diff --git a/oqsprovider.spec b/oqsprovider.spec
index 41c28bc..88393e1 100644
--- a/oqsprovider.spec
+++ b/oqsprovider.spec
@@ -2,7 +2,7 @@
 %global liboqs_min_version 0.12.0-1
 Name:       oqsprovider
 Version:    %{oqs_version}
-Release:    3%{?dist}
+Release:    4%{?dist}
 Summary:    oqsprovider is an OpenSSL provider for quantum-safe algorithms based on liboqs
 
 License:    Apache-2.0 AND MIT
@@ -36,7 +36,7 @@ provided via the encode/decode mechanism and X.509 data structures.
 %autosetup -T -b 0 -p1 -n oqs-provider-%{oqs_version}
 
 %build
-%cmake -GNinja -DCMAKE_BUILD_TYPE=Debug -DOQS_KEM_ENCODERS=ON -LAH ..
+%cmake -GNinja -DCMAKE_BUILD_TYPE=Debug -DOQS_KEM_ENCODERS=ON -DNOPUBKEY_IN_PRIVKEY=ON -LAH ..
 %cmake_build
 
 %check
@@ -58,6 +58,10 @@ install -m644 '%{SOURCE1}' \
 %config(noreplace) %{_sysconfdir}/pki/tls/openssl.d/oqsprovider.conf
 
 %changelog
+* Wed Feb 05 2025 Dmitry Belyavskiy <dbelyavs@redhat.com> - 0.8.0-4
+- Fix private key format
+  Related: RHEL-65422
+
 * Fri Jan 03 2025 Dmitry Belyavskiy <dbelyavs@redhat.com> - 0.8.0-3
 - Enable mlkem1024 hybrid (upstream backport)
   Resolves: RHEL-70817