diff --git a/csync2.spec b/csync2.spec
index 3e4c98a..a30cae3 100644
--- a/csync2.spec
+++ b/csync2.spec
@@ -45,6 +45,8 @@ BuildRequires:  bison
 BuildRequires:  flex
 BuildRequires:  libgnutls-devel
 BuildRequires:  librsync-devel
+# openssl required at build time due to rpmlint checks which run postinstall script which uses openssl
+BuildRequires:  openssl
 BuildRequires:  pkgconfig
 BuildRequires:  sqlite3-devel
 Requires:       openssl
@@ -103,14 +105,14 @@ touch %{buildroot}%{_sysconfdir}/csync2/csync2_ssl_cert.pem
 %service_add_post csync2.socket
 umask 077
 if [ ! -f %{_sysconfdir}/csync2/csync2_ssl_key.pem ]; then
-/usr/bin/openssl genrsa -rand /proc/apm:/proc/cpuinfo:/proc/dma:/proc/filesystems:/proc/interrupts:/proc/ioports:/proc/pci:/proc/rtc:/proc/uptime 1024 > %{_sysconfdir}/csync2/csync2_ssl_key.pem
+/usr/bin/openssl genrsa -rand /proc/apm:/proc/cpuinfo:/proc/dma:/proc/filesystems:/proc/interrupts:/proc/ioports:/proc/pci:/proc/rtc:/proc/uptime 1024 > %{_sysconfdir}/csync2/csync2_ssl_key.pem 2>/dev/null
 fi
 FQDN=`hostname`
 if [ "x${FQDN}" = "x" ]; then
    FQDN=localhost.localdomain
 fi
 if [ ! -f %{_sysconfdir}/csync2/csync2_ssl_cert.pem ]; then
-cat << EOF | /usr/bin/openssl req -new -key %{_sysconfdir}/csync2/csync2_ssl_key.pem -x509 -days 3000 -out %{_sysconfdir}/csync2/csync2_ssl_cert.pem
+cat << EOF | /usr/bin/openssl req -new -key %{_sysconfdir}/csync2/csync2_ssl_key.pem -x509 -days 3000 -out %{_sysconfdir}/csync2/csync2_ssl_cert.pem 2>/dev/null
 --
 SomeState
 SomeCity