diff --git a/python-digitalocean.changes b/python-digitalocean.changes
index a0507d2..02fba02 100644
--- a/python-digitalocean.changes
+++ b/python-digitalocean.changes
@@ -1,3 +1,9 @@
+-------------------------------------------------------------------
+Tue Nov 21 15:07:55 UTC 2023 - Markéta Machová <mmachova@suse.com>
+
+- Require old urllib3
+  * Cookie headers are stripped since urllib3 2.0.6, which breaks Firewall
+
 -------------------------------------------------------------------
 Sun Jul  2 12:24:05 UTC 2023 - ecsos <ecsos@opensuse.org>
 
diff --git a/python-digitalocean.spec b/python-digitalocean.spec
index 8990b7b..afe21c8 100644
--- a/python-digitalocean.spec
+++ b/python-digitalocean.spec
@@ -1,7 +1,7 @@
 #
 # spec file for package python-digitalocean
 #
-# Copyright (c) 2022 SUSE LLC
+# Copyright (c) 2023 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -30,6 +30,7 @@ BuildRequires:  %{python_module pytest}
 BuildRequires:  %{python_module requests >= 2.2.1}
 BuildRequires:  %{python_module responses}
 BuildRequires:  %{python_module setuptools}
+BuildRequires:  %{python_module urllib3 < 2.0.6}
 BuildRequires:  fdupes
 BuildRequires:  python-rpm-macros
 BuildRequires:  unzip
@@ -37,6 +38,8 @@ Requires:       python-jsonpickle
 Requires:       python-pytest
 Requires:       python-requests >= 2.2.1
 Requires:       python-responses
+# urllib3 2.0.6 strips Cookies header, which changes the behavior of requests, which in turn breaks the Firewall tests
+Requires:       python-urllib3 < 2.0.6
 BuildArch:      noarch
 %python_subpackages
 
@@ -44,7 +47,7 @@ BuildArch:      noarch
 Python module to manage Digital Ocean droplets.
 
 %prep
-%setup -q -n python-digitalocean-%{version}
+%autosetup -p1 -n python-digitalocean-%{version}
 
 %build
 export LANG=en_US.UTF-8