diff --git a/python311.changes b/python311.changes
index 008aa01..ae54db5 100644
--- a/python311.changes
+++ b/python311.changes
@@ -1,3 +1,10 @@
+-------------------------------------------------------------------
+Wed Mar  6 14:13:58 UTC 2024 - Pedro Monreal <pmonreal@suse.com>
+
+- Use the system-wide crypto-policies [bsc#1211301]
+  * Use the system default cipher list instead of hardcoded values
+  * Add the --with-ssl-default-suites=openssl configure option
+
 -------------------------------------------------------------------
 Fri Feb 23 01:06:42 UTC 2024 - Matej Cepl <mcepl@suse.com>
 
diff --git a/python311.spec b/python311.spec
index 2feb904..1b31f16 100644
--- a/python311.spec
+++ b/python311.spec
@@ -506,6 +506,9 @@ export CFLAGS="%{optflags} -IVendor/"
     --with-system-ffi \
     --with-system-expat \
     --with-lto \
+%if 0%{?suse_version} >= 1550 || 0%{?sle_version} >= 150400
+    --with-ssl-default-suites=openssl \
+%endif
 %if %{with profileopt}
     --enable-optimizations \
 %endif