2025-04-15 16:18.30: New job: test mirage/ca-certs https://github.com/mirage/ca-certs.git#refs/pull/36/head (f02894e446c48fbbf93b2afc464b7058db798273) (freebsd-x86_64:freebsd-14.2-5.3_opam-2.3) Base: freebsd-14.2-ocaml-5.3 Opam project build To reproduce locally: git clone --recursive "https://github.com/mirage/ca-certs.git" && cd "ca-certs" && git fetch origin "refs/pull/36/head" && git reset --hard f02894e4 cat > Dockerfile <<'END-OF-DOCKERFILE' FROM freebsd-14.2-ocaml-5.3 # freebsd-14.2-5.3_opam-2.3 USER 1000:1000 ENV CLICOLOR_FORCE="1" ENV OPAMCOLOR="always" WORKDIR /src RUN sudo ln -f /usr/local/bin/opam-2.3 /usr/local/bin/opam RUN opam init --reinit -ni RUN uname -rs && opam exec -- ocaml -version && opam --version WORKDIR /src RUN sudo chown opam /src RUN cd ~/opam-repository && (git cat-file -e ebbcec92a028ec6a4c71de7a7c3ed42739479745 || git fetch origin master) && git reset -q --hard ebbcec92a028ec6a4c71de7a7c3ed42739479745 && git log --no-decorate -n1 --oneline && opam update -u COPY --chown=1000:1000 ca-certs.opam ./ RUN opam pin add -yn ca-certs.dev './' RUN echo '(lang dune 3.0)' > './dune-project' ENV DEPS="alcotest.1.9.0 asn1-combinators.0.3.2 astring.0.8.5 base-bigarray.base base-domains.base base-effects.base base-nnp.base base-threads.base base-unix.base base64.3.5.1 bos.0.2.1 cmdliner.1.3.0 conf-gmp.5 conf-gmp-powm-sec.4 conf-pkg-config.4 csexp.1.5.2 digestif.1.2.0 domain-name.0.4.1 dune.3.18.0 dune-configurator.3.18.0 duration.0.2.1 eqaf.0.10 fmt.0.10.0 fpath.0.7.3 gmap.0.3.0 ipaddr.5.6.0 kdf.1.0.0 logs.0.8.0 macaddr.5.6.0 mirage-crypto.2.0.0 mirage-crypto-ec.2.0.0 mirage-crypto-pk.2.0.0 mirage-crypto-rng.2.0.0 ocaml.5.3.0 ocaml-base-compiler.5.3.0 ocaml-compiler.5.3.0 ocaml-config.3 ocaml-options-vanilla.1 ocaml-syntax-shims.1.0.0 ocamlbuild.0.16.1 ocamlfind.1.9.8 ohex.0.2.0 ptime.1.2.0 re.1.12.0 rresult.0.7.0 seq.base stdlib-shims.0.3.0 topkg.1.0.8 uutf.1.0.4 x509.1.0.5 zarith.1.14" ENV CI="true" ENV OCAMLCI="true" RUN opam update --depexts && opam install --cli=2.3 --depext-only -y ca-certs.dev $DEPS RUN opam install $DEPS COPY --chown=1000:1000 . /src RUN opam exec -- dune build @install @check @runtest && rm -rf _build END-OF-DOCKERFILE docker build . END-REPRO-BLOCK 2025-04-15 16:18.30: Using cache hint "mirage/ca-certs-freebsd-14.2-ocaml-5.3-freebsd-14.2-5.3_opam-2.3-b285eb3c39f146d21ae6e4f14912cbd7" 2025-04-15 16:18.30: Using OBuilder spec: ((from freebsd-14.2-ocaml-5.3) (comment freebsd-14.2-5.3_opam-2.3) (user (uid 1000) (gid 1000)) (env CLICOLOR_FORCE 1) (env OPAMCOLOR always) (workdir /src) (run (shell "sudo ln -f /usr/local/bin/opam-2.3 /usr/local/bin/opam")) (run (shell "opam init --reinit -ni")) (run (shell "uname -rs && opam exec -- ocaml -version && opam --version")) (workdir /src) (run (shell "sudo chown opam /src")) (run (cache (opam-archives (target /home/opam/.opam/download-cache))) (network host) (shell "cd ~/opam-repository && (git cat-file -e ebbcec92a028ec6a4c71de7a7c3ed42739479745 || git fetch origin master) && git reset -q --hard ebbcec92a028ec6a4c71de7a7c3ed42739479745 && git log --no-decorate -n1 --oneline && opam update -u")) (copy (src ca-certs.opam) (dst ./)) (run (network host) (shell "opam pin add -yn ca-certs.dev './'")) (run (network host) (shell "echo '(lang dune 3.0)' > './dune-project'")) (env DEPS "alcotest.1.9.0 asn1-combinators.0.3.2 astring.0.8.5 base-bigarray.base base-domains.base base-effects.base base-nnp.base base-threads.base base-unix.base base64.3.5.1 bos.0.2.1 cmdliner.1.3.0 conf-gmp.5 conf-gmp-powm-sec.4 conf-pkg-config.4 csexp.1.5.2 digestif.1.2.0 domain-name.0.4.1 dune.3.18.0 dune-configurator.3.18.0 duration.0.2.1 eqaf.0.10 fmt.0.10.0 fpath.0.7.3 gmap.0.3.0 ipaddr.5.6.0 kdf.1.0.0 logs.0.8.0 macaddr.5.6.0 mirage-crypto.2.0.0 mirage-crypto-ec.2.0.0 mirage-crypto-pk.2.0.0 mirage-crypto-rng.2.0.0 ocaml.5.3.0 ocaml-base-compiler.5.3.0 ocaml-compiler.5.3.0 ocaml-config.3 ocaml-options-vanilla.1 ocaml-syntax-shims.1.0.0 ocamlbuild.0.16.1 ocamlfind.1.9.8 ohex.0.2.0 ptime.1.2.0 re.1.12.0 rresult.0.7.0 seq.base stdlib-shims.0.3.0 topkg.1.0.8 uutf.1.0.4 x509.1.0.5 zarith.1.14") (env CI true) (env OCAMLCI true) (run (cache (opam-archives (target /home/opam/.opam/download-cache))) (network host) (shell "opam update --depexts && opam install --cli=2.3 --depext-only -y ca-certs.dev $DEPS")) (run (cache (opam-archives (target /home/opam/.opam/download-cache))) (network host) (shell "opam install $DEPS")) (copy (src .) (dst /src)) (run (shell "opam exec -- dune build @install @check @runtest && rm -rf _build")) ) 2025-04-15 16:18.30: Waiting for resource in pool OCluster 2025-04-15 16:18.30: Waiting for worker… 2025-04-15 16:20.00: Got resource from pool OCluster Building on spring HEAD is now at 81605d7 add maintenance intent HEAD is now at f02894e report number of ignored trust anchors on warn level (from freebsd-14.2-ocaml-5.3) 2025-04-15 16:04.53 ---> using "47c9a03b962be450225081ed69acde1f5c6dadb6d1106d9b1a8b4fd61c2defa6" from cache /: (comment freebsd-14.2-5.3_opam-2.3) /: (user (uid 1000) (gid 1000)) /: (env CLICOLOR_FORCE 1) /: (env OPAMCOLOR always) /: (workdir /src) /src: (run (shell "sudo ln -f /usr/local/bin/opam-2.3 /usr/local/bin/opam")) 2025-04-15 16:04.54 ---> using "6c919feff42b8acbece064f547886f17e62a0f8c652c95803d5cc1a0edc05bf0" from cache /src: (run (shell "opam init --reinit -ni")) No configuration file found, using built-in defaults. Checking for available remotes: rsync and local, git. - you won't be able to use mercurial repositories unless you install the hg command on your system. - you won't be able to use darcs repositories unless you install the darcs command on your system. This version of opam requires an update to the layout of /home/opam/.opam from version 2.1 to version 2.2, which can't be reverted. You may want to back it up before going further. Continue? [y/n] y [NOTE] The 'jobs' option was reset, its value was 1 and its new value will vary according to the current number of cores on your machine. You can restore the fixed value using: opam option jobs=1 --global Format upgrade done. <><> Updating repositories ><><><><><><><><><><><><><><><><><><><><><><><><><><> [default] no changes from git+file:///home/opam/opam-repository 2025-04-15 16:04.54 ---> using "ef1aecc2d79e0d6d7a69975e03fbee48aae321cc5ded967c4b85817abcd33408" from cache /src: (run (shell "uname -rs && opam exec -- ocaml -version && opam --version")) FreeBSD 14.2-RELEASE-p1 The OCaml toplevel, version 5.3.0 2.3.0 2025-04-15 16:04.54 ---> using "b81c61e28dd398a2621aef3fc778c808fda4399fe66dbfb28a40b55bd44ce32a" from cache /src: (workdir /src) /src: (run (shell "sudo chown opam /src")) 2025-04-15 16:04.54 ---> using "46859cd3f1ed5f6081f98d282b27cc9fcab2b0b04b4be45ac52d723eb6d8a59e" from cache /src: (run (cache (opam-archives (target /home/opam/.opam/download-cache))) (network host) (shell "cd ~/opam-repository && (git cat-file -e ebbcec92a028ec6a4c71de7a7c3ed42739479745 || git fetch origin master) && git reset -q --hard ebbcec92a028ec6a4c71de7a7c3ed42739479745 && git log --no-decorate -n1 --oneline && opam update -u")) From https://github.com/ocaml/opam-repository * branch master -> FETCH_HEAD 48e47466f5..70b82be6e2 master -> origin/master ebbcec92a0 Merge pull request #23330 from mseri/fix-gmp <><> Updating package repositories ><><><><><><><><><><><><><><><><><><><><><><> [default] synchronised from git+file:///home/opam/opam-repository Everything as up-to-date as possible (run with --verbose to show unavailable upgrades). The following packages are not being upgraded because the new versions conflict with other installed packages: - ocaml.5.4.0 However, you may "opam upgrade" these packages explicitly, which will ask permission to downgrade or uninstall the conflicting packages. Nothing to do. 2025-04-15 16:04.54 ---> using "cae8572f2dd6f016e84dcf59d5942caf858acce77d9005b53f8fe601891d91fa" from cache /src: (copy (src ca-certs.opam) (dst ./)) 2025-04-15 16:04.55 ---> saved as "0f456ac4e90de2663bc592f67fc69db14586eb210cf52c483b9d3426d071bff8" /src: (run (network host) (shell "opam pin add -yn ca-certs.dev './'")) [ca-certs.dev] synchronised (file:///src) ca-certs is now pinned to file:///src (version dev) 2025-04-15 16:04.58 ---> saved as "f55874bc90e3e55a852ed2ad35e7754414f7e17c8899112e6055518278af4a2e" /src: (run (network host) (shell "echo '(lang dune 3.0)' > './dune-project'")) 2025-04-15 16:05.00 ---> saved as "2064d89a652ed62e83d59a9201380ed3784ceedcc71bbbe703b2a61163a77ac3" /src: (env DEPS "alcotest.1.9.0 asn1-combinators.0.3.2 astring.0.8.5 base-bigarray.base base-domains.base base-effects.base base-nnp.base base-threads.base base-unix.base base64.3.5.1 bos.0.2.1 cmdliner.1.3.0 conf-gmp.5 conf-gmp-powm-sec.4 conf-pkg-config.4 csexp.1.5.2 digestif.1.2.0 domain-name.0.4.1 dune.3.18.0 dune-configurator.3.18.0 duration.0.2.1 eqaf.0.10 fmt.0.10.0 fpath.0.7.3 gmap.0.3.0 ipaddr.5.6.0 kdf.1.0.0 logs.0.8.0 macaddr.5.6.0 mirage-crypto.2.0.0 mirage-crypto-ec.2.0.0 mirage-crypto-pk.2.0.0 mirage-crypto-rng.2.0.0 ocaml.5.3.0 ocaml-base-compiler.5.3.0 ocaml-compiler.5.3.0 ocaml-config.3 ocaml-options-vanilla.1 ocaml-syntax-shims.1.0.0 ocamlbuild.0.16.1 ocamlfind.1.9.8 ohex.0.2.0 ptime.1.2.0 re.1.12.0 rresult.0.7.0 seq.base stdlib-shims.0.3.0 topkg.1.0.8 uutf.1.0.4 x509.1.0.5 zarith.1.14") /src: (env CI true) /src: (env OCAMLCI true) /src: (run (cache (opam-archives (target /home/opam/.opam/download-cache))) (network host) (shell "opam update --depexts && opam install --cli=2.3 --depext-only -y ca-certs.dev $DEPS")) [WARNING] Unknown update command for bsd, skipping system update <><> Synchronising pinned packages ><><><><><><><><><><><><><><><><><><><><><><> [ca-certs.dev] synchronised (file:///src) [NOTE] Package ocaml-options-vanilla is already installed (current version is 1). [NOTE] Package ocaml-config is already installed (current version is 3). [NOTE] Package ocaml-compiler is already installed (current version is 5.3.0). [NOTE] Package ocaml-base-compiler is already installed (current version is 5.3.0). [NOTE] Package ocaml is already installed (current version is 5.3.0). [NOTE] Package base-unix is already installed (current version is base). [NOTE] Package base-threads is already installed (current version is base). [NOTE] Package base-nnp is already installed (current version is base). [NOTE] Package base-effects is already installed (current version is base). [NOTE] Package base-domains is already installed (current version is base). [NOTE] Package base-bigarray is already installed (current version is base). The following system packages will first need to be installed: ca_root_nss gmp <><> Handling external dependencies <><><><><><><><><><><><><><><><><><><><><><> + /usr/local/bin/sudo "pkg" "install" "-y" "ca_root_nss" "gmp" - Updating FreeBSD repository catalogue... - [spring] Fetching data.pkg: - .... - ...... done - Processing entries: . - .. - .. - .. - . - .. done - FreeBSD repository update completed. 34724 packages processed. - All repositories are up to date. - New version of pkg detected; it needs to be installed first. - The following 1 package(s) will be affected (of 0 checked): - - Installed packages to be UPGRADED: - pkg: 1.21.3 -> 2.1.0 - - Number of packages to be upgraded: 1 - - 12 MiB to be downloaded. - [spring] [1/1] Fetching pkg-2.1.0.pkg: - ..... - ..... done - Checking integrity... done (0 conflicting) - [spring] [1/1] Upgrading pkg from 1.21.3 to 2.1.0... - [spring] [1/1] Extracting pkg-2.1.0: .. - ....... - . done - Updating FreeBSD repository catalogue... - FreeBSD repository is up to date. - All repositories are up to date. - The following 2 package(s) will be affected (of 0 checked): - - New packages to be INSTALLED: - ca_root_nss: 3.108 - gmp: 6.3.0 - - Number of packages to be installed: 2 - - The process will require 3 MiB more space. - 780 KiB to be downloaded. - [spring] [1/2] Fetching gmp-6.3.0.pkg: .......... done - [spring] [2/2] Fetching ca_root_nss-3.108.pkg: .......... done - Checking integrity... done (0 conflicting) - [spring] [1/2] Installing ca_root_nss-3.108... - [spring] [1/2] Extracting ca_root_nss-3.108: ....... done - Scanning /usr/share/certs/untrusted for certificates... - Scanning /usr/share/certs/trusted for certificates... - Scanning /usr/local/share/certs for certificates... - [spring] [2/2] Installing gmp-6.3.0... - [spring] [2/2] Extracting gmp-6.3.0: .......... done - ===== - Message from ca_root_nss-3.108: - - -- - FreeBSD does not, and can not warrant that the certification authorities - whose certificates are included in this package have in any way been - audited for trustworthiness or RFC 3647 compliance. - - Assessment and verification of trust is the complete responsibility of - the system administrator. - - This package installs symlinks to support root certificate discovery - for software that either uses other cryptographic libraries than - OpenSSL, or use OpenSSL but do not follow recommended practice. - - If you prefer to do this manually, replace the following symlinks with - either an empty file or your site-local certificate bundle. - - * /etc/ssl/cert.pem - * /usr/local/etc/ssl/cert.pem - * /usr/local/openssl/cert.pem 2025-04-15 16:06.13 ---> saved as "75617e77fe13413ee0dd5343b8942a2c3d36fac132f01ffdc9071b115923cdc2" /src: (run (cache (opam-archives (target /home/opam/.opam/download-cache))) (network host) (shell "opam install $DEPS")) [NOTE] Package ocaml-options-vanilla is already installed (current version is 1). [NOTE] Package ocaml-config is already installed (current version is 3). [NOTE] Package ocaml-compiler is already installed (current version is 5.3.0). [NOTE] Package ocaml-base-compiler is already installed (current version is 5.3.0). [NOTE] Package ocaml is already installed (current version is 5.3.0). [NOTE] Package base-unix is already installed (current version is base). [NOTE] Package base-threads is already installed (current version is base). [NOTE] Package base-nnp is already installed (current version is base). [NOTE] Package base-effects is already installed (current version is base). [NOTE] Package base-domains is already installed (current version is base). [NOTE] Package base-bigarray is already installed (current version is base). The following actions will be performed: === install 40 packages ∗ alcotest 1.9.0 ∗ asn1-combinators 0.3.2 ∗ astring 0.8.5 ∗ base64 3.5.1 ∗ bos 0.2.1 ∗ cmdliner 1.3.0 ∗ conf-gmp 5 ∗ conf-gmp-powm-sec 4 ∗ conf-pkg-config 4 ∗ csexp 1.5.2 ∗ digestif 1.2.0 ∗ domain-name 0.4.1 ∗ dune 3.18.0 ∗ dune-configurator 3.18.0 ∗ duration 0.2.1 ∗ eqaf 0.10 ∗ fmt 0.10.0 ∗ fpath 0.7.3 ∗ gmap 0.3.0 ∗ ipaddr 5.6.0 ∗ kdf 1.0.0 ∗ logs 0.8.0 ∗ macaddr 5.6.0 ∗ mirage-crypto 2.0.0 ∗ mirage-crypto-ec 2.0.0 ∗ mirage-crypto-pk 2.0.0 ∗ mirage-crypto-rng 2.0.0 ∗ ocaml-syntax-shims 1.0.0 ∗ ocamlbuild 0.16.1 ∗ ocamlfind 1.9.8 ∗ ohex 0.2.0 ∗ ptime 1.2.0 ∗ re 1.12.0 ∗ rresult 0.7.0 ∗ seq base ∗ stdlib-shims 0.3.0 ∗ topkg 1.0.8 ∗ uutf 1.0.4 ∗ x509 1.0.5 ∗ zarith 1.14 <><> Processing actions <><><><><><><><><><><><><><><><><><><><><><><><><><><><> ⬇ retrieved asn1-combinators.0.3.2 (cached) ⬇ retrieved astring.0.8.5 (cached) ⬇ retrieved base64.3.5.1 (cached) ⬇ retrieved bos.0.2.1 (cached) ⬇ retrieved conf-gmp.5 (cached) ⬇ retrieved conf-gmp-powm-sec.4 (cached) ⬇ retrieved cmdliner.1.3.0 (cached) ∗ installed conf-pkg-config.4 ∗ installed conf-gmp.5 ⬇ retrieved csexp.1.5.2 (cached) ∗ installed conf-gmp-powm-sec.4 ⬇ retrieved digestif.1.2.0 (cached) ⬇ retrieved domain-name.0.4.1 (cached) ⬇ retrieved alcotest.1.9.0 (cached) ⬇ retrieved duration.0.2.1 (cached) ⬇ retrieved eqaf.0.10 (cached) ⬇ retrieved fmt.0.10.0 (cached) ⬇ retrieved fpath.0.7.3 (cached) ⬇ retrieved gmap.0.3.0 (cached) ⬇ retrieved ipaddr.5.6.0, macaddr.5.6.0 (cached) ⬇ retrieved kdf.1.0.0 (cached) ⬇ retrieved logs.0.8.0 (cached) ⬇ retrieved dune.3.18.0, dune-configurator.3.18.0 (cached) ⬇ retrieved ocamlbuild.0.16.1 (cached) ⬇ retrieved ocaml-syntax-shims.1.0.0 (cached) ⬇ retrieved ocamlfind.1.9.8 (cached) ⬇ retrieved ptime.1.2.0 (cached) ⬇ retrieved ohex.0.2.0 (cached) ⬇ retrieved re.1.12.0 (cached) ⬇ retrieved seq.base (cached) ∗ installed seq.base ⬇ retrieved stdlib-shims.0.3.0 (cached) ⬇ retrieved rresult.0.7.0 (cached) ⬇ retrieved mirage-crypto.2.0.0, mirage-crypto-ec.2.0.0, mirage-crypto-pk.2.0.0, mirage-crypto-rng.2.0.0 (cached) ⬇ retrieved uutf.1.0.4 (cached) ⬇ retrieved x509.1.0.5 (cached) ⬇ retrieved zarith.1.14 (cached) ⬇ retrieved topkg.1.0.8 (cached) ∗ installed cmdliner.1.3.0 ∗ installed ocamlfind.1.9.8 ∗ installed ocamlbuild.0.16.1 ∗ installed zarith.1.14 ∗ installed topkg.1.0.8 ∗ installed rresult.0.7.0 ∗ installed uutf.1.0.4 ∗ installed astring.0.8.5 ∗ installed ptime.1.2.0 ∗ installed fmt.0.10.0 ∗ installed fpath.0.7.3 ∗ installed logs.0.8.0 ∗ installed bos.0.2.1 ∗ installed dune.3.18.0 ∗ installed csexp.1.5.2 ∗ installed duration.0.2.1 ∗ installed macaddr.5.6.0 ∗ installed gmap.0.3.0 ∗ installed eqaf.0.10 ∗ installed domain-name.0.4.1 ∗ installed ohex.0.2.0 ∗ installed base64.3.5.1 ∗ installed asn1-combinators.0.3.2 ∗ installed ocaml-syntax-shims.1.0.0 ∗ installed stdlib-shims.0.3.0 ∗ installed ipaddr.5.6.0 ∗ installed dune-configurator.3.18.0 ∗ installed digestif.1.2.0 ∗ installed re.1.12.0 ∗ installed mirage-crypto.2.0.0 ∗ installed kdf.1.0.0 ∗ installed alcotest.1.9.0 ∗ installed mirage-crypto-rng.2.0.0 ∗ installed mirage-crypto-pk.2.0.0 ∗ installed mirage-crypto-ec.2.0.0 ∗ installed x509.1.0.5 Done. 2025-04-15 16:10.17 ---> saved as "bdf649a9ec750c7c2fc85bcf777c68a8339a708108a8fdb39110f73d9041cf34" /src: (copy (src .) (dst /src)) 2025-04-15 16:10.22 ---> saved as "d6a7381c85ffb92a943c92ebdf248d312a63e72b2468a0e58804f5de9cf977b9" /src: (run (shell "opam exec -- dune build @install @check @runtest && rm -rf _build")) (cd _build/default/test && ./tests.exe) Testing `verification tests'. This run has ID `A79ESLKA'. [OK] X509 certificate validation 0 google.com. [OK] X509 certificate validation 1 extended-validation.... [OK] X509 certificate validation 2 self-signed.badssl.com. [OK] X509 certificate validation 3 expired.badssl.com. [OK] X509 certificate validation 4 untrusted-root.badss... [OK] X509 certificate validation 5 wrong.host.badssl.com. [OK] X509 certificate validation 6 incomplete-chain.bad... [OK] X509 certificate validation 7 sha1-intermediate.ba... [OK] X509 certificate validation 8 wrong.host.google.com. Full test results in `/src/_build/default/test/_build/_tests/verification tests'. Test Successful in 0.027s. 9 tests run. tests.exe: [EXEC:51766] ['uname' '-s'] 2025-04-15 16:10.38 ---> saved as "fd4be0bc10fc61d383c9ef043646dab85266c3ae4b81b52ff2790549a79f0c24" Job succeeded 2025-04-15 16:25.47: Job succeeded