diff --git a/gnupg-2.3.4.tar.bz2 b/gnupg-2.3.4.tar.bz2
deleted file mode 100644
index b638cf8..0000000
Binary files a/gnupg-2.3.4.tar.bz2 and /dev/null differ
diff --git a/gnupg-2.3.4.tar.bz2.sig b/gnupg-2.3.4.tar.bz2.sig
deleted file mode 100644
index a669b52..0000000
Binary files a/gnupg-2.3.4.tar.bz2.sig and /dev/null differ
diff --git a/gnupg-2.3.6.tar.bz2 b/gnupg-2.3.6.tar.bz2
new file mode 100644
index 0000000..22d67cf
Binary files /dev/null and b/gnupg-2.3.6.tar.bz2 differ
diff --git a/gnupg-2.3.6.tar.bz2.sig b/gnupg-2.3.6.tar.bz2.sig
new file mode 100644
index 0000000..e2ab1a2
Binary files /dev/null and b/gnupg-2.3.6.tar.bz2.sig differ
diff --git a/gnupg2.spec b/gnupg2.spec
index dc4aba0..43b0c93 100644
--- a/gnupg2.spec
+++ b/gnupg2.spec
@@ -1,5 +1,5 @@
 Name: gnupg2
-Version: 2.3.4
+Version: 2.3.6
 Release: 1
 Summary: Utility for secure communication and data storage
 
@@ -20,15 +20,15 @@ Patch8:  gnupg-2.2.21-coverity.patch
 
 BuildRequires: gcc
 BuildRequires: zlib-devel, npth-devel, texinfo
-BuildRequires: libgpg-error-devel >= 1.38
-BuildRequires: libgcrypt-devel >= 1.9.1
+BuildRequires: libgpg-error-devel >= 1.41
+BuildRequires: libgcrypt-devel >= 1.9.4
 BuildRequires: libksba-devel >= 1.3.0
 BuildRequires: libassuan-devel >= 2.1.0
 # compile dirmngr module, need gnutls
 BuildRequires: gnutls-devel
 
-Requires: libgcrypt >= 1.9.1
-Requires: libgpg-error >= 1.38
+Requires: libgcrypt >= 1.9.4
+Requires: libgpg-error >= 1.41
 
 Recommends: pinentry
 Recommends: gnupg2-smime
@@ -114,10 +114,15 @@ make check
 %{_infodir}/*info*.gz
 %{_datadir}/gnupg/
 %{_datadir}/doc/gnupg/*
+%exclude %{_datadir}/gnupg/sks-keyservers.netCA.pem
 %{_mandir}/man?/*
 
 
 %changelog
+* Mon Jun 27 2022 yixiangzhike <yixiangzhike007@163.com> - 2.3.6-1
+- update to 2.3.6, need require new version libgpg-error(1.41) and libgcrypt(1.9.4)
+- do not provide unused sks-keyserver CA certificate
+
 * Mon Jan 10 2022 yixiangzhike <yixiangzhike007@163.com> - 2.3.4-1
 - update to 2.3.4