#4331 Bump pyOpenSSL version for OSX

[uilianries]

closes #4331
Changelog: Fix: Bumped requirement of pyOpenSSL on OSX to >=16.0.0, <19.0.0
Docs: Omit

• Refer to the issue that supports this Pull Request.
• If the issue has missing info, explain the purpose/use case/pain/need that covers this Pull Request.
• I've read the Contributing guide.
• I've followed the PEP8 style guides for Python code.
• I've opened another PR in the Conan docs repo to the develop branch, documenting this one.

^{Note: By default this PR will skip the slower tests and will use a limited set of python versions. Check here how to increase the testing level by writing some tags in the current PR body text.}

[SSE4]

@uilianries I am not fully sure how do requirements.txt work in such case, but won't we constantly run into this issue if CPT and conan have different requirements for requests?
https://github.com/conan-io/conan-package-tools/blob/develop/cpt/requirements.txt#L3
https://github.com/conan-io/conan/blob/develop/conans/requirements.txt#L2
as it will probably conflict from time to time, may be it makes sense to align them?

[lasote]

I agree with @SSE4, probably the best we can do is to open the PR in CPT to align the cryptography and pyopenssl versions. WDYT? @uilianries?

cryptography>=1.3.4, <2.4.0
pyOpenSSL>=16.0.0, <18.0.0

[memsharded]

I can't recall, but I think there was something: Is there some reason why conan shouldn't be using the latest pyOpenSSL? (18.0.0 https://pypi.org/project/pyOpenSSL/#history)

[lasote]

That is not the point. It would solve the reported issue only circumstantially. The root cause is that the requirements from cpt and conan are not aligned. Bump pyopenssl would make it match today, but only tomorrow.
Said that we can perfectly upgrade pyopenssl afaik, if you can use this chance (pr) to do it, perfect, but the fix as I see it is not here.

[uilianries]

I agree with both.

We need to align both versions to avoid new problem in the future. But also I think is a good idea keep pyOpenSSL updated for security.

Why not change CPT to pyOpenSSL>=16.0.0, <19.0.0 too?

[lasote]

Ok, let's do that.

[uilianries]

I'm gonna patch soon

[uilianries]

Related PR: conan-io/conan-package-tools#319