diff --git a/IO-Socket-SSL-2.019-use-system-default-SSL-version.patch b/IO-Socket-SSL-2.020-use-system-default-SSL-version.patch
similarity index 94%
rename from IO-Socket-SSL-2.019-use-system-default-SSL-version.patch
rename to IO-Socket-SSL-2.020-use-system-default-SSL-version.patch
index c29e108..d460cf9 100644
--- a/IO-Socket-SSL-2.019-use-system-default-SSL-version.patch
+++ b/IO-Socket-SSL-2.020-use-system-default-SSL-version.patch
@@ -9,7 +9,7 @@
      SSL_verify_callback => undef,
      SSL_verifycn_scheme => undef,  # fallback cn verification
      SSL_verifycn_publicsuffix => undef,  # fallback default list verification
-@@ -2143,7 +2143,7 @@ sub new {
+@@ -2167,7 +2167,7 @@ sub new {
      $ssl_op |= &Net::SSLeay::OP_SINGLE_DH_USE;
      $ssl_op |= &Net::SSLeay::OP_SINGLE_ECDH_USE if $can_ecdh;
  
@@ -20,7 +20,7 @@
  	or croak("invalid SSL_version specified");
 --- lib/IO/Socket/SSL.pod
 +++ lib/IO/Socket/SSL.pod
-@@ -934,11 +934,12 @@ protocol to the specified version.
+@@ -940,11 +940,12 @@ protocol to the specified version.
  All values are case-insensitive.  Instead of 'TLSv1_1' and 'TLSv1_2' one can
  also use 'TLSv11' and 'TLSv12'.  Support for 'TLSv1_1' and 'TLSv1_2' requires
  recent versions of Net::SSLeay and openssl.
diff --git a/IO-Socket-SSL-2.018-use-system-default-cipher-list.patch b/IO-Socket-SSL-2.020-use-system-default-cipher-list.patch
similarity index 97%
rename from IO-Socket-SSL-2.018-use-system-default-cipher-list.patch
rename to IO-Socket-SSL-2.020-use-system-default-cipher-list.patch
index 8468bc9..dfb655b 100644
--- a/IO-Socket-SSL-2.018-use-system-default-cipher-list.patch
+++ b/IO-Socket-SSL-2.020-use-system-default-cipher-list.patch
@@ -56,7 +56,7 @@
  # set values inside _init to work with perlcc, RT#95452
 --- lib/IO/Socket/SSL.pod
 +++ lib/IO/Socket/SSL.pod
-@@ -960,12 +960,8 @@ documentation (L<http://www.openssl.org/
+@@ -966,12 +966,8 @@ documentation (L<http://www.openssl.org/
  for more details.
  
  Unless you fail to contact your peer because of no shared ciphers it is
diff --git a/perl-IO-Socket-SSL.spec b/perl-IO-Socket-SSL.spec
index bf9a6ce..162d80f 100644
--- a/perl-IO-Socket-SSL.spec
+++ b/perl-IO-Socket-SSL.spec
@@ -1,13 +1,13 @@
 Name:		perl-IO-Socket-SSL
-Version:	2.019
+Version:	2.020
 Release:	1%{?dist}
 Summary:	Perl library for transparent SSL
 Group:		Development/Libraries
 License:	GPL+ or Artistic
 URL:		http://search.cpan.org/dist/IO-Socket-SSL/
 Source0:	http://search.cpan.org/CPAN/authors/id/S/SU/SULLR/IO-Socket-SSL-%{version}.tar.gz
-Patch0:		IO-Socket-SSL-2.018-use-system-default-cipher-list.patch
-Patch1:		IO-Socket-SSL-2.019-use-system-default-SSL-version.patch
+Patch0:		IO-Socket-SSL-2.020-use-system-default-cipher-list.patch
+Patch1:		IO-Socket-SSL-2.020-use-system-default-SSL-version.patch
 BuildRoot:	%{_tmppath}/%{name}-%{version}-%{release}-root-%(id -nu)
 BuildArch:	noarch
 # Module Build
@@ -115,6 +115,13 @@ rm -rf %{buildroot}
 %{_mandir}/man3/IO::Socket::SSL::Utils.3*
 
 %changelog
+* Mon Sep 21 2015 Paul Howarth <paul@city-fan.org> - 2.020-1
+- Update to 2.020
+  - Support multiple directories in SSL_ca_path (CPAN RT#106711); directories
+    can be given as array or as string with a path separator
+  - Typos fixed (https://github.com/noxxi/p5-io-socket-ssl/pull/34)
+- Update patches as needed
+
 * Tue Sep  1 2015 Paul Howarth <paul@city-fan.org> - 2.019-1
 - Update to 2.019
   - Work around different behavior of getnameinfo from Socket and Socket6 by
diff --git a/sources b/sources
index ac87108..eec0ed7 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-c3a626bcb99ac9ab3cdf7828f106ffb7  IO-Socket-SSL-2.019.tar.gz
+dc0f5992492786a0bde79d2f8fb00cc1  IO-Socket-SSL-2.020.tar.gz