I've been struggling with these SSL CERTIFICATE_VERIFY_ISSUES also. I can't
get validate_certs: false to work, I've even downloaded the unsigned cert,
converted it to PEM and added it to /usr/local/etc/openssl/certs and run /
usr/local/opt/openssl/bin/c_rehash to no avail. Something is definitely
broken with the validate_certs parameter (at least on my OSX machine
running python 2.7.11 and ansible (2.0.1.0))
The only way I've found to get this working, which might work for you guys
is to open up the following file:
./ansible/modules/core/cloud/vmware/vsphere_guest.py (or whatever module
vmware module you're using that connects via SSL).
This file is usually located in your /Library/Python/2.7/site-packages/
folder (OSX)
or
/usr/lib/python2.7/site-packages/ (redhat/centos)
And ADD the following lines below the initial comments:
import requests, ssl
requests.packages.urllib3.disable_warnings()
try:
_create_unverified_https_context = ssl._create_unverified_context
except AttributeError:
pass
else:
ssl._create_default_https_context = _create_unverified_https_context
Also, make sure you have the requests module installed.
Hope this gets fixed soon, but in the meantime that should work to
completely disable SSL and make everything super unsecure :)
On Wednesday, March 9, 2016 at 7:34:13 AM UTC-8, Larry Smith wrote:
>
> So it appears this is still an issue? Would be awesome to get this fixed
> in the GA release so we can proceed with testing out the modules w/out
> hacks. Also not assuming that every environment uses self-signed certs
> should have been considered initially????
>
> On Saturday, March 5, 2016 at 5:06:17 PM UTC-5, Jonathan Frappier wrote:
>>
>> I'll add that I also tried on Ubuntu 15.04 w Python 2.7.10
>> On Mar 5, 2016 4:52 PM, "Vinson Xing" <[email protected]> wrote:
>>
>>> I installed the ansible from devel branch, I got the same issue even set
>>> validate_certs to false.
>>> My test environment:
>>>
>>> Ubuntu: 14.04
>>> Python: 2.7.6
>>> vSphere 5.5
>>>
>>> --
>>> You received this message because you are subscribed to a topic in the
>>> Google Groups "Ansible Project" group.
>>> To unsubscribe from this topic, visit
>>> https://groups.google.com/d/topic/ansible-project/mvl7dq9nrwQ/unsubscribe
>>> .
>>> To unsubscribe from this group and all its topics, send an email to
>>> [email protected].
>>> To post to this group, send email to [email protected].
>>> To view this discussion on the web visit
>>> https://groups.google.com/d/msgid/ansible-project/5c292513-f39b-48ed-a3c2-7347251788f7%40googlegroups.com
>>>
>>> <https://groups.google.com/d/msgid/ansible-project/5c292513-f39b-48ed-a3c2-7347251788f7%40googlegroups.com?utm_medium=email&utm_source=footer>
>>> .
>>> For more options, visit https://groups.google.com/d/optout.
>>>
>>
--
You received this message because you are subscribed to the Google Groups
"Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To post to this group, send email to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/ansible-project/664781c6-3717-47e4-b5b3-3b8d384f0324%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
