Validate certs everywhere

playbooks/roles/common/tasks/main.yml

@@ -33,7 +33,7 @@
 # GitHub requires version 1.7.10 or later
 # https://help.github.com/articles/https-cloning-errors
 - name: Add git apt repository
-  apt_repository_1.8: repo="{{ common_git_ppa }}" validate_certs=no
+  apt_repository_1.8: repo="{{ common_git_ppa }}"
 
 - name: Install role-independent useful system packages
   # do this before log dir setup; rsyslog package guarantees syslog user present

playbooks/roles/datadog/tasks/main.yml

@@ -27,12 +27,12 @@
     - datadog
 
 - name: remove unstable apt repository
-  apt_repository_1.8: repo='deb http://apt.datadoghq.com/ unstable main' validate_certs=no state=absent
+  apt_repository_1.8: repo='deb http://apt.datadoghq.com/ unstable main' state=absent
   tags:
     - datadog
 
 - name: install apt repository
-  apt_repository_1.8: repo='deb http://apt.datadoghq.com/ stable main' update_cache=yes validate_certs=no
+  apt_repository_1.8: repo='deb http://apt.datadoghq.com/ stable main' update_cache=yes
   tags:
     - datadog
 

playbooks/roles/edxapp/tasks/main.yml

@@ -55,7 +55,7 @@
 
 # adding chris-lea nodejs repo
 - name: add ppas for current versions of nodejs
-  apt_repository_1.8: repo="{{ edxapp_chrislea_ppa }}" validate_certs=no
+  apt_repository_1.8: repo="{{ edxapp_chrislea_ppa }}"
 
 - name: install system packages on which LMS and CMS rely
   apt: pkg={{','.join(edxapp_debian_pkgs)}} state=present update_cache=yes

playbooks/roles/edxlocal/tasks/main.yml

@@ -21,7 +21,7 @@
 - name: install apt repository
   apt_repository_1.8:
     repo='deb http://ppa.launchpad.net/ondrej/mysql-5.6/ubuntu precise main'
-    update_cache=yes validate_certs=no
+    update_cache=yes
   
 - name: look for mysql 5.5
   shell: dpkg -L mysql-server-5.5

playbooks/roles/elasticsearch/tasks/main.yml

@@ -34,7 +34,6 @@
     url={{ elasticsearch_url }}
     dest=/var/tmp/{{ elasticsearch_file }}
     force=no
-    validate_certs=no
   register: elasticsearch_reinstall
 
 - name: install elasticsearch from local package

playbooks/roles/jenkins_admin/tasks/main.yml

@@ -34,7 +34,7 @@
   when: JENKINS_ADMIN_S3_PROFILE.secret_key is not defined
 
 - name: add admin specific apt repositories
-  apt_repository_1.8: repo="{{ item }}" state=present update_cache=yes validate_certs=no
+  apt_repository_1.8: repo="{{ item }}" state=present update_cache=yes
   with_items: jenkins_admin_debian_repos
 
 - name: create the scripts directory

playbooks/roles/jenkins_worker/tasks/system.yml

@@ -28,7 +28,7 @@
 
 # adding chris-lea nodejs repo
 - name: add ppas for current versions of nodejs
-  apt_repository_1.8: repo="{{ jenkins_chrislea_ppa }}" validate_certs=no
+  apt_repository_1.8: repo="{{ jenkins_chrislea_ppa }}"
 
 - name: Install system packages
   apt: pkg={{','.join(jenkins_debian_pkgs)}}

playbooks/roles/mongo/tasks/main.yml

@@ -29,7 +29,6 @@
   apt_repository_1.8: >
     repo='{{ MONGODB_REPO }}'
     state=present
-    validate_certs=no
 
 - name: install mongo server and recommends
   apt: >

playbooks/roles/newrelic/tasks/main.yml

@@ -27,7 +27,7 @@
 
 - name: add apt key
   apt_key: >
-    id="{{ NEWRELIC_DEBIAN_KEY_ID }}" url="{{ NEWRELIC_DEBIAN_KEY_URL }}" validate_certs=no
+    id="{{ NEWRELIC_DEBIAN_KEY_ID }}" url="{{ NEWRELIC_DEBIAN_KEY_URL }}"
     state=present
   when: ansible_distribution == 'Ubuntu'
 
@@ -38,7 +38,7 @@
   when: ansible_distribution == 'Amazon'
 
 - name: install apt repository
-  apt_repository_1.8: repo="{{ NEWRELIC_DEBIAN_REPO }}" update_cache=yes validate_certs=no
+  apt_repository_1.8: repo="{{ NEWRELIC_DEBIAN_REPO }}" update_cache=yes
   when: ansible_distribution == 'Ubuntu'
 
 - name: install newrelic agent (apt)

playbooks/roles/rabbitmq/tasks/main.yml

@@ -10,7 +10,7 @@
   apt: pkg={{ ",".join(rabbitmq_debian_pkgs) }} state=present
 
 - name: add rabbit repository
-  apt_repository_1.8: repo="{{ rabbitmq_repository }}" state=present update_cache=yes validate_certs=no
+  apt_repository_1.8: repo="{{ rabbitmq_repository }}" state=present update_cache=yes
 
 - name: fetch the rabbitmq server deb
   get_url: >

playbooks/roles/redis/tasks/main.yml

@@ -22,7 +22,7 @@
 #
 
 - name: add the redis ppa
-  apt_repository_1.8: repo="{{ redis_ppa }}" validate_certs=no
+  apt_repository_1.8: repo="{{ redis_ppa }}"
 
 - name: install redis system packages
   apt: pkg={{ item }} install_recommends=yes state=present