---
- name: update apt index
  apt: update_cache=yes cache_valid_time=3600

- name: update SSL
  apt: pkg={{ item }} state=latest
  with_items:
  - libssl1.0.0
  - openssl
  notify: reload haproxy

- include: CVE-2015-0235.yml
  tags: CVE-2015-0235

---
- name: update apt index
  apt: update_cache=yes cache_valid_time=3600

- name: update SSL
  apt: pkg={{ item }} state=latest
  with_items:
  - libssl1.0.0
  - openssl
  notify: reload haproxy

- name: update python modules for true ssl context
  pip: name={{ item }} state=latest
  with_items:
    - pyopenssl 
    - pyasn1 
    - ndg-httpsclient

- include: CVE-2015-0235.yml
  tags: CVE-2015-0235

Add a true SSL context for python clients/requests
Add a true SSL context for python clients/requests

Anything that uses requests > 2.5.3 will complain if there is no true
SSL context capability on the host. Add these 3 python modules for
making such a context available.
