diff --git a/cpprest.changes b/cpprest.changes
index f75e518..c35ba24 100644
--- a/cpprest.changes
+++ b/cpprest.changes
@@ -1,3 +1,12 @@
+-------------------------------------------------------------------
+Sun Jan 20 09:24:04 UTC 2019 - antoine.belvire@opensuse.org
+
+- Fix licensing issues:
+  * Use upstream tarball as is, i.e. don't include third-party
+    stuff from vcpkg submodule.
+  * As a consequence, websocketpp is not embedded in tarball so
+    add build requirement on system's websocketpp.
+
 -------------------------------------------------------------------
 Sat Jan 12 02:21:13 UTC 2019 - Marguerite Su <i@marguerite.su>
 
diff --git a/cpprest.spec b/cpprest.spec
index 446b7b9..904ef4c 100644
--- a/cpprest.spec
+++ b/cpprest.spec
@@ -31,11 +31,11 @@ Summary:        C++ REST library
 License:        MIT AND BSD-3-Clause AND Zlib
 Group:          Development/Libraries/C and C++
 URL:            https://github.com/Microsoft/cpprestsdk
-#Source:         https://github.com/Microsoft/cpprestsdk/archive/v%{version}/cpprestsdk-%{version}.tar.gz
-Source:         cpprestsdk-%{version}.tar.gz
+Source:         https://github.com/Microsoft/cpprestsdk/archive/v%{version}/cpprestsdk-%{version}.tar.gz
 BuildRequires:  cmake >= 3.0
 BuildRequires:  gcc-c++
 BuildRequires:  openssl-devel >= 1.0
+BuildRequires:  pkgconfig(websocketpp) >= 0.8
 %if 0%{?suse_version} > 1325
 BuildRequires:  libboost_atomic-devel
 BuildRequires:  libboost_filesystem-devel
diff --git a/cpprestsdk-2.10.8.tar.gz b/cpprestsdk-2.10.8.tar.gz
index 758d209..1f30e99 100644
--- a/cpprestsdk-2.10.8.tar.gz
+++ b/cpprestsdk-2.10.8.tar.gz
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:c4a0b98758a6de8fa7fb53467355d8f79333759e06a868e92df795692d8b81d8
-size 56145920
+oid sha256:fd79d34b3fad4622ff58480f57ecdf374061c5bdbd83e317019422575c820443
+size 1750353