diff --git a/libsrtp.changes b/libsrtp.changes
index 4ff8f60..373d7c9 100644
--- a/libsrtp.changes
+++ b/libsrtp.changes
@@ -1,3 +1,16 @@
+-------------------------------------------------------------------
+Wed Oct 11 14:39:40 UTC 2017 - vcizek@suse.com
+
+- remove openssl 1.1 incompatible headers from the -devel package
+  (bsc#1055277#c8)
+
+-------------------------------------------------------------------
+Mon Oct  9 14:50:42 UTC 2017 - vcizek@suse.com
+
+- Drop option --enable-openssl which doesn't work with OpenSSL 1.1
+  (bsc#1055277)
+  * this drops GCM support
+
 -------------------------------------------------------------------
 Tue Aug  1 12:28:27 UTC 2017 - jengelh@inai.de
 
diff --git a/libsrtp.spec b/libsrtp.spec
index ee18313..cf6c849 100644
--- a/libsrtp.spec
+++ b/libsrtp.spec
@@ -29,7 +29,6 @@ Source:         https://github.com/cisco/libsrtp/archive/v%{version}.tar.gz#/%{n
 Source99:       baselibs.conf
 BuildRequires:  gcc
 BuildRequires:  pkg-config
-BuildRequires:  pkgconfig(openssl)
 # srtp was last used in openSUSE 13.1.
 Provides:       srtp = %{version}
 Obsoletes:      srtp < %{version}
@@ -71,8 +70,9 @@ This subpackage contains the development headers.
 %build
 %configure \
   --enable-generic-aesicm \
-  --enable-syslog         \
-  --enable-openssl
+  --enable-syslog
+# Doesn't work with OpenSSL 1.1
+#  --enable-openssl
 #  --enable-gdoi
 # FIXME: Does not work:
 #  --enable-kernel-linux
@@ -109,6 +109,9 @@ for SYMBOL in \
     sed -i 's|\([^A-Z0-9_]\)\('$SYMBOL'\)\([^A-Z0-9_]\|$\)|\1SRTP_\2\3|g' %{buildroot}%{_includedir}/srtp/*.h
 done
 
+# remove openssl header files incompatible with OpenSSL 1.1
+rm %{buildroot}%{_includedir}/srtp/aes_{g,i}cm_ossl.h
+
 %post -n %{name}%{soname} -p /sbin/ldconfig
 %postun -n %{name}%{soname} -p /sbin/ldconfig