diff --git a/global-requirements.txt b/global-requirements.txt
index 4c9b617e8..30295b427 100644
--- a/global-requirements.txt
+++ b/global-requirements.txt
@@ -25,7 +25,7 @@ construct>=2.8.10 # MIT
 PuLP>=1.4.1  # MIT
 contextlib2>=0.4.0 # PSF License
 croniter>=0.3.4 # MIT License
-cryptography>=1.6  # BSD/Apache-2.0
+cryptography>=1.6,!=2.0  # BSD/Apache-2.0
 cursive>=0.1.2 # Apache-2.0
 ddt>=1.0.1  # MIT
 debtcollector>=1.2.0  # Apache-2.0
diff --git a/upper-constraints.txt b/upper-constraints.txt
index 6ecde1810..9022d957b 100644
--- a/upper-constraints.txt
+++ b/upper-constraints.txt
@@ -163,7 +163,7 @@ PyYAML===3.12
 beautifulsoup4===4.6.0
 os-net-config===7.1.0
 ovs===2.7.0
-cryptography===2.0
+cryptography===1.9
 backports.ssl-match-hostname===3.5.0.1
 pylxd===2.2.4
 anyjson===0.3.3