diff --git a/python3.11.spec b/python3.11.spec
index c2c22c5..4bd9ce7 100644
--- a/python3.11.spec
+++ b/python3.11.spec
@@ -17,7 +17,7 @@ URL: https://www.python.org/
 #global prerel ...
 %global upstream_version %{general_version}%{?prerel}
 Version: %{general_version}%{?prerel:~%{prerel}}
-Release: 2%{?dist}
+Release: 3%{?dist}
 License: Python-2.0.1
 
 
@@ -219,7 +219,6 @@ BuildRequires: make
 BuildRequires: mpdecimal-devel
 BuildRequires: ncurses-devel
 
-BuildRequires: openssl-devel
 BuildRequires: pkgconfig
 BuildRequires: readline-devel
 BuildRequires: redhat-rpm-config >= 127
@@ -232,6 +231,10 @@ BuildRequires: tix-devel
 BuildRequires: tk-devel < 1:9
 BuildRequires: tzdata
 
+# Support for OpenSSL 4 only landed in Python 3.15 for now
+# https://github.com/python/cpython/issues/146207
+BuildRequires: (openssl-devel < 1:4 or openssl3-devel)
+
 %if %{with valgrind}
 BuildRequires: valgrind-devel
 %endif
@@ -1702,6 +1705,9 @@ CheckPython optimized
 # ======================================================
 
 %changelog
+* Sat Apr 11 2026 Miro Hrončok <mhroncok@redhat.com> - 3.11.15-3
+- Explicitly build with OpenSSL 3
+
 * Thu Mar 26 2026 Lumír Balhar <lbalhar@redhat.com> - 3.11.15-2
 - Security fix for CVE-2026-4519 (rhbz#2449727)