Ansible -Setup

[Dave_Fitzjarrell]

Hello,

I am struggling with the basic setup.

I can use curl to verify I have a user and password that works, but curl can ignore the certificate.

Is there a way for ansible-pan to ignore it as well?

Thanks for your help!

[s.nelson]

Are you MiTM the connection? I guess I am really asking why are you having to ignore the certificate?

[Dave_Fitzjarrell · Accepted solution]

I found out you have to use a valid certificate.  Either accept the cert by manually updating the keystore or use a trusted CA.  We had a wildcard cert and once that was applied the connections started working and I can manage the firewall with ansible.

[runamuck]

If you are on RedHat or Centos, the easiest way to do this is to export the following environment variable before you run your playbook:

$ export PYTHONHTTPSVERIFY=0

This works with virtual environments as well.

[Dave_Fitzjarrell]

That is valid however I would not recommend it. 

This is a global setting and could be a security risk.

Here are some alternatives that I have used.

1. Use a valid cert

2. Use a SSC and add it to the key store on the server

3. Use the URI ansible module and set validate_certs=no

I'm sure there are many others that could be used.