Setup backports and ensure python-cryptography

Make sure that the jessie-backports repository is available and that the
python-cryptography package from that repository is used.

states/base/init.sls

@@ -1,3 +1,8 @@
+base:
+  pkgrepo.managed:
+    - name: deb http://httpredir.debian.org/debian jessie-backports main
+    - file: /etc/apt/sources.list.d/backports.list
+
 base-packages:
   pkg.installed:
     - pkgs:

states/gnuviechadmin/webinterface.sls

@@ -12,8 +12,9 @@ gnuviechadmin-dev-packages:
       - pkg: gnuviechadmin-packages
 
 python-cryptography:
-  pkg.installed:
+  pkg.latest:
     - reload_modules: true
+    - fromrepo: jessie-backports
 
 {% import "webserver/sslcert.macros.sls" as sslcert %}
 

states/webserver/sslcert.macros.sls

@@ -9,6 +9,7 @@
     - bits: {{ salt['pillar.get']('nginx:keylength:' + domain_name, 2048) }}
     - require:
       - file: {{ nginx_ssl_keydir }}
+      - pkg: python-cryptography
     - require_in:
       - file: /etc/nginx/sites-available/{{ domain_name }}
       - service: nginx