Error while running ansible

Question

I am getting the following error when I am trying to run ansible script on f5 instance through jumphost&nbsp;The full traceback is:Traceback (most recent call last):&nbsp; File "/Library/Frameworks/Python.framework/Versions/3.12/lib/python3.12/urllib/request.py", line 1344, in do_open&nbsp; &nbsp; h.request(req.get_method(), req.selector, req.data, headers,&nbsp; File "/Library/Frameworks/Python.framework/Versions/3.12/lib/python3.12/http/client.py", line 1336, in request&nbsp; &nbsp; self._send_request(method, url, body, headers, encode_chunked)&nbsp; File "/Library/Frameworks/Python.framework/Versions/3.12/lib/python3.12/http/client.py", line 1382, in _send_request&nbsp; &nbsp; self.endheaders(body, encode_chunked=encode_chunked)&nbsp; File "/Library/Frameworks/Python.framework/Versions/3.12/lib/python3.12/http/client.py", line 1331, in endheaders&nbsp; &nbsp; self._send_output(message_body, encode_chunked=encode_chunked)&nbsp; File "/Library/Frameworks/Python.framework/Versions/3.12/lib/python3.12/http/client.py", line 1091, in _send_output&nbsp; &nbsp; self.send(msg)&nbsp; File "/Library/Frameworks/Python.framework/Versions/3.12/lib/python3.12/http/client.py", line 1035, in send&nbsp; &nbsp; self.connect()&nbsp; File "/Library/Frameworks/Python.framework/Versions/3.12/lib/python3.12/http/client.py", line 1477, in connect&nbsp; &nbsp; self.sock = self._context.wrap_socket(self.sock,&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^&nbsp; File "/Library/Frameworks/Python.framework/Versions/3.12/lib/python3.12/ssl.py", line 455, in wrap_socket&nbsp; &nbsp; return self.sslsocket_class._create(&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;^^^^^^^^^^^^^^^^^^^^^^^^^^^^^&nbsp; File "/Library/Frameworks/Python.framework/Versions/3.12/lib/python3.12/ssl.py", line 1042, in _create&nbsp; &nbsp; self.do_handshake()&nbsp; File "/Library/Frameworks/Python.framework/Versions/3.12/lib/python3.12/ssl.py", line 1320, in do_handshake&nbsp; &nbsp; self._sslobj.do_handshake()ssl.SSLError: [SSL: WRONG_VERSION_NUMBER] wrong version number (_ssl.c:1000)During handling of the above exception, another exception occurred:Traceback (most recent call last):&nbsp; File "/Users/pranaychowd.pinapaka/.ansible/tmp/ansible-tmp-1714109490.0885582-73185-193526554178977/AnsiballZ_bigip_command.py", line 107, in &lt;module&gt;&nbsp; &nbsp; _ansiballz_main()&nbsp; File "/Users/pranaychowd.pinapaka/.ansible/tmp/ansible-tmp-1714109490.0885582-73185-193526554178977/AnsiballZ_bigip_command.py", line 99, in _ansiballz_main&nbsp; &nbsp; invoke_module(zipped_mod, temp_path, ANSIBALLZ_PARAMS)&nbsp; File "/Users/pranaychowd.pinapaka/.ansible/tmp/ansible-tmp-1714109490.0885582-73185-193526554178977/AnsiballZ_bigip_command.py", line 47, in invoke_module&nbsp; &nbsp; runpy.run_module(mod_name='ansible_collections.f5networks.f5_modules.plugins.modules.bigip_command', init_globals=dict(_module_fqn='ansible_collections.f5networks.f5_modules.plugins.modules.bigip_command', _modlib_path=modlib_path),&nbsp; File "&lt;frozen runpy&gt;", line 226, in run_module&nbsp; File "&lt;frozen runpy&gt;", line 98, in _run_module_code&nbsp; File "&lt;frozen runpy&gt;", line 88, in _run_code&nbsp; File "/var/folders/4c/dnty3w814gxd01c5lq6910nr0000gn/T/ansible_bigip_command_payload_rjjis8dv/ansible_bigip_command_payload.zip/ansible_collections/f5networks/f5_modules/plugins/modules/bigip_command.py", line 757, in &lt;module&gt;&nbsp; File "/var/folders/4c/dnty3w814gxd01c5lq6910nr0000gn/T/ansible_bigip_command_payload_rjjis8dv/ansible_bigip_command_payload.zip/ansible_collections/f5networks/f5_modules/plugins/modules/bigip_command.py", line 750, in main&nbsp; File "/var/folders/4c/dnty3w814gxd01c5lq6910nr0000gn/T/ansible_bigip_command_payload_rjjis8dv/ansible_bigip_command_payload.zip/ansible_collections/f5networks/f5_modules/plugins/modules/bigip_command.py", line 680, in exec_module&nbsp; File "/var/folders/4c/dnty3w814gxd01c5lq6910nr0000gn/T/ansible_bigip_command_payload_rjjis8dv/ansible_bigip_command_payload.zip/ansible_collections/f5networks/f5_modules/plugins/modules/bigip_command.py", line 631, in exec_module&nbsp; File "/var/folders/4c/dnty3w814gxd01c5lq6910nr0000gn/T/ansible_bigip_command_payload_rjjis8dv/ansible_bigip_command_payload.zip/ansible_collections/f5networks/f5_modules/plugins/module_utils/icontrol.py", line 551, in tmos_version&nbsp; File "/var/folders/4c/dnty3w814gxd01c5lq6910nr0000gn/T/ansible_bigip_command_payload_rjjis8dv/ansible_bigip_command_payload.zip/ansible_collections/f5networks/f5_modules/plugins/module_utils/bigip.py", line 31, in api&nbsp; File "/var/folders/4c/dnty3w814gxd01c5lq6910nr0000gn/T/ansible_bigip_command_payload_rjjis8dv/ansible_bigip_command_payload.zip/ansible_collections/f5networks/f5_modules/plugins/module_utils/bigip.py", line 52, in connect_via_token_auth&nbsp; File "/var/folders/4c/dnty3w814gxd01c5lq6910nr0000gn/T/ansible_bigip_command_payload_rjjis8dv/ansible_bigip_command_payload.zip/ansible_collections/f5networks/f5_modules/plugins/module_utils/icontrol.py", line 239, in post&nbsp; File "/var/folders/4c/dnty3w814gxd01c5lq6910nr0000gn/T/ansible_bigip_command_payload_rjjis8dv/ansible_bigip_command_payload.zip/ansible_collections/f5networks/f5_modules/plugins/module_utils/icontrol.py", line 194, in send&nbsp; File "/var/folders/4c/dnty3w814gxd01c5lq6910nr0000gn/T/ansible_bigip_command_payload_rjjis8dv/ansible_bigip_command_payload.zip/ansible/module_utils/urls.py", line 1578, in open&nbsp; File "/Library/Frameworks/Python.framework/Versions/3.12/lib/python3.12/urllib/request.py", line 215, in urlopen&nbsp; &nbsp; return opener.open(url, data, timeout)&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^&nbsp; File "/Library/Frameworks/Python.framework/Versions/3.12/lib/python3.12/urllib/request.py", line 515, in open&nbsp; &nbsp; response = self._open(req, data)&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;^^^^^^^^^^^^^^^^^^^^^&nbsp; File "/Library/Frameworks/Python.framework/Versions/3.12/lib/python3.12/urllib/request.py", line 532, in _open&nbsp; &nbsp; result = self._call_chain(self.handle_open, protocol, protocol +&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^&nbsp; File "/Library/Frameworks/Python.framework/Versions/3.12/lib/python3.12/urllib/request.py", line 492, in _call_chain&nbsp; &nbsp; result = func(*args)&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;^^^^^^^^^^^&nbsp; File "/var/folders/4c/dnty3w814gxd01c5lq6910nr0000gn/T/ansible_bigip_command_payload_rjjis8dv/ansible_bigip_command_payload.zip/ansible/module_utils/urls.py", line 605, in https_open&nbsp; File "/Library/Frameworks/Python.framework/Versions/3.12/lib/python3.12/urllib/request.py", line 1347, in do_open&nbsp; &nbsp; raise URLError(err)urllib.error.URLError: &lt;urlopen error [SSL: WRONG_VERSION_NUMBER] wrong version number (_ssl.c:1000)&gt;fatal: [hostip&nbsp;]: FAILED! =&gt; {&nbsp; &nbsp; "changed": false,&nbsp; &nbsp; "module_stderr": "Traceback (most recent call last):
 &nbsp;File \"/Library/Frameworks/Python.framework/Versions/3.12/lib/python3.12/urllib/request.py\", line 1344, in do_open
 &nbsp; &nbsp;h.request(req.get_method(), req.selector, req.data, headers,
 &nbsp;File \"/Library/Frameworks/Python.framework/Versions/3.12/lib/python3.12/http/client.py\", line 1336, in request
&nbsp; &nbsp; .....payload.zip/ansible_collections/f5networks/f5_modules/plugins/module_utils/bigip.py\", line 52, in connect_via_token_auth
 &nbsp;File \"/var/folders/4c/dnty3w814gxd01c5lq6910nr0000gn/T/ansible_bigip_command_payload_rjjis8dv/ansible_bigip_command_payload.zip/ansible_collections/f5networks/f5_modules/plugins/module_utils/icontrol.py\", line 239, in post
 &nbsp;File \"/var/folders/4c/dnty3w814gxd01c5lq6910nr0000gn/T/ansible_bigip_command_payload_rjjis8dv/ansible_bigip_command_payload.zip/ansible_collections/f5networks/f5_modules/plugins/module_utils/icontrol.py\", line 194, in send
 &nbsp;File \"/var/folders/4c/dnty3w814gxd01c5lq6910nr0000gn/T/ansible_bigip_command_payload_rjjis8dv/ansible_bigip_command_payload.zip/ansible/module_utils/urls.py\", line 1578, in open
 &nbsp;File \"/Library/Frameworks/Python.framework/Versions/3.12/lib/python3.12/urllib/request.py\", line 215, in urlopen
 &nbsp; &nbsp;return opener.open(url, data, timeout)
 &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
 &nbsp;File \"/Library/Frameworks/Python.framework/Versions/3.12/lib/python3.12/urllib/request.py\", line 515, in open
 &nbsp; &nbsp;response = self._open(req, data)
 &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; ^^^^^^^^^^^^^^^^^^^^^
 &nbsp;File \"/Library/Frameworks/Python.framework/Versions/3.12/lib/python3.12/urllib/request.py\", line 532, in _open
 &nbsp; &nbsp;result = self._call_chain(self.handle_open, protocol, protocol +
 &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
 &nbsp;File \"/Library/Frameworks/Python.framework/Versions/3.12/lib/python3.12/urllib/request.py\", line 492, in _call_chain
 &nbsp; &nbsp;result = func(*args)
 &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; ^^^^^^^^^^^
 &nbsp;File \"/var/folders/4c/dnty3w814gxd01c5lq6910nr0000gn/T/ansible_bigip_command_payload_rjjis8dv/ansible_bigip_command_payload.zip/ansible/module_utils/urls.py\", line 605, in https_open
 &nbsp;File \"/Library/Frameworks/Python.framework/Versions/3.12/lib/python3.12/urllib/request.py\", line 1347, in do_open
 &nbsp; &nbsp;raise URLError(err)
urllib.error.URLError: &lt;urlopen error [SSL: WRONG_VERSION_NUMBER] wrong version number (_ssl.c:1000)&gt;
",&nbsp; &nbsp; "module_stdout": "",&nbsp; &nbsp; "msg": "MODULE FAILURE
See stdout/stderr for the exact error",&nbsp; &nbsp; "rc": 1}

pranay48 · Answer

Anysolution anyone?"

boneyard · Answer

For any playbook? Can you share a simple one which triggers this?
&nbsp;
The errors "&lt;urlopen error [SSL: WRONG_VERSION_NUMBER]" point to a lower SSL version then the F5 accepts, does a curl from the jump host towards it work?

pranay48 · Answer

Yes, it is every playbook.&nbsp;Ex:&nbsp;---- name: List virtual&nbsp; hosts: f5&nbsp; connection: local&nbsp; vars:&nbsp; &nbsp; provider:&nbsp; &nbsp; &nbsp; server: "localhost"&nbsp; &nbsp; &nbsp; user: "&lt;&gt;"&nbsp; &nbsp; &nbsp; password: "&lt;&gt;"&nbsp; &nbsp; &nbsp; server_port: &lt;&gt;&nbsp; &nbsp; &nbsp; validate_certs: no&nbsp; tasks:&nbsp; - name: Retrieve LTM pool list&nbsp; &nbsp; bigip_command:&nbsp; &nbsp; &nbsp; commands:&nbsp; &nbsp; &nbsp; &nbsp; - tmsh -c "list ltm pool"&nbsp; &nbsp; &nbsp; provider: "{{ provider }}"&nbsp; &nbsp; register: ltm_pool_list&nbsp; - name: Display LTM pool list&nbsp; &nbsp; debug:&nbsp; &nbsp; &nbsp; var: ltm_pool_list.stdout_linesInventory:[f5]&lt;Ip&gt;&nbsp;[f5:vars]ansible_ssh_common_args='-o StrictHostKeyChecking=no -J &lt;user&gt;@localhost:&lt;port&gt;'&nbsp;-Yes, curl and ssh from jumphost towards F5 works&nbsp;&nbsp;

boneyard · Answer

Is that ansible_ssh_common_args needed? Do you tunnel or such towards the F5?
Have you limited the allowed TLS versions on the F5 management interface?
&nbsp;

Forum Discussion

Error while running ansible

Recent Discussions

ports are showing open on online scanning tool

Upgrade F5 BIGIP

DNS HM Probe issue

Is XFF a must for ASM WAF DoS

Switch ssl profile based on weak cipher detection via IRULE

Related Content

Power of tmsh commands using Ansible

Ansible playbook run tasks only on Active LTM member

Ansible module to update BIG-IP root/admin passwords

Leveraging Ansible Rulebooks for Streamlined Event Triggers: Advantages and Benefits

Scaling BIG-IP With ECMP and RedHat Ansible

ABOUT DEVCENTRAL

RESOURCES

SUPPORT

PARTNERS