diff --git a/perl-Net-SSLeay.spec b/perl-Net-SSLeay.spec
index 8c847fc..940fc6d 100644
--- a/perl-Net-SSLeay.spec
+++ b/perl-Net-SSLeay.spec
@@ -1,5 +1,5 @@
 Name:		perl-Net-SSLeay
-Version:	1.61
+Version:	1.63
 Release:	1%{?dist}
 Summary:	Perl extension for using OpenSSL
 Group:		Development/Libraries
@@ -23,6 +23,7 @@ BuildRequires:	perl(Socket)
 BuildRequires:	perl(XSLoader)
 # =========== Test Suite =============================
 BuildRequires:	perl(File::Spec)
+BuildRequires:	perl(HTTP::Tiny)
 BuildRequires:	perl(IO::Handle)
 BuildRequires:	perl(Test::Exception)
 BuildRequires:	perl(Test::More) >= 0.61
@@ -87,6 +88,19 @@ rm -rf %{buildroot}
 %{_mandir}/man3/Net::SSLeay::Handle.3pm*
 
 %changelog
+* Mon May 19 2014 Paul Howarth <paul@city-fan.org> - 1.63-1.0.cf
+- Update to 1.63
+  - Improvements to OCSP support: it turns out that some CAs (like Verisign)
+    sign the OCSP response with the CA we have in the trust store and don't
+    attach this certifcate in the response, but OpenSSL by itself only
+    considers the certificates included in the response and
+    SSL_OCSP_response_verify added the certificates in the chain too, so now
+    we also add the trusted CA from the store which signed the lowest chain
+    certificate, at least if we could not verify the OCSP response without
+    doing it
+  - Fixed some compiler warnings
+- BR: perl(HTTP::Tiny) for test suite
+
 * Mon May 12 2014 Paul Howarth <paul@city-fan.org> - 1.61-1
 - Update to 1.61
   - Fixed a typo in an error message
diff --git a/sources b/sources
index 866a52c..c373168 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-95f73786e0a3935232d278f8530b1895  Net-SSLeay-1.61.tar.gz
+9b95548e1ed415f8aeed0e004fa68226  Net-SSLeay-1.63.tar.gz