diff --git a/postfix-3.10.5-config.patch b/postfix-3.10.3-config.patch
similarity index 97%
rename from postfix-3.10.5-config.patch
rename to postfix-3.10.3-config.patch
index c09a76d..dfdd06a 100644
--- a/postfix-3.10.5-config.patch
+++ b/postfix-3.10.3-config.patch
@@ -1,5 +1,5 @@
 diff --git a/conf/main.cf b/conf/main.cf
-index 3687c85..ae3af9e 100644
+index 1d2c8c2..7a91139 100644
 --- a/conf/main.cf
 +++ b/conf/main.cf
 @@ -136,6 +136,10 @@ mail_owner = postfix
@@ -81,13 +81,11 @@ index 3687c85..ae3af9e 100644
  #fallback_transport =
  
  # The luser_relay parameter specifies an optional destination address
-@@ -682,6 +705,43 @@ sample_directory =
+@@ -682,4 +705,41 @@ sample_directory =
  # readme_directory: The location of the Postfix README files.
  #
  readme_directory =
 -inet_protocols = ipv4
- shlib_directory = /usr/lib/postfix/${mail_version}
- meta_directory = /etc/postfix
 +
 +# TLS CONFIGURATION
 +#
diff --git a/postfix-3.9.0-openssl-no-engine.patch b/postfix-3.9.0-openssl-no-engine.patch
new file mode 100644
index 0000000..f19ae39
--- /dev/null
+++ b/postfix-3.9.0-openssl-no-engine.patch
@@ -0,0 +1,15 @@
+diff --git a/src/posttls-finger/posttls-finger.c b/src/posttls-finger/posttls-finger.c
+index b474a40..9f633f7 100644
+--- a/src/posttls-finger/posttls-finger.c
++++ b/src/posttls-finger/posttls-finger.c
+@@ -414,7 +414,9 @@
+ 
+ #ifdef USE_TLS
+ #include <tls_proxy.h>
+-#include <openssl/engine.h>
++#include <openssl/bio.h>
++#include <openssl/ssl.h>
++#include <openssl/x509.h>
+ #endif
+ 
+  /*
diff --git a/postfix.spec b/postfix.spec
index 30811de..d6d9a24 100644
--- a/postfix.spec
+++ b/postfix.spec
@@ -56,8 +56,8 @@
 
 Name: postfix
 Summary: Postfix Mail Transport Agent
-Version: 3.10.7
-Release: 1%{?dist}
+Version: 3.10.3
+Release: 3%{?dist}
 Epoch: 2
 URL: http://www.postfix.org
 License: (IPL-1.0 OR EPL-2.0) AND GPL-2.0-or-later AND BSD-4-Clause-UC
@@ -74,7 +74,7 @@ Requires: findutils
 Requires: policycoreutils
 Provides: MTA smtpd smtpdaemon server(smtp)
 
-Source0: http://ftp.porcupine.org/mirrors/postfix-release/official/%{name}-%{version}.tar.gz
+Source0: ftp://ftp.porcupine.org/mirrors/postfix-release/official/%{name}-%{version}.tar.gz
 Source1: postfix-etc-init.d-postfix
 Source2: postfix.service
 Source3: README-Postfix-SASL-RedHat.txt
@@ -96,7 +96,7 @@ Source101: postfix-pam.conf
 
 # Patches
 
-Patch1: postfix-3.10.5-config.patch
+Patch1: postfix-3.10.3-config.patch
 Patch2: postfix-3.9.0-files.patch
 Patch3: postfix-3.9.0-alternatives.patch
 # probably rhbz#428996
@@ -104,6 +104,8 @@ Patch4: postfix-3.8.0-large-fs.patch
 # rhbz#1931403, sent upstream
 Patch9: pflogsumm-1.1.6-syslog-name-underscore-fix.patch
 Patch11: postfix-3.4.4-chroot-example-fix.patch
+# https://fedoraproject.org/wiki/Changes/OpensslDeprecateEngine
+Patch14: postfix-3.9.0-openssl-no-engine.patch
 
 # Optional patches - set the appropriate environment variables to include
 #                    them when building the package/spec file
@@ -273,6 +275,7 @@ pushd pflogsumm-%{pflogsumm_ver}
 popd
 %endif
 %patch -P11 -p1 -b .chroot-example-fix
+%patch -P14 -p1 -b .openssl-no-engine
 
 # Backport 3.8-20221006 fix for uname -r detection
 sed -i makedefs -e '\@Linux\.@s|345|3456|'
@@ -846,19 +849,6 @@ fi
 %endif
 
 %changelog
-* Fri Jan 02 2026 Jaroslav Škarvada  <jskarvad@redhat.com> - 2:3.10.7-1
-- New version
-  Resolves: rhbz#2417154
-
-* Thu Oct 30 2025 Jaroslav Škarvada  <jskarvad@redhat.com> - 2:3.10.5-1
-- New version
-  Resolves: rhbz#2406450
-- Changed protocol for downloading sources from FTP to HTTP (HTTPS isn't supported)
-
-* Mon Aug 25 2025 Jaroslav Škarvada  <jskarvad@redhat.com> - 2:3.10.4-1
-- New version
-  Resolves: rhbz#2389310
-
 * Wed Aug 06 2025 František Zatloukal <fzatlouk@redhat.com> - 2:3.10.3-3
 - Rebuilt for icu 77.1
 
diff --git a/sources b/sources
index 195284e..d19b631 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
 SHA512 (pflogsumm-1.1.6.tar.gz) = 4581d2120bc17cfb322fda8d293989a2754eb9fa2696e3a1cea9032e85ed6a566e75aea1f628a6c7bbc7b9d6bf47ffeb873f95d71d7cb7f0ee46e27e492cf630
-SHA512 (postfix-3.10.7.tar.gz) = 28d7c05bfd6fb15f906c67cca989c4b47640ec631b640943deb66d91e44a6684deb79af95f0d4ba4dd362d9ba59179e5ed268942384e5e35ba472c91cf366e4c
+SHA512 (postfix-3.10.3.tar.gz) = 457f2d49c0845992b19601fb597422190f7506da5edd66eac1b0387e9adb339a65d3822205b1c4e9243d8f0a9a4108eb7cf11fba6b53f366934caf8cd489157c