diff --git a/certwatch.c b/certwatch.c
index 8829ae5..a56fa54 100644
--- a/certwatch.c
+++ b/certwatch.c
@@ -199,7 +199,7 @@ int main(int argc, char **argv)
      * mktime() back to UTC: */
     tzset();
     
-    while ((optc = getopt_long(argc, argv, "qhvp:", options, NULL)) != -1) {
+    while ((optc = getopt_long(argc, argv, "qpa:", options, NULL)) != -1) {
         switch (optc) {
         case 'q':
             quiet = 1;
diff --git a/crypto-utils.spec b/crypto-utils.spec
index 76251c3..9cd030b 100644
--- a/crypto-utils.spec
+++ b/crypto-utils.spec
@@ -4,7 +4,7 @@
 Summary: SSL certificate and key management utilities
 Name: crypto-utils
 Version: 2.3
-Release: 2
+Release: 3
 Source: crypto-rand-%{crver}.tar.gz
 Source1: genkey.pl
 Source2: certwatch.c
@@ -100,6 +100,9 @@ chmod -R u+w $RPM_BUILD_ROOT
 %{perl_vendorarch}/auto/Crypt
 
 %changelog
+* Wed Aug 22 2007 Joe Orton <jorton@redhat.com> 2.3-3
+- fix certwatch -a (Tuomo Soini, #253819)
+
 * Thu Mar  1 2007 Joe Orton <jorton@redhat.com> 2.3-2
 - various cleanups; require perl(Newt) throughout not newt-perl