diff --git a/zarafa.spec b/zarafa.spec
index b08c3e0..410e9f8 100644
--- a/zarafa.spec
+++ b/zarafa.spec
@@ -311,7 +311,7 @@ Requires:           httpd, php-mapi = %{version}-%{release}
 %if 0%{?rhel} == 5
 Requires:           mod_php >= 4.3
 %else
-Requires:           php >= 4.3
+Requires:           php >= 4.3, php-openssl
 %endif
 %if 0%{?rhel}%{?fedora} > 5
 BuildArch:          noarch
@@ -522,7 +522,7 @@ rm -f $RPM_BUILD_ROOT%{_datadir}/%{name}-webaccess/{.htaccess,%{name}-webaccess.
 
 # Remove flash-based multi-attachment upload (missing source)
 %if %{no_multiupload}
-sed '143,150d' $RPM_BUILD_ROOT%{_sysconfdir}/%{name}/webaccess/config.php > \
+sed '148,155d' $RPM_BUILD_ROOT%{_sysconfdir}/%{name}/webaccess/config.php > \
     $RPM_BUILD_ROOT%{_sysconfdir}/%{name}/webaccess/config.php.new
 touch -c -r $RPM_BUILD_ROOT%{_sysconfdir}/%{name}/webaccess/config.php{,.new}
 mv -f $RPM_BUILD_ROOT%{_sysconfdir}/%{name}/webaccess/config.php{.new,}
@@ -676,6 +676,13 @@ fi
 
 %postun client -p /sbin/ldconfig
 
+%post webaccess
+if [ -f %{_sysconfdir}/%{name}/webaccess/config.php ]; then
+    sed -e "s/\(define('PASSWORD_KEY','\)a75356b0d1b81b7\(');\)/\1$(cat /dev/urandom | tr -dc 'a-zA-Z0-9' | fold -w 16 | head -n 1)\2/" \
+        -e "s/\(define('PASSWORD_IV','\)b3f5a483\(');\)/\1$(cat /dev/urandom | tr -dc 'a-zA-Z0-9' | fold -w 8 | head -n 1)\2/" \
+        -i %{_sysconfdir}/%{name}/webaccess/config.php
+fi
+
 %postun -n libmapi -p /sbin/ldconfig
 
 %files