diff --git a/pyOpenSSL-20.0.1.tar.gz b/pyOpenSSL-20.0.1.tar.gz
deleted file mode 100644
index 4fcc637..0000000
--- a/pyOpenSSL-20.0.1.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:4c231c759543ba02560fcd2480c48dcec4dae34c9da7d3747c508227e0624b51
-size 173736
diff --git a/pyOpenSSL-21.0.0.tar.gz b/pyOpenSSL-21.0.0.tar.gz
new file mode 100644
index 0000000..557f390
--- /dev/null
+++ b/pyOpenSSL-21.0.0.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:5e2d8c5e46d0d865ae933bef5230090bdaf5506281e9eec60fa250ee80600cb3
+size 175652
diff --git a/python-pyOpenSSL.changes b/python-pyOpenSSL.changes
index 72dd87a..15ddbdd 100644
--- a/python-pyOpenSSL.changes
+++ b/python-pyOpenSSL.changes
@@ -1,3 +1,14 @@
+-------------------------------------------------------------------
+Tue Oct 26 20:27:12 UTC 2021 - Dirk Müller <dmueller@suse.com>
+
+- update to 21.0.0:
+  - The minimum ``cryptography`` version is now 3.3.
+  - Drop support for Python 3.5
+  - Raise an error when an invalid ALPN value is set.
+  - Added ``OpenSSL.SSL.Context.set_min_proto_version`` and ``OpenSSL.SSL.Context.set_max_proto_version``
+  - Updated ``to_cryptography`` and ``from_cryptography`` methods to support an
+    upcoming release of ``cryptography`` without raising deprecation warnings.
+
 -------------------------------------------------------------------
 Mon Feb  1 18:07:21 UTC 2021 - Dirk Müller <dmueller@suse.com>
 
diff --git a/python-pyOpenSSL.spec b/python-pyOpenSSL.spec
index 4411689..03c73a5 100644
--- a/python-pyOpenSSL.spec
+++ b/python-pyOpenSSL.spec
@@ -19,7 +19,7 @@
 %{?!python_module:%define python_module() python-%{**} python3-%{**}}
 %define oldpython python
 Name:           python-pyOpenSSL
-Version:        20.0.1
+Version:        21.0.0
 Release:        0
 Summary:        Python wrapper module around the OpenSSL library
 License:        Apache-2.0
@@ -29,7 +29,7 @@ Source:         https://files.pythonhosted.org/packages/source/p/pyOpenSSL/pyOpe
 # Mark tests requiring network access
 Patch0:         skip-networked-test.patch
 BuildRequires:  %{python_module cffi}
-BuildRequires:  %{python_module cryptography >= 2.8}
+BuildRequires:  %{python_module cryptography >= 3.3}
 BuildRequires:  %{python_module flaky}
 BuildRequires:  %{python_module pretend}
 BuildRequires:  %{python_module pytest >= 3.0.1}
@@ -40,7 +40,7 @@ BuildRequires:  fdupes
 BuildRequires:  openssl
 BuildRequires:  python-rpm-macros
 Requires:       python-cffi
-Requires:       python-cryptography >= 2.8
+Requires:       python-cryptography >= 3.3
 Requires:       python-six >= 1.5.2
 Provides:       pyOpenSSL = %{version}
 BuildArch:      noarch