diff --git a/openvpn.spec b/openvpn.spec
index b345356..12b4983 100644
--- a/openvpn.spec
+++ b/openvpn.spec
@@ -5,7 +5,7 @@
 
 Name:              openvpn
 Version:           2.4.0
-Release:           1%{?prerelease:.%{prerelease}}%{?dist}
+Release:           2%{?prerelease:.%{prerelease}}%{?dist}
 Summary:           A full-featured SSL VPN solution
 URL:               http://openvpn.net/
 #Source0:           http://openvpn.net/beta/%{name}-%{version}%{?prerelease:_%{prerelease}}.tar.gz
@@ -30,7 +30,8 @@ License:           GPLv2
 Group:             Applications/Internet
 BuildRequires:     systemd-devel
 BuildRequires:     lzo-devel
-BuildRequires:     openssl-devel
+#BuildRequires:     openssl-devel
+BuildRequires:     mbedtls-devel
 BuildRequires:     pam-devel
 # For the perl_default_filter macro
 BuildRequires:     perl-macros
@@ -86,8 +87,7 @@ find contrib sample -type f -perm /100 \
     --enable-plugins \
     --enable-plugin-down-root \
     --enable-plugin-auth-pam \
-    --enable-pkcs11 \
-    --enable-x509-alt-username \
+    --with-crypto-library=mbedtls \
     --enable-systemd \
     --docdir=%{_pkgdocdir}
 %{__make}
@@ -201,6 +201,12 @@ fi
 %config %dir %{_sysconfdir}/%{name}/
 
 %changelog
+* Thu Feb 09 2017 Jon Ciesla <limburgher@gmail.com> 2.4.0-2
+- Move to mbedtls to resolve FTBFS.
+- Dropped, re-add once openvpn supports openssl 1.1.x
+-    --enable-pkcs11 \
+-    --enable-x509-alt-username \
+
 * Tue Dec 27 2016 Jon Ciesla <limburgher@gmail.com> 2.4.0-1
 - 2.4.0.
 
diff --git a/sources b/sources
index 2d95d9a..71444fc 100644
--- a/sources
+++ b/sources
@@ -1,2 +1 @@
 SHA512 (openvpn-2.4.0.tar.gz) = 4996a52cb912f2ad60a90f32420541f0636c03cc250c2c6687dc5594fe77d6629dc59c13dd2c52e09c9ff4eb39c6afbbb381204b6b5a7c8b27ac3c8b711dd2ad
-SHA512 (openvpn-2.4.0.tar.gz.asc) = c2d0dea6ce061717eb89d8d55cde839f8618822f0fb400c308b1207c6492905520c0b9a891bd1ccf2911f29cdea58c789eb7a9e194ad784053a1f0cc595e4409