diff --git a/xmlsec1-1.2.26.tar.gz b/xmlsec1-1.2.26.tar.gz
deleted file mode 100644
index 3e33273..0000000
--- a/xmlsec1-1.2.26.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:8d8276c9c720ca42a3b0023df8b7ae41a2d6c5f9aa8d20ed1672d84cc8982d50
-size 1922183
diff --git a/xmlsec1-1.2.28.tar.gz b/xmlsec1-1.2.28.tar.gz
new file mode 100644
index 0000000..d7c9c89
--- /dev/null
+++ b/xmlsec1-1.2.28.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:13eec4811ea30e3f0e16a734d1dbf7f9d246a71d540b48d143a07b489f6222d4
+size 1995599
diff --git a/xmlsec1.changes b/xmlsec1.changes
index 7a01fbd..0faeb93 100644
--- a/xmlsec1.changes
+++ b/xmlsec1.changes
@@ -1,3 +1,36 @@
+-------------------------------------------------------------------
+Thu Apr 25 09:13:57 UTC 2019 - Tomáš Chvátal <tchvatal@suse.com>
+
+- Update to 1.2.28:
+  * Added BoringSSL support (chenbd).
+  * Added gnutls-3.6.x support (alonbl).
+  * Added DSA and ECDSA key size getter for MSCNG (vmiklos).
+  * Added --enable-mans configuration option (alonbl).
+  * Added coninuous build integration for MacOSX (vmiklos).
+  * Several other small fixes (more details).
+
+-------------------------------------------------------------------
+Fri Dec  7 11:01:44 UTC 2018 - Tomáš Chvátal <tchvatal@suse.com>
+
+- Make sure to recommend at least one backend when you install
+  just xmlsec1
+
+-------------------------------------------------------------------
+Wed Oct 31 13:21:31 UTC 2018 - Tomáš Chvátal <tchvatal@suse.com>
+
+- Drop the gnutls backend as based on the tests it is quite borked:
+  * We still have nss and openssl backend for people to use
+
+-------------------------------------------------------------------
+Wed Oct 31 12:00:28 UTC 2018 - Tomáš Chvátal <tchvatal@suse.com>
+
+- Version update to 1.2.27:
+  * Added AES-GCM support for OpenSSL and MSCNG (snargit).
+  * Added DSA-SHA256 and ECDSA-SHA384 support for NSS (vmiklos).
+  * Added RSA-OAEP support for MSCNG (vmiklos).
+  * Continuous build integration in Travis and Appveyor.
+  * Several other small fixes (more details).
+
 -------------------------------------------------------------------
 Thu Aug 16 10:22:09 UTC 2018 - tchvatal@suse.com
 
diff --git a/xmlsec1.spec b/xmlsec1.spec
index b823d44..5748946 100644
--- a/xmlsec1.spec
+++ b/xmlsec1.spec
@@ -1,7 +1,7 @@
 #
 # spec file for package xmlsec1
 #
-# Copyright (c) 2018 SUSE LINUX GmbH, Nuernberg, Germany.
+# Copyright (c) 2019 SUSE LINUX GmbH, Nuernberg, Germany.
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -12,7 +12,7 @@
 # license that conforms to the Open Source Definition (Version 1.9)
 # published by the Open Source Initiative.
 
-# Please submit bugfixes or comments via http://bugs.opensuse.org/
+# Please submit bugfixes or comments via https://bugs.opensuse.org/
 #
 
 
@@ -22,7 +22,7 @@
 %global libgnutls  libxmlsec1-gnutls1
 %global libnss     libxmlsec1-nss1
 Name:           xmlsec1
-Version:        1.2.26
+Version:        1.2.28
 Release:        0
 Summary:        Library providing support for "XML Signature" and "XML Encryption" standards
 License:        MIT
@@ -32,6 +32,8 @@ Source0:        http://www.aleksey.com/xmlsec/download/xmlsec1-%{version}.tar.gz
 Source99:       xmlsec1-rpmlintrc
 BuildRequires:  libgcrypt-devel
 BuildRequires:  libtool
+# Needed certutil for tests
+BuildRequires:  mozilla-nss-tools
 BuildRequires:  pkgconfig
 BuildRequires:  pkgconfig(gnutls)
 BuildRequires:  pkgconfig(libxml-2.0)
@@ -39,6 +41,7 @@ BuildRequires:  pkgconfig(libxslt)
 BuildRequires:  pkgconfig(nspr)
 BuildRequires:  pkgconfig(nss)
 BuildRequires:  pkgconfig(openssl)
+Recommends:     %{libopenssl}
 
 %description
 XML Security Library is a C library based on LibXML2  and OpenSSL.