topic Re: Ansible -Setup in VM-Series in the Public Cloud

Ansible -Setup

Dave_Fitzjarrell — Thu, 08 Mar 2018 23:12:52 GMT

Hello,

I am struggling with the basic setup.

I can use curl to verify I have a user and password that works, but curl can ignore the certificate.

Is there a way for ansible-pan to ignore it as well?

Thanks for your help!

Re: Ansible -Setup

s.nelson — Fri, 06 Apr 2018 13:30:00 GMT

Are you MiTM the connection? I guess I am really asking why are you having to ignore the certificate?

Re: Ansible -Setup

Dave_Fitzjarrell — Fri, 06 Apr 2018 14:20:55 GMT

I found out you have to use a valid certificate. Either accept the cert by manually updating the keystore or use a trusted CA. We had a wildcard cert and once that was applied the connections started working and I can manage the firewall with ansible.

Re: Ansible -Setup

runamuck — Wed, 24 Jul 2019 21:04:10 GMT

If you are on RedHat or Centos, the easiest way to do this is to export the following environment variable before you run your playbook:

$ export PYTHONHTTPSVERIFY=0

This works with virtual environments as well.

Re: Ansible -Setup

Dave_Fitzjarrell — Thu, 25 Jul 2019 15:40:34 GMT

That is valid however I would not recommend it.

This is a global setting and could be a security risk.

Here are some alternatives that I have used.

1. Use a valid cert

2. Use a SSC and add it to the key store on the server

3. Use the URI ansible module and set validate_certs=no

I'm sure there are many others that could be used.