Bump pyopenssl to prevent installation of vulnerable versionbump_pyopenssl

CVE refs:
CVE-2018-1000807
CVE-2018-1000808

Signed-off-by: Joffrey F <joffrey@docker.com>

1 files changed, 1 insertions, 1 deletions

diff --git a/setup.py b/setup.py
index 1b208e5..390783d 100644
--- a/setup.py
+++ b/setup.py
@@ -40,7 +40,7 @@ extras_require = {
     # https://github.com/pypa/pip/issues/4391).  Once that's fixed, instead of
     # installing the extra dependencies, install the following instead:
     # 'requests[security] >= 2.5.2, != 2.11.0, != 2.12.2'
-    'tls': ['pyOpenSSL>=0.14', 'cryptography>=1.3.4', 'idna>=2.0.0'],
+    'tls': ['pyOpenSSL>=17.5.0', 'cryptography>=1.3.4', 'idna>=2.0.0'],
 
 }