diff --git a/cryptography-2.6.1.tar.gz b/cryptography-2.6.1.tar.gz
deleted file mode 100644
index a367c961ebbc25f13a5013ec3d96a384eeaa7d9f..0000000000000000000000000000000000000000
Binary files a/cryptography-2.6.1.tar.gz and /dev/null differ
diff --git a/cryptography-2.9.tar.gz b/cryptography-2.9.tar.gz
new file mode 100644
index 0000000000000000000000000000000000000000..17906a7f98964fe5a37e5ba347fb3a17bf41fef7
Binary files /dev/null and b/cryptography-2.9.tar.gz differ
diff --git a/python-cryptography.spec b/python-cryptography.spec
index 759883ac08da3730a4148e8d1ae05d929ae7b7c3..e0a59a593452768654b192394f0a79fa7d7a1c91 100644
--- a/python-cryptography.spec
+++ b/python-cryptography.spec
@@ -1,8 +1,9 @@
 %bcond_with python2
 %bcond_without python3
+%bcond_with python3.8
 
 Name:           python-cryptography
-Version:        2.6.1
+Version:        2.9
 Release:        1
 Summary:        PyCA's cryptography library
 License:        ASL 2.0 or BSD
@@ -104,9 +105,11 @@ popd
 PYTHONPATH=%{buildroot}%{python2_sitearch} %{__python2} -m pytest -k "not (test_buffer_protocol_alternate_modes or test_dh_parameters_supported or test_load_ecdsa_no_named_curve)"
 %endif
 
+%if %{with python3.8}
 pushd %{py3dir}
 PYTHONPATH=%{buildroot}%{python3_sitearch} %{__python3} -m pytest -k "not (test_buffer_protocol_alternate_modes or test_dh_parameters_supported or test_load_ecdsa_no_named_curve)"
 popd
+%endif
 
 %if %{with python2}
 %files -n python2-cryptography
@@ -129,6 +132,12 @@ popd
 %doc README.rst docs
 
 %changelog
+* Thu Apr 16 2020 chengquan<chengquan3@huawei.com> -2.9-1
+- Type:enhancement
+- ID:NA
+- SUG:NA
+- DESC:upgrade software to v2.9
+
 * Thu Feb 13 2020 openEuler Buildteam <buildteam@openeuler.org> - 2.6.1-1
 - Update to 2.6.1