diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index f21dfbd..a1db147 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -25,8 +25,8 @@ jobs:
     name: Build
     runs-on: macos-14
 
-    env: # use tag version, if available, falling back to 3.2.1 (stable)
-      OPENSSL_VERSION: "${{ startsWith(github.ref, 'refs/tags/3.') && github.ref_name || '3.2.2' }}"
+    env: # use tag version, if available, falling back to 3.3.1 (stable)
+      OPENSSL_VERSION: "${{ startsWith(github.ref, 'refs/tags/3.') && github.ref_name || '3.3.1' }}"
       PUBLISH_RELEASE: "${{ startsWith(github.ref, 'refs/tags/3.') && '1' || '0' }}"
 
     steps:
diff --git a/scripts/build.sh b/scripts/build.sh
index 702fd0d..9f4a271 100755
--- a/scripts/build.sh
+++ b/scripts/build.sh
@@ -2,7 +2,7 @@
 
 set -e
 
-OPENSSL_VERSION_STABLE="3.2.2" # https://www.openssl.org/source/index.html
+OPENSSL_VERSION_STABLE="3.3.1" # https://www.openssl.org/source/index.html
 IOS_VERSION_MIN="13.4"
 MACOS_VERSION_MIN="11.0"
 CODESIGN_ID="-"