This problem is still here and causing me big problems:
... default: Running ansible-galaxy... - downloading role 'composer', owned by geerlingguy - downloading role from https://github.com/geerlingguy/ansible-role-composer/archive/1.7.0.tar.gz [ERROR]: failed to download the file: Failed to validate the SSL certificate for github.com:443. Make sure your managed systems have a valid CA certificate installed. You can use validate_certs=False if you do not need to confirm the servers identity but this is unsafe and not recommended. Paths checked for this platform: /etc/ssl/certs, /etc/ansible, /usr/local/etc/openssl. The exception msg was: [SSL: TLSV1_ALERT_PROTOCOL_VERSION] tlsv1 alert protocol version (_ssl.c:590). [WARNING]: - composer was NOT installed successfully. ERROR! - you can use --ignore-errors to skip failed roles and finish processing the list. Ansible failed to complete successfully. Any error output should be visible above. Please fix these errors and try again. ...
I have spent all day trying to find a solution to this. I’ve updated ansible and python and fiddled with other settings. I’ve read several posts about it, including this one about the new crypto standard and this one github/geerlingguy that refers back to another one on here. All to no avail.
Please can someone come forward with a robust fix to this pretty big problem. You will be hailed a hero!