IBM-Security / isam-ansible-collection

Ansible Collection for providing ISAM Modules, Roles and Playbooks.
Apache License 2.0
13 stars 23 forks source link

enableSSLv3 does no longer exist in ISVA 10.0.5 - Parameter is not valid: enableSSLv3 #163

Open nieelu opened 1 year ago

nieelu commented 1 year ago

When evaluating the Ansible collections for ISVA 10.0.5, I noticed our playbooks fail with the following error:

[2022-12-19 10:54:07,253] [PID:93927 TID:140623308458880] [ERROR] [ibmsecurity.appliance.ibmappliance] [_process_response():70] text: {"message":"Parameter is not valid: enableSSLv3"} msg: '(''HTTP Return code: 400'', ''{"message":"Parameter is not valid: enableSSLv3"}'')' name: ibmsecurity.isam.base.admin.set

When inspecing the administrator settings in the LMI, I can see that the following setting does not exist:

Enable SSLv3 | False

In 10.0.2 the setting is available, but not in 10.0.5 it seems.

This causes the Ansible playbooks to fail, maybe a check for the ISVA version can be implemented?

I am able to resolve this by deleting the option in: roles/set_admin_cfg/tasks/main.yml