diff --git a/ChangeLog b/ChangeLog
index 3054561f..d319b220 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,10 +1,13 @@
-* 2019-??-??: Version 1.?.?
+* 2019-03-??: Version 1.5.2
   * Issue #422: Enable server side and update client side TCP Fast
     Open implementation. Thanks Craig Andrews
   * Issue #423: Fix insecure delegation detection while scheduling.
     Thanks Charles Milette
   * Issue #419: Escape backslashed when printing in JSON format.
     Thanks boB Rudis
+  * Use GnuTLS instead of OpenSSL for TLS with the --with-gnutls
+    option to configure.  libcrypto (from OpenSSL) still needed
+    for Zero configuration DNSSEC.
   * DOA rr-type
   * AMTRELAY rr-type
 
diff --git a/configure.ac b/configure.ac
index e7625f5b..670d6035 100644
--- a/configure.ac
+++ b/configure.ac
@@ -37,7 +37,7 @@ sinclude(./m4/ac_lib_nettle.m4)
 sinclude(./m4/ax_check_compile_flag.m4)
 sinclude(./m4/pkg.m4)
 
-AC_INIT([getdns], [1.5.1], [team@getdnsapi.net], [getdns], [https://getdnsapi.net])
+AC_INIT([getdns], [1.5.2], [team@getdnsapi.net], [getdns], [https://getdnsapi.net])
 
 # Autoconf 2.70 will have set up runstatedir. 2.69 is frequently (Debian)
 # patched to do the same, but frequently (MacOS) not. So add a with option
@@ -53,8 +53,8 @@ AC_SUBST([runstatedir], [$with_piddir])
 # Don't forget to put a dash in front of the release candidate!!!
 # That is how it is done with semantic versioning!
 #
-AC_SUBST(RELEASE_CANDIDATE, [])
-AC_SUBST(STUBBY_RELEASE_CANDIDATE, [])
+AC_SUBST(RELEASE_CANDIDATE, [rc1])
+AC_SUBST(STUBBY_RELEASE_CANDIDATE, [rc1])
 
 # Set current date from system if not set
 AC_ARG_WITH([current-date],
@@ -64,13 +64,13 @@ AC_ARG_WITH([current-date],
   [CURRENT_DATE="`date -u +%Y-%m-%dT%H:%M:%SZ`"])
 
 AC_SUBST(GETDNS_VERSION, ["AC_PACKAGE_VERSION$RELEASE_CANDIDATE"])
-AC_SUBST(GETDNS_NUMERIC_VERSION, [0x01050100])
+AC_SUBST(GETDNS_NUMERIC_VERSION, [0x010501c1])
 AC_SUBST(API_VERSION, ["December 2015"])
 AC_SUBST(API_NUMERIC_VERSION, [0x07df0c00])
 GETDNS_COMPILATION_COMMENT="AC_PACKAGE_NAME $GETDNS_VERSION configured on $CURRENT_DATE for the $API_VERSION version of the API"
 
 AC_DEFINE_UNQUOTED([STUBBY_PACKAGE], ["stubby"], [Stubby package])
-AC_DEFINE_UNQUOTED([STUBBY_PACKAGE_STRING], ["0.2.5$STUBBY_RELEASE_CANDIDATE"], [Stubby package string])
+AC_DEFINE_UNQUOTED([STUBBY_PACKAGE_STRING], ["0.2.6$STUBBY_RELEASE_CANDIDATE"], [Stubby package string])
 
 # Library version
 # ---------------
@@ -107,9 +107,10 @@ AC_DEFINE_UNQUOTED([STUBBY_PACKAGE_STRING], ["0.2.5$STUBBY_RELEASE_CANDIDATE"],
 # getdns-1.4.0 had libversion 10:0:0
 # getdns-1.4.1 had libversion 10:1:0
 # getdns-1.4.2 had libversion 10:2:0
-# getdns-1.5.0 has libversion 11:0:1
-# getdns-1.5.1 has libversion 11:1:1
-GETDNS_LIBVERSION=11:1:1
+# getdns-1.5.0 had libversion 11:0:1
+# getdns-1.5.1 had libversion 11:1:1
+# getdns-1.5.2 will have libversion 11:2:1
+GETDNS_LIBVERSION=11:2:1
 
 AC_SUBST(GETDNS_COMPILATION_COMMENT)
 AC_SUBST(GETDNS_LIBVERSION)
diff --git a/stubby b/stubby
index 108a15c6..376a8dbc 160000
--- a/stubby
+++ b/stubby
@@ -1 +1 @@
-Subproject commit 108a15c63dc08b50d6fd3800cef6948f87e14c8a
+Subproject commit 376a8dbc5c4a8b1f52726182966b2ea9ff36be9d