diff --git a/perl-IO-Socket-SSL.spec b/perl-IO-Socket-SSL.spec
index b89542c..9e8ff0b 100644
--- a/perl-IO-Socket-SSL.spec
+++ b/perl-IO-Socket-SSL.spec
@@ -1,5 +1,5 @@
 Name:		perl-IO-Socket-SSL
-Version:	2.007
+Version:	2.008
 Release:	1%{?dist}
 Summary:	Perl library for transparent SSL
 Group:		Development/Libraries
@@ -112,6 +112,14 @@ rm -rf %{buildroot}
 %{_mandir}/man3/IO::Socket::SSL::Utils.3*
 
 %changelog
+* Thu Dec 18 2014 Paul Howarth <paul@city-fan.org> - 2.008-1
+- Update to 2.008
+  - Work around recent OCSP verification errors for revoked.grc.com (badly
+    signed OCSP response, Firefox also complains about it) in test
+    t/external/ocsp.t
+  - util/analyze.pl - report more details about preferred cipher for specific
+    TLS versions
+
 * Thu Nov 27 2014 Paul Howarth <paul@city-fan.org> - 2.007-1
 - Update to 2.007
   - Make getline/readline fall back to super class if class is not sslified
diff --git a/sources b/sources
index f634d95..ffb3227 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-0eedd741976b913323acebdd692e6a26  IO-Socket-SSL-2.007.tar.gz
+b4ed0fede4661256dd68f085eb6df021  IO-Socket-SSL-2.008.tar.gz