diff --git a/api/requirements/base.txt b/api/requirements/base.txt
index 5cefc21d6cfe12cb030c9432f463f1cfb4f2524e..63b1063f69d92faf4ad64d250d90c68b22a3db13 100644
--- a/api/requirements/base.txt
+++ b/api/requirements/base.txt
@@ -56,6 +56,8 @@ cryptography>=2,<3
 # clone until the branch is merged and released upstream
 git+https://github.com/EliotBerriot/requests-http-signature.git@signature-header-support
 django-cleanup==3.2.0
+requests>=2.22<2.23
+pyOpenSSL>=19<20
 
 # for LDAP authentication
 python-ldap==3.2.0
diff --git a/changes/changelog.d/ssl.bugfix b/changes/changelog.d/ssl.bugfix
new file mode 100644
index 0000000000000000000000000000000000000000..ab5d5a7d32feabdcf3802d011431042cf958cb90
--- /dev/null
+++ b/changes/changelog.d/ssl.bugfix
@@ -0,0 +1 @@
+Fixed broken external HTTPS request under some scenarios, because of missing PyOpenSSL