topic Re: Facing Error - [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:618) in Automation/API Discussions

Facing Error - [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:618)

KrishnaMohanGupta — Tue, 26 Jul 2022 06:36:44 GMT

Hi Team,

I'm facing [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:618) error while running my small script.

Can someone please help for the same.

Code :

---

- name: Palo Alto LRS Check

hosts: "{{req_host}}"

connection: local

# gather_facts: False

roles:

- role: PaloAltoNetworks.paloaltonetworks

vars:

fw:

ip_address: '{{ host_ip }}'

username: '{{ amuser }}'

password: '{{ ampass }}'

tasks:

- name: Grab credentials from ansible-vault

include_vars: 'prodpass.yml'

no_log: 'yes'

- name: Check For Long Running Sessions

panos_op:

provider: '{{ fw }}'

cmd: '<show><session><all><filter><min-age>86400</min-age></filter></all></session></show>'

cmd_is_xml: True

validate_certs: false

- name: Output list of sessions to file

template:

src: session_report.j2

dest: '{{ host_ip}}-{{ ansible_date_time.iso8601 }}-session_report.txt'

vars:

sessions: '{{ (result.stdout | from_json).response.result.entry }}'

- name: Display output file

debug: msg="{{lookup('file', "{{ host_ip}}-{{ ansible_date_time.iso8601 }}-session_report.txt")}}"

Re: Facing Error - [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:618)

nikoolayy1 — Wed, 31 Aug 2022 20:16:03 GMT

Try setting the "validate_certs" to "no" as for some reason Ansible checks the Palo Alto cert. Also upgrade to the latest version of ansible.

Also increase the verbosity with "-vvvv" to see better the error message and to google it. EXAMPLE: ansible-playbook 'playbook_name '-vvvv

Re: Facing Error - [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:618)

KrishnaMohanGupta — Thu, 13 Oct 2022 12:44:26 GMT

Hello @nikoolayy1 ,

thanks for suggestions, I tried it already but it didn't help as it belong to uri module and here I'm using palo's provided module.

Well, this issue belongs to ansible itself as ansible is not able to verify the certificate received from the client. I'm still to find out the actual root cause but we can disable this checks by adding below environment to playbook which will exclude the cert verification.

environment:

PYTHONHTTPSVERIFY: 0