diff --git a/hostapd.spec b/hostapd.spec
index 7761243..95c3531 100644
--- a/hostapd.spec
+++ b/hostapd.spec
@@ -2,7 +2,7 @@
 
 Name:           hostapd
 Version:        2.9
-Release:        15%{?dist}
+Release:        16%{?dist}
 Summary:        IEEE 802.11 AP, IEEE 802.1X/WPA/WPA2/EAP/RADIUS Authenticator
 License:        BSD
 URL:            http://w1.fi/hostapd
@@ -88,6 +88,7 @@ cd hostapd
 cat defconfig | sed \
     -e '$ a CONFIG_SAE=y' \
     -e '$ a CONFIG_SUITE192B=y' \
+    -e '$ a CONFIG_TLS_DEFAULT_CIPHERS="PROFILE=SYSTEM:3DES"' \
     -e '/^#CONFIG_DRIVER_NL80211=y/s/^#//' \
     -e '/^#CONFIG_RADIUS_SERVER=y/s/^#//' \
     -e '/^#CONFIG_DRIVER_WIRED=y/s/^#//' \
@@ -209,7 +210,10 @@ fi
 %{_sysconfdir}/logwatch/scripts/services/%{name}
 
 %changelog
-* Mon Dec 20 2021 Davide Caratti <dcaratti@redhat.com> - 2.9.15
+* Wed Dec 22 2021 Davide Caratti <dcaratti@redhat.com> - 2.9-16
+- fix CONFIG_TLS_DEFAULT_CIPHERS to allow 3DES
+
+* Mon Dec 20 2021 Davide Caratti <dcaratti@redhat.com> - 2.9-15
 - Disable 'badfuncs' in rpminspect tests
 - Build with -fPIE, and enable verbose build log
 - enable CONFIG_SUITE192B
@@ -220,7 +224,7 @@ fi
 * Tue Sep 14 2021 Sahana Prasad <sahana@redhat.com> - 2.9-13
 - Rebuilt with OpenSSL 3.0.0
 
-* Fri Sep  3 2021 Davide Caratti <dcaratti@redhat.com> - 2.9.12
+* Fri Sep  3 2021 Davide Caratti <dcaratti@redhat.com> - 2.9-12
 - backport fix for NetworkManager-ci failures with openssl-3.0.0
 
 * Thu Jul 22 2021 Fedora Release Engineering <releng@fedoraproject.org> - 2.9-11