Getting SSL Handshake Error while running my ansible-playbook

Question

When I'm trying to run my playbook I'm getting an error which I believe is related to some sort of SSL certificate validation, but I'm not sure of the actual reason for it.

I tried a lot of configuration but the one's that I believe worked for me are as below:

Troubleshooting Steps:

Add pip global trust profile under $HOME/.config/pip/pip.conf and copy below content:

[global]
trusted-host = pypi.python.org
               pypi.org
               files.pythonhosted.org

pip install --upgrade pip. This was although not a necessary step but as nothing was working I tried it.
pip install pyopenssl. This step actually resolved my issue as my ansible playbook was constantly throwing error of SSL Handshake and certificate verify failed.

fatal: [localhost]: FAILED! => { "changed": false, "module_stderr": "From cffi callback :\nTraceback (most recent call last):\n File \"/usr/lib/python2.7/site-packages/OpenSSL/SSL.py\", line 309, in wrapper\n _lib.X509_up_ref(x509)\nAttributeError: 'module' object has no attribute 'X509_up_ref'\nTraceback (most recent call last):\n File \"/root/.ansible/tmp/ansible-tmp-1550051069.59- 120598072724498/AnsiballZ_azure_rm_virtualnetwork.py\", line 113, in \n _ansiballz_main()\n File \"/root/.ansible/tmp/ansible-tmp- 1550051069.59-120598072724498/AnsiballZ_azure_rm_virtualnetwork.py\", line 105, in _ansiballz_main\n invoke_module(zipped_mod, temp_path, ANSIBALLZ_PARAMS)\n File \"/root/.ansible/tmp/ansible-tmp-1550051069.59- 120598072724498/AnsiballZ_azure_rm_virtualnetwork.py\", line 48, in invoke_module\n imp.load_module('main', mod, module, MOD_DESC)\n
File \"/tmp/ansible_azure_rm_virtualnetwork_payload_TxAf7f/main.py\", line 349, in \n File \"/tmp/ansible_azure_rm_virtualnetwork_payload_TxAf7f/main.py\", line 345, in main\n File \"/tmp/ansible_azure_rm_virtualnetwork_payload_TxAf7f/main.py\", line 201, in init\n File mp/ansible_azure_rm_virtualnetwork_payload_TxAf7f/ansible_azure_rm_virtua lnetwork_payload.zip/ansible/module_utils/azure_rm_common.py\", line 301, in init\n File

lnetwork_payload.zip/ansible/module_utils/azure_rm_common.py\", line 1021, in init\n File \"/usr/lib/python2.7/site- packages/msrestazure/azure_active_directory.py\", line 453, in init\n
self.set_token()\n File \"/usr/lib/python2.7/site- packages/msrestazure/azure_active_directory.py\", line 480, in set_token\n raise_with_traceback(AuthenticationError, \"\", err)\n
File \"/usr/lib/python2.7/site-packages/msrest/exceptions.py\", line 48, in raise_with_traceback\n raise error\nmsrest.exceptions.AuthenticationError: , SSLError: HTTPSConnectionPool(host='login.microsoftonline.com', port=443): Max retries exceeded with url: /1564e0a7-162f-4a3c-b5f3- 837525c8ad64/oauth2/token (Caused by SSLError(SSLError(\"bad handshake:`

Error([('SSL routines', 'ssl3_get_server_certificate', 'certificate verify failed')],)\",),))\n", "module_stdout": "", "msg": "MODULE FAILURE\nSee stdout/stderr for the exact error", "rc": 1 }

If anyone could explain what exactly the cause of this error is, it would be so helpful to me to know what are the basic things required while working with some modules.

Thanks!!

error404 error404 · Accepted Answer · 2019-02-15T03:54:21

Python or Ansible communicates using SSL so openssl is a binary through which SSL is validated in python.

Apart from ansible execution if you try to install any packages using python it will throw an error if openssl is not installed and also it depends on the pip and python version as well

Getting SSL Handshake Error while running my ansible-playbook

1 Answers