- More reliable testing of SNI with Ansible.

- More concise list of packages of SNI support.
- Don't upgrade pip for SNI support.

tasks/sni.yml

@@ -16,11 +16,9 @@
 
 - name: pip install SSL SNI support
   with_items:
-      - pip>=9.0.1
       - urllib3[secure]>=1.11
       - ndg-httpsclient>=0.4.0
-      - setuptools[certs]>=28.1.0
-      - requests[security]>=2.12.1
+      - pyasn1
   pip:
       name: '{{ item }}'
       state: present

tests/playbook.yml

@@ -20,3 +20,15 @@
 - hosts: all
   roles:
     - role: python27
+  post_tasks:
+    - name: Test SNI
+      get_url:
+        url: https://deb.nodesource.com/gpgkey/nodesource.gpg.key
+        dest: /tmp/nodesource.gpg.key
+      changed_when: False
+
+    - name: Test pip install
+      pip:
+          name: netaddr
+          state: present
+      changed_when: False

tests/test_sni.py

-import pytest
-from testinfra.utils.ansible_runner import AnsibleRunner
-
-testinfra_hosts = AnsibleRunner('.molecule/ansible_inventory').get_hosts('all')
-
-
-@pytest.mark.xfail
-@pytest.mark.parametrize('error', [
-    'InsecureRequestWarning', 'InsecurePlatformWarning', 'SNIMissingWarning'
-])
-def test_sni(Command, error):
-    assert error not in Command('pip2 install nonexistant-package').stderr