# \[SSL error \]

**URL:** <https://forum.ansible.com/t/ssl-error/28017>\
**Category:** Ansible Project\
**Tags:** ubuntu, galaxy-ng\
**Created:** [July 10, 2018, 9:06pm UTC](https://forum.ansible.com/t/ssl-error/28017 "2018-07-10T21:06:39Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Jongwon\_Kim](https://avatars.discourse-cdn.com/v4/letter/j/b38774/32.png) [@Jongwon\_Kim](https://forum.ansible.com/u/Jongwon_Kim)\
**Post date:** [July 10, 2018, 9:06pm UTC](https://forum.ansible.com/t/ssl-error/28017/1 "2018-07-10T21:06:39Z")

</div>

Hi I am learning ansible now and I am trying install ansible roles , but I got SSL error message as below.

I am running linux in VM.

jkim3@jeff:~/ansible\_test$ uname -a  
Linux jeff 4.15.0-24-generic #26-Ubuntu SMP Wed Jun 13 08:44:47 UTC 2018 x86\_64 x86\_64 x86\_64 GNU/Linux

jkim3@jeff:~/ansible\_test$ ansible-galaxy install -r dellemc\_roles.txt  
[DEPRECATION WARNING]: going forward only the yaml format will be supported. This feature will be removed in version 2.6. Deprecation warnings can be disabled by setting deprecation\_warnings=False in ansible.cfg.

- downloading role ‘dellos-aaa’, owned by Dell-Networking
- downloading role from [https://github.com/Dell-Networking/ansible-role-dellos-aaa/archive/v3.0.0.tar.gz](https://github.com/Dell-Networking/ansible-role-dellos-aaa/archive/v3.0.0.tar.gz)  
[ERROR]: failed to download the file: Failed to validate the SSL certificate for [github.com:443](http://github.com:443). Make sure your managed systems have a valid CA certificate installed. You can use validate\_certs=False if you do not need to confirm  
the servers identity but this is unsafe and not recommended. Paths checked for this platform: /etc/ssl/certs, /etc/pki/ca-trust/extracted/pem, /etc/pki/tls/certs, /usr/share/ca-certificates/[cacert.org](http://cacert.org), /etc/ansible. The exception msg  
was: [SSL: WRONG\_VERSION\_NUMBER] wrong version number (\_ssl.c:726).  
[WARNING]: - Dell-Networking.dellos-aaa was NOT installed successfully.  
ERROR! - you can use --ignore-errors to skip failed roles and finish processing the list.

---

<div class="post-metadata">

**Author:** ![Dick\_Visser](https://avatars.discourse-cdn.com/v4/letter/d/d9b06d/32.png) [@Dick\_Visser](https://forum.ansible.com/u/Dick_Visser)\
**Post date:** [July 10, 2018, 9:27pm UTC](https://forum.ansible.com/t/ssl-error/28017/2 "2018-07-10T21:27:00Z")

</div>

Hi

The error already has some useful hints. Did you check those?  
What happens if you manually try to retrieve that file using curl or wget?  
If that also doesn't work, then you'd need to check what's going on  
with your CAs.  
It could also be that someone is intercepted traffic and  
What ansible version are you using?

Dick

---

<div class="post-metadata">

**Author:** ![Jongwon\_Kim](https://avatars.discourse-cdn.com/v4/letter/j/b38774/32.png) [@Jongwon\_Kim](https://forum.ansible.com/u/Jongwon_Kim)\
**Post date:** [July 10, 2018, 10:03pm UTC](https://forum.ansible.com/t/ssl-error/28017/3 "2018-07-10T22:03:32Z")

</div>

Thanks for your response , Dick

jkim3@jeff:~/ansible\_test$ wget [https://github.com/Dell-Networking/ansible-role-dellos-aaa/archive/v3.0.0.tar.gz](https://github.com/Dell-Networking/ansible-role-dellos-aaa/archive/v3.0.0.tar.gz)  
–2018-07-10 22:00:49-- [https://github.com/Dell-Networking/ansible-role-dellos-aaa/archive/v3.0.0.tar.gz](https://github.com/Dell-Networking/ansible-role-dellos-aaa/archive/v3.0.0.tar.gz)  
Resolving [github.com](http://github.com) ([github.com](http://github.com))… 192.30.255.113, 192.30.255.112  
Connecting to [github.com](http://github.com) ([github.com](http://github.com))|192.30.255.113|:443… connected.  
OpenSSL: error:1408F10B:SSL routines:ssl3\_get\_record:wrong version number  
Unable to establish SSL connection.

jkim3@jeff:~/ansible\_test$ ansible --version  
ansible 2.5.1

---

<div class="post-metadata">

**Author:** ![Dick\_Visser](https://avatars.discourse-cdn.com/v4/letter/d/d9b06d/32.png) [@Dick\_Visser](https://forum.ansible.com/u/Dick_Visser)\
**Post date:** [July 11, 2018, 12:04pm UTC](https://forum.ansible.com/t/ssl-error/28017/4 "2018-07-11T12:04:56Z")

</div>

> Thanks for your response , Dick
> 
> jkim3@jeff:~/ansible\_test$ wget  
> [https://github.com/Dell-Networking/ansible-role-dellos-aaa/archive/v3.0.0.tar.gz](https://github.com/Dell-Networking/ansible-role-dellos-aaa/archive/v3.0.0.tar.gz)  
> --2018-07-10 22:00:49--  
> [https://github.com/Dell-Networking/ansible-role-dellos-aaa/archive/v3.0.0.tar.gz](https://github.com/Dell-Networking/ansible-role-dellos-aaa/archive/v3.0.0.tar.gz)  
> Resolving github.com (github.com)... 192.30.255.113, 192.30.255.112  
> Connecting to github.com (github.com)|192.30.255.113|:443... connected.  
> OpenSSL: error:1408F10B:SSL routines:ssl3\_get\_record:wrong version number  
> Unable to establish SSL connection.

This indicates a generic crypto problem on this host.  
Try spinning up a new host. If you encounter the same problem there,  
then this indicates some issue upstream.

Either way, it's not related to ansible.  
So if you fix the crypto problem, your playbook will likely also start working.

Dick

---

<div class="post-metadata">

**Author:** ![Jongwon\_Kim](https://avatars.discourse-cdn.com/v4/letter/j/b38774/32.png) [@Jongwon\_Kim](https://forum.ansible.com/u/Jongwon_Kim)\
**Post date:** [July 11, 2018, 11:04pm UTC](https://forum.ansible.com/t/ssl-error/28017/5 "2018-07-11T23:04:43Z")

</div>

Hi Dick ,

I found this error was caused by firewall blocking

Thanks a lot