Broken TLS libs

Summary

TLS library errors

Steps to reproduce

run container

What is the current bug behavior?

python panics

What is the expected correct behavior?

Container runs

Relevant logs and/or screenshots

Traceback (most recent call last):
  File "/usr/local/lib/python3.11/site-packages/odoo-17.0.post20231113-py3.11.egg/odoo/http.py", line 1732, in _serve_db
    return service_model.retrying(self._serve_ir_http, self.env)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/local/lib/python3.11/site-packages/odoo-17.0.post20231113-py3.11.egg/odoo/service/model.py", line 133, in retrying
    result = func()
             ^^^^^^
  File "/usr/local/lib/python3.11/site-packages/odoo-17.0.post20231113-py3.11.egg/odoo/http.py", line 1759, in _serve_ir_http
    response = self.dispatcher.dispatch(rule.endpoint, args)
               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/local/lib/python3.11/site-packages/odoo-17.0.post20231113-py3.11.egg/odoo/http.py", line 1960, in dispatch
    result = self.request.registry['ir.http']._dispatch(endpoint)
             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/local/lib/python3.11/site-packages/odoo-17.0.post20231113-py3.11.egg/odoo/addons/base/models/ir_http.py", line 207, in _dispatch
    result = endpoint(**request.params)
             ^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/local/lib/python3.11/site-packages/odoo-17.0.post20231113-py3.11.egg/odoo/http.py", line 722, in route_wrapper
    result = endpoint(self, *args, **params_ok)
             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/local/lib/python3.11/site-packages/odoo-17.0.post20231113-py3.11.egg/odoo/addons/web/controllers/dataset.py", line 24, in call_kw
    return self._call_kw(model, method, args, kwargs)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/local/lib/python3.11/site-packages/odoo-17.0.post20231113-py3.11.egg/odoo/addons/web/controllers/dataset.py", line 20, in _call_kw
    return call_kw(request.env[model], method, args, kwargs)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/local/lib/python3.11/site-packages/odoo-17.0.post20231113-py3.11.egg/odoo/api.py", line 466, in call_kw
    result = _call_kw_multi(method, model, args, kwargs)
             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/local/lib/python3.11/site-packages/odoo-17.0.post20231113-py3.11.egg/odoo/api.py", line 453, in _call_kw_multi
    result = method(recs, *args, **kwargs)
             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/local/lib/python3.11/site-packages/odoo-17.0.post20231113-py3.11.egg/odoo/addons/partner_autocomplete/models/res_company.py", line 52, in iap_enrich_auto
    company._enrich()
  File "/usr/local/lib/python3.11/site-packages/odoo-17.0.post20231113-py3.11.egg/odoo/addons/partner_autocomplete/models/res_company.py", line 68, in _enrich
    company_data = self.env['res.partner'].enrich_company(company_domain, False, self.vat, timeout=COMPANY_AC_TIMEOUT)
                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/local/lib/python3.11/site-packages/odoo-17.0.post20231113-py3.11.egg/odoo/addons/partner_autocomplete/models/res_partner.py", line 102, in enrich_company
    response, error = self.env['iap.autocomplete.api']._request_partner_autocomplete('enrich', {
                      ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/local/lib/python3.11/site-packages/odoo-17.0.post20231113-py3.11.egg/odoo/addons/partner_autocomplete/models/iap_autocomplete_api.py", line 41, in _request_partner_autocomplete
    results = self._contact_iap('/iap/partner_autocomplete', action, params, timeout=timeout)
              ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/local/lib/python3.11/site-packages/odoo-17.0.post20231113-py3.11.egg/odoo/addons/partner_autocomplete/models/iap_autocomplete_api.py", line 32, in _contact_iap
    return iap_tools.iap_jsonrpc(base_url + local_endpoint + '/' + action, params=params, timeout=timeout)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/local/lib/python3.11/site-packages/odoo-17.0.post20231113-py3.11.egg/odoo/addons/iap/tools/iap_tools.py", line 124, in iap_jsonrpc
    req = requests.post(url, json=payload, timeout=timeout)
          ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/local/lib/python3.11/site-packages/requests/api.py", line 119, in post
    return request('post', url, data=data, json=json, **kwargs)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/local/lib/python3.11/site-packages/requests/api.py", line 61, in request
    return session.request(method=method, url=url, **kwargs)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/local/lib/python3.11/site-packages/requests/sessions.py", line 542, in request
    resp = self.send(prep, **send_kwargs)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/local/lib/python3.11/site-packages/requests/sessions.py", line 655, in send
    r = adapter.send(request, **kwargs)
        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/local/lib/python3.11/site-packages/requests/adapters.py", line 416, in send
    self.cert_verify(conn, request.url, verify, cert)
  File "/usr/local/lib/python3.11/site-packages/requests/adapters.py", line 227, in cert_verify
    raise IOError("Could not find a suitable TLS CA certificate bundle, "
OSError: Could not find a suitable TLS CA certificate bundle, invalid path: /usr/local/lib/python3.11/site-packages/certifi/cacert.pem

The above server error caused the following client error:
RPC_ERROR: Odoo Server Error
    at makeErrorFromResponse (https://odoo.il4.dso.mil/web/assets/a2b1f48/web.assets_web_dark.min.js:2866:163)
    at XMLHttpRequest.<anonymous> (https://odoo.il4.dso.mil/web/assets/a2b1f48/web.assets_web_dark.min.js:2870:13)

Possible fixes

Stop deleting build-in certs from python

Tasks

• Bug has been identified and corrected within the container

Please read the Iron Bank Documentation for more info