diff --git a/ghc-tls.changes b/ghc-tls.changes
index c153f7e..66dd206 100644
--- a/ghc-tls.changes
+++ b/ghc-tls.changes
@@ -1,3 +1,30 @@
+-------------------------------------------------------------------
+Tue Sep  5 05:49:20 UTC 2023 - Peter Simons <psimons@suse.com>
+
+- Update tls to version 1.9.0.
+  ## Version 1.9.0
+
+  * BREAKING CHANGE: The type of the `Error_Protocol` constructor of `TLSError` has changed.
+    The "warning" case has been split off into a new `Error_Protocol_Warning` constructor.
+    [#460](https://github.com/haskell-tls/hs-tls/pull/460)
+
+  ## Version 1.8.0
+
+  * BREAKING CHANGE: Remove `Exception` instance for `TLSError`.
+    The library now throws `TLSException` only.
+    If you need to change your code, please refer to
+    [this example](https://github.com/snoyberg/http-client/commit/73d1a4eb451c089878ba95e96371d0b18287ffb8) first.
+    [#457](https://github.com/haskell-tls/hs-tls/pull/457)
+
+  ## Version 1.7.1
+
+  * NOP on UserCanceled event
+    [#454](https://github.com/haskell-tls/hs-tls/pull/454)
+
+  ## Version 1.7.0
+
+  * Major version up because "crypton" is used instead of "cryptonite"
+
 -------------------------------------------------------------------
 Thu Mar 30 17:08:41 UTC 2023 - Peter Simons <psimons@suse.com>
 
diff --git a/ghc-tls.spec b/ghc-tls.spec
index c435c1d..25beac7 100644
--- a/ghc-tls.spec
+++ b/ghc-tls.spec
@@ -20,7 +20,7 @@
 %global pkgver %{pkg_name}-%{version}
 %bcond_with tests
 Name:           ghc-%{pkg_name}
-Version:        1.6.0
+Version:        1.9.0
 Release:        0
 Summary:        TLS/SSL protocol native implementation (Server and Client)
 License:        BSD-3-Clause
@@ -39,12 +39,16 @@ BuildRequires:  ghc-bytestring-devel
 BuildRequires:  ghc-bytestring-prof
 BuildRequires:  ghc-cereal-devel
 BuildRequires:  ghc-cereal-prof
-BuildRequires:  ghc-cryptonite-devel
-BuildRequires:  ghc-cryptonite-prof
+BuildRequires:  ghc-crypton-devel
+BuildRequires:  ghc-crypton-prof
+BuildRequires:  ghc-crypton-x509-devel
+BuildRequires:  ghc-crypton-x509-prof
+BuildRequires:  ghc-crypton-x509-store-devel
+BuildRequires:  ghc-crypton-x509-store-prof
+BuildRequires:  ghc-crypton-x509-validation-devel
+BuildRequires:  ghc-crypton-x509-validation-prof
 BuildRequires:  ghc-data-default-class-devel
 BuildRequires:  ghc-data-default-class-prof
-BuildRequires:  ghc-hourglass-devel
-BuildRequires:  ghc-hourglass-prof
 BuildRequires:  ghc-memory-devel
 BuildRequires:  ghc-memory-prof
 BuildRequires:  ghc-mtl-devel
@@ -54,16 +58,14 @@ BuildRequires:  ghc-network-prof
 BuildRequires:  ghc-rpm-macros
 BuildRequires:  ghc-transformers-devel
 BuildRequires:  ghc-transformers-prof
-BuildRequires:  ghc-x509-devel
-BuildRequires:  ghc-x509-prof
-BuildRequires:  ghc-x509-store-devel
-BuildRequires:  ghc-x509-store-prof
-BuildRequires:  ghc-x509-validation-devel
-BuildRequires:  ghc-x509-validation-prof
+BuildRequires:  ghc-unix-time-devel
+BuildRequires:  ghc-unix-time-prof
 ExcludeArch:    %{ix86}
 %if %{with tests}
 BuildRequires:  ghc-QuickCheck-devel
 BuildRequires:  ghc-QuickCheck-prof
+BuildRequires:  ghc-hourglass-devel
+BuildRequires:  ghc-hourglass-prof
 BuildRequires:  ghc-tasty-devel
 BuildRequires:  ghc-tasty-prof
 BuildRequires:  ghc-tasty-quickcheck-devel
diff --git a/tls-1.6.0.tar.gz b/tls-1.6.0.tar.gz
deleted file mode 100644
index 23d8e87..0000000
--- a/tls-1.6.0.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:d29d20afc1c1b852a3c39b076ec853cb596ac888cf521e54144441dec689e498
-size 158619
diff --git a/tls-1.9.0.tar.gz b/tls-1.9.0.tar.gz
new file mode 100644
index 0000000..27bd340
--- /dev/null
+++ b/tls-1.9.0.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:5605b9cbe0903b100e9de72800641453f74bf5dade6176dbe10b34ac9353433e
+size 159392