Thanks for the tips Julian! Hoping to show this off at work without any hacks. Don't want it to come off as glitchy and unsupportable On Mar 10, 2016 6:08 PM, "Julian Barnett" <[email protected]> wrote:
> I've been struggling with these SSL CERTIFICATE_VERIFY_ISSUES also. I > can't get validate_certs: false to work, I've even downloaded the unsigned > cert, converted it to PEM and added it to /usr/local/etc/openssl/certs > and run /usr/local/opt/openssl/bin/c_rehash to no avail. Something is > definitely broken with the validate_certs parameter (at least on my OSX > machine running python 2.7.11 and ansible (2.0.1.0)) > > The only way I've found to get this working, which might work for you guys > is to open up the following file: > > ./ansible/modules/core/cloud/vmware/vsphere_guest.py (or whatever module > vmware module you're using that connects via SSL). > > This file is usually located in your /Library/Python/2.7/site-packages/ > folder (OSX) > or > /usr/lib/python2.7/site-packages/ (redhat/centos) > > And ADD the following lines below the initial comments: > > import requests, ssl > requests.packages.urllib3.disable_warnings() > try: > _create_unverified_https_context = ssl._create_unverified_context > except AttributeError: > pass > else: > ssl._create_default_https_context = _create_unverified_https_context > > Also, make sure you have the requests module installed. > > Hope this gets fixed soon, but in the meantime that should work to > completely disable SSL and make everything super unsecure :) > > On Wednesday, March 9, 2016 at 7:34:13 AM UTC-8, Larry Smith wrote: >> >> So it appears this is still an issue? Would be awesome to get this fixed >> in the GA release so we can proceed with testing out the modules w/out >> hacks. Also not assuming that every environment uses self-signed certs >> should have been considered initially???? >> >> On Saturday, March 5, 2016 at 5:06:17 PM UTC-5, Jonathan Frappier wrote: >>> >>> I'll add that I also tried on Ubuntu 15.04 w Python 2.7.10 >>> On Mar 5, 2016 4:52 PM, "Vinson Xing" <[email protected]> wrote: >>> >>>> I installed the ansible from devel branch, I got the same issue even >>>> set validate_certs to false. >>>> My test environment: >>>> >>>> Ubuntu: 14.04 >>>> Python: 2.7.6 >>>> vSphere 5.5 >>>> >>>> -- >>>> You received this message because you are subscribed to a topic in the >>>> Google Groups "Ansible Project" group. >>>> To unsubscribe from this topic, visit >>>> https://groups.google.com/d/topic/ansible-project/mvl7dq9nrwQ/unsubscribe >>>> . >>>> To unsubscribe from this group and all its topics, send an email to >>>> [email protected]. >>>> To post to this group, send email to [email protected]. >>>> To view this discussion on the web visit >>>> https://groups.google.com/d/msgid/ansible-project/5c292513-f39b-48ed-a3c2-7347251788f7%40googlegroups.com >>>> <https://groups.google.com/d/msgid/ansible-project/5c292513-f39b-48ed-a3c2-7347251788f7%40googlegroups.com?utm_medium=email&utm_source=footer> >>>> . >>>> For more options, visit https://groups.google.com/d/optout. >>>> >>> -- > You received this message because you are subscribed to a topic in the > Google Groups "Ansible Project" group. > To unsubscribe from this topic, visit > https://groups.google.com/d/topic/ansible-project/mvl7dq9nrwQ/unsubscribe. > To unsubscribe from this group and all its topics, send an email to > [email protected]. > To post to this group, send email to [email protected]. > To view this discussion on the web visit > https://groups.google.com/d/msgid/ansible-project/664781c6-3717-47e4-b5b3-3b8d384f0324%40googlegroups.com > <https://groups.google.com/d/msgid/ansible-project/664781c6-3717-47e4-b5b3-3b8d384f0324%40googlegroups.com?utm_medium=email&utm_source=footer> > . > For more options, visit https://groups.google.com/d/optout. > -- You received this message because you are subscribed to the Google Groups "Ansible Project" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/ansible-project/CA%2BVhEZ_ZBdq3KwuQftRj2M1h%2BkhUKS%2Bnp-Gc32jMKLs1GKOT%2Bg%40mail.gmail.com. For more options, visit https://groups.google.com/d/optout.
