# "kerberos: HTTPSConnectionPool(host='win-xx.ca.local', port=5986): Max retries exceeded with url: /wsman (Caused by SSLError(SSLError(1, u'\[SSL: CERTIFICATE\_VERIFY\_FAILED\] certificate verify failed (\_ssl.c:618)'),))"

**URL:** <https://forum.ansible.com/t/kerberos-httpsconnectionpool-host-win-xx-ca-local-port-5986-max-retries-exceeded-with-url-wsman-caused-by-sslerror-sslerror-1-u-ssl-certificate-verify-failed-certificate-verify-failed-ssl-c-618/33072>\
**Category:** Ansible Project\
**Created:** [June 2, 2020, 6:25am UTC](https://forum.ansible.com/t/kerberos-httpsconnectionpool-host-win-xx-ca-local-port-5986-max-retries-exceeded-with-url-wsman-caused-by-sslerror-sslerror-1-u-ssl-certificate-verify-failed-certificate-verify-failed-ssl-c-618/33072 "2020-06-02T06:25:43Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Kiran\_Kumar](https://avatars.discourse-cdn.com/v4/letter/k/f475e1/32.png) [@Kiran\_Kumar](https://forum.ansible.com/u/Kiran_Kumar)\
**Post date:** [June 2, 2020, 6:25am UTC](https://forum.ansible.com/t/kerberos-httpsconnectionpool-host-win-xx-ca-local-port-5986-max-retries-exceeded-with-url-wsman-caused-by-sslerror-sslerror-1-u-ssl-certificate-verify-failed-certificate-verify-failed-ssl-c-618/33072/1 "2020-06-02T06:25:43Z")

</div>

Hello

I am getting error below

“msg”: “kerberos: HTTPSConnectionPool(host=‘win-xx.ca.local’, port=5986): Max retries exceeded with url: /wsman (Caused by SSLError(SSLError(1, u’[SSL: CERTIFICATE\_VERIFY\_FAILED] certificate verify failed (\_ssl.c:618)'),))”,

Details :

ansible 2.9.9  
config file = /etc/ansible/ansible.cfg  
configured module search path = [u’/root/.ansible/plugins/modules’, u’/usr/share/ansible/plugins/modules’]  
ansible python module location = /usr/lib/python2.7/site-packages/ansible  
executable location = /usr/bin/ansible  
python version = 2.7.5 (default, Apr 2 2020, 13:16:51) [GCC 4.8.5 20150623 (Red Hat 4.8.5-39)]

root@vm02 : Mon Jun 01 : 23:19:37 : ~ : # cat /etc/redhat-release  
CentOS Linux release 7.8.2003 (Core)  
root@vm02 : Mon Jun 01 : 23:19:41 : ~ : #

---

<div class="post-metadata">

**Author:** ![jborean](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/jborean/32/1525_2.png) [@jborean](https://forum.ansible.com/u/jborean)\
**Post date:** [June 2, 2020, 7:49am UTC](https://forum.ansible.com/t/kerberos-httpsconnectionpool-host-win-xx-ca-local-port-5986-max-retries-exceeded-with-url-wsman-caused-by-sslerror-sslerror-1-u-ssl-certificate-verify-failed-certificate-verify-failed-ssl-c-618/33072/2 "2020-06-02T07:49:08Z")

</div>

The key you want to use is ‘ansible\_winrm\_server\_cert\_validation’, you were missing the server part [https://docs.ansible.com/ansible/latest/user\_guide/windows\_winrm.html#https-certificate-validation](https://docs.ansible.com/ansible/latest/user_guide/windows_winrm.html#https-certificate-validation).

---

<div class="post-metadata">

**Author:** ![Kiran\_Kumar](https://avatars.discourse-cdn.com/v4/letter/k/f475e1/32.png) [@Kiran\_Kumar](https://forum.ansible.com/u/Kiran_Kumar)\
**Post date:** [June 2, 2020, 8:18am UTC](https://forum.ansible.com/t/kerberos-httpsconnectionpool-host-win-xx-ca-local-port-5986-max-retries-exceeded-with-url-wsman-caused-by-sslerror-sslerror-1-u-ssl-certificate-verify-failed-certificate-verify-failed-ssl-c-618/33072/3 "2020-06-02T08:18:33Z")

</div>

Thanks ! that was it

Nice catch …