diff --git a/.gitignore b/.gitignore
index 9f62211..9acf876 100644
--- a/.gitignore
+++ b/.gitignore
@@ -65,3 +65,5 @@ openconnect-2.25.tar.gz
 /openconnect-8.07.tar.gz.asc
 /openconnect-8.08.tar.gz
 /openconnect-8.08.tar.gz.asc
+/openconnect-8.09.tar.gz
+/openconnect-8.09.tar.gz.asc
diff --git a/openconnect.spec b/openconnect.spec
index df66690..f4b49cc 100644
--- a/openconnect.spec
+++ b/openconnect.spec
@@ -29,8 +29,8 @@
 %define use_softhsm 1
 %endif
 
-# Fedora has tss2-sys from F29 onwards
-%if 0%{?fedora} >= 29
+# Fedora has tss2-sys from F29 onwards, and RHEL from 8 onwards
+%if 0%{?fedora} >= 29 || 0%{?rhel} >= 8
 %define use_tss2_esys 1
 %else
 %define use_tss2_esys 0
@@ -39,7 +39,7 @@
 %{!?_pkgdocdir: %global _pkgdocdir %{_docdir}/%{name}-%{version}}
 
 Name:		openconnect
-Version:	8.08
+Version:	8.09
 Release:	1%{?relsuffix}%{?dist}
 Summary:	Open client for Cisco AnyConnect VPN, Juniper Network Connect/Pulse, PAN GlobalProtect
 
@@ -146,6 +146,7 @@ make VERBOSE=1 check
 %{_sbindir}/openconnect
 %{_libexecdir}/openconnect/
 %{_mandir}/man8/*
+%{_sysconfdir}/bash_completion.d
 %doc TODO COPYING.LGPL
 %doc %{_pkgdocdir}
 
@@ -155,6 +156,9 @@ make VERBOSE=1 check
 %{_libdir}/pkgconfig/openconnect.pc
 
 %changelog
+* Wed Apr 29 2020 David Woodhouse <dwmw2@infradead.org> - 8.09-1
+- Update to 8.09 release
+
 * Mon Apr 6 2020 David Woodhouse <dwmw2@infradead.org> - 8.08-1
 - Update to 8.08 release (CSD stderr handling, cert checking)
 
diff --git a/sources b/sources
index 6984621..0147d44 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
-SHA512 (openconnect-8.08.tar.gz) = 3bf42e194b88f06bbc6c385002e7b76952964e230fc86ee1d803be72204073ffe41286a3d8e189456fd7b905fa63577e6adc64137e893eccada80419c114eeb8
-SHA512 (openconnect-8.08.tar.gz.asc) = 825c9995f26631b0425efd7103015bceb01cf990976469e38a76310b027de49c639960fdabfe9937de6041a3f9697487abc5ec2f7d471d4bd3390eea16355299
+SHA512 (openconnect-8.09.tar.gz) = f6890f5bce4b36b162e4590bce8a61d65fc0ae803d62a3dd408fbb13e96ce41b6443740132808491093032545aea919f9076e34bc11160c503c5e3c46457e7bd
+SHA512 (openconnect-8.09.tar.gz.asc) = 36370444e7ed76993fb2be127d92f8c9f5cf8960ae312ccd59437e8f76abd1ba3c70394e8c7cdfd25f29c84470466ac22dee8393f3532696a650f53bce4d611b