TOSIT-IO / tdp-collection-prerequisites

Ansible collection with TDP prerequisites
Apache License 2.0
3 stars 10 forks source link

PostgreSQL: public repo installation fails because of non trusted SSL certificate #26

Closed Nuttymoon closed 2 years ago

Nuttymoon commented 2 years ago

When postgresql_use_public_repo: yes, the PostgreSQL role fails with:

TASK [tosit.tdp_prerequisites.postgresql : Install PostgreSQL public repo RPM] ***************************
fatal: [master-03]: FAILED! => changed=false 
  ansible_facts:
    discovered_interpreter_python: /usr/bin/python
  msg: 'Failure downloading https://download.postgresql.org/pub/repos/yum/reporpms/EL-7-x86_64/pgdg-redhat-repo-latest.noarch.rpm, Request failed: <urlopen error [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:618)>'

Using the option validate_certs: no fixes the issue.

rpignolet commented 2 years ago

You should use an OS up to date or update ca-certificates package. What OS do you use ? The vagrant box centos/7 ?

Nuttymoon commented 2 years ago

I am using the centos/7 box. Updating ca-certificates solves the issue.

rpignolet commented 2 years ago

This PR https://github.com/TOSIT-IO/tdp-vagrant/pull/19 change Vagrant box from centos/7 to generic/centos7 which is a newer image.

rpignolet commented 2 years ago

The Vagrant box change to generic/centos7 solve this issue. My comment was not clear enough.