Aria Automation deployments fail at IP allocation with Infoblox error "_openssl.abi3.so: cannot open shared object file"

Products

• VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

• VM deployments fail during the IP allocation stage in VMware Aria Automation.

• The deployment failure generates an Infoblox HTTP request SSL Certificate Verification error that resembles the following:

  IP ALLOCATE failed: Action run failed with the following error: "(\"Error allocating in network or range: Infoblox HTTP request failed with: HTTPSConnectionPool(host='<INFOBLOX_IP>', port=443): Max retries exceeded with url: /wapi/v2.7/record%3Aa?_return_fields=extattrs%2Cipv4addr%2Cname%2Cview (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: certificate has expired (_ssl.c:1007)')))\", {})"
  

• The Infoblox host certificate is valid and has not expired.

• When attempting to validate the Infoblox integration connection in the Aria Automation UI, it fails with a provider-side error:

  Failed to validate credentials. Error: Execution of action Infoblox_ValidateEndpoint failed on provider side: Action run failed with the following error: "/polyglot/function/cryptography/hazmat/bindings/_openssl.abi3.so: cannot open shared object file: No such file or directory"

Environment

VMware Aria Automation 8.18.x

Cause

This issue is caused by a library compatibility problem between the Aria Automation environment and older versions of the Infoblox plugin. The missing shared object file (_openssl.abi3.so) error stems from an incompatible plugin library, which incorrectly surfaces as a false SSL expiration error during endpoint validation and IP allocation

Resolution

Workaround

To temporarily bypass the certificate validation issue and restore deployments, apply the following integration property to your Infoblox IPAM integration:

1. In Aria Automation, navigate to your Infoblox IPAM integration settings.

2. Add/Edit the following property:

   Infoblox.IPAM.DisableCertificateCheck=true

3. Save and validate the integration.

Important Note: This workaround bypasses certificate validation and is not recommended as a secure, long-term solution.

Resolution

To permanently resolve this library dependency issue, upgrade the Aria Automation Infoblox Plugin to version 1.5.4 or later.

1. Download the Aria Automation Infoblox Plugin version 1.5.4 (or higher).

2. Upgrade your current installation by following the documentation :  Adding an external IPAM integration for Infoblox in VMware Aria Automation.

3. Once the plugin is successfully updated to 1.5.4, Set the Infoblox.IPAM.DisableCertificateCheck=false workaround property in the integration.

4. Validate the endpoint connection in the UI.

5. Execute a test VM deployment to ensure the IP allocation completes successfully.