diff --git a/python-service_identity.changes b/python-service_identity.changes
index cfffc3c..c3d33ab 100644
--- a/python-service_identity.changes
+++ b/python-service_identity.changes
@@ -1,3 +1,28 @@
+-------------------------------------------------------------------
+Tue Sep 25 11:54:42 UTC 2018 - Tomáš Chvátal <tchvatal@suse.com>
+
+- Drop some SLE11 code that is quite useless today
+
+-------------------------------------------------------------------
+Mon Sep 24 13:16:17 UTC 2018 - ecsos@opensuse.org
+
+- Update to 17.0.0:
+  * Deprecations:
+    - Since Chrome 58 and Firefox 48 both don’t accept certificates 
+      that contain only a Common Name, its usage is hereby 
+      deprecated in service_identity too. We have been raising 
+      a warning since 16.0.0 and the support will be removed in 
+      mid-2018 for good.
+  * Changes:
+    - When service_identity.SubjectAltNameWarning is raised, the 
+      Common Name of the certificate is now included in the warning
+      message. #17
+    - Added cryptography.x509 backend for verifying certificates.
+      #18
+    - Wildcards (*) are now only allowed if they are the leftmost 
+      label in a certificate. This is common practice by all major 
+      browsers. #19
+
 -------------------------------------------------------------------
 Sat Jul  1 15:09:29 UTC 2017 - okurz@suse.com
 
diff --git a/python-service_identity.spec b/python-service_identity.spec
index 39a9dd2..b0c6594 100644
--- a/python-service_identity.spec
+++ b/python-service_identity.spec
@@ -1,7 +1,7 @@
 #
 # spec file for package python-service_identity
 #
-# Copyright (c) 2017 SUSE LINUX GmbH, Nuernberg, Germany.
+# Copyright (c) 2018 SUSE LINUX GmbH, Nuernberg, Germany.
 # Copyright (c) 2014 LISA GmbH, Bingen, Germany.
 #
 # All modifications and additions to the file contributed by third parties
@@ -13,45 +13,36 @@
 # license that conforms to the Open Source Definition (Version 1.9)
 # published by the Open Source Initiative.
 
-# Please submit bugfixes or comments via http://bugs.opensuse.org/
+# Please submit bugfixes or comments via https://bugs.opensuse.org/
 #
 
 
 %{?!python_module:%define python_module() python-%{**} python3-%{**}}
 %define oname   service_identity
-
 Name:           python-service_identity
-Version:        16.0.0
+Version:        17.0.0
 Release:        0
 Summary:        Service identity verification for pyOpenSSL
 License:        MIT
 Group:          Development/Languages/Python
-Url:            https://github.com/pyca/service_identity
+URL:            https://github.com/pyca/service_identity
 Source0:        https://pypi.io/packages/source/s/%{oname}/%{oname}-%{version}.tar.gz
+# Documentation
+BuildRequires:  %{python_module Sphinx}
 BuildRequires:  %{python_module attrs}
 BuildRequires:  %{python_module devel}
 BuildRequires:  %{python_module pyOpenSSL >= 0.14}
 BuildRequires:  %{python_module pyasn1-modules}
 BuildRequires:  %{python_module pyasn1}
 BuildRequires:  %{python_module setuptools}
-# Documentation
-BuildRequires:  %{python_module Sphinx}
 BuildRequires:  fdupes
 BuildRequires:  python-rpm-macros
-
 Requires:       python-attrs
 Requires:       python-pyOpenSSL >= 0.14
 Requires:       python-pyasn1
 Requires:       python-pyasn1-modules
 Requires:       python-setuptools
-BuildRoot:      %{_tmppath}/%{name}-%{version}-build
-
-%if 0%{?suse_version} && 0%{?suse_version} <= 1110
-%{!?python_sitelib: %global python_sitelib %(python -c "from distutils.sysconfig import get_python_lib; print get_python_lib()")}
-%else
 BuildArch:      noarch
-%endif
-
 %python_subpackages
 
 %description
@@ -70,7 +61,7 @@ relevant RFCs too.
 
 # make man and documentation
 cd docs
-make man singlehtml
+make %{?_smp_mflags} man singlehtml
 
 %install
 %python_install
@@ -78,11 +69,12 @@ make man singlehtml
 # install man
 install -Dm 0644 docs/_build/man/%{oname}.1 %{buildroot}%{_mandir}/man1/%{oname}.1
 %python_clone %{buildroot}%{_mandir}/man1/%{oname}.1
-%fdupes %{buildroot}%{_prefix}
+
+%python_expand %fdupes %{buildroot}%{$python_sitelib}/%{oname}
 
 %files %{python_files}
-%defattr(-,root,root,-)
-%doc AUTHORS.rst LICENSE README.rst docs/_build/singlehtml/index.html
+%license LICENSE
+%doc AUTHORS.rst README.rst docs/_build/singlehtml/index.html
 %{_mandir}/man1/*-%{python_bin_suffix}.1%{?ext_man}
 %python3_only %{_mandir}/man1/%{oname}.1%{?ext_man}
 %{python_sitelib}/%{oname}
diff --git a/service_identity-16.0.0.tar.gz b/service_identity-16.0.0.tar.gz
deleted file mode 100644
index 7e743cd..0000000
--- a/service_identity-16.0.0.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:0630e222f59f91f3db498be46b1d879ff220955d7bbad719a5cb9ad14e3c3036
-size 30270
diff --git a/service_identity-17.0.0.tar.gz b/service_identity-17.0.0.tar.gz
new file mode 100644
index 0000000..9a8ef2f
--- /dev/null
+++ b/service_identity-17.0.0.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:4001fbb3da19e0df22c47a06d29681a398473af4aa9d745eca525b3b2c2302ab
+size 23502