diff --git a/ldns.spec b/ldns.spec
index 8132098..c30bc85 100644
--- a/ldns.spec
+++ b/ldns.spec
@@ -8,7 +8,7 @@
 Summary: Low-level DNS(SEC) library with API
 Name: ldns
 Version: 1.6.16
-Release: 3%{?dist}
+Release: 4%{?dist}
 License: BSD
 Url: http://www.nlnetlabs.nl/%{name}/
 Source: http://www.nlnetlabs.nl/downloads/%{name}/%{name}-%{version}.tar.gz
@@ -67,16 +67,19 @@ This package contains documentation for the ldns library
 %configure --disable-rpath --disable-static --disable-gost --disable-ecdsa \
  --with-ca-file=/etc/pki/tls/certs/ca-bundle.trust.crt --with-ca-path=/etc/pki/tls/certs/ \
 %if %{with_python}
- --with-pyldns
+ --with-pyldns \
 %endif
+  --with-trust-anchor=%{_sharedstatedir}/unbound/root.key
 
 (cd drill ; %configure --disable-rpath --disable-static --disable-gost \
    --disable-ecdsa \
-   --with-ca-file=/etc/pki/tls/certs/ca-bundle.trust.crt --with-ca-path=/etc/pki/tls/certs/
+   --with-ca-file=/etc/pki/tls/certs/ca-bundle.trust.crt --with-ca-path=/etc/pki/tls/certs/ \
+   --with-trust-anchor=%{_sharedstatedir}/unbound/root.key
 )
 (cd examples ; %configure --disable-rpath --disable-static --disable-gost \
    --disable-ecdsa \
-   --with-ca-file=/etc/pki/tls/certs/ca-bundle.trust.crt --with-ca-path=/etc/pki/tls/certs/
+   --with-ca-file=/etc/pki/tls/certs/ca-bundle.trust.crt --with-ca-path=/etc/pki/tls/certs/ \
+   --with-trust-anchor=%{_sharedstatedir}/unbound/root.key
 )
 
 make %{?_smp_mflags} 
@@ -137,6 +140,9 @@ rm -rf %{buildroot}
 %postun -p /sbin/ldconfig
 
 %changelog
+* Mon Jun 03 2013 Paul Wouters <pwouters@redhat.com> - 1.6.16-4
+- Use /var/lib/unbound/root.key for --with-trust-anchor
+
 * Fri Apr 19 2013 Adam Tkac <atkac redhat com> - 1.6.16-3
 - make package multilib clean