diff --git a/libunbound-devel-mini.changes b/libunbound-devel-mini.changes
index 41b50fc..d5263f5 100644
--- a/libunbound-devel-mini.changes
+++ b/libunbound-devel-mini.changes
@@ -1,3 +1,9 @@
+-------------------------------------------------------------------
+Tue May 11 21:57:51 UTC 2021 - Cristian Rodríguez <crrodriguez@opensuse.org>
+
+- Use --disable-explicit-port-randomisation, the linux kernel
+  has source port randomization by default if port is 0 since ages.
+
 -------------------------------------------------------------------
 Tue Feb  9 10:56:09 UTC 2021 - Michael Ströder <michael@stroeder.com>
 
diff --git a/libunbound-devel-mini.spec b/libunbound-devel-mini.spec
index 652a060..77aaa25 100644
--- a/libunbound-devel-mini.spec
+++ b/libunbound-devel-mini.spec
@@ -36,8 +36,8 @@ BuildRequires:  libexpat-devel
 BuildRequires:  libsodium-devel
 BuildRequires:  openssl-devel
 Requires:       this-is-only-for-build-envs
-Conflicts:      unbound-devel
 Conflicts:      libunbound8
+Conflicts:      unbound-devel
 Provides:       libunbound-devel = %{version}-%{release}
 #
 URL:            https://www.unbound.net/
@@ -87,7 +87,8 @@ export CXXFLAGS="%{optflags}"
   --with-pidfile=%{piddir}%{name}/%{name}.pid \
   --without-pythonmodule --without-pyunbound \
   --with-libunbound-only \
-  --with-rootkey-file=%{_sharedstatedir}/unbound/root.key
+  --with-rootkey-file=%{_sharedstatedir}/unbound/root.key \
+  --disable-explicit-port-randomisation
 
 make %{?_smp_mflags}
 
diff --git a/unbound.changes b/unbound.changes
index dc9f630..c8e8ea4 100644
--- a/unbound.changes
+++ b/unbound.changes
@@ -1,3 +1,14 @@
+-------------------------------------------------------------------
+Sun May 30 19:28:48 UTC 2021 - Togan Muftuoglu <toganm@dinamizm.com>
+
+- Enable DNS-over-HTTPS support
+
+-------------------------------------------------------------------
+Tue May 11 21:56:07 UTC 2021 - Cristian Rodríguez <crrodriguez@opensuse.org>
+
+- Use --disable-explicit-port-randomisation, the linux kernel
+  has source port randomization by default if port is 0 since ages.
+
 -------------------------------------------------------------------
 Tue Feb  9 10:56:09 UTC 2021 - Michael Ströder <michael@stroeder.com>
 
diff --git a/unbound.spec b/unbound.spec
index e1a376a..de36c20 100644
--- a/unbound.spec
+++ b/unbound.spec
@@ -62,6 +62,8 @@ BuildRequires:  python-rpm-macros
 BuildRequires:  python3-devel
 BuildRequires:  swig
 %endif
+# needed for dns over https
+BuildRequires:  pkgconfig(libnghttp2)
 
 Requires:       ldns >= %{ldns_version}
 # until we figured something else out for the unbound-anchor part in the systemd unit file
@@ -108,6 +110,7 @@ DNSSEC (secure DNS) validation and stub-resolvers (that do not run
 as a server, but are linked into an application) are easily possible.
 
 %define libname libunbound8
+
 %package -n %{libname}
 Requires:       %{name}-anchor >= %{version}
 #
@@ -205,6 +208,7 @@ pushd ../p2
   --with-pthreads \
   --disable-static \
   --with-ldns=%{_prefix} \
+  --with-libnghttp2 \
   --enable-sha2 \
   --enable-gost \
   --enable-ecdsa \
@@ -218,7 +222,8 @@ pushd ../p2
   --with-conf-file=%{_sysconfdir}/%{name}/unbound.conf \
   --with-pidfile=%{piddir}%{name}/%{name}.pid \
   --with-pythonmodule --with-pyunbound PYTHON=%{__python2}\
-  --with-rootkey-file=%{_sharedstatedir}/unbound/root.key
+  --with-rootkey-file=%{_sharedstatedir}/unbound/root.key \
+  --disable-explicit-port-randomisation
 
 make %{?_smp_mflags} all streamtcp
 popd
@@ -230,6 +235,7 @@ popd
   --with-pthreads \
   --disable-static \
   --with-ldns=%{_prefix} \
+  --with-libnghttp2 \
   --enable-sha2 \
   --enable-gost \
   --enable-ecdsa \
@@ -245,7 +251,8 @@ popd
 %if %{with python3}
   --with-pythonmodule --with-pyunbound PYTHON=%{__python3}\
 %endif
-  --with-rootkey-file=%{_sharedstatedir}/unbound/root.key
+  --with-rootkey-file=%{_sharedstatedir}/unbound/root.key \
+  --disable-explicit-port-randomisation
 
 make %{?_smp_mflags} all streamtcp