diff --git a/apparmor-usr.sbin.hostapd b/apparmor-usr.sbin.hostapd
index 8cdb9b1..a21505a 100644
--- a/apparmor-usr.sbin.hostapd
+++ b/apparmor-usr.sbin.hostapd
@@ -17,7 +17,7 @@ profile hostapd /usr/sbin/hostapd {
 
   # grant read access to config files
   /etc/hostapd.* r,
-
+  /etc/ssl/openssl.cnf r,
   /etc/libnl/classid r,
 
   @{PROC}/sys/net/ipv*/conf/*/arp_accept w,
diff --git a/hostapd.changes b/hostapd.changes
index 94eb762..732769a 100644
--- a/hostapd.changes
+++ b/hostapd.changes
@@ -1,3 +1,9 @@
+-------------------------------------------------------------------
+Fri Nov 26 20:52:19 UTC 2021 - Clemens Famulla-Conrad <cfamullaconrad@suse.com>
+
+- Fix AppArmor profile -- allow access to /etc/ssl/openssl.cnf
+  (bsc#1192959)
+
 -------------------------------------------------------------------
 Fri Oct 15 07:29:27 UTC 2021 - Johannes Segitz <jsegitz@suse.com>