diff --git a/.gitignore b/.gitignore
index c35246b..c04ede6 100644
--- a/.gitignore
+++ b/.gitignore
@@ -104,3 +104,5 @@ certmonger-0.28.tar.gz
 /certmonger-0.77.5.tar.gz.sig
 /certmonger-0.78.tar.gz
 /certmonger-0.78.tar.gz.sig
+/certmonger-0.78.1.tar.gz
+/certmonger-0.78.1.tar.gz.sig
diff --git a/certmonger.spec b/certmonger.spec
index 0319db8..50ebe23 100644
--- a/certmonger.spec
+++ b/certmonger.spec
@@ -25,7 +25,7 @@
 %endif
 
 Name:		certmonger
-Version:	0.78
+Version:	0.78.1
 Release:	1%{?dist}
 Summary:	Certificate status monitor and PKI enrollment client
 
@@ -241,6 +241,10 @@ exit 0
 %endif
 
 %changelog
+* Sun Jun 21 2015 Nalin Dahyabhai <nalin@redhat.com> 0.78.1-1
+- self-tests: assume that certutil won't generate DSA keys with more than 1024
+  bits, and will often short us by a few
+
 * Sat Jun 20 2015 Nalin Dahyabhai <nalin@redhat.com> 0.78-1
 - switch to using popt for parsing command line arguments, continuing to
   use old help text for now so that we can catch up with translations (print
@@ -248,20 +252,20 @@ exit 0
 - add some plumbing for eventually receiving per-certificate roots in
   addition to issued certificates and chain certificates
 - add a "rekey" command to getcert, for triggering enrollment using a new
-  key pair
+  key pair (#1087932)
 - scep-submit: check for the Renewal capability, and default to taking
   advantage of it during rekeying, unless the new -n flag is specified to it
 - dogtag-submit: add flags for passing user names, UDNs, passwords, and PINs
-  to the helper
+  to the helper (part of ticket #12)
 - dogtag-submit: add a flag for using the agent creds to do TLS client auth
-  while submitting enrollment requests
+  while submitting enrollment requests (more of ticket #12)
 - dogtag-submit: handle cases where we submit a request and the server
-  returns a success code rather than just queuing the request
+  returns a success code rather than just queuing the request (#12 again)
 - ipa-submit: pass requested profile names to the server as an argument
   named "profile_id"; if the server gives us an "unrecognized argument"
-  error, retry without it for compatibility's sake
+  error, retry without it for compatibility's sake (part of IPA ticket #57)
 - keygen: fix a possible crash if keygen fails to return a key from NSS
-- correct the certmonger(8) man page's description of the -c flag, whic it
+- correct the certmonger(8) man page's description of the -c flag, which it
   used to call the -C flag
 - add logic for setting ownership and permissions on certificates and keys
   when saving them to disk
diff --git a/sources b/sources
index 49ff889..b6710a3 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
-4b8fac20d5d250fd1c0d25de1274248c  certmonger-0.78.tar.gz
-66a941ba07c2aeb34674c36aa1fef84b  certmonger-0.78.tar.gz.sig
+298b8d6f3742e48979acc626ba7beadd  certmonger-0.78.1.tar.gz
+2f10fe8408fe8028c3332daba72f96df  certmonger-0.78.1.tar.gz.sig