diff --git a/python39.changes b/python39.changes
index ac59d33..b26a4b8 100644
--- a/python39.changes
+++ b/python39.changes
@@ -1,3 +1,10 @@
+-------------------------------------------------------------------
+Wed Mar  6 14:13:58 UTC 2024 - Pedro Monreal <pmonreal@suse.com>
+
+- Use the system-wide crypto-policies [bsc#1211301]
+  * Use the system default cipher list instead of hardcoded values
+  * Add the --with-ssl-default-suites=openssl configure option
+
 -------------------------------------------------------------------
 Wed Feb 28 19:49:12 UTC 2024 - Matej Cepl <mcepl@suse.com>
 
diff --git a/python39.spec b/python39.spec
index 1eab9b9..3992ddd 100644
--- a/python39.spec
+++ b/python39.spec
@@ -524,6 +524,9 @@ export CFLAGS="%{optflags} -IVendor/"
     --with-system-ffi \
     --with-system-expat \
     --with-lto \
+%if 0%{?suse_version} >= 1550 || 0%{?sle_version} >= 150400
+    --with-ssl-default-suites=openssl \
+%endif
 %if %{with profileopt}
     --enable-optimizations \
 %endif