All GitHub test workflows are failing due to an expired certificate

[oh2fih]

Module

Any. (Affects .github/workflows/test.yml.)

Describe the bug

The certificate for https://wheelhouse.odoo-community.org/ has expired on Sep 21, 2024 at 5:52:45 PM.

That causes the following GitHub workflows to fail on any PR:

• test with Odoo
• test with Odoo (makepot)
• test with OCB
• test with OCB (makepot)

Error:

Could not fetch URL https://wheelhouse.odoo-community.org/oca-simple-and-pypi/responses/: 
  There was a problem confirming the ssl certificate:
  HTTPSConnectionPool(host='wheelhouse.odoo-community.org', port=443):
  Max retries exceeded with url: /oca-simple-and-pypi/responses/
  (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED]
  certificate verify failed: certificate has expired (_ssl.c:1007)'))) - skipping
ERROR: Could not find a version that satisfies the requirement responses (from versions: none)
ERROR: No matching distribution found for responses
Error: Process completed with exit code 1.

To Reproduce

Steps to reproduce the behavior:

1. Commit to any PR.
2. The tests fail.

Additional context

Since it is a Let's Encrypt certificate, this means that the certificate update automation is also broken.

$ openssl s_client -connect wheelhouse.odoo-community.org:443
CONNECTED(00000003)
depth=2 C = US, O = Internet Security Research Group, CN = ISRG Root X1
verify return:1
depth=1 C = US, O = Let's Encrypt, CN = E5
verify return:1
depth=0 CN = odoo-community.org
verify error:num=10:certificate has expired
notAfter=Sep 21 14:52:45 2024 GMT
verify return:1
depth=0 CN = odoo-community.org
notAfter=Sep 21 14:52:45 2024 GMT
verify return:1
---
Certificate chain
 0 s:CN = odoo-community.org
   i:C = US, O = Let's Encrypt, CN = E5
   a:PKEY: id-ecPublicKey, 256 (bit); sigalg: ecdsa-with-SHA384
   v:NotBefore: Jun 23 14:52:46 2024 GMT; NotAfter: Sep 21 14:52:45 2024 GMT
 1 s:C = US, O = Let's Encrypt, CN = E5
   i:C = US, O = Internet Security Research Group, CN = ISRG Root X1
   a:PKEY: id-ecPublicKey, 384 (bit); sigalg: RSA-SHA256
   v:NotBefore: Mar 13 00:00:00 2024 GMT; NotAfter: Mar 12 23:59:59 2027 GMT

[pedrobaeza]

cc @sbidoul

[sbidoul]

That was due to a certbot configuration error in the process of migrating some services to a new machine. Sorry for the inconvenience.