Generate self-signed cert failed due to 'Number of days value, 3,650, is out of the allowed range.'

[lxiaopei]

TASK [Generate NSX self-signed certificate if it doens't exist] ***** task path: /tmp/build/6fab756d/nsxt-ansible/basic_topology.yml:49

ESTABLISH LOCAL CONNECTION FOR USER: root EXEC /bin/sh -c 'echo ~root && sleep 0' EXEC /bin/sh -c '( umask 77 && mkdir -p "` echo /root/.ansible/tmp/ansible-tmp-1582524602.4158328-107136758138658 `" && echo ansible-tmp-1582524602.4158328-107136758138658="` echo /root/.ansible/tmp/ansible-tmp-1582524602.4158328-107136758138658 `" ) && sleep 0' Using module file /usr/local/lib/python3.5/dist-packages/ansible/modules/commands/command.py PUT /root/.ansible/tmp/ansible-local-440xn0zgkmb/tmpm7t3h0bt TO /root/.ansible/tmp/ansible-tmp-1582524602.4158328-107136758138658/AnsiballZ_command.py EXEC /bin/sh -c 'chmod u+x /root/.ansible/tmp/ansible-tmp-1582524602.4158328-107136758138658/ /root/.ansible/tmp/ansible-tmp-1582524602.4158328-107136758138658/AnsiballZ_command.py && sleep 0' EXEC /bin/sh -c '/usr/bin/python /root/.ansible/tmp/ansible-tmp-1582524602.4158328-107136758138658/AnsiballZ_command.py && sleep 0' EXEC /bin/sh -c 'rm -f -r /root/.ansible/tmp/ansible-tmp-1582524602.4158328-107136758138658/ > /dev/null 2>&1 && sleep 0' fatal: [localhost]: FAILED! => { "changed": true, "cmd": [ "python", "nsx_t_gen.py", "--router_config", "false", "--generate_cert", "true" ], "delta": "0:00:00.978682", "end": "2020-02-24 06:10:03.605372", "invocation": { "module_args": { "_raw_params": "python nsx_t_gen.py --router_config false --generate_cert true", "_uses_shell": false, "argv": null, "chdir": null, "creates": null, "executable": null, "removes": null, "stdin": null, "stdin_add_newline": true, "strip_empty_ends": true, "warn": true } }, "msg": "non-zero return code", "rc": 1, "start": "2020-02-24 06:10:02.626690", "stderr": "nsx_t_gen.py:1084: YAMLLoadWarning: calling yaml.load() without Loader=... is deprecated, as the default Loader is unsafe. Please read https://msg.pyyaml.org/load for full details.\n rsc_defns = yaml.load(rsc).get(rsc_subname)\nTraceback (most recent call last):\n File \"nsx_t_gen.py\", line 1153, in \n main()\n File \"nsx_t_gen.py\", line 1149, in main\n configure_self_signed_certs()\n File \"nsx_t_gen.py\", line 666, in configure_self_signed_certs\n signed_cert_id = generate_self_signed_cert(fqdn, csr_request)\n File \"nsx_t_gen.py\", line 624, in generate_self_signed_cert\n return self_sign_csr_response['id']\nKeyError: 'id'", "stderr_lines": [ "nsx_t_gen.py:1084: YAMLLoadWarning: calling yaml.load() without Loader=... is deprecated, as the default Loader is unsafe. Please read https://msg.pyyaml.org/load for full details.", " rsc_defns = yaml.load(rsc).get(rsc_subname)", "Traceback (most recent call last):", " File \"nsx_t_gen.py\", line 1153, in ", " main()", " File \"nsx_t_gen.py\", line 1149, in main", " configure_self_signed_certs()", " File \"nsx_t_gen.py\", line 666, in configure_self_signed_certs", " signed_cert_id = generate_self_signed_cert(fqdn, csr_request)", " File \"nsx_t_gen.py\", line 624, in generate_self_signed_cert", " return self_sign_csr_response['id']", "KeyError: 'id'" ], "stdout": "Using manager IP address at 10.173.82.85\nGenerating CSR request with common name nsxt-mgr-1.vmware.com\nCSR Request posted with response {u'error_code': 2019, u'error_message': u'Number of days value, 3,650, is out of the allowed range.', u'httpStatus': u'BAD_REQUEST', u'module_name': u'internal-framework'}", "stdout_lines": [ "Using manager IP address at 10.173.82.85", "Generating CSR request with common name nsxt-mgr-1.vmware.com", "CSR Request posted with response {u'error_code': 2019, u'error_message': u'Number of days value, 3,650, is out of the allowed range.', u'httpStatus': u'BAD_REQUEST', u'module_name': u'internal-framework'}" ] }