diff --git a/qca.spec b/qca.spec
index 6ee4bbf..7eef2a0 100644
--- a/qca.spec
+++ b/qca.spec
@@ -5,14 +5,14 @@
 Name:    qca
 Summary: Qt Cryptographic Architecture
 Version: 2.1.3
-Release: 1%{?dist}
+Release: 2%{?dist}
 
 License: LGPLv2+
 URL:     https://cgit.kde.org/qca.git
 #Source0: http://download.kde.org/stable/qca/%{version}/src/qca-%{version}.tar.xz
 #Source0: https://cgit.kde.org/qca.git/snapshot/qca-%{version}.tar.xz
 ## git archive v2.1.3 --prefix=qca-2.1.3/ | xz -9 > ../qca-2.1.3.tar.xz
-Source0: qca-%{version}.tar.xz
+Source0: http://download.kde.org/stable/qca/%{version}/src/qca-%{version}.tar.xz
 
 ## upstream patches
 
@@ -375,6 +375,9 @@ make test ARGS="--timeout 60 --output-on-failure" -C %{_target_platform}-qt5
 
 
 %changelog
+* Fri Feb 17 2017 Rex Dieter <rdieter@fedoraproject.org> - 2.1.3-2
+- use upstream tarball
+
 * Mon Feb 06 2017 Rex Dieter <rdieter@fedoraproject.org> - 2.1.3-1
 - qca-2.1.3 (#1419662)
 
diff --git a/sources b/sources
index 83bcc19..bb95a62 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (qca-2.1.3.tar.xz) = 24ca1212336fb78e1502bb4a7536e967e53581c8a9bcfcde9f5cc9bd70067a1241df7f089978ccea906ed6a456c928d96ae2ac93432f4e839677c1cba880554f
+SHA512 (qca-2.1.3.tar.xz) = 0aec277e0695da2e45298f0a9006213829fe4c449a79969e472947db54f45000ba6e22361b782465bdc03f269b7301d318c843f5a83db459a118e58a03f3116a