diff --git a/crypto-policies.spec b/crypto-policies.spec
index 0135bac..d8dfdc4 100644
--- a/crypto-policies.spec
+++ b/crypto-policies.spec
@@ -1,5 +1,5 @@
-%global git_date 20211115
-%global git_commit 70de13531a7d17db062ac980ef6a7b521782f2fd
+%global git_date 20220201
+%global git_commit 636a91d934f7cf2dc64f5e5c046416c683a6b7f9
 %{?git_commit:%global git_commit_hash %(c=%{git_commit}; echo ${c:0:7})}
 
 %global _python_bytecompile_extra 0
@@ -186,6 +186,10 @@ end
 %{_mandir}/man8/fips-finish-install.8*
 
 %changelog
+* Tue Feb 01 2021 Alexander Sosedkin <asosedkin@redhat.com> - 20220201-1.git636a91d
+- openssl: revert to SECLEVEL=2 in LEGACY
+- openssl: add newlines at the end of the output
+
 * Mon Nov 15 2021 Alexander Sosedkin <asosedkin@redhat.com> - 20211115-1.git70de135
 - OSPP: relax -ECDSA-SHA2-512, -FFDHE-*
 - fips-mode-setup, fips-finish-install: call zipl more often (s390x-specific)
diff --git a/sources b/sources
index 46e040d..529ee99 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (crypto-policies-git70de135.tar.gz) = ef9917cbb14685988397ec88c9dd4fefea47ff808fcaac2f78168c3c74f32274b28ffc62bf755e513237840d05d0575f25591e835c48dba8fe6b5e04c76ba676
+SHA512 (crypto-policies-git636a91d.tar.gz) = 3f4ba8ab52a59ed0d4996f7e59b6bb81050b560448e887ca35c7fb10e92aa5c9ca60758b98ad32e58197304442d22855fdad501ef56de4e310ce87d8e8de4ae8