Check your system settings. Your system may not allow older TLS connections.
TLS 1.0 is compromised and therefore no longer allowed by many systems.
What platform is your control host?
Walter
--
Walter Rowe, Division Chief
Infrastructure Services Division
Mobile: 202.355.4123
On Aug 15, 2024, at 5:00 AM, Garri Djavadyan <g.djavad...@gmail.com> wrote:
Hi Steve,
> Did you try with SECLEVEL=0 ?
Yes, I did. However, the result is the same: Ansible controller is not happy
with the bare TLS 1.0 reply from the legacy box:
"msg": "Status code was -1 and not [200]: Request failed: <urlopen error [SSL:
UNSUPPORTED_PROTOCOL] unsupported protocol (_ssl.c:1000)>"
- name: Query legacy boxes
hosts: legacyboxes
gather_facts: false
connection: local
tasks:
- name: GET the home page
ansible.builtin.uri:
url: https://{{ ansible_host }}
ciphers:
- 'DEFAULT@SECLEVEL=0'
Again, ciphers-wise, the setup is fine, but I do not think it is possible to
enforce the minimum TLS protocol version with the cipher string.
Thank you.
Regards,
Garri
--
You received this message because you are subscribed to the Google Groups
"Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to
ansible-project+unsubscr...@googlegroups.com<mailto:ansible-project+unsubscr...@googlegroups.com>.
To view this discussion on the web visit
https://groups.google.com/d/msgid/ansible-project/85e58522-271e-45aa-832a-8a2a7c6b5a38n%40googlegroups.com<https://groups.google.com/d/msgid/ansible-project/85e58522-271e-45aa-832a-8a2a7c6b5a38n%40googlegroups.com?utm_medium=email&utm_source=footer>.
--
You received this message because you are subscribed to the Google Groups
"Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to ansible-project+unsubscr...@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/ansible-project/79414717-CC5B-4312-A749-ECB405BE4E2E%40nist.gov.
