Fix CI (problem with cffi) (#892) (#898)

* Work around old pip versions which install yanked packages.

* Try II

* Proper approach.

* Avoid too old version being installed.

(cherry picked from commit 38996b7544)

Co-authored-by: Felix Fontein <felix@fontein.de>

tests/integration/targets/setup_docker/meta/main.yml

@@ -1,2 +1,3 @@
 dependencies:
   - setup_remote_constraints
+  - setup_pkg_mgr

tests/integration/targets/setup_openssl/meta/main.yml

@@ -1,2 +1,3 @@
 dependencies:
+  - setup_remote_constraints
   - setup_pkg_mgr

tests/integration/targets/setup_openssl/tasks/main.yml

@@ -25,6 +25,7 @@
   become: True
   pip:
     name: pyOpenSSL
+    extra_args: "-c {{ remote_constraints }}"
   when: ansible_os_family == 'Darwin'
 
 - name: register pyOpenSSL version

tests/utils/constraints.txt

@@ -40,6 +40,7 @@ boto3 < 1.11 ; python_version < '2.7' # boto3 1.11 drops Python 2.6 support
 botocore >= 1.10.0, < 1.14 ; python_version < '2.7' # adds support for the following AWS services: secretsmanager, fms, and acm-pca; botocore 1.14 drops Python 2.6 support
 botocore >= 1.10.0 ; python_version >= '2.7' # adds support for the following AWS services: secretsmanager, fms, and acm-pca
 setuptools < 45 ; python_version <= '2.7' # setuptools 45 and later require python 3.5 or later
+cffi >= 1.14.2, != 1.14.3 # Yanked version which older versions of pip will still install:
 
 # freeze pylint and its requirements for consistent test results
 astroid == 2.2.5