diff --git a/sssd.changes b/sssd.changes
index 98a367c..9bb71a1 100644
--- a/sssd.changes
+++ b/sssd.changes
@@ -1,3 +1,10 @@
+-------------------------------------------------------------------
+Thu Dec  6 10:38:59 UTC 2012 - rhafer@suse.com
+
+- Switch back to using libcrypto instead of mozilla-nss as it seems
+  to be supported upstream again
+- cleanup PAM configuration after uninstalling sssd (bnc#788328)
+
 -------------------------------------------------------------------
 Thu Dec  6 09:05:29 UTC 2012 - jengelh@inai.de
 
diff --git a/sssd.spec b/sssd.spec
index 94dc420..8dddbcc 100644
--- a/sssd.spec
+++ b/sssd.spec
@@ -23,6 +23,7 @@ Summary:        System Security Services Daemon
 License:        GPL-3.0+ and LGPL-3.0+
 Group:          System/Daemons
 Url:            https://fedorahosted.org/sssd/
+Requires(postun): pam-config
 
 #Git-Clone:	git://git.fedorahosted.org/sssd
 Source:         %name-%version.tar.xz
@@ -60,7 +61,7 @@ BuildRequires:  pkgconfig(ldb) >= 0.9.2
 BuildRequires:  pkgconfig(libcares)
 BuildRequires:  pkgconfig(libnl-1) >= 1.1
 BuildRequires:  pkgconfig(libpcre) >= 7
-BuildRequires:  pkgconfig(nss)
+BuildRequires:  pkgconfig(openssl)
 BuildRequires:  pkgconfig(popt)
 BuildRequires:  pkgconfig(python)
 BuildRequires:  pkgconfig(talloc)
@@ -75,10 +76,10 @@ BuildRequires:  libdhash-devel >= 0.4.2
 BuildRequires:  libini_config-devel >= 0.6.1
 BuildRequires:  libldb-devel >= 0.9.2
 BuildRequires:  libnl-devel >= 1.1
+BuildRequires:  libopenssl-devel
 BuildRequires:  libtalloc-devel
 BuildRequires:  libtdb-devel >= 1.1.3
 BuildRequires:  libtevent-devel
-BuildRequires:  mozilla-nss-devel
 BuildRequires:  pcre-devel >= 7
 BuildRequires:  popt-devel
 BuildRequires:  python-devel
@@ -215,6 +216,7 @@ export PATH="$PATH:/usr/sbin"
 
 autoreconf -fi;
 %configure \
+    --with-crypto=libcrypto \
     --with-db-path="%dbpath" \
     --with-pipe-path="%pipepath" \
     --with-pubconf-path="%pubconfpath" \
@@ -278,6 +280,9 @@ rm -Rf "$b/usr/share/locale"/{fa_IR,ja_JP,lt_LT,ta_IN,vi_VN}
 %if 0%{?_unitdir:1}
 %service_del_postun sssd.service
 %endif
+if [ "$1" == "0" ]; then
+  %{_sbindir}/pam-config -d --sss || true
+fi
 
 %post   -n libipa_hbac0 -p /sbin/ldconfig
 %postun -n libipa_hbac0 -p /sbin/ldconfig
@@ -308,7 +313,6 @@ rm -Rf "$b/usr/share/locale"/{fa_IR,ja_JP,lt_LT,ta_IN,vi_VN}
 %dir %_mandir/uk/man8
 %_mandir/??/man?/*
 %_mandir/man1/sss_ssh_*
-%_mandir/man1/sss_ssh_*
 %_mandir/man5/sssd-ad.5*
 %_mandir/man5/sssd-krb5.5*
 %_mandir/man5/sssd-ldap.5*