diff --git a/openssl-1.1.1-conf-paths.patch b/openssl-1.1.1-conf-paths.patch
index 1b02c2f..819007b 100644
--- a/openssl-1.1.1-conf-paths.patch
+++ b/openssl-1.1.1-conf-paths.patch
@@ -31,7 +31,7 @@ diff -up openssl-1.1.1-pre8/apps/openssl.cnf.conf-paths openssl-1.1.1-pre8/apps/
 +
 +[ crypto_policy ]
 +
-+.include /etc/crypto-policies/back-ends/opensslcnf.config
++.include = /etc/crypto-policies/back-ends/opensslcnf.config
 +
  [ new_oids ]
  
diff --git a/openssl.spec b/openssl.spec
index 495c232..9c89bab 100644
--- a/openssl.spec
+++ b/openssl.spec
@@ -22,7 +22,7 @@
 Summary: Utilities from the general purpose cryptography library with TLS implementation
 Name: openssl
 Version: 1.1.1b
-Release: 1%{?dist}
+Release: 2%{?dist}
 Epoch: 1
 # We have to remove certain patented algorithms from the openssl source
 # tarball with the hobble-openssl script which is included below.
@@ -448,6 +448,10 @@ export LD_LIBRARY_PATH
 %ldconfig_scriptlets libs
 
 %changelog
+* Fri Mar  1 2019 Tomáš Mráz <tmraz@redhat.com> 1.1.1b-2
+- use .include = syntax in the config file to allow it
+  to be parsed by 1.0.2 version (#1668916)
+
 * Thu Feb 28 2019 Tomáš Mráz <tmraz@redhat.com> 1.1.1b-1
 - update to the 1.1.1b release
 - EVP_KDF API backport from master