.2.0.3 mirage-crypto-pk.2.0.3 mirage-crypto-rng.2.0.3 ocaml.5.4.0 ocaml-base-compiler.5.4.0 ocaml-compiler.5.4.0 ocaml-config.3 ocaml-options-vanilla.1 ocaml-syntax-shims.1.0.0 ocamlbuild.0.16.1 ocamlfind.1.9.8 ohex.0.2.0 ptime.1.2.0 re.1.14.0 rresult.0.7.0 stdlib-shims.0.3.0 topkg.1.1.1 uutf.1.0.4 x509.1.0.6 zarith.1.14"ENV CI="true"ENV OCAMLCI="true"RUN opam update --depexts && opam install --cli=2.5 --depext-only -y ca-certs.dev $DEPSRUN opam install $DEPSCOPY --chown=1000:1000 . /srcRUN opam exec -- dune build @install @check @runtest && rm -rf _buildEND-OF-DOCKERFILEdocker build .END-REPRO-BLOCK2026-02-20 10:12.41: Using cache hint "mirage/ca-certs-ocaml/opam:fedora-42-ocaml-5.4@sha256:af3807edfde31652769b5a5011b4c8f9109875ac6f7e4ae119331178ca647aa8-fedora-42-5.4_opam-2.5-3103a2363c38017c7d6abb497e1ef0b9"2026-02-20 10:12.41: Using OBuilder spec:((from ocaml/opam:fedora-42-ocaml-5.4@sha256:af3807edfde31652769b5a5011b4c8f9109875ac6f7e4ae119331178ca647aa8)(comment fedora-42-5.4_opam-2.5)(user (uid 1000) (gid 1000))(env CLICOLOR_FORCE 1)(env OPAMCOLOR always)(workdir /src)(run (network host)(shell "sudo dnf install -y findutils"))(run (shell "sudo ln -f /usr/bin/opam-2.5 /usr/bin/opam"))(run (shell "opam init --reinit -ni"))(run (shell "uname -rs && opam exec -- ocaml -version && opam --version"))(workdir /src)(run (shell "sudo chown opam /src"))(run (cache (opam-archives (target /home/opam/.opam/download-cache)))(network host)(shell "cd ~/opam-repository && (git cat-file -e d18d14011e4188f5c398421e2e99b297dd8150fb || git fetch origin master) && git reset -q --hard d18d14011e4188f5c398421e2e99b297dd8150fb && git log --no-decorate -n1 --oneline && opam update -u"))(copy (src ca-certs.opam) (dst ./))(run (network host)(shell "opam pin add -yn ca-certs.dev './'"))(run (network host)(shell "echo '(lang dune 3.0)' > './dune-project'"))(env DEPS "alcotest.1.9.1 asn1-combinators.0.3.2 astring.0.8.5 base-bigarray.base base-domains.base base-effects.base base-nnp.base base-threads.base base-unix.base base64.3.5.2 bos.0.2.1 cmdliner.2.1.0 conf-gmp.5 conf-gmp-powm-sec.4 conf-pkg-config.4 csexp.1.5.2 digestif.1.3.0 domain-name.0.5.0 dune.3.21.1 dune-configurator.3.21.1 duration.0.2.1 eqaf.0.10 fmt.0.11.0 fpath.0.7.3 gmap.0.3.0 ipaddr.5.6.2 kdf.1.0.0 logs.0.10.0 macaddr.5.6.2 mirage-crypto.2.0.3 mirage-crypto-ec.2.0.3 mirage-crypto-pk.2.0.3 mirage-crypto-rng.2.0.3 ocaml.5.4.0 ocaml-base-compiler.5.4.0 ocaml-compiler.5.4.0 ocaml-config.3 ocaml-options-vanilla.1 ocaml-syntax-shims.1.0.0 ocamlbuild.0.16.1 ocamlfind.1.9.8 ohex.0.2.0 ptime.1.2.0 re.1.14.0 rresult.0.7.0 stdlib-shims.0.3.0 topkg.1.1.1 uutf.1.0.4 x509.1.0.6 zarith.1.14")(env CI true)(env OCAMLCI true)(run (cache (opam-archives (target /home/opam/.opam/download-cache)))(network host)(shell "opam update --depexts && opam install --cli=2.5 --depext-only -y ca-certs.dev $DEPS"))(run (cache (opam-archives (target /home/opam/.opam/download-cache)))(network host)(shell "opam install $DEPS"))(copy (src .) (dst /src))(run (shell "opam exec -- dune build @install @check @runtest && rm -rf _build")))2026-02-20 10:12.41: Waiting for resource in pool OCluster2026-02-20 12:19.41: Waiting for worker…2026-02-20 12:22.54: Got resource from pool OClusterBuilding on asteria.caelum.ci.devAll commits already cachedHEAD is now at 319c8a6 changes for 1.0.1(from ocaml/opam:fedora-42-ocaml-5.4@sha256:af3807edfde31652769b5a5011b4c8f9109875ac6f7e4ae119331178ca647aa8)2026-02-20 12:22.55 ---> using "df14cd90ce9bb00d2ec3452cc8c95f7005fb902611b52fd480ace2e03f802e87" from cache/: (comment fedora-42-5.4_opam-2.5)/: (user (uid 1000) (gid 1000))/: (env CLICOLOR_FORCE 1)/: (env OPAMCOLOR always)/: (workdir /src)/src: (run (network host)(shell "sudo dnf install -y findutils"))Updating and loading repositories:Fedora 42 - x86_64 - Updates 100% | 15.9 KiB/s | 10.3 KiB | 00m01sRepositories loaded.Package "findutils-1:4.10.0-5.fc42.x86_64" is already installed.Nothing to do.2026-02-20 12:22.55 ---> using "2799ff75c9c61284d6f7a1f647ac37570b94a2b49ae88a2e1c73dfb1ea43194e" from cache/src: (run (shell "sudo ln -f /usr/bin/opam-2.5 /usr/bin/opam"))2026-02-20 12:22.55 ---> using "9c619b4adeab6fdd5544f88f84a4bb54a7c60a1fac8236cf05e09d18e183c65e" from cache/src: (run (shell "opam init --reinit -ni"))Configuring from /home/opam/.opamrc and then from built-in defaults.Checking for available remotes: rsync and local, git.- you won't be able to use mercurial repositories unless you install the hg command on your system.- you won't be able to use darcs repositories unless you install the darcs command on your system.This version of opam requires an update to the layout of /home/opam/.opam from version 2.0 to version 2.2, which can't be reverted.You may want to back it up before going further.Continue? [Y/n] yFormat upgrade done.<><> Updating repositories ><><><><><><><><><><><><><><><><><><><><><><><><><><>[default] Initialised2026-02-20 12:22.55 ---> using "7f98e5eebde2aa32373cdf2b56e35afa38478f841e32595058079a1009ca1ca0" from cache/src: (run (shell "uname -rs && opam exec -- ocaml -version && opam --version"))Linux 6.8.0-87-genericThe OCaml toplevel, version 5.4.02.5.02026-02-20 12:22.55 ---> using "b84868788286afe3b7593c4c2a6c6b9b5f222bc8b625b8b73b5b9e58dd3950b3" from cache/src: (workdir /src)/src: (run (shell "sudo chown opam /src"))2026-02-20 12:22.55 ---> using "c4b52acd1f2460cd9cdca02c90025ed2e9060a6f6453d01bb3ae0fbb36481c69" from cache/src: (run (cache (opam-archives (target /home/opam/.opam/download-cache)))(network host)(shell "cd ~/opam-repository && (git cat-file -e d18d14011e4188f5c398421e2e99b297dd8150fb || git fetch origin master) && git reset -q --hard d18d14011e4188f5c398421e2e99b297dd8150fb && git log --no-decorate -n1 --oneline && opam update -u"))From https://github.com/ocaml/opam-repository* branch master -> FETCH_HEAD3109384a92..d18d14011e master -> origin/masterd18d14011e Merge pull request #29430 from hannesm/release-ipaddr-v5.6.2<><> Updating package repositories ><><><><><><><><><><><><><><><><><><><><><><>[default] synchronised from git+file:///home/opam/opam-repositoryEverything as up-to-date as possible (run with --verbose to show unavailable upgrades).However, you may "opam upgrade" these packages explicitly at these versions (e.g. "opam upgrade ocaml.5.4.1"), which will ask permission to downgrade or uninstall the conflicting packages.Nothing to do.# To update the current shell environment, run: eval $(opam env)2026-02-20 12:22.55 ---> using "3ed8cd545bd55f7d4ed700e4ab9b78619684767e9139d9b0d5963a06250881a1" from cache/src: (copy (src ca-certs.opam) (dst ./))2026-02-20 12:22.55 ---> using "32f961ae65561bc37804f3e0eaed6e088fc008e3e2f684a7002927b8304d2eef" from cache/src: (run (network host)(shell "opam pin add -yn ca-certs.dev './'"))[ca-certs.dev] synchronised (file:///src)ca-certs is now pinned to file:///src (version dev)2026-02-20 12:22.55 ---> using "afbbe7197081a85d7ac8c87f02f0a0c2ca4881edc2c1a5ad142b48f70170afff" from cache/src: (run (network host)(shell "echo '(lang dune 3.0)' > './dune-project'"))2026-02-20 12:22.55 ---> using "ea297297e15f115a44925501c3b272d64b07beba89eb17c88c04d12b39a23a9d" from cache/src: (env DEPS "alcotest.1.9.1 asn1-combinators.0.3.2 astring.0.8.5 base-bigarray.base base-domains.base base-effects.base base-nnp.base base-threads.base base-unix.base base64.3.5.2 bos.0.2.1 cmdliner.2.1.0 conf-gmp.5 conf-gmp-powm-sec.4 conf-pkg-config.4 csexp.1.5.2 digestif.1.3.0 domain-name.0.5.0 dune.3.21.1 dune-configurator.3.21.1 duration.0.2.1 eqaf.0.10 fmt.0.11.0 fpath.0.7.3 gmap.0.3.0 ipaddr.5.6.2 kdf.1.0.0 logs.0.10.0 macaddr.5.6.2 mirage-crypto.2.0.3 mirage-crypto-ec.2.0.3 mirage-crypto-pk.2.0.3 mirage-crypto-rng.2.0.3 ocaml.5.4.0 ocaml-base-compiler.5.4.0 ocaml-compiler.5.4.0 ocaml-config.3 ocaml-options-vanilla.1 ocaml-syntax-shims.1.0.0 ocamlbuild.0.16.1 ocamlfind.1.9.8 ohex.0.2.0 ptime.1.2.0 re.1.14.0 rresult.0.7.0 stdlib-shims.0.3.0 topkg.1.1.1 uutf.1.0.4 x509.1.0.6 zarith.1.14")/src: (env CI true)/src: (env OCAMLCI true)/src: (run (cache (opam-archives (target /home/opam/.opam/download-cache)))(network host)(shell "opam update --depexts && opam install --cli=2.5 --depext-only -y ca-certs.dev $DEPS"))+ /usr/sbin/sudo "yum" "makecache"- Updating and loading repositories:- Fedora 42 - x86_64 - Updates 100% | 30.7 KiB/s | 6.7 KiB | 00m00s- Repositories loaded.- Metadata cache created.<><> Synchronising pinned packages ><><><><><><><><><><><><><><><><><><><><><><>[ca-certs.dev] synchronised (file:///src)[NOTE] Package ocaml-options-vanilla is already installed (current version is 1).[NOTE] Package ocaml-config is already installed (current version is 3).[NOTE] Package ocaml-compiler is already installed (current version is 5.4.0).[NOTE] Package ocaml-base-compiler is already installed (current version is 5.4.0).[NOTE] Package ocaml is already installed (current version is 5.4.0).[NOTE] Package base-unix is already installed (current version is base).[NOTE] Package base-threads is already installed (current version is base).[NOTE] Package base-nnp is already installed (current version is base).[NOTE] Package base-effects is already installed (current version is base).[NOTE] Package base-domains is already installed (current version is base).[NOTE] Package base-bigarray is already installed (current version is base).The following system packages will first need to be installed:gmp-devel<><> Handling external dependencies <><><><><><><><><><><><><><><><><><><><><><>+ /usr/sbin/sudo "yum" "install" "-y" "gmp-devel"- Updating and loading repositories:- Repositories loaded.- Package Arch Version Repository Size- Installing:- gmp-devel x86_64 1:6.3.0-4.fc42 fedora 352.3 KiB- Installing dependencies:- gmp-c++ x86_64 1:6.3.0-4.fc42 fedora 27.6 KiB-- Transaction Summary:- Installing: 2 packages-- Total size of inbound packages is 193 KiB. Need to download 193 KiB.- After this operation, 380 KiB extra will be used (install 380 KiB, remove 0 B).- [1/2] gmp-c++-1:6.3.0-4.fc42.x86_64 100% | 342.5 KiB/s | 18.5 KiB | 00m00s- [2/2] gmp-devel-1:6.3.0-4.fc42.x86_64 100% | 2.7 MiB/s | 174.4 KiB | 00m00s- --------------------------------------------------------------------------------- [2/2] Total 100% | 868.9 KiB/s | 192.9 KiB | 00m00s- Running transaction- [1/4] Verify package files 100% | 2.0 KiB/s | 2.0 B | 00m00s- [2/4] Prepare transaction 100% | 32.0 B/s | 2.0 B | 00m00s- [3/4] Installing gmp-c++-1:6.3.0-4.fc42 100% | 7.0 MiB/s | 28.5 KiB | 00m00s- [4/4] Installing gmp-devel-1:6.3.0-4.fc 100% | 4.4 MiB/s | 354.1 KiB | 00m00s- Complete!+ /usr/sbin/rpm "-q" "--whatprovides" "gmp-devel"- gmp-devel-6.3.0-4.fc42.x86_64# To update the current shell environment, run: eval $(opam env)2026-02-20 12:22.55 ---> using "6a605cc69bbee037664605bbaa6fcc60f9ad67c8ba6ff62a1ce327a0911e4350" from cache/src: (run (cache (opam-archives (target /home/opam/.opam/download-cache)))(network host)(shell "opam install $DEPS"))[NOTE] Package ocaml-options-vanilla is already installed (current version is 1).[NOTE] Package ocaml-config is already installed (current version is 3).[NOTE] Package ocaml-compiler is already installed (current version is 5.4.0).[NOTE] Package ocaml-base-compiler is already installed (current version is 5.4.0).[NOTE] Package ocaml is already installed (current version is 5.4.0).[NOTE] Package base-unix is already installed (current version is base).[NOTE] Package base-threads is already installed (current version is base).[NOTE] Package base-nnp is already installed (current version is base).[NOTE] Package base-effects is already installed (current version is base).[NOTE] Package base-domains is already installed (current version is base).[NOTE] Package base-bigarray is already installed (current version is base).The following actions will be performed:=== install 39 packages- install alcotest 1.9.1- install asn1-combinators 0.3.2- install astring 0.8.5- install base64 3.5.2- install bos 0.2.1- install cmdliner 2.1.0- install conf-gmp 5- install conf-gmp-powm-sec 4- install conf-pkg-config 4- install csexp 1.5.2- install digestif 1.3.0- install domain-name 0.5.0- install dune 3.21.1- install dune-configurator 3.21.1- install duration 0.2.1- install eqaf 0.10- install fmt 0.11.0- install fpath 0.7.3- install gmap 0.3.0- install ipaddr 5.6.2- install kdf 1.0.0- install logs 0.10.0- install macaddr 5.6.2- install mirage-crypto 2.0.3- install mirage-crypto-ec 2.0.3- install mirage-crypto-pk 2.0.3- install mirage-crypto-rng 2.0.3- install ocaml-syntax-shims 1.0.0- install ocamlbuild 0.16.1- install ocamlfind 1.9.8- install ohex 0.2.0- install ptime 1.2.0- install re 1.14.0- install rresult 0.7.0- install stdlib-shims 0.3.0- install topkg 1.1.1- install uutf 1.0.4- install x509 1.0.6- install zarith 1.14<><> Processing actions <><><><><><><><><><><><><><><><><><><><><><><><><><><><>-> retrieved alcotest.1.9.1 (cached)-> retrieved asn1-combinators.0.3.2 (cached)-> retrieved astring.0.8.5 (cached)-> retrieved base64.3.5.2 (cached)-> retrieved conf-gmp.5 (cached)-> retrieved conf-gmp-powm-sec.4 (cached)-> retrieved bos.0.2.1 (cached)-> retrieved cmdliner.2.1.0 (cached)-> retrieved csexp.1.5.2 (cached)-> installed conf-gmp.5-> installed conf-pkg-config.4-> retrieved domain-name.0.5.0 (cached)-> retrieved duration.0.2.1 (cached)-> installed conf-gmp-powm-sec.4-> retrieved eqaf.0.10 (cached)-> retrieved fmt.0.11.0 (cached)-> retrieved fpath.0.7.3 (cached)-> retrieved gmap.0.3.0 (cached)-> retrieved ipaddr.5.6.2, macaddr.5.6.2 (cached)-> retrieved kdf.1.0.0 (cached)-> retrieved logs.0.10.0 (cached)-> retrieved digestif.1.3.0 (cached)-> retrieved ocaml-syntax-shims.1.0.0 (cached)-> retrieved ocamlbuild.0.16.1 (cached)-> retrieved ocamlfind.1.9.8 (cached)-> retrieved mirage-crypto.2.0.3, mirage-crypto-ec.2.0.3, mirage-crypto-pk.2.0.3, mirage-crypto-rng.2.0.3 (cached)-> retrieved dune.3.21.1, dune-configurator.3.21.1 (cached)-> retrieved ohex.0.2.0 (cached)-> retrieved ptime.1.2.0 (cached)-> retrieved re.1.14.0 (cached)-> retrieved rresult.0.7.0 (cached)-> retrieved stdlib-shims.0.3.0 (cached)-> retrieved uutf.1.0.4 (cached)-> retrieved topkg.1.1.1 (cached)-> retrieved zarith.1.14 (cached)-> retrieved x509.1.0.6 (cached)-> installed cmdliner.2.1.0-> installed ocamlfind.1.9.8-> installed ocamlbuild.0.16.1-> installed zarith.1.14-> installed topkg.1.1.1-> installed rresult.0.7.0-> installed uutf.1.0.4-> installed fmt.0.11.0-> installed ptime.1.2.0-> installed astring.0.8.5-> installed fpath.0.7.3-> installed logs.0.10.0-> installed bos.0.2.1-> installed dune.3.21.1-> installed duration.0.2.1-> installed gmap.0.3.0-> installed base64.3.5.2-> installed csexp.1.5.2-> installed asn1-combinators.0.3.2-> installed domain-name.0.5.0-> installed eqaf.0.10-> installed macaddr.5.6.2-> installed ocaml-syntax-shims.1.0.0-> installed ohex.0.2.0-> installed re.1.14.0-> installed stdlib-shims.0.3.0-> installed ipaddr.5.6.2-> installed digestif.1.3.0-> installed alcotest.1.9.1-> installed dune-configurator.3.21.1-> installed mirage-crypto.2.0.3-> installed kdf.1.0.0-> installed mirage-crypto-rng.2.0.3-> installed mirage-crypto-pk.2.0.3-> installed mirage-crypto-ec.2.0.3-> installed x509.1.0.6Done.# To update the current shell environment, run: eval $(opam env)2026-02-20 12:22.55 ---> using "fa268b6a0f1dcc3641899ad6f209db66a3e192bb9201eabe5029afc52231c575" from cache/src: (copy (src .) (dst /src))2026-02-20 12:22.55 ---> saved as "b99aebd5bcb7d306df79fc39e4967aae4466bc58c107cf3768838e49df099218"/src: (run (shell "opam exec -- dune build @install @check @runtest && rm -rf _build"))(cd _build/default/test && ./tests.exe)Testing `verification tests'.This run has ID `6ZSSZ1IA'.[OK] X509 certificate validation 0 google.com.[OK] X509 certificate validation 1 extended-validation....[OK] X509 certificate validation 2 self-signed.badssl.com.[OK] X509 certificate validation 3 expired.badssl.com.[OK] X509 certificate validation 4 untrusted-root.badss...[OK] X509 certificate validation 5 wrong.host.badssl.com.[OK] X509 certificate validation 6 incomplete-chain.bad...[OK] X509 certificate validation 7 sha1-intermediate.ba...[OK] X509 certificate validation 8 wrong.host.google.com.Full test results in `/src/_build/default/test/_build/_tests/verification tests'.Test Successful in 0.002s. 9 tests run.tests.exe: [EXEC:46] ['uname' '-s']2026-02-20 12:22.56 ---> saved as "0a394f45f00d93a6f2f5aae3a611a0631aa80fc92448c066693c96e0d7327a6b"Job succeeded2026-02-20 12:22.56: Job succeeded