Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Regression in fortios_firewall_vip #347

Open
arnoldthebat opened this issue Aug 23, 2024 · 1 comment
Open

Regression in fortios_firewall_vip #347

arnoldthebat opened this issue Aug 23, 2024 · 1 comment

Comments

@arnoldthebat
Copy link

arnoldthebat commented Aug 23, 2024

As of version 2.3.7 the fortinet.fortios.fortios_firewall_vip appears to have reverted to disallowing the addition of ssl_certificate for fortigate versions < 7.4.x

For example:

          extintf: any
          extip: "{{ vip }}"
          extport: "{{ extport }}"
          http_ip_header: enable
          http_multiplex: enable
          name: "{{ vip_name }}"
          server_type: https
          ldb_method: static
          type: server-load-balance
          ssl_mode: full
          ssl_certificate: 
            - name: "{{ cert_name }}"

Reports the following error:

"msg": "Error in repo", "version_check_warning": {"matched": false, "mismatches": ["option ssl_certificate.name('test_cert') Supported version ranges are v7.4.4 -> latest"], "system_version": "v7.2.7"}}

Looks like the versions got locked to the wrong version in 3e6230d

@MaxxLiu22
Copy link

Hi @arnoldthebat ,

Thank you for bringing this issue to our attention. Would it be possible for you to temporarily downgrade to version 2.3.6? We are planning to release the next Ansible FOS update before September 6, which will address and resolve this issue. and we will improve our regression test as well. Sorry for the inconvenience.

Thanks,
Maxx

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants