Setting repository fails because zeroc-ice3.6.repo is unavailable

[kojiwell]

Here's the output of the failed task at molecule converge -s ice36all.

TASK [ansible-role-ice : zeroc ice | setup repository] **************************************************************************************************************************************
fatal: [ice36all]: FAILED! => {"changed": false, "dest": "/etc/yum.repos.d/zeroc-ice-el7.repo", "elapsed": 0, "msg": "Request failed: <urlopen error [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:618)>", "url": "https://zeroc.com/download/Ice/3.6/el7/zeroc-ice3.6.repo"}

PLAY RECAP **********************************************************************************************************************************************************************************
ice36all                   : ok=5    changed=4    unreachable=0    failed=1    skipped=21   rescued=0    ignored=0

I can workaround this problem by adding validate_certs: no to the task. However, the next task "zeroc ice | install runtime packages" fails then(see below).

TASK [ansible-role-ice : zeroc ice | setup repository] **************************************************************************************************************************************
changed: [ice36all]

TASK [ansible-role-ice : zeroc ice | install runtime packages] ******************************************************************************************************************************
fatal: [ice36all]: FAILED! => {"changed": false, "msg": "Failure talking to yum: failure: repodata/repomd.xml from zeroc-ice3.6: [Errno 256] No more mirrors to try.\nhttps://zeroc.com/download/Ice/3.6/el7/x86_64/repodata/repomd.xml: [Errno 14] curl#60 - \"Peer's Certificate has expired.\""}

PLAY RECAP **********************************************************************************************************************************************************************************
ice36all                   : ok=6    changed=1    unreachable=0    failed=1    skipped=21   rescued=0    ignored=0

Although it is clear that the root cause is at https://zeroc.com, could you somehow possibly fix/workaround this problem?

Thank you in advance!

[joshmoore]

Hi @kojiwell. I don't have an idea offhand on how we could workaround this (other than co-hosting the files). It looks though like the problem has been corrected:

• local curls are passing and
• https://github.com/ome/ansible-role-ice/pull/18 which I just opened is green.

Can you give it another try and let us know?

[kojiwell]

Thank you, @joshmoore, for checking. My local test finished without a problem now.