search

redhat-openstack / infrared

Plugin based framework that aims to provide an easy-to-use CLI for Ansible based projects
https://infrared.readthedocs.io/en/latest/index.html
Apache License 2.0
99 stars 96 forks source link

VM provisioning failing with ssl error #410

Open vivek076 opened 2 years ago

vivek076 commented 2 years ago

This is the error:

TASK [Get Appliance files to allow virt-customize on RHEL hypervisors] ********************************************************************************************************************************************
fatal: [hypervisor]: FAILED! => {"changed": false, "msg": "Failed to validate the SSL certificate for download.libguestfs.org:443. Make sure your managed systems have a valid CA certificate installed. You can use validate_certs=False if you do not need to confirm the servers identity but this is unsafe and not recommended. Paths checked for this platform: /etc/ssl/certs, /etc/pki/ca-trust/extracted/pem, /etc/pki/tls/certs, /usr/share/ca-certificates/cacert.org, /etc/ansible. The exception msg was: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:579)."}
dsedgmen commented 2 years ago

Try updating ca-certificates.noarch. I checked the url with curl and it worked, but using openssl s_client show the root CA was expired. updating the ca trust bundle revolved the expired root CA. Now trying again with infrared virsh

dsedgmen commented 2 years ago

That fixed it for me