Generate self-signed cert failed due to 'Number of days value, 3,650, is out of the allowed range.'

[lxiaopei]

TASK [Generate NSX self-signed certificate if it doens't exist] *****************************************************************************************************************************
task path: /tmp/build/6fab756d/nsxt-ansible/basic_topology.yml:49
ESTABLISH LOCAL CONNECTION FOR USER: root
EXEC /bin/sh -c 'echo ~root && sleep 0'
EXEC /bin/sh -c '( umask 77 && mkdir -p "echo /root/.ansible/tmp/ansible-tmp-1582524602.4158328-107136758138658" && echo ansible-tmp-1582524602.4158328-107136758138658="echo /root/.ansible/tmp/ansible-tmp-1582524602.4158328-107136758138658" ) && sleep 0'
Using module file /usr/local/lib/python3.5/dist-packages/ansible/modules/commands/command.py
PUT /root/.ansible/tmp/ansible-local-440xn0zgkmb/tmpm7t3h0bt TO /root/.ansible/tmp/ansible-tmp-1582524602.4158328-107136758138658/AnsiballZ_command.py
EXEC /bin/sh -c 'chmod u+x /root/.ansible/tmp/ansible-tmp-1582524602.4158328-107136758138658/ /root/.ansible/tmp/ansible-tmp-1582524602.4158328-107136758138658/AnsiballZ_command.py && sleep 0'
EXEC /bin/sh -c '/usr/bin/python /root/.ansible/tmp/ansible-tmp-1582524602.4158328-107136758138658/AnsiballZ_command.py && sleep 0'
EXEC /bin/sh -c 'rm -f -r /root/.ansible/tmp/ansible-tmp-1582524602.4158328-107136758138658/ > /dev/null 2>&1 && sleep 0'
fatal: [localhost]: FAILED! => {
"changed": true,
"cmd": [
"python",
"nsx_t_gen.py",
"--router_config",
"false",
"--generate_cert",
"true"
],
"delta": "0:00:00.978682",
"end": "2020-02-24 06:10:03.605372",
"invocation": {
"module_args": {
"_raw_params": "python nsx_t_gen.py --router_config false --generate_cert true",
"_uses_shell": false,
"argv": null,
"chdir": null,
"creates": null,
"executable": null,
"removes": null,
"stdin": null,
"stdin_add_newline": true,
"strip_empty_ends": true,
"warn": true
}
},
"msg": "non-zero return code",
"rc": 1,
"start": "2020-02-24 06:10:02.626690",
"stderr": "nsx_t_gen.py:1084: YAMLLoadWarning: calling yaml.load() without Loader=... is deprecated, as the default Loader is unsafe. Please read https://msg.pyyaml.org/load for full details.\n rsc_defns = yaml.load(rsc).get(rsc_subname)\nTraceback (most recent call last):\n File "nsx_t_gen.py", line 1153, in \n main()\n File "nsx_t_gen.py", line 1149, in main\n configure_self_signed_certs()\n File "nsx_t_gen.py", line 666, in configure_self_signed_certs\n signed_cert_id = generate_self_signed_cert(fqdn, csr_request)\n File "nsx_t_gen.py", line 624, in generate_self_signed_cert\n return self_sign_csr_response['id']\nKeyError: 'id'",
"stderr_lines": [
"nsx_t_gen.py:1084: YAMLLoadWarning: calling yaml.load() without Loader=... is deprecated, as the default Loader is unsafe. Please read https://msg.pyyaml.org/load for full details.",
" rsc_defns = yaml.load(rsc).get(rsc_subname)",
"Traceback (most recent call last):",
" File "nsx_t_gen.py", line 1153, in ",
" main()",
" File "nsx_t_gen.py", line 1149, in main",
" configure_self_signed_certs()",
" File "nsx_t_gen.py", line 666, in configure_self_signed_certs",
" signed_cert_id = generate_self_signed_cert(fqdn, csr_request)",
" File "nsx_t_gen.py", line 624, in generate_self_signed_cert",
" return self_sign_csr_response['id']",
"KeyError: 'id'"
],
"stdout": "Using manager IP address at 10.173.82.85\nGenerating CSR request with common name nsxt-mgr-1.vmware.com\nCSR Request posted with response {u'error_code': 2019, u'error_message': u'Number of days value, 3,650, is out of the allowed range.', u'httpStatus': u'BAD_REQUEST', u'module_name': u'internal-framework'}",
"stdout_lines": [
"Using manager IP address at 10.173.82.85",
"Generating CSR request with common name nsxt-mgr-1.vmware.com",
"CSR Request posted with response {u'error_code': 2019, u'error_message': u'Number of days value, 3,650, is out of the allowed range.', u'httpStatus': u'BAD_REQUEST', u'module_name': u'internal-framework'}"
]
}