TLS bug

Summary

TLS library errors

Steps to reproduce

run container

What is the current bug behavior?

python panics

What is the expected correct behavior?

Container runs

Relevant logs and/or screenshots

Traceback (most recent call last):
  File "/usr/local/lib/python3.11/site-packages/odoo-17.0.post20231113-py3.11.egg/odoo/http.py", line 1732, in _serve_db
    return service_model.retrying(self._serve_ir_http, self.env)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/local/lib/python3.11/site-packages/odoo-17.0.post20231113-py3.11.egg/odoo/service/model.py", line 133, in retrying
    result = func()
             ^^^^^^
  File "/usr/local/lib/python3.11/site-packages/odoo-17.0.post20231113-py3.11.egg/odoo/http.py", line 1759, in _serve_ir_http
    response = self.dispatcher.dispatch(rule.endpoint, args)
               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/local/lib/python3.11/site-packages/odoo-17.0.post20231113-py3.11.egg/odoo/http.py", line 1960, in dispatch
    result = self.request.registry['ir.http']._dispatch(endpoint)
             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/local/lib/python3.11/site-packages/odoo-17.0.post20231113-py3.11.egg/odoo/addons/base/models/ir_http.py", line 207, in _dispatch
    result = endpoint(**request.params)
             ^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/local/lib/python3.11/site-packages/odoo-17.0.post20231113-py3.11.egg/odoo/http.py", line 722, in route_wrapper
    result = endpoint(self, *args, **params_ok)
             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/local/lib/python3.11/site-packages/odoo-17.0.post20231113-py3.11.egg/odoo/addons/web/controllers/dataset.py", line 24, in call_kw
    return self._call_kw(model, method, args, kwargs)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/local/lib/python3.11/site-packages/odoo-17.0.post20231113-py3.11.egg/odoo/addons/web/controllers/dataset.py", line 20, in _call_kw
    return call_kw(request.env[model], method, args, kwargs)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/local/lib/python3.11/site-packages/odoo-17.0.post20231113-py3.11.egg/odoo/api.py", line 466, in call_kw
    result = _call_kw_multi(method, model, args, kwargs)
             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/local/lib/python3.11/site-packages/odoo-17.0.post20231113-py3.11.egg/odoo/api.py", line 453, in _call_kw_multi
    result = method(recs, *args, **kwargs)
             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/local/lib/python3.11/site-packages/odoo-17.0.post20231113-py3.11.egg/odoo/addons/partner_autocomplete/models/res_company.py", line 52, in iap_enrich_auto
    company._enrich()
  File "/usr/local/lib/python3.11/site-packages/odoo-17.0.post20231113-py3.11.egg/odoo/addons/partner_autocomplete/models/res_company.py", line 68, in _enrich
    company_data = self.env['res.partner'].enrich_company(company_domain, False, self.vat, timeout=COMPANY_AC_TIMEOUT)
                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/local/lib/python3.11/site-packages/odoo-17.0.post20231113-py3.11.egg/odoo/addons/partner_autocomplete/models/res_partner.py", line 102, in enrich_company
    response, error = self.env['iap.autocomplete.api']._request_partner_autocomplete('enrich', {
                      ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/local/lib/python3.11/site-packages/odoo-17.0.post20231113-py3.11.egg/odoo/addons/partner_autocomplete/models/iap_autocomplete_api.py", line 41, in _request_partner_autocomplete
    results = self._contact_iap('/iap/partner_autocomplete', action, params, timeout=timeout)
              ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/local/lib/python3.11/site-packages/odoo-17.0.post20231113-py3.11.egg/odoo/addons/partner_autocomplete/models/iap_autocomplete_api.py", line 32, in _contact_iap
    return iap_tools.iap_jsonrpc(base_url + local_endpoint + '/' + action, params=params, timeout=timeout)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/local/lib/python3.11/site-packages/odoo-17.0.post20231113-py3.11.egg/odoo/addons/iap/tools/iap_tools.py", line 124, in iap_jsonrpc
    req = requests.post(url, json=payload, timeout=timeout)
          ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/local/lib/python3.11/site-packages/requests/api.py", line 119, in post
    return request('post', url, data=data, json=json, **kwargs)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/local/lib/python3.11/site-packages/requests/api.py", line 61, in request
    return session.request(method=method, url=url, **kwargs)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/local/lib/python3.11/site-packages/requests/sessions.py", line 542, in request
    resp = self.send(prep, **send_kwargs)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/local/lib/python3.11/site-packages/requests/sessions.py", line 655, in send
    r = adapter.send(request, **kwargs)
        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/local/lib/python3.11/site-packages/requests/adapters.py", line 416, in send
    self.cert_verify(conn, request.url, verify, cert)
  File "/usr/local/lib/python3.11/site-packages/requests/adapters.py", line 227, in cert_verify
    raise IOError("Could not find a suitable TLS CA certificate bundle, "
OSError: Could not find a suitable TLS CA certificate bundle, invalid path: /usr/local/lib/python3.11/site-packages/certifi/cacert.pem

The above server error caused the following client error:
RPC_ERROR: Odoo Server Error
    at makeErrorFromResponse (https://odoo.il4.dso.mil/web/assets/a2b1f48/web.assets_web_dark.min.js:2866:163)
    at XMLHttpRequest.<anonymous> (https://odoo.il4.dso.mil/web/assets/a2b1f48/web.assets_web_dark.min.js:2870:13)

Possible fixes

Stop deleting build-in certs from python

Tasks

• Bug has been identified and corrected within the container

Please read the Iron Bank Documentation for more info