diff --git a/create-tarball.sh b/create-tarball.sh
index ceb71cc..18e3dc7 100644
--- a/create-tarball.sh
+++ b/create-tarball.sh
@@ -8,7 +8,7 @@ fi
 VERSION=${1}
 NAME="kxml"
 
-wget http://downloads.sourceforge.net/sourceforge/${NAME}/${NAME}2-src-${VERSION}.zip
+wget https://downloads.sourceforge.net/sourceforge/${NAME}/${NAME}2-src-${VERSION}.zip
 unzip -d ${NAME}-${VERSION} ${NAME}2-src-${VERSION}.zip
 rm ${NAME}2-src-${VERSION}.zip
 
@@ -17,5 +17,5 @@ rm ${NAME}2-src-${VERSION}.zip
   rm -Rf bin/ dist/* www/ samples_midp/ samples/ contrib/
 )
 
-tar czvf ${NAME}-${VERSION}-clean.tar.gz ./${NAME}-${VERSION}
+tar cJvf ${NAME}-${VERSION}-clean.tar.xz ./${NAME}-${VERSION}
 
diff --git a/kxml-2.3.0-clean.tar.gz b/kxml-2.3.0-clean.tar.gz
deleted file mode 100644
index 6daabd8..0000000
--- a/kxml-2.3.0-clean.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:79f847e19cee96195b8b3e6c8642e795d8b8690c3771dc033b6a6b243d6d64c1
-size 38170
diff --git a/kxml-2.3.0-clean.tar.xz b/kxml-2.3.0-clean.tar.xz
new file mode 100644
index 0000000..41a8b13
--- /dev/null
+++ b/kxml-2.3.0-clean.tar.xz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:12e8212666bb90465a6dd7698f54282a0203cb668c28976f2f861d346924015f
+size 29940
diff --git a/kxml.changes b/kxml.changes
index 63796bb..8489629 100644
--- a/kxml.changes
+++ b/kxml.changes
@@ -1,3 +1,10 @@
+-------------------------------------------------------------------
+Thu Apr  7 17:26:43 UTC 2022 - Fridrich Strba <fstrba@suse.com>
+
+- Fetch the sources using https instead of http protocol
+  * fixes bsc#1182284
+- Create *.tar.xz instead of *.tar.gz
+
 -------------------------------------------------------------------
 Wed Mar 23 07:07:25 UTC 2022 - Fridrich Strba <fstrba@suse.com>
 
diff --git a/kxml.spec b/kxml.spec
index beecd9a..ddba3d7 100644
--- a/kxml.spec
+++ b/kxml.spec
@@ -25,7 +25,7 @@ License:        MIT
 Group:          Development/Libraries/Java
 URL:            http://kxml.sourceforge.net/
 # ./create-tarball.sh %%{version}
-Source0:        %{name}-%{version}-clean.tar.gz
+Source0:        %{name}-%{version}-clean.tar.xz
 Source1:        https://repo1.maven.org/maven2/net/sf/kxml/kxml2/%{version}/kxml2-%{version}.pom
 Source2:        https://repo1.maven.org/maven2/net/sf/kxml/kxml2-min/%{version}/kxml2-min-%{version}.pom
 Source3:        %{name}-%{version}-OSGI-MANIFEST.MF