diff --git a/.travis.yml b/.travis.yml
index a7723f4d..ea572c08 100644
--- a/.travis.yml
+++ b/.travis.yml
@@ -10,7 +10,6 @@ env:
     - DISTRO=alpine
     - TESTS=true
   matrix:
-    - OCAML_VERSION=4.07 PACKAGE="tls"
     - OCAML_VERSION=4.08 PACKAGE="tls-mirage"
     - OCAML_VERSION=4.09 PACKAGE="tls"
     - OCAML_VERSION=4.10 PACKAGE="tls-mirage"
diff --git a/CHANGES.md b/CHANGES.md
index 8b18a140..947be4bf 100644
--- a/CHANGES.md
+++ b/CHANGES.md
@@ -1,3 +1,9 @@
+## v0.12.2 (2020-06-20)
+
+* tls_lwt again calls Mirage_crypto_rng_lwt.initialize () -- which is since
+  mirage-crypto-rng 0.8 no longer inside the lwt monad, and safe to be called
+  multiple times and on top level (#415 by @hannesm)
+
 ## v0.12.1 (2020-06-12)
 
 in #414 by @hannesm
diff --git a/tls-mirage.opam b/tls-mirage.opam
index e54f717f..3d9598ed 100644
--- a/tls-mirage.opam
+++ b/tls-mirage.opam
@@ -14,7 +14,7 @@ build: [
 ]
 
 depends: [
-  "ocaml" {>= "4.07.0"}
+  "ocaml" {>= "4.08.0"}
   "dune" {>= "1.0"}
   "tls" {= version}
   "x509" {>= "0.10.0"}
diff --git a/tls.opam b/tls.opam
index 94d1dcf1..f106b3c0 100644
--- a/tls.opam
+++ b/tls.opam
@@ -14,7 +14,7 @@ build: [
 ]
 
 depends: [
-  "ocaml" {>= "4.07.0"}
+  "ocaml" {>= "4.08.0"}
   "dune" {>= "1.0"}
   "ppx_sexp_conv" {>= "v0.9.0"}
   "ppx_cstruct" {>= "3.0.0"}