# Error validating launchpad.net SSL certificate? **URL:** \ **Category:** Ansible Project\ **Tags:** ubuntu\ **Created:** [April 28, 2014, 10:48pm UTC](https://forum.ansible.com/t/error-validating-launchpad-net-ssl-certificate/15107 "2014-04-28T22:48:10Z")\ **Posts on this page:** 5\ **Page:** 1
**Author:** ![Joost\_Cassee](https://avatars.discourse-cdn.com/v4/letter/j/898d66/32.png) [@Joost\_Cassee](https://forum.ansible.com/u/Joost_Cassee)\ **Post date:** [April 28, 2014, 10:48pm UTC](https://forum.ansible.com/t/error-validating-launchpad-net-ssl-certificate/15107/1 "2014-04-28T22:48:10Z")
Hi, I am using the latest commit from the devel branch, and I am having difficulty adding an Apt repository. The system I am running Ansible on is Ubuntu 12.04, the provisioned host is running 14.04. I am using this task: - apt\_repository: repo=‘ppa:webupd8team/java’ The error is: msg: Failed to validate the SSL certificate for [launchpad.net:443](http://launchpad.net:443). Use validate\_certs=no or make sure your managed systems have a valid CA certificate installed. Paths checked for this platform: /etc/ssl/certs, /etc/pki/ca-trust/extracted/pem, /etc/pki/tls/certs, /usr/share/ca-certificates/cacert.org, /etc/ansible I tried extracting the CA certificate file that urls.py builds and pass it to gnutls-cli to check whether the CA certificate is indeed missing: $ gnutls-cli --x509cafile certstmp.pem [launchpad.net](http://launchpad.net) Processed 332 CA certificate(s). […] - Certificate[0] info: - subject `OU=Domain Control Validated,CN=launchpad.net', issuer `C=US,ST=Arizona,L=Scottsdale,[O=GoDaddy.com](http://O=GoDaddy.com), Inc.,OU=[http://cer](http://cer) [ts.godaddy.com/repository/,CN=Go](http://ts.godaddy.com/repository/,CN=Go) Daddy Secure Certificate Authority - G2’, RSA key 2048 bits, signed using RSA-SHA256, activated `2 014-04-08 05:33:03 UTC', expires `2014-07-25 18:24:13 UTC’, SHA-1 fingerprint `3e6aa453dcc8f9888e7ee368b374d9e2b21917c5’ - Certificate[1] info: - subject `C=US,ST=Arizona,L=Scottsdale,O=GoDaddy.com\, Inc.,OU=http://certs.godaddy.com/repository/,CN=Go Daddy Secure Certifica te Authority - G2', issuer `C=US,ST=Arizona,L=Scottsdale,[O=GoDaddy.com](http://O=GoDaddy.com), Inc.,CN=Go Daddy Root Certificate Authority - G2’, RSA key 2048 bits, signed using RSA-SHA256, activated `2011-05-03 07:00:00 UTC', expires `2031-05-03 07:00:00 UTC’, SHA-1 fingerprint `27a c9369faf25207bb2627cefaccbe4ef9c319b8’ - Certificate[2] info: - subject `C=US,ST=Arizona,L=Scottsdale,O=GoDaddy.com\, Inc.,CN=Go Daddy Root Certificate Authority - G2', issuer `C=US,O=The Go Daddy Group, Inc.,OU=Go Daddy Class 2 Certification Authority’, RSA key 2048 bits, signed using RSA-SHA256, activated `2014-01-01 07:00:00 UTC', expires `2031-05-30 07:00:00 UTC’, SHA-1 fingerprint `340b2880f446fcc04e59ed33f52b3d08d6242964’ - The hostname in the certificate matches ‘[launchpad.net](http://launchpad.net)’. - Peer’s certificate is trusted […] What else can I do to debug this problem? Regards, Joost ---
**Author:** ![James\_Cammarata](https://avatars.discourse-cdn.com/v4/letter/j/7c8e57/32.png) [@James\_Cammarata](https://forum.ansible.com/u/James_Cammarata)\ **Post date:** [April 29, 2014, 12:58am UTC](https://forum.ansible.com/t/error-validating-launchpad-net-ssl-certificate/15107/2 "2014-04-29T00:58:31Z")
What version of Ansible are you running? There were some changes in 1.5.3+ to address certificate validation issues on Ubuntu systems. Also please make sure that you have the correct CA package installed (ca-certificates) and that the /etc/ssl/certs/ directory is present and contains certificates. ---
**Author:** ![Joost\_Cassee](https://avatars.discourse-cdn.com/v4/letter/j/898d66/32.png) [@Joost\_Cassee](https://forum.ansible.com/u/Joost_Cassee)\ **Post date:** [April 29, 2014, 5:08am UTC](https://forum.ansible.com/t/error-validating-launchpad-net-ssl-certificate/15107/3 "2014-04-29T05:08:30Z")
Hi James, Thanks for the ideas. As I mentioned, I am using the latest commit from devel, and have all the certificates. In fact, I showed that if I take the temporary file with CA certificates that Ansible creates and use it with gnutls-cli then the [launchpad.net](http://launchpad.net) certificate validates. Regards, Joost ---
**Author:** ![James\_Cammarata](https://avatars.discourse-cdn.com/v4/letter/j/7c8e57/32.png) [@James\_Cammarata](https://forum.ansible.com/u/James_Cammarata)\ **Post date:** [April 29, 2014, 7:36pm UTC](https://forum.ansible.com/t/error-validating-launchpad-net-ssl-certificate/15107/4 "2014-04-29T19:36:15Z")
Sorry for missing that. Could you please open an issue for this on github so we can keep track of it? Thanks! ---
**Author:** ![Joost\_Cassee](https://avatars.discourse-cdn.com/v4/letter/j/898d66/32.png) [@Joost\_Cassee](https://forum.ansible.com/u/Joost_Cassee)\ **Post date:** [April 29, 2014, 8:15pm UTC](https://forum.ansible.com/t/error-validating-launchpad-net-ssl-certificate/15107/5 "2014-04-29T20:15:36Z")
I created an issue: [https://github.com/ansible/ansible/issues/7218](https://github.com/ansible/ansible/issues/7218) If there is anything else I can do to track down the bug, please let me know. Regards, Joost