URL:
Reporter RHNID:
Section: -
Language: en-US (English)
Workaround: tell students to add validate_certs: no (in addition to updating the URL as requested by the instructions).

Description: In the chapter 10 GE "Deploying Roles with Ansible Galaxy", we ask students to fix issues with a role in a git repo called "ansible-7zip". One of the tasks in this role downloads the 7-zip MSI from 7-zip.org, and this download is not working as written. I suspect something changed on the 7-zip side (possibly a new certificate provider not known to the TLS libraries on the Tower server).

The problem occurs in this task:

- name: download 7zip from URL
  get_url:
    url: http://7-zip.org/a/7z1900-x64.msi
    dest: /tmp/ansible
  delegate_to: localhost

The task works if you set validate_certs: no as an additional option to get_url. Note that, even though we use an http: url and not https:, the 7-zip site is redirecting us to a secure download.