diff --git a/openvpn.changes b/openvpn.changes
index 3bdaa51..ed30a28 100644
--- a/openvpn.changes
+++ b/openvpn.changes
@@ -1,3 +1,50 @@
+-------------------------------------------------------------------
+Mon Mar 25 14:55:35 UTC 2013 - p.drouand@gmail.com
+
+Update to version 2.3.0:
+ * Full IPv6 support
+ * SSL layer modularised, enabling easier implementation for other SSL libraries
+ * PolarSSL support as a drop-in replacement for OpenSSL
+ * New plug-in API providing direct certificate access, improved logging API
+   and easier to extend in the future
+ * Added 'dev_type' environment variable to scripts and plug-ins - which is
+   set to 'TUN' or 'TAP'
+ * New feature: --management-external-key - to provide access to the encryption
+   keys via the management interface
+ * New feature: --x509-track option, more fine grained access to X.509 fields
+   in scripts and plug-ins
+ * New feature: --client-nat support
+ * New feature: --mark which can mark encrypted packets from the tunnel, suitable 
+   for more advanced routing and firewalling
+ * New feature: --management-query-proxy - manage proxy settings via the management
+   interface (supercedes --http-proxy-fallback)
+ * New feature: --stale-routes-check, which cleans up the internal routing table
+ * New feature: --x509-username-field, where other X.509v3 fields can be used for
+   the authentication instead of Common Name
+ * Improved client-kill management interface command
+ * Improved UTF-8 support - and added --compat-names to provide backwards compatibility
+   with older scripts/plug-ins
+ * Improved auth-pam with COMMONNAME support, passing the certificate's common
+   name in the PAM conversation
+ * More options can now be used inside <connection> blocks
+ * Completely new build system, enabling easier cross-compilation and Windows builds
+ * Much of the code has been better documented
+ * Many documentation updates
+ * Plenty of bug fixes and other code clean-ups
+- Add systemd native support for OpenSUSE > 12.1
+- Adapt patchs to upstream release:
+  * openvpn-2.1-plugin-man.dif > openvpn-2.3-plugin-man.dif
+  * openvpn-2.1.0-man-dot.diff > openvpn-2.3.0-man-dot.diff
+- Remove obsolete patchs; fixed or merged on upstream release:
+  * 0001-Use-SSL_MODE_RELEASE_BUFFERS-if-available.patch
+  * openvpn-2.1-plugin-build.dif
+  * openvpn-2.1-systemd-passwd.patch
+- Rebase specfile to upstream changes:
+  * easy-rsa is not provided anymore with main package
+  * remove %clean section
+  * autoreconf -fi is no needed
+- Update openvpn.keyring file for upstream release asc key
+
 -------------------------------------------------------------------
 Mon Jan 28 13:59:07 UTC 2013 - mt@suse.com
 
diff --git a/openvpn.spec b/openvpn.spec
index f1e6fc5..bfeda7a 100644
--- a/openvpn.spec
+++ b/openvpn.spec
@@ -15,6 +15,7 @@
 # Please submit bugfixes or comments via http://bugs.opensuse.org/
 #
 
+
 %if 0%{?suse_version} < 1230
 %define _unitdir /lib/systemd/system
 %else
@@ -47,7 +48,7 @@ Source3:        %{name}.README.SUSE
 Source4:        client-netconfig.up
 Source5:        client-netconfig.down
 Source7:        %{name}.keyring
-Source8:		%{name}.service
+Source8:        %{name}.service
 Source9:        %{name}-tmpfile.conf
 Patch1:         %{name}-2.3-plugin-man.dif
 Patch5:         %{name}-2.3.0-man-dot.diff
@@ -58,13 +59,13 @@ BuildRequires:  lzo-devel
 BuildRequires:  openssl-devel
 BuildRequires:  pam-devel
 %if %{with_systemd}
-BuildRequires:	systemd
+BuildRequires:  systemd
 %endif
 BuildRequires:  libselinux-devel
 BuildRequires:  pkcs11-helper-devel
 Requires:       pkcs11-helper
 %if %{with_systemd}
-BuildRequires:	systemd
+BuildRequires:  systemd
 %endif
 
 %description