diff --git a/.gitignore b/.gitignore
index 2379e71..fa328f1 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1 +1 @@
-/kronosnet-1.20.tar.xz
+/kronosnet-1.21.tar.xz
diff --git a/kronosnet.spec b/kronosnet.spec
index 0121d9c..c86d7f3 100644
--- a/kronosnet.spec
+++ b/kronosnet.spec
@@ -1,7 +1,7 @@
 ###############################################################################
 ###############################################################################
 ##
-##  Copyright (C) 2012-2019 Red Hat, Inc.  All rights reserved.
+##  Copyright (C) 2012-2021 Red Hat, Inc.  All rights reserved.
 ##
 ##  This copyrighted material is made available to anyone wishing to use,
 ##  modify, copy, or redistribute it subject to the terms and conditions
@@ -36,8 +36,8 @@
 
 Name: kronosnet
 Summary: Multipoint-to-Multipoint VPN daemon
-Version: 1.20
-Release: 2%{?dist}
+Version: 1.21
+Release: 1%{?dist}
 License: GPLv2+ and LGPLv2+
 URL: https://kronosnet.org
 Source0: https://kronosnet.org/releases/%{name}-%{version}.tar.xz
@@ -167,9 +167,6 @@ find %{buildroot} -name "*.a" -exec rm {} \;
 # remove libtools leftovers
 find %{buildroot} -name "*.la" -exec rm {} \;
 
-# remove init scripts
-rm -rf %{buildroot}/etc/init.d
-
 # remove docs
 rm -rf %{buildroot}/usr/share/doc/kronosnet
 
@@ -436,6 +433,14 @@ Requires: libknet1%{_isa} = %{version}-%{release}
 %endif
 
 %changelog
+* Tue Apr 28 2021 Fabio M. Di Nitto <fdinitto@redhat.com> - 1.21-1
+- New upstream release
+- Update to openssl 3.0alpha13
+- Drop -rpath usage from libknet
+- Various libnozzle fixes
+- API: validate handles for public api calls to avoid crashes
+- Test suite improvements to speed up testing
+
 * Tue Jan 26 2021 Fedora Release Engineering <releng@fedoraproject.org> - 1.20-2
 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
 
diff --git a/sources b/sources
index a6918e3..b1eb06b 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (kronosnet-1.20.tar.xz) = deda1fe563a674853ffa87ec8dc5f8b5c8b145362cf13a6f18bb21620d6f1de99676efb02b96c2562a1d39c024f3dd62946b941620a43ce5e8ae3f43eaf4dd0d
+SHA512 (kronosnet-1.21.tar.xz) = 21c40fe889dca76b676ab74cb62f83d929035c47a9f04b37cb2aaab1ea97325a20939fe34f079cf4838380328d130ad698414308381252a449d6029389b1f43f