diff --git a/pyOpenSSL-22.1.0.tar.gz b/pyOpenSSL-22.1.0.tar.gz
deleted file mode 100644
index f21f3ff..0000000
--- a/pyOpenSSL-22.1.0.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:7a83b7b272dd595222d672f5ce29aa030f1fb837630ef229f62e72e395ce8968
-size 181704
diff --git a/pyOpenSSL-23.0.0.tar.gz b/pyOpenSSL-23.0.0.tar.gz
new file mode 100644
index 0000000..5d7b979
--- /dev/null
+++ b/pyOpenSSL-23.0.0.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:c1cc5f86bcacefc84dada7d31175cae1b1518d5f60d3d0bb595a67822a868a6f
+size 182375
diff --git a/pyOpenSSL-pr1158-conditional-__all__.patch b/pyOpenSSL-pr1158-conditional-__all__.patch
deleted file mode 100644
index 60dce69..0000000
--- a/pyOpenSSL-pr1158-conditional-__all__.patch
+++ /dev/null
@@ -1,46 +0,0 @@
-diff --git a/src/OpenSSL/SSL.py b/src/OpenSSL/SSL.py
-index 9db7353..c2a49f2 100644
---- a/src/OpenSSL/SSL.py
-+++ b/src/OpenSSL/SSL.py
-@@ -59,7 +59,7 @@ __all__ = [
-     "OP_NO_TLSv1",
-     "OP_NO_TLSv1_1",
-     "OP_NO_TLSv1_2",
--    "OP_NO_TLSv1_3",
-+    # "OP_NO_TLSv1_3", conditionally added below
-     "MODE_RELEASE_BUFFERS",
-     "OP_SINGLE_DH_USE",
-     "OP_SINGLE_ECDH_USE",
-@@ -84,8 +84,8 @@ __all__ = [
-     "OP_NO_QUERY_MTU",
-     "OP_COOKIE_EXCHANGE",
-     "OP_NO_TICKET",
--    "OP_NO_RENEGOTIATION",
--    "OP_IGNORE_UNEXPECTED_EOF",
-+    # "OP_NO_RENEGOTIATION", conditionally added below
-+    # "OP_IGNORE_UNEXPECTED_EOF", conditionally added below
-     "OP_ALL",
-     "VERIFY_PEER",
-     "VERIFY_FAIL_IF_NO_PEER_CERT",
-@@ -172,6 +172,7 @@ OP_NO_TLSv1_1 = _lib.SSL_OP_NO_TLSv1_1
- OP_NO_TLSv1_2 = _lib.SSL_OP_NO_TLSv1_2
- try:
-     OP_NO_TLSv1_3 = _lib.SSL_OP_NO_TLSv1_3
-+    __all__ += ["OP_NO_TLSv1_3"]
- except AttributeError:
-     pass
- 
-@@ -208,11 +209,13 @@ OP_NO_TICKET = _lib.SSL_OP_NO_TICKET
- 
- try:
-     OP_NO_RENEGOTIATION = _lib.SSL_OP_NO_RENEGOTIATION
-+    __all__ += ["OP_NO_RENEGOTIATION"]
- except AttributeError:
-     pass
- 
- try:
-     OP_IGNORE_UNEXPECTED_EOF = _lib.SSL_OP_IGNORE_UNEXPECTED_EOF
-+    __all__ += ["OP_IGNORE_UNEXPECTED_EOF"]
- except AttributeError:
-     pass
- 
diff --git a/python-pyOpenSSL.changes b/python-pyOpenSSL.changes
index 53572be..dc960c2 100644
--- a/python-pyOpenSSL.changes
+++ b/python-pyOpenSSL.changes
@@ -1,3 +1,13 @@
+-------------------------------------------------------------------
+Mon Jan  2 18:47:06 UTC 2023 - Dirk Müller <dmueller@suse.com>
+
+- update to 23.0.0:
+  * Add ``OpenSSL.SSL.X509StoreFlags.PARTIAL_CHAIN`` constant to allow for
+    users
+  to perform certificate verification on partial certificate chains.
+  * ``cryptography`` maximum version has been increased to 39.0.x.
+- drop pyOpenSSL-pr1158-conditional-__all__.patch (upstream)
+
 -------------------------------------------------------------------
 Fri Oct 21 14:20:05 UTC 2022 - Ben Greiner <code@bnavigator.de>
 
diff --git a/python-pyOpenSSL.spec b/python-pyOpenSSL.spec
index 8fbc4d5..ddbf780 100644
--- a/python-pyOpenSSL.spec
+++ b/python-pyOpenSSL.spec
@@ -1,7 +1,7 @@
 #
 # spec file
 #
-# Copyright (c) 2022 SUSE LLC
+# Copyright (c) 2023 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -27,7 +27,7 @@
 %endif
 %global skip_python2 1
 Name:           python-pyOpenSSL%{psuffix}
-Version:        22.1.0
+Version:        23.0.0
 Release:        0
 Summary:        Python wrapper module around the OpenSSL library
 License:        Apache-2.0
@@ -36,14 +36,12 @@ Source:         https://files.pythonhosted.org/packages/source/p/pyOpenSSL/pyOpe
 # PATCH-FIX-UPSTREAM skip-networked-test.patch gh#pyca/pyopenssl#68 mcepl@suse.com
 # Mark tests requiring network access
 Patch0:         skip-networked-test.patch
-# PATCH-FIX-UPSTREAM pyOpenSSL-pr1158-conditional-__all__.patch gh#pyca/pyopenssl#1158
-Patch1:         pyOpenSSL-pr1158-conditional-__all__.patch
 BuildRequires:  %{python_module cffi}
 BuildRequires:  %{python_module setuptools}
 BuildRequires:  fdupes
 BuildRequires:  python-rpm-macros
 %if %{with test}
-BuildRequires:  %{python_module cryptography >= 38.0.0 with %python-cryptography < 39}
+BuildRequires:  %{python_module cryptography >= 38.0.0 with %python-cryptography < 40}
 BuildRequires:  %{python_module flaky}
 BuildRequires:  %{python_module pretend}
 BuildRequires:  %{python_module pyOpenSSL >= %version}
@@ -52,7 +50,7 @@ BuildRequires:  ca-certificates-mozilla
 BuildRequires:  openssl
 %endif
 Requires:       python-cffi
-Requires:       (python-cryptography >= 38.0.0 with python-cryptography < 39)
+Requires:       (python-cryptography >= 38.0.0 with python-cryptography < 40)
 Provides:       pyOpenSSL = %{version}
 BuildArch:      noarch
 %python_subpackages