diff --git a/krb5-mini.changes b/krb5-mini.changes
index f3ade3b..04e29b2 100644
--- a/krb5-mini.changes
+++ b/krb5-mini.changes
@@ -1,3 +1,8 @@
+-------------------------------------------------------------------
+Wed Mar 27 11:36:00 CET 2013 - mc@suse.de
+
+- enable selinux and set openssl as crypto implementation
+
 -------------------------------------------------------------------
 Fri Mar 22 10:34:55 CET 2013 - mc@suse.de
 
diff --git a/krb5-mini.spec b/krb5-mini.spec
index c08285d..bf60786 100644
--- a/krb5-mini.spec
+++ b/krb5-mini.spec
@@ -204,10 +204,12 @@ CFLAGS="$RPM_OPT_FLAGS -I/usr/include/et -fno-strict-aliasing -D_GNU_SOURCE -fPI
         --with-ldap \
         --with-pam \
         --enable-pkinit \
+        --with-pkinit-crypto-impl=openssl \
 %else
         --disable-pkinit \
         --without-pam \
 %endif
+        --with-selinux \
         --with-system-et \
         --with-system-ss
 make %{?jobs:-j%jobs}
diff --git a/krb5.changes b/krb5.changes
index f3ade3b..04e29b2 100644
--- a/krb5.changes
+++ b/krb5.changes
@@ -1,3 +1,8 @@
+-------------------------------------------------------------------
+Wed Mar 27 11:36:00 CET 2013 - mc@suse.de
+
+- enable selinux and set openssl as crypto implementation
+
 -------------------------------------------------------------------
 Fri Mar 22 10:34:55 CET 2013 - mc@suse.de
 
diff --git a/krb5.spec b/krb5.spec
index a40561e..bf17262 100644
--- a/krb5.spec
+++ b/krb5.spec
@@ -204,10 +204,12 @@ CFLAGS="$RPM_OPT_FLAGS -I/usr/include/et -fno-strict-aliasing -D_GNU_SOURCE -fPI
         --with-ldap \
         --with-pam \
         --enable-pkinit \
+        --with-pkinit-crypto-impl=openssl \
 %else
         --disable-pkinit \
         --without-pam \
 %endif
+        --with-selinux \
         --with-system-et \
         --with-system-ss
 make %{?jobs:-j%jobs}