diff --git a/0001-tpm12-add-missing-openssl-includes.patch b/0001-tpm12-add-missing-openssl-includes.patch
new file mode 100644
index 0000000000000000000000000000000000000000..7393a5e979e409db8d2dcf7c22de3ec999d473aa
--- /dev/null
+++ b/0001-tpm12-add-missing-openssl-includes.patch
@@ -0,0 +1,27 @@
+From 36aab2de0671e4e4068daf46abcff0d63d8d400c Mon Sep 17 00:00:00 2001
+From: orbea <orbea@riseup.net>
+Date: Wed, 13 Mar 2024 10:01:49 -0700
+Subject: [PATCH] tpm12: add missing openssl includes
+
+This fixes the build with LibreSSL 3.9.0 where many implicit
+declarations for BN_, EVP_ and RSA_ functions occur which were
+implicitly included before.
+
+Signed-off-by: orbea <orbea@riseup.net>
+---
+ src/tpm12/tpm_crypto.c | 2 ++
+ 1 file changed, 2 insertions(+)
+
+diff --git a/src/tpm12/tpm_crypto.c b/src/tpm12/tpm_crypto.c
+index bcbaa7fc2..628e27cc2 100644
+--- a/src/tpm12/tpm_crypto.c
++++ b/src/tpm12/tpm_crypto.c
+@@ -48,6 +48,8 @@
+ #include <openssl/rand.h>
+ #include <openssl/sha.h>
+ #include <openssl/engine.h>
++#include <openssl/evp.h>
++#include <openssl/rsa.h>
+ 
+ #include "tpm_cryptoh.h"
+ #include "tpm_debug.h"
diff --git a/libtpms.spec b/libtpms.spec
index 8e626fad3c5f40a62b91decebccab6b75b42f2af..48fa86d7d061d676dbb4b7bb6d447f66e2c4de66 100644
--- a/libtpms.spec
+++ b/libtpms.spec
@@ -2,7 +2,7 @@
 
 %define name      libtpms
 %define version   0.9.6
-%define release   1
+%define release   2
 
 # Valid crypto subsystems are 'freebl' and 'openssl'
 %if "%{?crypto_subsystem}" == ""
@@ -23,6 +23,7 @@ Source0:        %{url}/archive/v%{version}/%{name}-%{version}.tar.gz
 Provides:       libtpms-%{crypto_subsystem} = %{version}-%{release}
 
 Patch0: 0000-tpm2-add-SM3-and-SM4-support.patch
+Patch1: 0001-tpm12-add-missing-openssl-includes.patch
 
 %if "%{crypto_subsystem}" == "openssl"
 BuildRequires:  openssl-devel
@@ -119,6 +120,9 @@ rm -f $RPM_BUILD_ROOT%{_libdir}/libtpms.la
 %postun -p /sbin/ldconfig
 
 %changelog
+* Tue Jul 16 2024 zhangxingrong-<zhangxingrong@uniontech.cn> - 0.9.6-2
+- tpm12: add missing openssl includes
+
 * Tue Jan 16 2024 zhangxingrong <zhangxingrong@uniontech.com> - 0.9.6-1
 - upgrade to 0.9.6