URL: https://rol.redhat.com/rol/app/courses/do417-2.8/pages/ch10s06
Reporter RHNID: carias@redhat.com
Section: 6 - Guided Exercise: Deploying Roles with Ansible Galaxy
Language: en-US (English)
Workaround: Add parameter to avoid cert validation in the download task in the file: ansible-7zip/tasks/main.yml

• name: download 7zip from URL
  get_url:
  url: http://7-zip.org/a/7z1604-x64.msi
  dest: /tmp/ansible
  validate_certs: no
  delegate_to: localhost

Description: The job fails in the task with the error:

TASK [ansible-7zip : download 7zip from URL] ***********************************
fatal: [win1.example.com -> localhost]: FAILED! =>

{"changed": false, "dest": "/tmp/ansible", "elapsed": 1, "gid": 994, "group": "awx", "mode": "0755", "msg": "Request failed: <urlopen error [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:618)>", "owner": "awx", "secontext": "system_u:object_r:tmp_t:s0", "size": 6, "state": "directory", "uid": 997, "url": "http://7-zip.org/a/7z1604-x64.msi"}

 

 

After modifying the tasks to not validate certificates, it works.

 

Noticed that this error only happens in Ansible Tower, as with ansible-playbook it runs flawlessly without any modifications.