diff --git a/libprelude-4.0.0-fix_compatibility_gnutls_3_6.patch b/libprelude-4.0.0-fix_compatibility_gnutls_3_6.patch
new file mode 100644
index 0000000..04ade87
--- /dev/null
+++ b/libprelude-4.0.0-fix_compatibility_gnutls_3_6.patch
@@ -0,0 +1,20 @@
+--- ./prelude-admin/tls-register.c	2017-07-17 12:03:05.762000000 +0200
++++ ./prelude-admin/tls-register.c2	2017-10-09 09:37:26.874129389 +0200
+@@ -409,7 +409,7 @@
+                 goto err;
+         }
+ 
+-        ret = gnutls_x509_crt_sign(crt, ca_crt, ca_key);
++        ret = gnutls_x509_crt_sign2(crt, ca_crt, ca_key, GNUTLS_DIG_SHA256, 0);
+         if ( ret < 0 ) {
+                 fprintf(stderr, "error signing certificate: %s.\n", gnutls_strerror(ret));
+                 goto err;
+@@ -445,7 +445,7 @@
+         gnutls_x509_crt_set_ca_status(crt, 1);
+         gnutls_x509_crt_set_key_usage(crt, usage);
+ 
+-        ret = gnutls_x509_crt_sign(crt, crt, key);
++        ret = gnutls_x509_crt_sign2(crt, crt, key, GNUTLS_DIG_SHA256, 0);
+         if ( ret < 0 ) {
+                 fprintf(stderr, "error self-signing certificate: %s.\n", gnutls_strerror(ret));
+                 gnutls_x509_crt_deinit(crt);
diff --git a/libprelude.spec b/libprelude.spec
index d0d1c54..72b848a 100644
--- a/libprelude.spec
+++ b/libprelude.spec
@@ -7,7 +7,7 @@
 
 Name:           libprelude
 Version:        4.0.0
-Release:        2%{?dist}
+Release:        3%{?dist}
 Summary:        Secure Connections between all Sensors and the Prelude Manager
 # Prelude is GPL-2.0+
 # libmissing is LGPL-2.1+
@@ -31,6 +31,8 @@ Patch5:         libprelude-4.0.0-fix_pthread_atfork.patch
 Patch6:         libprelude-4.0.0-fix_prelude_tests_timer.patch
 # https://www.prelude-siem.org/issues/908
 Patch7:         libprelude-4.0.0-fix-gtk-doc.patch
+# https://www.prelude-siem.org/issues/911
+Patch8:         libprelude-4.0.0-fix_compatibility_gnutls_3_6.patch
 BuildRequires:  bison
 BuildRequires:  chrpath
 BuildRequires:  flex
@@ -239,6 +241,9 @@ make check
 %doc AUTHORS ChangeLog README NEWS
 
 %changelog
+* Mon Oct 9 2017 Thomas Andrejak <thomas.andrejak@gmail.com> - 4.0.0-3
+- Fix compatibility with GnuTLS 3.6
+
 * Wed Sep 27 2017 Thomas Andrejak <thomas.andrejak@gmail.com> - 4.0.0-2
 - Fix compatibility with gtk-doc-1.26