Ansible 出现"Failed to validate the SSL certificate"

[JasonLaw]

不是特别了解 Ansible ，运行 Ansible get_url module 时出现错误，请问怎么解决？

fatal: [xxx]: FAILED! => {"changed": false, "failed": true, "msg": "Failed to validate the SSL certificate for xxx:443. Make sure your managed systems have a valid CA certificate installed. If the website serving the url uses SNI you need python >= 2.7.9 on your managed machine or you can install the `urllib3`, `pyopenssl`, `ndg-httpsclient`, and `pyasn1` python modules to perform SNI verification in python >= 2.6. You can use validate_certs=False if you do not need to confirm the servers identity but this is unsafe and not recommended. Paths checked for this platform: /etc/ssl/certs, /etc/pki/ca-trust/extracted/pem, /etc/pki/tls/certs, /usr/share/ca-certificates/cacert.org, /etc/ansible"}

[julyclyde]

你 get 的网址上的证书是正经证书吗？
如果是的话，需要更新被控节点上的 ca

[mmm159357456]

https://github.com/ansible/ansible/issues/33417

[JasonLaw]

@julyclyde #1
@mmm159357456 #2

我通过更新 Python 解决了问题。
https://groups.google.com/g/ansible-project/c/v1vOMjtL8l0

[julyclyde]

@JasonLaw 你手头管理的这些已经版本太旧了，建议整体升级
不仅仅是 ansible 、python 的问题

[JasonLaw]

@julyclyde #4 不是我想升级就升级的😅。公司要求的是稳定性，不会让这么干的，没办法，行业决定了。