diff --git a/SOURCES/rsyslog-0.11.4-rhbz1842817-crypto-compliance.patch b/SOURCES/rsyslog-0.11.4-rhbz1842817-crypto-compliance.patch
new file mode 100644
index 0000000..235623e
--- /dev/null
+++ b/SOURCES/rsyslog-0.11.4-rhbz1842817-crypto-compliance.patch
@@ -0,0 +1,13 @@
+diff -up librdkafka-0.11.4/src/rdkafka_conf.c.orig librdkafka-0.11.4/src/rdkafka_conf.c
+--- librdkafka-0.11.4/src/rdkafka_conf.c.orig 2021-11-01 18:29:29.669679125 +0100
++++ librdkafka-0.11.4/src/rdkafka_conf.c 2021-11-01 18:30:21.007126511 +0100
+@@ -468,7 +468,8 @@ static const struct rd_kafka_property rd
+ "encryption, MAC and key exchange algorithm used to negotiate the "
+ "security settings for a network connection using TLS or SSL network "
+ "protocol. See manual page for `ciphers(1)` and "
+- "`SSL_CTX_set_cipher_list(3)."
++ "`SSL_CTX_set_cipher_list(3).",
++ .sdef = "PROFILE=SYSTEM"
+ },
+ { _RK_GLOBAL, "ssl.key.location", _RK_C_STR,
+ _RK(ssl.key_location),
diff --git a/SPECS/librdkafka.spec b/SPECS/librdkafka.spec
index 7fb83e5..86a19c0 100644
--- a/SPECS/librdkafka.spec
+++ b/SPECS/librdkafka.spec
@@ -1,6 +1,6 @@
Name: librdkafka
Version: 0.11.4
-Release: 1%{?dist}
+Release: 3%{?dist}
Summary: The Apache Kafka C library
Group: Development/Libraries
@@ -15,7 +15,8 @@ BuildRequires: openssl-devel
BuildRequires: cyrus-sasl-devel
BuildRequires: lz4-devel
-Patch1: librdkafka-python3.patch
+Patch1: librdkafka-python3.patch
+Patch2: rsyslog-0.11.4-rhbz1842817-crypto-compliance.patch
%description
Librdkafka is a C/C++ library implementation of the Apache Kafka protocol,
@@ -39,6 +40,7 @@ using librdkafka.
%setup -q
%patch1 -p1 -b .python3
+%patch2 -p1 -b .crypto-compliance
%build
%configure --enable-lz4 \
@@ -75,6 +77,13 @@ find %{buildroot} -name '*.a' -delete -print
%changelog
+* Mon Nov 01 2021 Attila Lakatos <alakatos@redhat.com> - 0.11.4-3
+- Set SSL_CTX_set_cipher_list to use system-wide crypto policies
+ resolves: rhbz#1842817
+
+* Mon Jun 03 2019 Radovan Sroka <rsroka@redhat.com> - 0.11.4-2
+- rebuild
+
* Fri Feb 08 2019 Jiri Vymazal <jvymazal@redhat.com> - 0.11.4-1
- rebase to v0.11.4 (0.11.5 was breaking rsyslog-kafka)
resolves: rhbz#1614697