diff --git a/.gitignore b/.gitignore
index f2c7a6e..87bb5fc 100644
--- a/.gitignore
+++ b/.gitignore
@@ -31,3 +31,4 @@
 /libreswan-3.28.tar.gz
 /libreswan-3.29.tar.gz
 /libreswan-3.30.tar.gz
+/libreswan-3.31.tar.gz
diff --git a/libreswan.spec b/libreswan.spec
index a6455d6..c2f0cca 100644
--- a/libreswan.spec
+++ b/libreswan.spec
@@ -33,7 +33,7 @@
 Name: libreswan
 Summary: Internet Key Exchange (IKEv1 and IKEv2) implementation for IPsec
 # version is generated in the release script
-Version: 3.30
+Version: 3.31
 Release: %{?prever:0.}1%{?prever:.%{prever}}%{?dist}
 License: GPLv2
 Url: https://libreswan.org/
@@ -211,6 +211,9 @@ export NSS_DISABLE_HW_GCM=1
 %{_libdir}/fipscheck/pluto.hmac
 
 %changelog
+* Tue Mar 03 2020 Paul Wouters <pwouters@redhat.com> - 3.31-1
+- Resolves: rhbz#1809770 libreswan-3.31 is available (fixes rekey regression)
+
 * Fri Feb 14 2020 Paul Wouters <pwouters@redhat.com> - 3.30-1
 - Resolves: rhbz#1802896 libreswan-3.30 is available
 - Resolves: rhbz#1799598 libreswan: FTBFS in Fedora rawhide/f32
diff --git a/sources b/sources
index 9358c0a..64ae288 100644
--- a/sources
+++ b/sources
@@ -1,4 +1,4 @@
 SHA512 (ikev1_dsa.fax.bz2) = 627cbac14248bd68e8d22fbca247668a7749ef0c2e41df8d776d62df9a21403d3a246c0bd82c3faedce62de90b9f91a87f753e17b056319000bba7d2038461ac
 SHA512 (ikev1_psk.fax.bz2) = 1b2daec32edc56b410c036db2688c92548a9bd9914994bc7e555b301dd6db4497a6b3e89dc12ddf36826ae90b40fcde501a5a45c0d59098e07839073d219d467
 SHA512 (ikev2.fax.bz2) = 0d3748d1bd574f6f1f3e4db847eca126ce649566ea710ef227426f433122752b80d1d6b8acf9d0df07b5597c1e45447e3a2fcb3391756e834e8e75f99df8e51e
-SHA512 (libreswan-3.30.tar.gz) = 1ea3505938231bacb762ec13c278b584239660e20994030423f0200ff32fcc0f0a0c74649b1470bbfc1165a762d3b60d0b1c5c56bff81a52415c7666736b5b99
+SHA512 (libreswan-3.31.tar.gz) = edaddeb209c4fb974b16790ba843a41f4f1d269dd28333aa02b820801a222435c2ca5622e77558d1e95970b4ef24a663d9c44ef4ede7ff4e66e1f0d9b6e880d2