diff --git a/.gitignore b/.gitignore
index 0ccf83c..7a32ee7 100644
--- a/.gitignore
+++ b/.gitignore
@@ -50,3 +50,4 @@
 /requests-v2.27.0.tar.gz
 /requests-v2.27.1.tar.gz
 /requests-v2.28.1.tar.gz
+/requests-v2.28.2.tar.gz
diff --git a/python-requests.spec b/python-requests.spec
index 238feae..662f94e 100644
--- a/python-requests.spec
+++ b/python-requests.spec
@@ -9,8 +9,8 @@
 
 
 Name:           python-requests
-Version:        2.28.1
-Release:        4%{?dist}
+Version:        2.28.2
+Release:        1%{?dist}
 Summary:        HTTP library, written in Python, for human beings
 
 License:        ASL 2.0
@@ -18,7 +18,7 @@ URL:            https://pypi.io/project/requests
 Source0:        https://github.com/requests/requests/archive/v%{version}/requests-v%{version}.tar.gz
 # Explicitly use the system certificates in ca-certificates.
 # https://bugzilla.redhat.com/show_bug.cgi?id=904614
-Patch0:         requests-2.28.1-system-certs.patch
+Patch0:         system-certs.patch
 
 BuildArch:      noarch
 
@@ -93,6 +93,9 @@ sed -i 's/ --doctest-modules//' pyproject.toml
 
 
 %changelog
+* Wed Feb 01 2023 Lumír Balhar <lbalhar@redhat.com> - 2.28.2-1
+- Update to 2.28.2 (rhbz#2160527)
+
 * Fri Jan 20 2023 Fedora Release Engineering <releng@fedoraproject.org> - 2.28.1-4
 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
 
diff --git a/requests-2.28.1-system-certs.patch b/requests-2.28.1-system-certs.patch
deleted file mode 100644
index 58bd6b3..0000000
--- a/requests-2.28.1-system-certs.patch
+++ /dev/null
@@ -1,37 +0,0 @@
---- requests-2.28.1/requests/certs.py	2022-07-12 13:55:25.378079641 -0700
-+++ requests-2.28.1/requests/certs.py.new	2022-07-12 13:57:03.834621295 -0700
-@@ -9,8 +9,13 @@
- If you are packaging Requests, e.g., for a Linux distribution or a managed
- environment, you can change the definition of where() to return a separately
- packaged CA bundle.
-+
-+This Fedora-patched package returns "/etc/pki/tls/certs/ca-bundle.crt" provided
-+by the ca-certificates RPM package.
- """
--from certifi import where
-+def where():
-+    """Return the absolute path to the system CA bundle."""
-+    return '/etc/pki/tls/certs/ca-bundle.crt'
- 
- if __name__ == "__main__":
-     print(where())
---- requests-2.28.1/setup.py	2022-06-29 08:09:11.000000000 -0700
-+++ requests-2.28.1/setup.py.new	2022-07-12 13:58:33.830116402 -0700
-@@ -62,7 +62,6 @@
-     "charset_normalizer>=2,<3",
-     "idna>=2.5,<4",
-     "urllib3>=1.21.1,<1.27",
--    "certifi>=2017.4.17",
- ]
- test_requirements = [
-     "pytest-httpbin==0.0.7",
---- requests-2.28.1/setup.cfg	2022-06-29 08:09:11.000000000 -0700
-+++ requests-2.28.1/setup.cfg.new	2022-07-12 13:58:19.619038220 -0700
-@@ -4,7 +4,6 @@
-     socks
-     use_chardet_on_py3
- requires-dist =
--    certifi>=2017.4.17
-     charset_normalizer>=2,<3
-     idna>=2.5,<4
-     urllib3>=1.21.1,<1.27
diff --git a/sources b/sources
index 6918890..9f2da1e 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (requests-v2.28.1.tar.gz) = caed2d08340c79af9448eefaa1df796f9112a7c8da30b218d5f342326a9629d95928c0978b9600e4bd7f56a297ef41afb088af390738be431b91b8c7429e741b
+SHA512 (requests-v2.28.2.tar.gz) = 88c5a92ea51cd18e7edd49a6259d7b56bc0c17f86067f796b5f668ed35202b8bc1395e4811ee2089350e08893dcd304c9801dbf087abfaff1d14859e31bce8ac
diff --git a/system-certs.patch b/system-certs.patch
new file mode 100644
index 0000000..1778958
--- /dev/null
+++ b/system-certs.patch
@@ -0,0 +1,57 @@
+From f21606c102368ad7a6e8bcab5a0c65dcddbbf9e5 Mon Sep 17 00:00:00 2001
+From: Lumir Balhar <lbalhar@redhat.com>
+Date: Thu, 19 Jan 2023 17:35:02 +0100
+Subject: [PATCH] system certs
+
+---
+ requests/certs.py | 7 ++++++-
+ setup.cfg         | 1 -
+ setup.py          | 1 -
+ 3 files changed, 6 insertions(+), 3 deletions(-)
+
+diff --git a/requests/certs.py b/requests/certs.py
+index 1f30a45..9224f62 100644
+--- a/requests/certs.py
++++ b/requests/certs.py
+@@ -9,8 +9,13 @@ only one — the one from the certifi package.
+ If you are packaging Requests, e.g., for a Linux distribution or a managed
+ environment, you can change the definition of where() to return a separately
+ packaged CA bundle.
++
++This Fedora-patched package returns "/etc/pki/tls/certs/ca-bundle.crt" provided
++by the ca-certificates RPM package.
+ """
+-from certifi import where
++def where():
++    """Return the absolute path to the system CA bundle."""
++    return '/etc/pki/tls/certs/ca-bundle.crt'
+ 
+ if __name__ == "__main__":
+     print(where())
+diff --git a/setup.cfg b/setup.cfg
+index bf21c81..906c0f1 100644
+--- a/setup.cfg
++++ b/setup.cfg
+@@ -4,7 +4,6 @@ provides-extra =
+     socks
+     use_chardet_on_py3
+ requires-dist =
+-    certifi>=2017.4.17
+     charset_normalizer>=2,<4
+     idna>=2.5,<4
+     urllib3>=1.21.1,<1.27
+diff --git a/setup.py b/setup.py
+index 092b40d..c6c0ad5 100755
+--- a/setup.py
++++ b/setup.py
+@@ -62,7 +62,6 @@ requires = [
+     "charset_normalizer>=2,<4",
+     "idna>=2.5,<4",
+     "urllib3>=1.21.1,<1.27",
+-    "certifi>=2017.4.17",
+ ]
+ test_requirements = [
+     "pytest-httpbin==0.0.7",
+-- 
+2.39.0
+