diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 6bec78c5..76c80f84 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -100,7 +100,7 @@ jobs:
     - name: Build quictls/openssl v1.1.1
       if: matrix.http3 == 'http3' && matrix.openssl == 'openssl1'
       run: |
-        git clone --depth 1 -b OpenSSL_1_1_1o+quic https://github.com/quictls/openssl
+        git clone --depth 1 -b OpenSSL_1_1_1p+quic https://github.com/quictls/openssl
         cd openssl
         ./config --prefix=$PWD/build
         make -j"$(nproc 2> /dev/null || sysctl -n hw.ncpu)"
@@ -111,7 +111,7 @@ jobs:
         unset CPPFLAGS
         unset LDFLAGS
 
-        git clone --depth 1 -b openssl-3.0.3+quic https://github.com/quictls/openssl
+        git clone --depth 1 -b openssl-3.0.4+quic https://github.com/quictls/openssl
         cd openssl
         ./config enable-ktls --prefix=$PWD/build --libdir=$PWD/build/lib
         make -j"$(nproc 2> /dev/null || sysctl -n hw.ncpu)"
diff --git a/README.rst b/README.rst
index e0ff6036..35e14ea5 100644
--- a/README.rst
+++ b/README.rst
@@ -151,7 +151,7 @@ To enable the experimental HTTP/3 support for h2load and nghttpx, the
 following libraries are required:
 
 * `OpenSSL with QUIC support
-  <https://github.com/quictls/openssl/tree/OpenSSL_1_1_1o+quic>`_; or
+  <https://github.com/quictls/openssl/tree/OpenSSL_1_1_1p+quic>`_; or
   `BoringSSL <https://boringssl.googlesource.com/boringssl/>`_ (commit
   36a41bf0bf2dd3176f8780e09c03585351f29963)
 * `ngtcp2 <https://github.com/ngtcp2/ngtcp2>`_ >= 0.6.0
@@ -355,7 +355,7 @@ Build custom OpenSSL:
 
 .. code-block:: text
 
-   $ git clone --depth 1 -b OpenSSL_1_1_1o+quic https://github.com/quictls/openssl
+   $ git clone --depth 1 -b OpenSSL_1_1_1p+quic https://github.com/quictls/openssl
    $ cd openssl
    $ ./config --prefix=$PWD/build --openssldir=/etc/ssl
    $ make -j$(nproc)
diff --git a/docker/Dockerfile b/docker/Dockerfile
index 1fe76eca..ef57b68f 100644
--- a/docker/Dockerfile
+++ b/docker/Dockerfile
@@ -7,7 +7,7 @@ RUN apt-get update && \
         zlib1g-dev libev-dev libjemalloc-dev ruby-dev libc-ares-dev bison \
         libelf-dev
 
-RUN git clone --depth 1 -b OpenSSL_1_1_1o+quic https://github.com/quictls/openssl && \
+RUN git clone --depth 1 -b OpenSSL_1_1_1p+quic https://github.com/quictls/openssl && \
     cd openssl && \
     ./config --openssldir=/etc/ssl && \
     make -j$(nproc) && \