diff --git a/apache2-mod_nss.changes b/apache2-mod_nss.changes
index 7a8645f..ddcbe90 100644
--- a/apache2-mod_nss.changes
+++ b/apache2-mod_nss.changes
@@ -1,3 +1,10 @@
+-------------------------------------------------------------------
+Wed Apr  1 10:13:40 UTC 2015 - kstreitova@suse.com
+
+- remove "ecdhe_rsa_aes_256_sha256" cipher from the mod_nss.conf.in
+  file as this cipher is not supported and it was listed here
+  incorrectly [bnc#921182]
+
 -------------------------------------------------------------------
 Tue Mar  3 10:25:27 UTC 2015 - kstreitova@suse.com
 
diff --git a/mod_nss.conf.in b/mod_nss.conf.in
index ad35f30..c37e04a 100644
--- a/mod_nss.conf.in
+++ b/mod_nss.conf.in
@@ -216,7 +216,7 @@ NSSRequireSafeNegotiation off
 # * no rc4, no 3des, no des
 # * ephemeral is what you want (PFS).
 # * EC has precedence over RSA
-NSSCipherSuite +ecdhe_ecdsa_aes_128_gcm_sha,+ecdh_ecdsa_aes_128_gcm_sha,+ecdhe_rsa_aes_256_sha,+ecdh_rsa_aes_256_sha,+ecdhe_rsa_aes_128_gcm_sha,+ecdh_rsa_aes_128_gcm_sha,+ecdhe_rsa_aes_128_sha,+ecdh_rsa_aes_128_sha,+rsa_aes_128_gcm_sha,+rsa_aes_256_sha,+rsa_aes_128_sha,+rsa_aes_128_sha256,+ecdhe_rsa_aes_256_sha256,+rsa_aes_256_sha256,+ecdhe_rsa_aes_256_sha256
+NSSCipherSuite +ecdhe_ecdsa_aes_128_gcm_sha,+ecdh_ecdsa_aes_128_gcm_sha,+ecdhe_rsa_aes_256_sha,+ecdh_rsa_aes_256_sha,+ecdhe_rsa_aes_128_gcm_sha,+ecdh_rsa_aes_128_gcm_sha,+ecdhe_rsa_aes_128_sha,+ecdh_rsa_aes_128_sha,+rsa_aes_128_gcm_sha,+rsa_aes_256_sha,+rsa_aes_128_sha,+rsa_aes_128_sha256,+rsa_aes_256_sha256
 
 #   SSL Protocol:
 #   Cryptographic protocols that provide communication security.