diff --git a/SOURCES/rsyslog-0.11.4-rhbz1842817-crypto-compliance.patch b/SOURCES/rsyslog-0.11.4-rhbz1842817-crypto-compliance.patch
new file mode 100644
index 0000000..235623e
--- /dev/null
+++ b/SOURCES/rsyslog-0.11.4-rhbz1842817-crypto-compliance.patch
@@ -0,0 +1,13 @@
+diff -up librdkafka-0.11.4/src/rdkafka_conf.c.orig librdkafka-0.11.4/src/rdkafka_conf.c
+--- librdkafka-0.11.4/src/rdkafka_conf.c.orig	2021-11-01 18:29:29.669679125 +0100
++++ librdkafka-0.11.4/src/rdkafka_conf.c	2021-11-01 18:30:21.007126511 +0100
+@@ -468,7 +468,8 @@ static const struct rd_kafka_property rd
+ 	  "encryption, MAC and key exchange algorithm used to negotiate the "
+ 	  "security settings for a network connection using TLS or SSL network "
+ 	  "protocol. See manual page for `ciphers(1)` and "
+-	  "`SSL_CTX_set_cipher_list(3)."
++	  "`SSL_CTX_set_cipher_list(3).",
++	  .sdef = "PROFILE=SYSTEM"
+ 	},
+ 	{ _RK_GLOBAL, "ssl.key.location", _RK_C_STR,
+ 	  _RK(ssl.key_location),
diff --git a/SPECS/librdkafka.spec b/SPECS/librdkafka.spec
index 7fb83e5..86a19c0 100644
--- a/SPECS/librdkafka.spec
+++ b/SPECS/librdkafka.spec
@@ -1,6 +1,6 @@
 Name:		librdkafka
 Version:	0.11.4
-Release:	1%{?dist}
+Release:	3%{?dist}
 Summary:	The Apache Kafka C library
 
 Group:		Development/Libraries
@@ -15,7 +15,8 @@ BuildRequires:  openssl-devel
 BuildRequires:  cyrus-sasl-devel
 BuildRequires:  lz4-devel
 
-Patch1: librdkafka-python3.patch 
+Patch1: librdkafka-python3.patch
+Patch2: rsyslog-0.11.4-rhbz1842817-crypto-compliance.patch
 
 %description
 Librdkafka is a C/C++ library implementation of the Apache Kafka protocol,
@@ -39,6 +40,7 @@ using librdkafka.
 %setup -q
 
 %patch1 -p1 -b .python3
+%patch2 -p1 -b .crypto-compliance
 
 %build
 %configure --enable-lz4 \
@@ -75,6 +77,13 @@ find %{buildroot} -name '*.a' -delete -print
 
 
 %changelog
+* Mon Nov 01 2021 Attila Lakatos <alakatos@redhat.com> - 0.11.4-3
+- Set SSL_CTX_set_cipher_list to use system-wide crypto policies
+  resolves: rhbz#1842817
+
+* Mon Jun 03 2019 Radovan Sroka <rsroka@redhat.com> - 0.11.4-2
+- rebuild
+
 * Fri Feb 08 2019 Jiri Vymazal <jvymazal@redhat.com> - 0.11.4-1
 - rebase to v0.11.4 (0.11.5 was breaking rsyslog-kafka)
   resolves: rhbz#1614697