diff --git a/ChangeLog.md b/ChangeLog.md
--- a/ChangeLog.md
+++ b/ChangeLog.md
@@ -1,3 +1,7 @@
+## 1.2.0.1
+
+* tls 1.3 support
+
 ## 1.2.0
 
 * Drop system-filepath
diff --git a/Data/Conduit/Network/TLS.hs b/Data/Conduit/Network/TLS.hs
--- a/Data/Conduit/Network/TLS.hs
+++ b/Data/Conduit/Network/TLS.hs
@@ -113,7 +113,9 @@
 
 serverHandshake :: Socket -> TLS.Credentials -> IO (TLS.Context)
 serverHandshake socket creds = do
+#if !MIN_VERSION_tls(1,3,0)
     gen <- Crypto.Random.AESCtr.makeSystem
+#endif
 
     ctx <- TLS.contextNew
            TLS.Backend
@@ -123,7 +125,9 @@
                     , TLS.backendRecv = recvExact socket
                     }
             params
+#if !MIN_VERSION_tls(1,3,0)
             gen
+#endif
 
     TLS.handshake ctx
     return ctx
diff --git a/network-conduit-tls.cabal b/network-conduit-tls.cabal
--- a/network-conduit-tls.cabal
+++ b/network-conduit-tls.cabal
@@ -1,5 +1,5 @@
 name:                network-conduit-tls
-version:             1.2.0
+version:             1.2.0.1
 synopsis:            Create TLS-aware network code with conduits
 description:         Uses the tls package for a pure-Haskell implementation.
 homepage:            https://github.com/snoyberg/conduit