Request failed: <urlopen error ('_ssl.c:602: The handshake operation timed out',)

2,817 views
Skip to first unread message

Kumar R

unread,
Feb 23, 2021, 8:37:23 AM2/23/21
to Ansible Project
OS: centos

We have ansible script
---
- name: Check connectivity to AO
  uri:
    url: "{{pao_url}}"
    validate_certs: false

This url is accesible from the macine same doesnot work from ansible script...

 "msg": "Status code was -1 and not [200]: Request failed: <urlopen error ('_ssl.c:602: The handshake operation timed out',)>", "redirected": false, "status": -1, "url": "https://10.184.97.51:31273"

Any pointer would help me on this...

Stefan Hornburg (Racke)

unread,
Feb 23, 2021, 8:49:22 AM2/23/21
to ansible...@googlegroups.com
On 2/23/21 2:37 PM, Kumar R wrote:
> OS: centos
>
> We have ansible script
> ---
> - name: Check connectivity to AO
>   uri:
>     url: "{{pao_url}}"
>     validate_certs: false
>
> pao_url = https://10.184.97.51:31273
> This url is accesible from the macine same doesnot work from ansible script...

Which command line do you use on the target for accessing the URL?

Do you have by any chance HTTP(S) proxies configured on the target machine?

Regards
Racke

>
>  "msg": "Status code was -1 and not [200]: Request failed: <urlopen error ('_ssl.c:602: The handshake operation timed
> out',)>", "redirected": false, "status": -1, "url": "https://10.184.97.51:31273"
>
> Any pointer would help me on this...
>
> --
> You received this message because you are subscribed to the Google Groups "Ansible Project" group.
> To unsubscribe from this group and stop receiving emails from it, send an email to
> ansible-proje...@googlegroups.com <mailto:ansible-proje...@googlegroups.com>.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/ansible-project/3a8de9e8-4b74-443e-9e3b-7e7525a1f59fn%40googlegroups.com
> <https://groups.google.com/d/msgid/ansible-project/3a8de9e8-4b74-443e-9e3b-7e7525a1f59fn%40googlegroups.com?utm_medium=email&utm_source=footer>.


--
Ecommerce and Linux consulting + Perl and web application programming.
Debian and Sympa administration. Provisioning with Ansible.

OpenPGP_signature

Kumar R

unread,
Feb 23, 2021, 9:03:00 AM2/23/21
to Ansible Project
curl -v  https://10.184.97.51:31273
* About to connect() to proxy  some.corporate.corp.com   port 80 (#0)
*   Trying 10.195.54.52...
* Connected to some.corporate.corp.com (10.195.54.52) port 80 (#0)
* Establish HTTP proxy tunnel to 10.184.97.51:31273
> CONNECT 10.184.97.51:31273 HTTP/1.1
> User-Agent: curl/7.29.0
> Proxy-Connection: Keep-Alive
>
< HTTP/1.1 200 Connection Established
< Proxy-Agent: Zscaler/6.0
<
* Proxy replied OK to CONNECT request
* Initializing NSS with certpath: sql:/etc/pki/nssdb
*   CAfile: /etc/pki/tls/certs/ca-bundle.crt
  CApath: none


* NSS error -5961 (PR_CONNECT_RESET_ERROR)
* TCP connection reset by peer
* Closing connection 0
curl: (35) TCP connection reset by peer


Kumar R

unread,
Feb 23, 2021, 9:04:34 AM2/23/21
to Ansible Project
This also works from the browser. I see login page
https://10.184.97.51:31273

Kumar R

unread,
Feb 23, 2021, 9:16:49 AM2/23/21
to Ansible Project
This was due to proxy issue...i removed the proxy and it worked...Thanks

Stefan Hornburg (Racke)

unread,
Feb 23, 2021, 9:18:50 AM2/23/21
to ansible...@googlegroups.com
On 2/23/21 3:04 PM, Kumar R wrote:
> This also works from the browser. I see login page
> https://10.184.97.51:31273 <https://10.184.97.51:31273/>

Yes, because they know of that proxy.

You can specify environment variables either at playbook level or directly in your task:

- name: Check connectivity to AO
uri:
url: "{{pao_url}}"
validate_certs: false
environment:
http_proxy: http://some.corporate.corp.com
https_proxy: http://some.corporate.corp.com

Regards
Racke

> On Tuesday, 23 February 2021 at 19:33:00 UTC+5:30 Kumar R wrote:
>
> curl -v  https://10.184.97.51:31273 <https://10.184.97.51:31273/>
> * About to connect() to proxy  some.corporate.corp.com <http://some.corporate.corp.com>   port 80 (#0)
> *   Trying 10.195.54.52...
> * Connected to some.corporate.corp.com <http://some.corporate.corp.com> (10.195.54.52) port 80 (#0)
> * Establish HTTP proxy tunnel to 10.184.97.51:31273 <http://10.184.97.51:31273>
> > CONNECT 10.184.97.51:31273 <http://10.184.97.51:31273> HTTP/1.1
> > Host: 10.184.97.51:31273 <http://10.184.97.51:31273>
> > User-Agent: curl/7.29.0
> > Proxy-Connection: Keep-Alive
> >
> < HTTP/1.1 200 Connection Established
> < Proxy-Agent: Zscaler/6.0
> <
> * Proxy replied OK to CONNECT request
> * Initializing NSS with certpath: sql:/etc/pki/nssdb
> *   CAfile: /etc/pki/tls/certs/ca-bundle.crt
>   CApath: none
>
>
> * NSS error -5961 (PR_CONNECT_RESET_ERROR)
> * TCP connection reset by peer
> * Closing connection 0
> curl: (35) TCP connection reset by peer
>
>
> On Tuesday, 23 February 2021 at 19:19:22 UTC+5:30 brae...@gmail.com wrote:
>
> On 2/23/21 2:37 PM, Kumar R wrote:
> > OS: centos
> >
> > We have ansible script
> > ---
> > - name: Check connectivity to AO
> >   uri:
> >     url: "{{pao_url}}"
> >     validate_certs: false
> >
> > pao_url = https://10.184.97.51:31273 <https://10.184.97.51:31273>
> > This url is accesible from the macine same doesnot work from ansible script...
>
> Which command line do you use on the target for accessing the URL?
>
> Do you have by any chance HTTP(S) proxies configured on the target machine?
>
> Regards
> Racke
>
> >
> >  "msg": "Status code was -1 and not [200]: Request failed: <urlopen error ('_ssl.c:602: The handshake
> operation timed
> > out',)>", "redirected": false, "status": -1, "url": "https://10.184.97.51:31273 <https://10.184.97.51:31273>"
> >
> > Any pointer would help me on this...
> >
> > --
> > You received this message because you are subscribed to the Google Groups "Ansible Project" group.
> > To unsubscribe from this group and stop receiving emails from it, send an email to
> > ansible-proje...@googlegroups.com <mailto:ansible-proje...@googlegroups.com>.
> > To view this discussion on the web visit
> > https://groups.google.com/d/msgid/ansible-project/3a8de9e8-4b74-443e-9e3b-7e7525a1f59fn%40googlegroups.com
> <https://groups.google.com/d/msgid/ansible-project/3a8de9e8-4b74-443e-9e3b-7e7525a1f59fn%40googlegroups.com>
> >
> <https://groups.google.com/d/msgid/ansible-project/3a8de9e8-4b74-443e-9e3b-7e7525a1f59fn%40googlegroups.com?utm_medium=email&utm_source=footer
> <https://groups.google.com/d/msgid/ansible-project/3a8de9e8-4b74-443e-9e3b-7e7525a1f59fn%40googlegroups.com?utm_medium=email&utm_source=footer>>.
>
>
>
> --
> Ecommerce and Linux consulting + Perl and web application programming.
> Debian and Sympa administration. Provisioning with Ansible.
>
> --
> You received this message because you are subscribed to the Google Groups "Ansible Project" group.
> To unsubscribe from this group and stop receiving emails from it, send an email to
> ansible-proje...@googlegroups.com <mailto:ansible-proje...@googlegroups.com>.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/ansible-project/a6f829b0-c291-4e15-8054-6506161550b9n%40googlegroups.com
> <https://groups.google.com/d/msgid/ansible-project/a6f829b0-c291-4e15-8054-6506161550b9n%40googlegroups.com?utm_medium=email&utm_source=footer>.
OpenPGP_signature
Reply all
Reply to author
Forward
0 new messages