diff --git a/unbound-1.13.1-rh1991005.patch b/unbound-1.13.1-rh1991005.patch
new file mode 100644
index 0000000..01264ca
--- /dev/null
+++ b/unbound-1.13.1-rh1991005.patch
@@ -0,0 +1,15 @@
+diff --git a/smallapp/unbound-control.c b/smallapp/unbound-control.c
+index d58f1b2..5bfe15b 100644
+--- a/smallapp/unbound-control.c
++++ b/smallapp/unbound-control.c
+@@ -492,9 +492,7 @@ static void ssl_path_err(const char* s, const char *path)
+ {
+ 	unsigned long err;
+ 	err = ERR_peek_error();
+-	if (ERR_GET_LIB(err) == ERR_LIB_SYS &&
+-		(ERR_GET_FUNC(err) == SYS_F_FOPEN ||
+-		 ERR_GET_FUNC(err) == SYS_F_FREAD) ) {
++	if (ERR_GET_LIB(err) == ERR_LIB_SYS) {
+ 		fprintf(stderr, "error: %s\n%s: %s\n",
+ 			s, path, ERR_reason_error_string(err));
+ 		exit(1);
diff --git a/unbound.spec b/unbound.spec
index edae57f..72ce445 100644
--- a/unbound.spec
+++ b/unbound.spec
@@ -37,7 +37,7 @@
 Summary: Validating, recursive, and caching DNS(SEC) resolver
 Name: unbound
 Version: 1.13.1
-Release: 8%{?extra_version:.%{extra_version}}%{?dist}
+Release: 9%{?extra_version:.%{extra_version}}%{?dist}
 License: BSD
 Url: https://nlnetlabs.nl/projects/unbound/
 Source: https://nlnetlabs.nl/downloads/%{name}/%{name}-%{version}%{?extra_version}.tar.gz
@@ -62,6 +62,7 @@ Source19: http://keys.gnupg.net/pks/lookup?op=get&search=0x9F6F1C2D7E045F8D#/wou
 
 # rhbz#1952814 upstream PR https://github.com/NLnetLabs/unbound/pull/415/files
 Patch1: unbound-1.13.1-rh1952814.patch
+Patch2: unbound-1.13.1-rh1991005.patch
 
 BuildRequires: gcc, make
 BuildRequires: flex, openssl-devel
@@ -460,6 +461,10 @@ popd
 %attr(0644,root,root) %config %{_sysconfdir}/%{name}/root.key
 
 %changelog
+* Tue Aug 10 2021 Artem Egorenkov <aegorenk@redhat.com> - 1.13.1-9
+- Don't use delted OpenSSL macroses
+- Resolves: rhbz#1991005
+
 * Tue Aug 10 2021 Mohan Boddu <mboddu@redhat.com> - 1.13.1-8
 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
   Related: rhbz#1991688