# Module URI unable to get local issuer

**URL:** <https://forum.ansible.com/t/module-uri-unable-to-get-local-issuer/37917>\
**Category:** Ansible Project\
**Created:** [April 22, 2023, 1:33pm UTC](https://forum.ansible.com/t/module-uri-unable-to-get-local-issuer/37917 "2023-04-22T13:33:20Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/ansible/original/1X/1882d9a01da5d8996a862359b0913cc568a39b84.svg) [@system](https://forum.ansible.com/u/system)\
**Post date:** [April 22, 2023, 1:33pm UTC](https://forum.ansible.com/t/module-uri-unable-to-get-local-issuer/37917/1 "2023-04-22T13:33:20Z")

</div>

Hi,

I try to create an playbook look like to this command:

---

<div class="post-metadata">

**Author:** ![dnmvisser](https://avatars.discourse-cdn.com/v4/letter/d/8e8cbc/32.png) [@dnmvisser](https://forum.ansible.com/u/dnmvisser)\
**Post date:** [April 22, 2023, 7:15pm UTC](https://forum.ansible.com/t/module-uri-unable-to-get-local-issuer/37917/2 "2023-04-22T19:15:05Z")

</div>

Can you post the output of:

echo foo | openssl s\_client -showcerts -servername 172.17.0.1 -connect [172.17.0.1:8200](http://172.17.0.1:8200)

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/ansible/original/1X/1882d9a01da5d8996a862359b0913cc568a39b84.svg) [@system](https://forum.ansible.com/u/system)\
**Post date:** [April 23, 2023, 6:37am UTC](https://forum.ansible.com/t/module-uri-unable-to-get-local-issuer/37917/3 "2023-04-23T06:37:39Z")

</div>

Hello,

bash-5.1# echo foo | openssl s\_client -showcerts -servername 172.17.0.1 -connect 172.17.0.1:8200  
CONNECTED(00000003)  
depth=0 CN = \*.dc1.vault  
verify error:num=20:unable to get local issuer certificate  
verify return:1  
depth=0 CN = \*.dc1.vault  
verify error:num=21:unable to verify the first certificate  
verify return:1  
depth=0 CN = \*.dc1.vault  
verify return:1

---

<div class="post-metadata">

**Author:** ![dnmvisser](https://avatars.discourse-cdn.com/v4/letter/d/8e8cbc/32.png) [@dnmvisser](https://forum.ansible.com/u/dnmvisser)\
**Post date:** [April 23, 2023, 7:28am UTC](https://forum.ansible.com/t/module-uri-unable-to-get-local-issuer/37917/4 "2023-04-23T07:28:07Z")

</div>

I’m thinking that the SSL verification error could be caused by ansible not having access to the CA certificate, perhaps the path inside your container is different from the path outside the container? I would check that.

Once you disable verification, you can reach the API, and that “error 207” looks like it is the HTTP response from the API.

What that exactly means depends on the API that you’re calling.  
I would check the logs of the system at 172.17.0.1 that implements the API and see what that says.

Dick

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/ansible/original/1X/1882d9a01da5d8996a862359b0913cc568a39b84.svg) [@system](https://forum.ansible.com/u/system)\
**Post date:** [April 23, 2023, 11:15am UTC](https://forum.ansible.com/t/module-uri-unable-to-get-local-issuer/37917/5 "2023-04-23T11:15:35Z")

</div>

Hi,  
I found solution.

Too old docker image I built (10 months…).

I updated all components .

Sorry I wirite wrong code I previous message. it wasn’t 207, but 307.

My working dockerfile:

FROM python:alpine3.17

RUN echo ‘[http://dl-cdn.alpinelinux.org/alpine/edge/testing](http://dl-cdn.alpinelinux.org/alpine/edge/testing)’ \>\> /etc/apk/repositories

RUN apk add --update alpine-sdk  
RUN apk add --update --no-cache bash mariadb-client tar restic rclone ca-certificates fuse tzdata shellinabox msmtp mongodb-tools openssl curl vim python3-dev libc-dev gcc libffi-dev  
RUN pip3 install --no-cache-dir PyMySQL ansible python-consul python-nomad hvac pyopenssl  
RUN ansible-galaxy collection install community.general

Thanks for your help Dick!