diff --git a/ldns.spec b/ldns.spec
index a700a43..573976c 100644
--- a/ldns.spec
+++ b/ldns.spec
@@ -26,7 +26,7 @@
 Summary: Low-level DNS(SEC) library with API
 Name: ldns
 Version: 1.7.0
-Release: 2%{?dist}
+Release: 3%{?dist}
 
 License: BSD
 Url: http://www.nlnetlabs.nl/%{name}/
@@ -40,7 +40,7 @@ Group: System Environment/Libraries
 # BuildRequires: automake
 
 BuildRequires: libpcap-devel
-BuildRequires: openssl-devel
+BuildRequires: openssl-devel >= 1.1.0
 BuildRequires: gcc-c++
 BuildRequires: doxygen
 
@@ -235,8 +235,9 @@ rm -rf %{buildroot}
 %postun -p /sbin/ldconfig
 
 %files
-%doc README LICENSE
-%{_libdir}/libldns*so.*
+%doc README
+%license LICENSE
+%{_libdir}/libldns.so.2*
 
 %files utils
 %{_bindir}/drill
@@ -247,8 +248,8 @@ rm -rf %{buildroot}
 %{_mandir}/man1/*
 
 %files devel
-%doc Changelog README
-%{_libdir}/libldns*so
+%doc Changelog
+%{_libdir}/libldns.so
 %{_libdir}/pkgconfig/ldns.pc
 %{_bindir}/ldns-config
 %dir %{_includedir}/ldns
@@ -270,6 +271,11 @@ rm -rf %{buildroot}
 %doc doc
 
 %changelog
+* Sat Mar 11 2017 Rex Dieter <rdieter@fedoraproject.org> - 1.7.0-3
+- explicitly track library soname (so bumps aren't a surprise)
+- use %%license, drop dup'd README in -devel
+- BR: openssl-devel >= 1.1.0 (required for DANE verification)
+
 * Wed Mar 01 2017 Petr Menšík <pemensik@redhat.com> - 1.7.0-2
 - Update to 1.7.0