diff --git a/tests/integration/targets/setup_docker/meta/main.yml b/tests/integration/targets/setup_docker/meta/main.yml
index 91a63627f6..2be15776b7 100644
--- a/tests/integration/targets/setup_docker/meta/main.yml
+++ b/tests/integration/targets/setup_docker/meta/main.yml
@@ -1,2 +1,3 @@
 dependencies:
   - setup_remote_constraints
+  - setup_pkg_mgr
diff --git a/tests/integration/targets/setup_openssl/meta/main.yml b/tests/integration/targets/setup_openssl/meta/main.yml
index 5438ced5c3..2be15776b7 100644
--- a/tests/integration/targets/setup_openssl/meta/main.yml
+++ b/tests/integration/targets/setup_openssl/meta/main.yml
@@ -1,2 +1,3 @@
 dependencies:
+  - setup_remote_constraints
   - setup_pkg_mgr
diff --git a/tests/integration/targets/setup_openssl/tasks/main.yml b/tests/integration/targets/setup_openssl/tasks/main.yml
index 5a634458e2..fa9f08736a 100644
--- a/tests/integration/targets/setup_openssl/tasks/main.yml
+++ b/tests/integration/targets/setup_openssl/tasks/main.yml
@@ -25,6 +25,7 @@
   become: True
   pip:
     name: pyOpenSSL
+    extra_args: "-c {{ remote_constraints }}"
   when: ansible_os_family == 'Darwin'
 
 - name: register pyOpenSSL version
diff --git a/tests/utils/constraints.txt b/tests/utils/constraints.txt
index b96d623cd1..ae6000ae18 100644
--- a/tests/utils/constraints.txt
+++ b/tests/utils/constraints.txt
@@ -40,6 +40,7 @@ boto3 < 1.11 ; python_version < '2.7' # boto3 1.11 drops Python 2.6 support
 botocore >= 1.10.0, < 1.14 ; python_version < '2.7' # adds support for the following AWS services: secretsmanager, fms, and acm-pca; botocore 1.14 drops Python 2.6 support
 botocore >= 1.10.0 ; python_version >= '2.7' # adds support for the following AWS services: secretsmanager, fms, and acm-pca
 setuptools < 45 ; python_version <= '2.7' # setuptools 45 and later require python 3.5 or later
+cffi >= 1.14.2, != 1.14.3 # Yanked version which older versions of pip will still install:
 
 # freeze pylint and its requirements for consistent test results
 astroid == 2.2.5